Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/de600486-9780-43ee-bb2d-b811094a1445/0/3130332e3136302e3230352e302f32342d3234203d3e20313431353935.roa
File:                     3130332e3136302e3230352e302f32342d3234203d3e20313431353935.roa (raw, json)
Hash identifier:          kdMYWHxqdB4fcu/Vgc4AfVoBG1lh0SUu+dZG5J22ir0=
Subject key identifier:   61:50:0F:BE:16:32:B6:8A:DD:28:63:BC:80:A0:D0:B2:F1:4A:6E:19
Certificate issuer:       /CN=46A7C8702C547FC42210027DD254571031AE05DC
Certificate serial:       0828AD32AC435E3620C8BF55A11C5039B61A42A7
Authority key identifier: 46:A7:C8:70:2C:54:7F:C4:22:10:02:7D:D2:54:57:10:31:AE:05:DC
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/46A7C8702C547FC42210027DD254571031AE05DC.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/de600486-9780-43ee-bb2d-b811094a1445/0/3130332e3136302e3230352e302f32342d3234203d3e20313431353935.roa
Signing time:             Sat 08 Mar 2025 06:00:00 +0000
ROA not before:           Sat 08 Mar 2025 05:55:00 +0000
ROA not after:            Sat 07 Mar 2026 06:00:00 +0000
asID:                     141595
IP address blocks:        103.160.205.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/de600486-9780-43ee-bb2d-b811094a1445/0/46A7C8702C547FC42210027DD254571031AE05DC.crl
                          rsync://repo-rpki.idnic.net/repo/de600486-9780-43ee-bb2d-b811094a1445/0/46A7C8702C547FC42210027DD254571031AE05DC.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/46A7C8702C547FC42210027DD254571031AE05DC.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Apr 2025 20:52:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:28:ad:32:ac:43:5e:36:20:c8:bf:55:a1:1c:50:39:b6:1a:42:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46A7C8702C547FC42210027DD254571031AE05DC
        Validity
            Not Before: Mar  8 05:55:00 2025 GMT
            Not After : Mar  7 06:00:00 2026 GMT
        Subject: CN=61500FBE1632B68ADD2863BC80A0D0B2F14A6E19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:28:0a:36:62:27:78:a1:f3:48:5e:c2:46:38:
                    98:1a:b7:93:6f:12:b9:fc:f3:bf:3b:df:a7:1a:c3:
                    2a:cc:43:6d:87:a5:bd:89:24:6d:84:b7:92:fb:00:
                    ce:53:47:d9:68:bd:55:6d:17:17:e1:d9:04:f2:56:
                    74:9b:21:10:fd:1e:ad:f9:d4:ff:22:c6:5a:8d:bd:
                    71:e5:07:4b:59:ec:26:5a:e9:ab:96:14:02:82:82:
                    40:cd:6c:6c:8f:c8:fa:f2:67:be:82:3a:40:4a:94:
                    e0:7d:6d:0a:05:c8:37:29:64:e5:77:22:99:c2:ec:
                    00:06:c8:84:c4:2c:ea:23:01:10:e7:cd:3f:fd:8b:
                    9c:ce:54:c1:94:bc:f2:b9:d0:38:f3:c2:06:e6:7d:
                    4c:56:a6:3e:0f:e7:78:80:e4:27:91:bd:77:6b:8b:
                    99:5d:6d:e9:ce:5d:00:b9:fd:0b:27:08:81:57:f8:
                    ec:f6:57:47:ad:2b:7d:ac:b2:a4:3e:71:ef:96:25:
                    b6:88:6c:51:a4:6d:d7:26:20:33:c9:e7:c0:62:15:
                    af:93:9e:65:4a:59:e8:ae:5c:30:03:9b:39:35:be:
                    72:7a:d9:fd:37:4a:1c:1e:f0:57:a9:85:6b:35:b5:
                    70:6e:3e:9a:44:80:6e:00:fd:c3:83:9d:22:52:74:
                    e2:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:50:0F:BE:16:32:B6:8A:DD:28:63:BC:80:A0:D0:B2:F1:4A:6E:19
            X509v3 Authority Key Identifier:
