Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3130332e3235332e38362e302f32332d3234203d3e2039333431.roa
File:                     3130332e3235332e38362e302f32332d3234203d3e2039333431.roa (raw, json)
Hash identifier:          kInv+Cf5wv/vG8Kov17FnWw/v9+8l37cE99eg3wxcgA=
Subject key identifier:   1A:DE:BA:C0:97:7A:7C:AC:29:8B:A2:99:3A:10:5E:A1:13:82:C5:E5
Certificate issuer:       /CN=61566F205F7037962069571320603B274357CC6D
Certificate serial:       108259380C03D80C186402419AAF5CF5B7DCADB4
Authority key identifier: 61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3130332e3235332e38362e302f32332d3234203d3e2039333431.roa
Signing time:             Wed 02 Apr 2025 08:02:25 +0000
ROA not before:           Wed 02 Apr 2025 07:57:25 +0000
ROA not after:            Wed 01 Apr 2026 08:02:25 +0000
asID:                     9341
IP address blocks:        103.253.86.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.crl
                          rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 07 Apr 2025 17:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:82:59:38:0c:03:d8:0c:18:64:02:41:9a:af:5c:f5:b7:dc:ad:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61566F205F7037962069571320603B274357CC6D
        Validity
            Not Before: Apr  2 07:57:25 2025 GMT
            Not After : Apr  1 08:02:25 2026 GMT
        Subject: CN=1ADEBAC0977A7CAC298BA2993A105EA11382C5E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:16:3b:c4:98:b4:b5:60:8e:01:96:ae:f0:00:
                    fd:5d:f3:8a:e5:db:d5:6d:9a:92:5d:58:5b:71:00:
                    72:53:a6:e8:08:d0:c4:65:6d:4c:d5:9b:33:d9:42:
                    13:de:54:b6:48:3a:c4:14:70:e0:c1:cc:88:32:86:
                    41:50:c4:3c:0c:79:e5:12:3b:2e:5e:dd:dc:27:63:
                    4f:0b:37:83:56:4c:ab:89:57:b4:1c:fc:53:96:95:
                    1a:c9:b0:24:52:7f:40:46:6a:c5:e8:e3:ea:a1:3e:
                    8a:4e:cb:c4:f4:0d:16:7d:56:3b:61:05:5d:a6:f2:
                    8c:5f:0d:21:87:b4:b4:b2:96:16:b1:ec:4c:fc:d6:
                    e4:7d:b0:fa:e0:9f:c5:ea:b7:c7:6c:63:7f:5c:b1:
                    ea:cd:2d:3c:26:53:a2:05:ae:32:87:b0:ee:29:3b:
                    34:f2:08:c4:8f:89:38:3d:e8:a3:64:fe:4b:66:a5:
                    24:77:c8:2c:92:b6:62:03:ee:2b:a9:a5:b8:db:eb:
                    98:25:17:00:3f:16:e3:79:5d:28:97:6d:1d:9a:5d:
                    2e:ae:67:e4:09:33:f3:86:65:3d:d0:a6:8c:bb:ca:
                    a3:01:9c:4f:a9:cc:fc:1c:29:d5:12:81:96:64:f0:
                    92:2a:0c:67:01:08:5b:70:71:8b:55:e1:06:63:3e:
                    62:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:DE:BA:C0:97:7A:7C:AC:29:8B:A2:99:3A:10:5E:A1:13:82:C5:E5
            X509v3 Authority Key Identifier:
                keyid:61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3130332e3235332e38362e302f32332d3234203d3e2039333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.253.86.0/23

    Signature Algorithm: sha256WithRSAEncryption
         44:0e:a5:b1:39:a5:8d:43:6d:5f:98:00:f7:1f:ec:34:55:19:
         10:a5:7a:35:5a:8a:17:11:62:b9:a3:2c:4e:4c:f4:cf:e5:e0:
         85:84:36:dc:37:1f:87:2b:1e:31:62:52:f2:e3:43:da:d9:1c:
         89:75:05:3e:a3:42:54:75:51:77:ec:74:bf:96:89:37:9a:41:
         6f:a6:3b:f5:c0:7c:fc:5a:39:2d:59:6a:a4:61:c4:9d:03:fe:
         99:36:f9:e4:0d:e0:08:5c:09:b4:46:63:82:75:a2:f1:3e:f2:
         fd:db:ed:0c:81:46:0a:9f:7c:28:c9:b1:d6:9d:e7:cd:92:90:
         21:83:16:b2:37:94:ff:56:3c:cd:4b:ef:da:1c:45:d1:21:68:
         d1:cc:98:e9:26:3e:7c:f6:15:01:e7:7c:cd:83:e5:a9:f2:9e:
         3d:ff:57:cc:62:9d:44:5d:44:23:0e:8d:01:a0:6a:04:79:42:
         93:8a:40:4c:95:0c:16:e2:25:4d:3d:d3:b1:2a:ee:d7:8c:a0:
         18:bc:5a:b3:cc:b8:3d:0f:8c:c7:4b:13:cb:79:99:d5:f0:6e:
         ef:56:f0:c2:8b:41:0c:2c:06:b2:06:7b:52:f8:81:38:9c:f3:
         6e:d9:9a:06:65:8a:64:b7:44:fa:a3:e4:35:7f:fb:cc:df:89:
         bc:5a:c4:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:44:44 2025 by rpki-client