Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/3130332e3138332e35382e302f32342d3234203d3e20313439343039.roa
File:                     3130332e3138332e35382e302f32342d3234203d3e20313439343039.roa (raw, json)
Hash identifier:          VbrMhF5/NgCAVgxme528zhOBb1Z3HAdEz6QJSucgsYY=
Subject key identifier:   CC:14:45:46:F2:27:5F:5B:16:93:C0:E8:5C:73:59:D4:8E:3F:46:6A
Certificate issuer:       /CN=D1553F19BBD3B70719E720005FDB3145CC910A1F
Certificate serial:       7BFE585F6D96EC909B7A86800063920A0AFB06C2
Authority key identifier: D1:55:3F:19:BB:D3:B7:07:19:E7:20:00:5F:DB:31:45:CC:91:0A:1F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1553F19BBD3B70719E720005FDB3145CC910A1F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/3130332e3138332e35382e302f32342d3234203d3e20313439343039.roa
Signing time:             Wed 19 Feb 2025 04:00:02 +0000
ROA not before:           Wed 19 Feb 2025 03:55:02 +0000
ROA not after:            Wed 18 Feb 2026 04:00:02 +0000
asID:                     149409
IP address blocks:        103.183.58.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/D1553F19BBD3B70719E720005FDB3145CC910A1F.crl
                          rsync://repo-rpki.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/D1553F19BBD3B70719E720005FDB3145CC910A1F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1553F19BBD3B70719E720005FDB3145CC910A1F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Apr 2025 20:11:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:fe:58:5f:6d:96:ec:90:9b:7a:86:80:00:63:92:0a:0a:fb:06:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1553F19BBD3B70719E720005FDB3145CC910A1F
        Validity
            Not Before: Feb 19 03:55:02 2025 GMT
            Not After : Feb 18 04:00:02 2026 GMT
        Subject: CN=CC144546F2275F5B1693C0E85C7359D48E3F466A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:d1:3d:d0:c7:d1:82:e7:ed:8f:ac:a3:59:69:
                    ef:42:d0:f2:ba:86:c0:94:53:8c:de:b1:5c:cf:fd:
                    90:0e:0d:fd:6d:aa:91:aa:b5:6e:af:6a:0c:b3:fd:
                    78:ff:b8:ed:69:2d:21:48:c1:0c:60:02:90:d3:10:
                    ee:8d:2b:50:fa:f5:0b:57:2a:43:dc:c5:85:18:25:
                    05:b5:d4:6a:c2:49:f4:3c:08:c2:3e:e7:59:45:27:
                    fa:e9:db:e3:9b:3a:98:94:6a:e8:96:9a:58:2d:7d:
                    f3:8d:72:7f:e3:0a:34:22:b6:d2:0e:2b:37:2b:1c:
                    15:0e:f2:de:f5:0e:54:82:61:36:f6:ba:ab:d0:1c:
                    cb:66:11:c2:31:fb:d4:85:f8:4a:7a:af:2c:29:52:
                    eb:de:6d:0e:bb:53:d5:fe:d6:33:83:2d:d8:74:07:
                    dc:08:ee:18:bf:16:c5:85:b2:23:a7:e5:c6:2b:3b:
                    6c:e0:43:80:f7:ec:ef:9f:aa:d8:40:37:59:ee:66:
                    86:84:4c:9b:01:df:20:e5:f4:31:d8:92:10:17:9d:
                    84:dc:99:d4:e6:40:60:38:8b:53:88:28:b0:6a:ca:
                    2b:e9:2d:2b:eb:42:a6:25:f6:77:3b:54:5c:f0:c7:
                    9e:0d:ff:b9:8e:10:c2:40:7e:d2:7c:f1:52:51:e4:
                    ea:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:14:45:46:F2:27:5F:5B:16:93:C0:E8:5C:73:59:D4:8E:3F:46:6A
            X509v3 Authority Key Identifier:
                keyid:D1:55:3F:19:BB:D3:B7:07:19:E7:20:00:5F:DB:31:45:CC:91:0A:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/D1553F19BBD3B70719E720005FDB3145CC910A1F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1553F19BBD3B70719E720005FDB3145CC910A1F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/3130332e3138332e35382e302f32342d3234203d3e20313439343039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.183.58.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:02:2d:df:13:c1:53:68:82:03:d8:f2:48:d7:da:d9:0d:72:
         ad:b9:03:d8:89:8f:57:92:4e:31:d0:08:f9:8d:32:04:53:de:
         53:95:2f:9d:71:da:45:37:eb:f6:20:db:4a:81:09:c4:f8:72:
         e3:3c:5d:cb:0e:88:81:62:26:c0:99:44:57:57:e3:d0:38:8a:
         85:94:f0:56:51:3b:8c:f3:16:17:a1:c8:1a:1b:5a:0c:3d:4c:
         ba:d5:70:11:45:71:25:ea:76:46:66:6c:00:b0:a9:df:57:a7:
         34:af:09:8b:1f:03:6f:8b:8e:db:b7:4b:59:c7:cf:e5:7f:8a:
         60:e3:7f:de:b0:25:03:b4:bb:3e:5b:b6:47:e3:39:7c:08:2b:
         0e:14:ac:7d:a1:68:ad:d2:bb:a7:a0:9c:1b:b0:da:68:a8:c2:
         d1:55:1e:b3:25:a7:5a:a7:db:85:af:ec:ef:80:41:2c:60:2d:
         a8:e4:e2:f8:8e:40:8c:6d:1e:f8:c7:54:60:05:58:98:55:40:
         14:11:f3:23:01:c0:4a:97:e5:8a:89:90:1d:6d:21:ab:93:b7:
         78:b6:67:9c:87:f3:e5:d4:e5:de:0f:d1:b7:8e:32:4f:12:e7:
         b4:05:7b:09:ac:e2:62:1b:66:b8:8f:b5:9f:45:e0:53:db:43:
         48:fa:11:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 00:13:03 2025 by rpki-client on console.sobornost.net