                keyid:46:A7:C8:70:2C:54:7F:C4:22:10:02:7D:D2:54:57:10:31:AE:05:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/de600486-9780-43ee-bb2d-b811094a1445/0/46A7C8702C547FC42210027DD254571031AE05DC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/46A7C8702C547FC42210027DD254571031AE05DC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/de600486-9780-43ee-bb2d-b811094a1445/0/3130332e3136302e3230352e302f32342d3234203d3e20313431353935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.160.205.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:2e:5e:0b:cb:36:c9:a5:9f:d5:58:01:e1:6f:94:ce:5a:7d:
         71:d6:c7:04:9f:91:6b:6c:e2:86:28:3f:27:0c:0a:34:85:50:
         8f:32:83:a5:ce:ac:8f:73:11:7b:60:b5:1f:30:df:28:03:dd:
         62:3b:ac:b6:4f:c5:22:51:5b:e1:7f:98:2d:c5:61:68:c4:b0:
         4e:d0:1d:00:e4:b3:31:84:01:af:bc:64:af:bb:95:78:ee:6c:
         46:45:43:d5:65:78:c2:78:33:b7:eb:ed:1c:0d:2a:38:8c:36:
         02:a0:2a:cb:02:0d:9e:eb:55:d5:3f:e0:d7:a4:47:1b:d8:aa:
         e5:bf:79:cd:7b:2a:3e:e1:3f:b3:91:c1:73:70:64:a7:5f:d1:
         5c:12:a1:e4:67:32:74:66:94:70:0e:bc:10:da:8b:43:cb:10:
         40:de:05:b4:39:fa:04:08:43:f8:bf:ac:4a:d2:04:91:fc:f4:
         bd:14:8a:ad:9b:8d:ee:b8:ee:17:75:93:25:01:a9:e8:16:4c:
         d3:73:47:94:95:b9:e6:5d:79:f7:eb:84:7c:f8:22:b8:04:0e:
         b0:ed:a6:09:74:83:5e:5b:79:ac:2c:f1:c5:a9:70:ba:cc:19:
         1d:63:bd:05:28:c8:5b:54:b7:b8:5a:3d:b3:0c:2a:ba:03:55:
         84:dd:e5:e2
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUCCitMqxDXjYgyL9VoRxQObYaQqcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDZBN0M4NzAyQzU0N0ZDNDIyMTAwMjdERDI1NDU3MTAz
MUFFMDVEQzAeFw0yNTAzMDgwNTU1MDBaFw0yNjAzMDcwNjAwMDBaMDMxMTAvBgNV
BAMTKDYxNTAwRkJFMTYzMkI2OEFERDI4NjNCQzgwQTBEMEIyRjE0QTZFMTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/KAo2Yid4ofNIXsJGOJgat5Nv
Ern8878736cawyrMQ22Hpb2JJG2Et5L7AM5TR9lovVVtFxfh2QTyVnSbIRD9Hq35
1P8ixlqNvXHlB0tZ7CZa6auWFAKCgkDNbGyPyPryZ76COkBKlOB9bQoFyDcpZOV3
IpnC7AAGyITELOojARDnzT/9i5zOVMGUvPK50DjzwgbmfUxWpj4P53iA5CeRvXdr
i5ldbenOXQC5/QsnCIFX+Oz2V0etK32ssqQ+ce+WJbaIbFGkbdcmIDPJ58BiFa+T
nmVKWeiuXDADmzk1vnJ62f03Shwe8FephWs1tXBuPppEgG4A/cODnSJSdOIlAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUYVAPvhYytordKGO8gKDQsvFKbhkwHwYDVR0j
BBgwFoAURqfIcCxUf8QiEAJ90lRXEDGuBdwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k
ZTYwMDQ4Ni05NzgwLTQzZWUtYmIyZC1iODExMDk0YTE0NDUvMC80NkE3Qzg3MDJD
NTQ3RkM0MjIxMDAyN0REMjU0NTcxMDMxQUUwNURDLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNDZBN0M4NzAyQzU0N0ZDNDIyMTAwMjdERDI1NDU3MTAzMUFF
MDVEQy5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2RlNjAwNDg2LTk3ODAtNDNlZS1i
YjJkLWI4MTEwOTRhMTQ0NS8wLzMxMzAzMzJlMzEzNjMwMmUzMjMwMzUyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzEzNTM5MzUucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnoM0wDQYJ
KoZIhvcNAQELBQADggEBAFsuXgvLNsmln9VYAeFvlM5afXHWxwSfkWts4oYoPycM
CjSFUI8yg6XOrI9zEXtgtR8w3ygD3WI7rLZPxSJRW+F/mC3FYWjEsE7QHQDkszGE
Aa+8ZK+7lXjubEZFQ9VleMJ4M7fr7RwNKjiMNgKgKssCDZ7rVdU/4NekRxvYquW/
ec17Kj7hP7ORwXNwZKdf0VwSoeRnMnRmlHAOvBDai0PLEEDeBbQ5+gQIQ/i/rErS
BJH89L0Uiq2bje647hd1kyUBqegWTNNzR5SVueZdeffrhHz4IrgEDrDtpgl0g15b
eaws8cWpcLrMGR1jvQUoyFtUt7haPbMMKroDVYTd5eI=
-----END CERTIFICATE-----
Generated at Fri Apr 25 06:02:24 2025 by rpki-client on console.sobornost.net