Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/3130332e3131382e3137352e302f32342d3234203d3e20313532333638.roa
File:                     3130332e3131382e3137352e302f32342d3234203d3e20313532333638.roa (raw, json)
Hash identifier:          kR8T9q/RgSSIceyvyByw5FPl6k8a1Y38HMh9CIjccZE=
Subject key identifier:   EE:00:E5:30:C1:79:0D:1E:1F:08:B4:EB:BE:7E:F0:AB:3C:C9:07:4C
Certificate issuer:       /CN=DBB18CCF58914524AFB113FE13359CC6B08EFBF3
Certificate serial:       7C801826342DBA86B0ED7DC44B756F275FE60A0A
Authority key identifier: DB:B1:8C:CF:58:91:45:24:AF:B1:13:FE:13:35:9C:C6:B0:8E:FB:F3
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/3130332e3131382e3137352e302f32342d3234203d3e20313532333638.roa
Signing time:             Mon 03 Mar 2025 14:30:00 +0000
ROA not before:           Mon 03 Mar 2025 14:25:00 +0000
ROA not after:            Mon 02 Mar 2026 14:30:00 +0000
asID:                     152368
IP address blocks:        103.118.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.crl
                          rsync://repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Apr 2025 07:43:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:80:18:26:34:2d:ba:86:b0:ed:7d:c4:4b:75:6f:27:5f:e6:0a:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DBB18CCF58914524AFB113FE13359CC6B08EFBF3
        Validity
            Not Before: Mar  3 14:25:00 2025 GMT
            Not After : Mar  2 14:30:00 2026 GMT
        Subject: CN=EE00E530C1790D1E1F08B4EBBE7EF0AB3CC9074C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:d5:ad:ed:3c:46:06:c4:07:90:c9:9e:26:ac:
                    a1:40:50:1c:a8:f1:3e:05:2c:41:a5:fb:14:d1:60:
                    c8:86:22:c5:ff:3a:82:3c:87:22:a1:4d:52:51:8d:
                    56:90:b4:9e:94:3d:b5:5a:95:c8:44:d0:07:c7:8d:
                    b6:39:32:01:34:66:6c:05:f4:54:6c:c4:50:4c:ac:
                    d3:95:5f:07:63:49:d5:84:e6:57:a1:9d:c5:06:aa:
                    97:3b:cb:a1:88:70:6b:26:7f:6b:8e:49:30:ec:c9:
                    e3:57:47:d8:19:12:7b:01:66:ab:15:9a:55:28:bf:
                    aa:4c:71:b8:d2:d3:92:3f:6a:35:a6:f1:c7:df:5e:
                    34:8c:cd:09:8f:89:81:e3:cf:78:41:28:d9:95:6c:
                    4f:0c:c4:db:35:ed:9d:60:81:e3:cb:df:0a:2c:ad:
                    d5:d5:68:fc:34:5c:67:72:6f:cf:83:8d:56:8e:d4:
                    94:07:94:24:86:59:f9:e1:b9:67:16:88:3f:a3:3a:
                    36:76:34:4e:85:ff:9b:bb:76:bb:16:ba:10:f2:b7:
                    a1:9f:a1:96:a1:fb:c4:93:4c:a6:5a:3a:91:4e:32:
                    b5:96:b7:00:c5:b2:ad:88:f2:f0:80:54:88:01:a3:
                    ed:56:79:db:d5:9b:7f:a2:31:1d:e9:41:22:6d:73:
                    05:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:00:E5:30:C1:79:0D:1E:1F:08:B4:EB:BE:7E:F0:AB:3C:C9:07:4C
            X509v3 Authority Key Identifier:
                keyid:DB:B1:8C:CF:58:91:45:24:AF:B1:13:FE:13:35:9C:C6:B0:8E:FB:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/3130332e3131382e3137352e302f32342d3234203d3e20313532333638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.118.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:aa:57:c5:90:6b:fd:5b:27:99:32:24:f5:b4:8b:e3:52:86:
         82:0d:a8:cf:96:89:15:0d:2d:db:de:fe:fb:4f:d2:1a:6b:be:
         8e:fc:83:58:76:d2:2f:13:7a:18:c8:b8:19:cf:21:87:eb:5d:
         3a:d6:7b:8b:20:cf:d2:93:50:23:4a:be:32:35:b8:9e:5c:bc:
         e1:11:4b:8d:2e:fd:57:e4:1b:ee:1c:af:db:68:54:ad:1e:57:
         32:8f:99:0b:84:20:28:4d:7f:21:a8:7a:ed:ad:6b:03:0c:b0:
         98:0a:4a:6b:72:86:ce:b7:6c:4e:db:78:b2:06:eb:b7:ef:ef:
         6c:7d:42:57:6e:82:31:23:7b:7c:5b:00:36:4e:67:b0:c6:38:
         e5:0c:52:9e:b1:27:62:4b:8b:ea:be:13:ad:d3:af:02:9a:0d:
         a8:c2:3e:a6:fa:70:3e:92:30:b3:e6:cc:d5:79:9e:46:d7:52:
         5d:d5:b4:be:4c:61:b9:16:06:59:65:09:74:ab:e2:ed:5b:83:
         08:bf:91:57:ce:ce:3d:dc:fa:97:3d:a5:09:c2:bc:cd:3f:65:
         43:52:73:ce:ad:bb:13:07:9b:c2:e8:c6:94:c1:04:89:73:19:
         05:10:ad:6d:b2:d1:fd:1e:a6:30:ec:63:f9:84:aa:24:fe:1a:
         60:f4:45:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:59:20 2025 by rpki-client