Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/010fef48-1ee8-4342-a541-2510fb15b96b/0/3130332e3136362e36342e302f32332d3233203d3e20313431393333.roa
File:                     3130332e3136362e36342e302f32332d3233203d3e20313431393333.roa (raw, json)
Hash identifier:          87MbWbcpbuYz/jA532wWmodn6onL837yUxMFGvpwPFI=
Subject key identifier:   71:CF:14:F7:28:02:1B:81:61:AE:3D:B1:DC:56:DA:79:06:74:B2:1A
Certificate issuer:       /CN=79FE7055A022B9483725E25688019B44DD3B94A7
Certificate serial:       468CB64B6C2D0E8C458BC932CAF519348D2D0B6D
Authority key identifier: 79:FE:70:55:A0:22:B9:48:37:25:E2:56:88:01:9B:44:DD:3B:94:A7
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/79FE7055A022B9483725E25688019B44DD3B94A7.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/010fef48-1ee8-4342-a541-2510fb15b96b/0/3130332e3136362e36342e302f32332d3233203d3e20313431393333.roa
Signing time:             Thu 27 Feb 2025 03:02:54 +0000
ROA not before:           Thu 27 Feb 2025 02:57:54 +0000
ROA not after:            Thu 26 Feb 2026 03:02:54 +0000
asID:                     141933
IP address blocks:        103.166.64.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/010fef48-1ee8-4342-a541-2510fb15b96b/0/79FE7055A022B9483725E25688019B44DD3B94A7.crl
                          rsync://repo-rpki.idnic.net/repo/010fef48-1ee8-4342-a541-2510fb15b96b/0/79FE7055A022B9483725E25688019B44DD3B94A7.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/79FE7055A022B9483725E25688019B44DD3B94A7.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Apr 2025 08:43:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:8c:b6:4b:6c:2d:0e:8c:45:8b:c9:32:ca:f5:19:34:8d:2d:0b:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79FE7055A022B9483725E25688019B44DD3B94A7
        Validity
            Not Before: Feb 27 02:57:54 2025 GMT
            Not After : Feb 26 03:02:54 2026 GMT
        Subject: CN=71CF14F728021B8161AE3DB1DC56DA790674B21A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:54:83:4c:38:52:bd:63:48:03:73:8b:72:9f:
                    83:4e:17:bb:d7:84:a0:e1:25:a5:9f:d1:e4:c3:4a:
                    07:ff:29:84:5a:d3:6d:9c:cb:34:ce:db:26:15:8f:
                    11:b6:00:9d:d7:f2:7f:a7:24:34:56:d9:41:8a:2c:
                    ae:b0:c2:af:12:84:c8:c1:5f:d9:50:0e:fc:7f:38:
                    34:cc:77:46:6a:96:5c:b5:04:7a:33:80:86:d4:cb:
                    14:8c:8b:7e:a3:18:74:fc:99:c5:0b:ca:98:da:2b:
                    54:cc:77:14:34:c8:f3:19:1e:09:39:3c:3e:f2:ef:
                    df:15:b3:62:b6:04:a8:09:0d:be:05:15:41:dd:93:
                    1a:09:a8:07:30:03:a5:cd:c6:68:d6:23:e7:c2:e0:
                    ff:5e:bb:c3:ee:1b:1a:eb:0b:26:11:d3:3e:2f:7f:
                    82:8e:73:c3:49:c8:ba:fd:f8:02:ce:e7:f3:21:71:
                    68:89:2e:9e:16:86:10:c5:3c:f2:bf:90:76:83:ea:
                    5d:4a:60:b2:71:13:5f:9f:23:34:36:23:04:62:38:
                    bb:d7:f3:1a:5f:e4:ee:61:65:f3:a7:10:99:a5:d1:
                    ae:08:52:a0:0c:7e:ad:3c:03:e6:e6:33:f3:44:f6:
                    00:64:d0:ec:94:b7:9b:87:14:af:28:b2:1b:09:8f:
                    3d:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:CF:14:F7:28:02:1B:81:61:AE:3D:B1:DC:56:DA:79:06:74:B2:1A
            X509v3 Authority Key Identifier:
                keyid:79:FE:70:55:A0:22:B9:48:37:25:E2:56:88:01:9B:44:DD:3B:94:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/010fef48-1ee8-4342-a541-2510fb15b96b/0/79FE7055A022B9483725E25688019B44DD3B94A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/79FE7055A022B9483725E25688019B44DD3B94A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/010fef48-1ee8-4342-a541-2510fb15b96b/0/3130332e3136362e36342e302f32332d3233203d3e20313431393333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.166.64.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0e:b0:85:90:97:4a:cf:f5:45:e1:d4:78:6e:e2:e0:5f:c9:1b:
         30:4a:be:cb:bb:96:2f:12:03:f5:d9:9f:39:88:e4:94:bb:11:
         40:d0:b7:6f:9e:7c:6c:8a:8e:2d:81:b8:00:43:c9:6c:56:f9:
         06:4c:07:dd:09:a7:be:b5:29:6e:41:6a:90:89:65:c5:a2:b7:
         66:39:3e:29:78:8a:2d:6b:79:0f:81:61:8c:38:10:f4:b1:e4:
         f0:91:13:27:6f:1a:a6:eb:13:dd:d3:fa:b0:22:c7:03:a9:d9:
         e2:32:c5:75:88:ac:12:a6:18:fb:ec:8e:a7:a5:8e:41:0c:3a:
         c0:2f:b6:8c:19:60:57:4d:c5:bf:d1:49:71:01:c8:c2:97:61:
         fa:b6:84:d5:b1:9d:e8:03:c0:dd:c4:fd:12:a0:d2:fc:6e:56:
         0d:97:3e:15:9c:b2:4d:22:23:3a:5c:b0:95:b9:b6:78:20:e7:
         1a:cc:eb:ac:5f:d8:b5:94:68:9d:6f:99:96:ed:4d:1f:40:ff:
         75:f5:ee:d3:51:6e:11:2a:78:ff:59:d5:03:65:8d:a1:97:29:
         44:89:ea:bf:02:cc:f9:8b:d4:a4:a0:73:2f:f5:d7:44:2d:7e:
         c5:c3:d6:1a:03:31:25:cf:cb:4a:50:13:6f:5b:b6:8c:00:6b:
         13:83:aa:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 01:00:16 2025 by rpki-client