Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e8b63e7d-a617-4e8c-a821-623956d4d4ae/0/3130332e3136362e34382e302f32332d3234203d3e20313339343630.roa
File:                     3130332e3136362e34382e302f32332d3234203d3e20313339343630.roa (raw, json)
Hash identifier:          0a2CK00YtHnEd2JmEamQH3BHgmE0sjYsMU62NZCZSoM=
Subject key identifier:   EF:84:E1:49:87:96:A4:24:1E:F7:87:79:3F:EF:96:EE:85:6E:09:B6
Certificate issuer:       /CN=DA396A1DC6299DC3BB9E8DD7650D36FABA944967
Certificate serial:       09D3F29C8231D2D574D6C6475FDB4186166A8D31
Authority key identifier: DA:39:6A:1D:C6:29:9D:C3:BB:9E:8D:D7:65:0D:36:FA:BA:94:49:67
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA396A1DC6299DC3BB9E8DD7650D36FABA944967.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e8b63e7d-a617-4e8c-a821-623956d4d4ae/0/3130332e3136362e34382e302f32332d3234203d3e20313339343630.roa
Signing time:             Thu 17 Apr 2025 07:00:00 +0000
ROA not before:           Thu 17 Apr 2025 06:55:00 +0000
ROA not after:            Thu 16 Apr 2026 07:00:00 +0000
asID:                     139460
IP address blocks:        103.166.48.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e8b63e7d-a617-4e8c-a821-623956d4d4ae/0/DA396A1DC6299DC3BB9E8DD7650D36FABA944967.crl
                          rsync://repo-rpki.idnic.net/repo/e8b63e7d-a617-4e8c-a821-623956d4d4ae/0/DA396A1DC6299DC3BB9E8DD7650D36FABA944967.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA396A1DC6299DC3BB9E8DD7650D36FABA944967.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Apr 2025 08:10:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:d3:f2:9c:82:31:d2:d5:74:d6:c6:47:5f:db:41:86:16:6a:8d:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA396A1DC6299DC3BB9E8DD7650D36FABA944967
        Validity
            Not Before: Apr 17 06:55:00 2025 GMT
            Not After : Apr 16 07:00:00 2026 GMT
        Subject: CN=EF84E1498796A4241EF787793FEF96EE856E09B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:75:1e:61:f3:5c:62:d8:e3:58:58:ed:64:ae:
                    27:c6:c2:76:2f:61:62:08:59:33:51:35:5d:f7:ef:
                    21:7b:ef:56:9c:91:6c:47:2c:d6:c3:c7:6d:5d:b5:
                    3e:91:0f:d4:d4:f8:b3:5e:93:f8:4c:40:4b:04:46:
                    2f:76:c9:66:76:9e:a9:ef:51:89:f2:5a:fe:4e:13:
                    bd:a3:02:3a:22:bb:01:90:82:c1:b0:64:86:e3:f9:
                    67:83:24:75:61:49:10:52:f2:69:1b:78:ff:21:2c:
                    17:e3:6a:4e:5a:dd:3e:34:78:40:47:b8:41:fb:61:
                    28:55:ff:b2:30:ed:14:c7:ef:87:53:45:73:0d:3f:
                    ff:3e:c9:00:e1:db:f4:0e:05:d0:92:b6:8a:23:16:
                    5e:73:93:6f:c9:b4:38:9b:43:3d:c3:80:c7:91:47:
                    33:97:af:2c:cc:6e:0c:0c:06:51:33:bd:4c:42:7a:
                    21:91:1e:ea:1e:12:1f:c8:48:28:40:56:62:b7:4e:
                    ae:a5:d0:68:2a:50:82:c4:d1:6f:58:3e:53:ba:ce:
                    dd:5e:12:46:95:0d:b6:41:50:2a:9a:81:e3:78:fa:
                    82:47:9f:83:bf:07:37:53:51:ca:bc:de:33:dc:05:
                    fe:99:a8:e8:6c:93:69:48:26:a4:3a:2a:07:77:19:
                    83:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:84:E1:49:87:96:A4:24:1E:F7:87:79:3F:EF:96:EE:85:6E:09:B6
            X509v3 Authority Key Identifier:
                keyid:DA:39:6A:1D:C6:29:9D:C3:BB:9E:8D:D7:65:0D:36:FA:BA:94:49:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e8b63e7d-a617-4e8c-a821-623956d4d4ae/0/DA396A1DC6299DC3BB9E8DD7650D36FABA944967.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA396A1DC6299DC3BB9E8DD7650D36FABA944967.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e8b63e7d-a617-4e8c-a821-623956d4d4ae/0/3130332e3136362e34382e302f32332d3234203d3e20313339343630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.166.48.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ae:8b:10:2b:84:a8:32:78:5f:d9:1b:11:7a:bb:82:af:5a:a6:
         b1:e4:0c:c1:af:9a:cc:84:78:9f:e5:b4:03:71:3f:6b:5a:83:
         f1:6f:54:c6:db:94:6c:62:62:9f:2a:ce:46:65:05:fa:de:63:
         63:c5:3a:19:a5:6c:a3:1c:e8:6d:25:20:b6:0a:f3:94:10:64:
         9c:98:bf:2c:06:8c:10:45:e7:5e:e4:b2:3c:82:c0:5f:42:de:
         33:21:45:fd:4c:45:41:51:2a:97:64:4a:2a:b8:33:52:63:e1:
         d9:f8:ae:00:03:23:19:d7:0f:b7:ec:ed:df:98:9a:2a:1e:f0:
         13:5a:77:b5:6f:cc:b0:7f:db:71:18:68:7b:eb:b5:1c:08:80:
         59:1f:e6:de:4b:33:71:47:05:d2:01:53:de:21:a9:8b:b5:a5:
         44:e5:21:da:33:54:ca:cf:c8:d5:a3:13:00:d6:cf:22:bc:76:
         84:67:2e:02:73:7d:5a:1b:b9:f6:68:ed:5d:54:e8:c7:bb:22:
         88:32:c0:31:76:74:88:d5:d6:6d:ce:20:b8:56:16:c0:84:54:
         98:1f:56:85:bc:e6:e8:b7:a1:75:a3:34:13:23:26:d5:05:f8:
         e1:f2:c0:94:4c:2c:77:02:18:e1:15:29:c7:a2:c4:90:31:6f:
         5b:43:7b:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 04:31:50 2025 by rpki-client on console.sobornost.net