Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/42713a32-fada-484e-a68d-0cac0fffa33c/0/3130332e3138362e3136392e302f32342d3234203d3e20313439333135.roa
File:                     3130332e3138362e3136392e302f32342d3234203d3e20313439333135.roa (raw, json)
Hash identifier:          k0YtTjCvRfHkKBkEOTB9msrr0NImtoiaOd/b0Un02oI=
Subject key identifier:   44:FD:1A:11:AE:54:43:4A:1B:8E:EC:99:DA:4B:10:EA:E6:CB:DA:C9
Certificate issuer:       /CN=B0FA6C3ED4780E032B0A3F161E018A7C8FA82B45
Certificate serial:       310466BBD8675E46983EA83D4AB7630864AFF3
Authority key identifier: B0:FA:6C:3E:D4:78:0E:03:2B:0A:3F:16:1E:01:8A:7C:8F:A8:2B:45
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0FA6C3ED4780E032B0A3F161E018A7C8FA82B45.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/42713a32-fada-484e-a68d-0cac0fffa33c/0/3130332e3138362e3136392e302f32342d3234203d3e20313439333135.roa
Signing time:             Fri 21 Feb 2025 08:00:02 +0000
ROA not before:           Fri 21 Feb 2025 07:55:02 +0000
ROA not after:            Fri 20 Feb 2026 08:00:02 +0000
asID:                     149315
IP address blocks:        103.186.169.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/42713a32-fada-484e-a68d-0cac0fffa33c/0/B0FA6C3ED4780E032B0A3F161E018A7C8FA82B45.crl
                          rsync://repo-rpki.idnic.net/repo/42713a32-fada-484e-a68d-0cac0fffa33c/0/B0FA6C3ED4780E032B0A3F161E018A7C8FA82B45.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0FA6C3ED4780E032B0A3F161E018A7C8FA82B45.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Apr 2025 16:31:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:04:66:bb:d8:67:5e:46:98:3e:a8:3d:4a:b7:63:08:64:af:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0FA6C3ED4780E032B0A3F161E018A7C8FA82B45
        Validity
            Not Before: Feb 21 07:55:02 2025 GMT
            Not After : Feb 20 08:00:02 2026 GMT
        Subject: CN=44FD1A11AE54434A1B8EEC99DA4B10EAE6CBDAC9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:29:38:33:7b:b5:05:b9:83:92:22:44:4e:8e:
                    3e:4b:7c:a8:c2:07:4c:7a:b0:de:4f:ae:5b:34:1c:
                    60:9d:ee:c0:70:12:ca:2c:bb:8f:fb:a0:5e:b9:fb:
                    ec:af:bc:d1:98:20:ba:20:b7:88:6d:f0:5d:cf:e4:
                    9d:ad:6b:4c:26:82:c4:7d:a5:11:a7:b5:40:6b:3f:
                    22:e0:06:36:a7:c9:b6:0f:8c:05:62:49:07:63:e5:
                    fc:53:72:20:73:7c:ad:3c:97:f8:58:cf:5e:e4:eb:
                    00:7a:3a:6e:8b:4c:00:9a:c7:f1:af:4d:1d:17:24:
                    d5:55:9a:c7:48:92:e5:ab:c4:85:b0:96:d2:dd:c6:
                    6b:5e:50:45:ee:ff:30:1d:b7:ea:70:24:c9:e2:73:
                    55:58:d3:e6:30:d1:65:ef:22:a7:18:7f:90:3a:fb:
                    14:89:1f:05:b0:71:08:45:d9:e8:f7:f8:c9:82:3e:
                    ce:2b:cd:fa:29:0c:65:d7:13:8e:5c:3b:0c:f8:86:
                    5e:11:9d:2c:cc:42:a6:2c:df:49:5d:9d:0c:f6:47:
                    86:78:c0:57:8b:24:ca:0a:85:b4:cf:7b:d7:46:9b:
                    39:ee:d9:76:ef:cc:4a:e7:6f:0e:e0:8c:3b:3f:70:
                    fa:34:42:23:25:97:5b:ef:3d:e3:cd:ab:14:b8:15:
                    b2:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:FD:1A:11:AE:54:43:4A:1B:8E:EC:99:DA:4B:10:EA:E6:CB:DA:C9
            X509v3 Authority Key Identifier:
                keyid:B0:FA:6C:3E:D4:78:0E:03:2B:0A:3F:16:1E:01:8A:7C:8F:A8:2B:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/42713a32-fada-484e-a68d-0cac0fffa33c/0/B0FA6C3ED4780E032B0A3F161E018A7C8FA82B45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0FA6C3ED4780E032B0A3F161E018A7C8FA82B45.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/42713a32-fada-484e-a68d-0cac0fffa33c/0/3130332e3138362e3136392e302f32342d3234203d3e20313439333135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.186.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:72:72:fd:82:d6:db:ce:50:f8:42:77:46:96:f3:4b:a2:68:
         9e:3d:d5:b2:d3:88:c9:f9:5e:0c:6a:1b:c4:2b:03:8f:85:28:
         d2:82:82:48:46:ab:b6:84:d5:3e:9a:e9:0c:8a:f1:3c:b0:e7:
         11:b3:fa:3f:5b:2b:af:87:0a:13:2c:d3:5a:f3:dc:ec:ee:3d:
         47:73:c0:dc:aa:82:f0:98:4d:63:a9:29:a5:ea:94:37:48:68:
         50:8c:22:82:4e:53:83:19:e3:b8:a3:68:2c:a6:e5:7c:d1:62:
         ef:5b:32:dc:54:5a:b5:ab:47:94:16:91:1a:19:de:ba:26:26:
         74:61:b2:82:a0:24:24:48:4f:e6:82:2c:3e:6c:08:35:fc:de:
         b6:cd:a2:ba:4a:5d:2d:d6:7c:ab:a6:86:41:38:ae:fb:53:d2:
         15:9a:1a:1f:ae:37:3e:50:05:67:2b:dd:86:5e:30:03:42:13:
         7f:83:a7:de:5a:01:46:49:ca:5b:4c:f7:0a:7d:c9:b5:18:a5:
         b5:d8:43:b9:04:47:91:64:2b:fc:57:fe:63:8a:e4:ea:34:1b:
         56:3d:30:94:0d:02:7f:b1:57:fd:de:ce:1b:2f:94:eb:7f:65:
         fa:d5:29:f9:d5:f1:b2:7d:89:d2:df:4b:77:1f:9e:bf:a9:bf:
         75:39:78:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 20:06:42 2025 by rpki-client