Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/f77ffe2a-31e4-4800-97d4-7874c1231911/0/3130332e3134352e35332e302f32342d3234203d3e20313339343535.roa
File:                     3130332e3134352e35332e302f32342d3234203d3e20313339343535.roa (raw, json)
Hash identifier:          t0f8hH0p5YUalqHFkiu1kyX28Ot7aEHcWn8PNYVXvq0=
Subject key identifier:   6A:3B:AA:71:B5:D8:D6:62:09:8D:66:EA:2D:ED:E2:3A:91:E7:DD:26
Certificate issuer:       /CN=90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3
Certificate serial:       24F69B69F05D5EA2EE61133692644D975FB0D997
Authority key identifier: 90:E2:CC:AC:A3:23:EA:B2:14:5F:54:B7:CF:65:C5:FA:EC:EF:83:A3
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f77ffe2a-31e4-4800-97d4-7874c1231911/0/3130332e3134352e35332e302f32342d3234203d3e20313339343535.roa
Signing time:             Wed 02 Apr 2025 18:00:02 +0000
ROA not before:           Wed 02 Apr 2025 17:55:02 +0000
ROA not after:            Wed 01 Apr 2026 18:00:02 +0000
asID:                     139455
IP address blocks:        103.145.53.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/f77ffe2a-31e4-4800-97d4-7874c1231911/0/90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3.crl
                          rsync://repo-rpki.idnic.net/repo/f77ffe2a-31e4-4800-97d4-7874c1231911/0/90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Apr 2025 20:52:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:f6:9b:69:f0:5d:5e:a2:ee:61:13:36:92:64:4d:97:5f:b0:d9:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3
        Validity
            Not Before: Apr  2 17:55:02 2025 GMT
            Not After : Apr  1 18:00:02 2026 GMT
        Subject: CN=6A3BAA71B5D8D662098D66EA2DEDE23A91E7DD26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:9f:9b:3f:d4:58:fb:83:ae:cc:f7:65:39:d6:
                    16:3b:11:0b:54:3d:a5:44:10:06:45:18:96:95:c3:
                    3f:73:ad:ac:46:cd:7d:e4:a6:8f:df:39:c3:6d:9f:
                    e0:d2:0b:10:a6:50:cf:07:69:24:02:27:ae:60:c3:
                    10:73:1c:3c:48:7a:1b:8c:36:07:a5:ee:d3:e7:78:
                    3e:c1:af:17:f7:fb:a2:2b:22:03:1e:7b:12:e8:9f:
                    16:c1:c6:ef:63:a1:84:3e:c7:1a:d8:07:35:2d:e7:
                    d6:f5:ac:0d:00:a0:d1:cf:5e:e5:4a:df:70:11:b5:
                    cc:a6:04:b2:c8:68:56:2e:f4:b0:a4:25:03:01:60:
                    a3:3f:31:43:da:90:1e:bf:93:2f:9c:0b:20:2a:05:
                    f3:01:65:d0:80:b5:59:92:62:3e:8f:d8:ec:d9:0a:
                    b0:b6:db:7d:2b:8f:d7:64:66:6c:cb:a5:de:44:2c:
                    44:b3:46:d7:91:d0:62:8a:3e:e8:23:79:27:cd:45:
                    31:6e:2f:3a:b4:56:8f:81:31:a7:e1:81:b0:6f:5c:
                    c8:04:13:cc:5b:92:55:2e:77:1e:da:a8:fa:7b:4f:
                    ec:e3:8b:b5:82:b0:1d:9c:3c:18:a5:5e:53:de:19:
                    51:4e:7c:34:f9:24:36:6c:41:8e:a3:db:33:61:1a:
                    a8:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:3B:AA:71:B5:D8:D6:62:09:8D:66:EA:2D:ED:E2:3A:91:E7:DD:26
            X509v3 Authority Key Identifier:
                keyid:90:E2:CC:AC:A3:23:EA:B2:14:5F:54:B7:CF:65:C5:FA:EC:EF:83:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f77ffe2a-31e4-4800-97d4-7874c1231911/0/90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f77ffe2a-31e4-4800-97d4-7874c1231911/0/3130332e3134352e35332e302f32342d3234203d3e20313339343535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.145.53.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:35:0b:8b:4c:45:0d:e4:3b:90:66:d3:42:48:b6:25:38:a0:
         f5:34:fd:58:6b:bf:e6:79:c9:19:08:60:1d:d0:84:8a:f3:54:
         6a:f4:c3:f0:9e:cb:2e:f3:fe:92:5f:62:7b:ca:a8:b4:96:f1:
         1a:18:4b:40:20:f1:06:84:01:bc:57:f7:7c:e1:ba:15:64:90:
         a5:01:2e:fb:ef:22:e4:63:25:88:9e:17:08:ec:3b:70:fd:c6:
         92:f9:1e:b5:b4:aa:db:3b:5c:45:1f:2a:4b:98:2b:97:c0:aa:
         c2:38:58:1c:f9:9d:e2:b9:61:6c:d8:b8:e6:77:bd:ce:ad:79:
         39:21:83:00:55:a1:84:80:55:7c:57:48:45:62:70:80:d9:a2:
         e6:56:63:5e:ff:5f:85:c6:e3:78:ed:01:0f:ba:a1:ad:d6:e0:
         79:64:6b:f7:22:1e:b5:8a:d7:68:56:49:50:24:f8:18:39:32:
         e1:43:16:85:8b:4c:ef:33:45:85:67:c6:ce:c0:47:b9:1d:07:
         c2:4d:8f:15:26:9b:6a:4e:c9:17:eb:2d:c8:59:49:d7:ce:fc:
         f1:58:2a:f2:ce:37:5e:41:98:34:c9:4e:04:30:ee:fb:e9:48:
         80:b8:73:ef:e6:2f:e6:55:a5:11:02:49:d8:8c:8d:12:68:24:
         09:ff:dc:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:06:29 2025 by rpki-client on console.sobornost.net