Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3a8a9a81-0a52-4a50-b7f6-a36f86f3d2c7/0/3130332e3138302e302e302f32342d3234203d3e2039333431.roa
File:                     3130332e3138302e302e302f32342d3234203d3e2039333431.roa (raw, json)
Hash identifier:          D79Y8BsRJ6VHRaHIcDQn8DwQcFro3NZoMHr7zu28hbo=
Subject key identifier:   60:CF:16:18:E5:6C:31:7F:72:F3:CD:DD:0D:CB:30:41:86:D5:E1:A7
Certificate issuer:       /CN=26B04331F3DBA70B694F2FFF371C85EE023FB70F
Certificate serial:       1426D01EB6D0415A414152B22B3FF8CA317D6573
Authority key identifier: 26:B0:43:31:F3:DB:A7:0B:69:4F:2F:FF:37:1C:85:EE:02:3F:B7:0F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26B04331F3DBA70B694F2FFF371C85EE023FB70F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3a8a9a81-0a52-4a50-b7f6-a36f86f3d2c7/0/3130332e3138302e302e302f32342d3234203d3e2039333431.roa
Signing time:             Wed 15 Jan 2025 16:00:02 +0000
ROA not before:           Wed 15 Jan 2025 15:55:02 +0000
ROA not after:            Wed 14 Jan 2026 16:00:02 +0000
asID:                     9341
IP address blocks:        103.180.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/3a8a9a81-0a52-4a50-b7f6-a36f86f3d2c7/0/26B04331F3DBA70B694F2FFF371C85EE023FB70F.crl
                          rsync://repo-rpki.idnic.net/repo/3a8a9a81-0a52-4a50-b7f6-a36f86f3d2c7/0/26B04331F3DBA70B694F2FFF371C85EE023FB70F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26B04331F3DBA70B694F2FFF371C85EE023FB70F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 07 Apr 2025 17:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:26:d0:1e:b6:d0:41:5a:41:41:52:b2:2b:3f:f8:ca:31:7d:65:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26B04331F3DBA70B694F2FFF371C85EE023FB70F
        Validity
            Not Before: Jan 15 15:55:02 2025 GMT
            Not After : Jan 14 16:00:02 2026 GMT
        Subject: CN=60CF1618E56C317F72F3CDDD0DCB304186D5E1A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:29:74:4c:bf:15:12:3b:89:42:3e:6c:99:f3:
                    c1:02:44:32:7c:e2:6c:13:b4:19:ce:f2:a5:45:78:
                    2a:e2:43:04:9b:13:89:e3:60:15:ae:43:8f:aa:e6:
                    88:ef:a7:fc:e1:34:bd:b8:18:ac:6a:bd:25:92:90:
                    98:e6:ab:c2:ec:a3:d6:07:50:ee:65:a5:f7:b0:22:
                    7e:90:70:78:ac:94:a4:74:24:68:fd:52:26:b5:87:
                    d6:ea:14:a2:24:6c:0a:80:55:e8:28:8e:9e:10:cc:
                    46:a8:3b:51:fa:79:3f:bf:9b:59:c1:cc:3b:be:82:
                    29:12:11:1a:47:d0:b5:16:4e:71:5f:f3:ff:f6:25:
                    96:13:4f:fd:35:96:fe:28:88:ff:7d:1e:74:e0:9b:
                    24:be:9b:e4:65:b1:3d:93:9b:46:d8:a5:4f:e6:28:
                    bb:ea:3a:3a:e4:cc:53:2c:28:67:ac:c7:12:86:fa:
                    59:5d:34:e5:ba:8c:18:f6:f3:fc:0a:ee:65:bd:cf:
                    cd:10:87:58:64:23:33:e0:ec:71:14:9e:b4:ef:8d:
                    0d:51:b1:d6:1b:7a:11:29:70:fc:f0:ea:fc:51:aa:
                    15:2f:9d:d0:5b:5d:a7:0b:e6:62:68:e7:7b:48:f2:
                    8c:5e:fd:fc:48:82:76:13:f9:c5:c4:d5:72:14:9e:
                    4f:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:CF:16:18:E5:6C:31:7F:72:F3:CD:DD:0D:CB:30:41:86:D5:E1:A7
            X509v3 Authority Key Identifier:
                keyid:26:B0:43:31:F3:DB:A7:0B:69:4F:2F:FF:37:1C:85:EE:02:3F:B7:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3a8a9a81-0a52-4a50-b7f6-a36f86f3d2c7/0/26B04331F3DBA70B694F2FFF371C85EE023FB70F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26B04331F3DBA70B694F2FFF371C85EE023FB70F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3a8a9a81-0a52-4a50-b7f6-a36f86f3d2c7/0/3130332e3138302e302e302f32342d3234203d3e2039333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.180.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:0d:86:ac:f5:8f:ca:5c:78:dd:d7:2a:ea:c2:e1:7a:15:67:
         82:3e:0d:91:0d:bd:c8:71:46:f9:ea:7c:03:9c:c3:68:6b:a1:
         5f:6d:01:de:76:cc:df:20:79:f2:30:69:e8:44:c8:b1:d9:68:
         d3:ca:c4:04:c4:95:e2:d0:75:e2:92:23:b9:6e:3d:90:f6:01:
         72:c2:0b:b1:11:5e:dd:eb:64:b2:58:1b:32:6a:ee:82:f5:70:
         72:19:63:c5:fb:6d:0d:34:af:2d:2f:21:3b:63:70:fe:a9:6c:
         96:b2:3f:8d:50:e7:61:96:7b:bc:b6:a5:6d:79:eb:39:c6:62:
         25:eb:59:92:50:c4:71:3c:8b:85:0f:b1:f6:12:89:3a:ef:2c:
         48:5c:43:1f:5b:8b:32:79:c6:54:29:57:25:bb:a0:4d:c7:f2:
         8a:53:b0:8d:58:9a:49:c2:f2:09:0b:7b:b2:aa:e5:2a:fc:3e:
         f7:86:6f:94:a9:61:ba:1d:16:13:83:6e:a9:02:ec:ff:a2:7f:
         9b:0c:78:ba:d6:09:eb:0e:d9:06:4c:33:d7:0d:f6:36:8f:2b:
         c5:9e:c5:c8:38:2f:15:80:93:bf:a4:0a:4e:48:00:a9:c6:c2:
         c9:40:ee:41:d5:40:c6:85:42:77:20:be:f5:54:7f:87:05:29:
         8d:12:9a:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:37:47 2025 by rpki-client