Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/3130332e32352e3136372e302f32342d3234203d3e20313331373137.roa
File:                     3130332e32352e3136372e302f32342d3234203d3e20313331373137.roa (raw, json)
Hash identifier:          orvRbX8Qi4mxg4qv5apZeu0gYlAJlOPDZdjoJPeDjgc=
Subject key identifier:   FC:01:D7:8D:BA:89:B1:CA:83:26:67:57:A0:3E:4D:B1:DD:D4:37:3F
Certificate issuer:       /CN=882209E37356E0512FBE4E81B00E4F2481865087
Certificate serial:       557E5BCF246470E8A997011810CD943FA988D94A
Authority key identifier: 88:22:09:E3:73:56:E0:51:2F:BE:4E:81:B0:0E:4F:24:81:86:50:87
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/882209E37356E0512FBE4E81B00E4F2481865087.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/3130332e32352e3136372e302f32342d3234203d3e20313331373137.roa
Signing time:             Mon 31 Jul 2023 00:03:12 +0000
ROA not before:           Sun 30 Jul 2023 23:58:12 +0000
ROA not after:            Mon 29 Jul 2024 00:03:12 +0000
asID:                     131717
IP address blocks:        103.25.167.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/882209E37356E0512FBE4E81B00E4F2481865087.crl
                          rsync://repo-rpki.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/882209E37356E0512FBE4E81B00E4F2481865087.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/882209E37356E0512FBE4E81B00E4F2481865087.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 28 Apr 2024 20:55:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:7e:5b:cf:24:64:70:e8:a9:97:01:18:10:cd:94:3f:a9:88:d9:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=882209E37356E0512FBE4E81B00E4F2481865087
        Validity
            Not Before: Jul 30 23:58:12 2023 GMT
            Not After : Jul 29 00:03:12 2024 GMT
        Subject: CN=FC01D78DBA89B1CA83266757A03E4DB1DDD4373F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:04:38:7b:0b:b4:1f:07:f0:60:27:09:77:93:
                    86:c3:fa:21:3a:6b:a4:eb:6b:0c:e0:66:7f:23:20:
                    07:36:1d:de:0f:10:fd:f9:f3:5c:37:49:09:54:04:
                    43:25:f7:3d:a3:12:75:21:dc:fe:df:7f:8a:74:d3:
                    c1:12:73:59:f3:7b:c1:e7:b4:6e:ae:38:88:6a:ac:
                    10:bd:54:b9:22:f2:59:8c:c1:df:9a:76:56:79:ed:
                    3d:11:7f:76:d3:27:b0:e7:12:84:3f:a8:f0:c3:91:
                    aa:f3:9f:8f:98:1e:bb:91:12:ce:29:0c:4e:a9:23:
                    9f:65:f8:49:72:e0:75:90:a0:71:f7:fe:dc:27:8c:
                    da:7c:ce:29:f4:8b:58:a1:4a:59:c9:28:51:d0:b1:
                    1b:57:94:e1:dc:5a:04:5c:20:b4:4a:f0:b9:8c:2f:
                    fd:ee:1e:6d:63:0c:41:e6:d2:24:c3:fb:d3:45:5a:
                    db:5f:44:d4:ee:8f:7a:b5:59:24:37:17:a6:31:44:
                    8c:03:cb:5f:f3:c9:57:b3:44:19:0d:f1:00:2f:24:
                    0d:ea:23:b8:69:b2:d5:76:14:d3:ca:97:db:b1:8d:
                    9a:bc:52:3f:a0:b1:f7:03:aa:11:8e:34:f8:37:d4:
                    9f:b9:4c:be:ba:53:94:95:22:e7:44:dc:b2:1f:73:
                    29:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:01:D7:8D:BA:89:B1:CA:83:26:67:57:A0:3E:4D:B1:DD:D4:37:3F
            X509v3 Authority Key Identifier:
                keyid:88:22:09:E3:73:56:E0:51:2F:BE:4E:81:B0:0E:4F:24:81:86:50:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/882209E37356E0512FBE4E81B00E4F2481865087.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/882209E37356E0512FBE4E81B00E4F2481865087.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/3130332e32352e3136372e302f32342d3234203d3e20313331373137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.25.167.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c1:67:6e:22:ea:1e:3d:ef:cd:ef:33:be:8c:3c:ae:ea:41:c3:
         ea:61:bc:6c:99:73:89:34:a2:7b:0f:ef:0f:7d:30:bc:f9:21:
         d3:86:8d:a1:61:2c:7e:4a:cc:80:2c:87:27:0a:e9:3b:e4:9d:
         5d:8c:ee:3d:79:2e:2e:f8:e4:76:d9:4d:51:ef:aa:28:eb:7c:
         72:8c:d7:0a:21:6c:63:1c:d4:cb:8b:46:29:65:83:87:7c:c0:
         9c:94:fd:ef:eb:d2:50:2b:fe:fd:f4:4f:59:06:50:33:9a:4d:
         b3:7d:f1:66:e5:1e:f9:66:0b:93:17:82:b5:83:3f:d9:36:ce:
         eb:22:27:5a:61:75:7c:28:42:00:e0:a1:3d:5a:eb:c0:8f:0a:
         e4:14:e0:c2:5d:35:10:a5:20:64:dd:30:3e:f1:9c:cf:a1:fe:
         d8:dd:ff:ce:6c:e1:78:1a:7e:55:82:8f:6f:8b:10:68:b7:f4:
         85:2b:e9:0c:1c:99:24:56:45:24:10:8f:ec:f8:6d:47:d7:f4:
         e8:cd:2a:84:ba:71:05:bc:fe:d9:cf:8a:c4:9d:16:87:74:f3:
         e9:d2:9e:2c:bc:67:17:2f:20:94:64:9e:5d:74:5d:10:8b:31:
         6f:6f:7d:41:b7:0a:c1:34:a1:80:8b:54:14:fa:3b:f8:05:b2:
         d8:3a:a4:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 00:39:43 2024 by rpki-client on console-fra.rpki-client.org