Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/ec7f3533-2278-40e1-a262-7e7e431eb235/0/3130332e3138352e34362e302f32332d3233203d3e20313439363731.roa
File:                     3130332e3138352e34362e302f32332d3233203d3e20313439363731.roa (raw, json)
Hash identifier:          Yz5m1gA54J/vh37G0a/gX3QgxeJVQ6PzjHugkp2fy5U=
Subject key identifier:   AC:6D:7F:74:F4:0C:CB:EE:36:DF:59:EC:83:93:C4:D4:93:05:58:DC
Certificate issuer:       /CN=B3F3B9BC4A56B546AFCEF4780022D559E35D937A
Certificate serial:       7E2C34F490E268965285C458904DC999C9FFBB8B
Authority key identifier: B3:F3:B9:BC:4A:56:B5:46:AF:CE:F4:78:00:22:D5:59:E3:5D:93:7A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3F3B9BC4A56B546AFCEF4780022D559E35D937A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ec7f3533-2278-40e1-a262-7e7e431eb235/0/3130332e3138352e34362e302f32332d3233203d3e20313439363731.roa
Signing time:             Sat 29 Mar 2025 12:00:00 +0000
ROA not before:           Sat 29 Mar 2025 11:55:00 +0000
ROA not after:            Sat 28 Mar 2026 12:00:00 +0000
asID:                     149671
IP address blocks:        103.185.46.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ec7f3533-2278-40e1-a262-7e7e431eb235/0/B3F3B9BC4A56B546AFCEF4780022D559E35D937A.crl
                          rsync://repo-rpki.idnic.net/repo/ec7f3533-2278-40e1-a262-7e7e431eb235/0/B3F3B9BC4A56B546AFCEF4780022D559E35D937A.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3F3B9BC4A56B546AFCEF4780022D559E35D937A.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 May 2025 01:18:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:2c:34:f4:90:e2:68:96:52:85:c4:58:90:4d:c9:99:c9:ff:bb:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3F3B9BC4A56B546AFCEF4780022D559E35D937A
        Validity
            Not Before: Mar 29 11:55:00 2025 GMT
            Not After : Mar 28 12:00:00 2026 GMT
        Subject: CN=AC6D7F74F40CCBEE36DF59EC8393C4D4930558DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:74:05:78:54:d5:5d:ec:bb:b0:6a:2f:ce:41:
                    5d:36:ac:94:9a:d4:6a:d9:68:bf:31:2a:3a:4d:0c:
                    22:8b:d2:73:8e:18:2e:a5:fa:bb:ec:30:3d:16:40:
                    ca:16:de:d0:14:e9:87:58:e8:c2:c1:0d:55:f6:c2:
                    d9:19:55:80:eb:60:3c:c6:df:c8:ba:d9:56:20:2b:
                    40:9d:7b:b3:96:bf:96:86:a8:a4:03:ee:5a:5b:39:
                    0d:c7:ce:cc:b6:52:cf:22:e1:5a:c5:2a:c5:b7:e6:
                    fc:6c:7f:d2:2d:3d:88:07:43:99:3d:da:b8:6b:42:
                    23:d0:12:de:6e:ea:a1:a0:f9:ed:c4:cd:92:5f:f5:
                    63:73:b0:60:5a:df:bb:44:a6:97:6a:8c:36:a8:ad:
                    2e:d5:2d:fb:57:7c:34:19:91:fe:eb:8a:cf:2c:cd:
                    8e:c2:7c:ac:bf:42:9f:9f:e0:76:af:a4:55:d0:61:
                    e3:e0:c9:06:7c:5a:b8:be:45:e8:d0:b0:4b:9e:a2:
                    c8:94:1b:6e:8f:98:50:1a:a0:26:06:98:f5:e4:d2:
                    88:d7:57:bb:f1:2b:03:bf:2f:dd:71:bf:a9:09:1a:
                    d4:c8:e1:78:87:66:3c:a5:e8:a7:ac:b0:09:3c:b5:
                    d9:d9:26:81:02:99:69:eb:6d:e3:06:ec:53:9e:78:
                    6c:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:6D:7F:74:F4:0C:CB:EE:36:DF:59:EC:83:93:C4:D4:93:05:58:DC
            X509v3 Authority Key Identifier:
                keyid:B3:F3:B9:BC:4A:56:B5:46:AF:CE:F4:78:00:22:D5:59:E3:5D:93:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ec7f3533-2278-40e1-a262-7e7e431eb235/0/B3F3B9BC4A56B546AFCEF4780022D559E35D937A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3F3B9BC4A56B546AFCEF4780022D559E35D937A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ec7f3533-2278-40e1-a262-7e7e431eb235/0/3130332e3138352e34362e302f32332d3233203d3e20313439363731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.185.46.0/23

    Signature Algorithm: sha256WithRSAEncryption
         88:8a:bd:08:43:ad:8c:3e:a7:da:da:4c:de:b2:4b:28:06:f0:
         e0:69:6e:20:93:26:2e:12:5c:04:fb:07:ff:39:de:b7:31:8c:
         a7:71:10:23:ad:1c:32:b4:d4:a7:85:f3:c2:b7:a1:b1:62:af:
         47:1e:0c:df:ad:7b:41:ee:52:81:76:16:f7:29:68:03:5d:5b:
         0e:c2:35:46:7e:09:9c:b5:92:1b:9d:99:7b:ad:91:2e:24:56:
         ef:70:bb:aa:5d:cf:83:3a:b4:2f:bc:7b:19:41:7d:90:5f:5c:
         6c:55:49:67:50:d0:f3:54:ca:1b:0e:11:c8:14:fb:03:35:06:
         13:92:66:dc:51:0b:fc:cf:d9:5a:69:1c:36:69:7a:21:f0:8f:
         ef:46:c8:8b:4d:56:e3:92:e4:ae:ac:12:7d:3e:2b:5d:e2:3f:
         8f:89:f0:24:b3:c3:75:75:6a:ef:6b:2e:96:b7:0f:62:a6:0b:
         9f:0a:63:0d:78:35:10:10:df:63:52:ba:ca:22:ad:4a:a9:1d:
         4d:61:c0:6c:f5:2e:5e:fe:6d:65:45:f2:05:5b:68:ef:c1:4c:
         05:90:57:bc:8a:44:bf:55:60:ca:4e:65:99:c4:1a:1c:f8:cb:
         af:65:f3:90:f1:b5:70:be:50:8c:a3:cb:eb:37:21:c6:d4:ed:
         a4:c8:28:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 21:42:59 2025 by rpki-client on console.sobornost.net