Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/6469c3e3-7b59-4490-84cf-fef1585ac75b/0/3130332e3137352e3230342e302f32342d3234203d3e20313437313139.roa
File:                     3130332e3137352e3230342e302f32342d3234203d3e20313437313139.roa (raw, json)
Hash identifier:          UsW2YwHH4LFyFimoT4EF026GcJwnzijmK41dMaXsjik=
Subject key identifier:   63:A9:DD:AE:8A:BC:D8:98:6D:AC:0D:C2:81:67:9A:01:59:12:15:71
Certificate issuer:       /CN=A575236C1BE8E700EF4D54FB243030C7256654C6
Certificate serial:       096407FD36AB1C13426E41CB8254ADA4CEF13D9A
Authority key identifier: A5:75:23:6C:1B:E8:E7:00:EF:4D:54:FB:24:30:30:C7:25:66:54:C6
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A575236C1BE8E700EF4D54FB243030C7256654C6.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6469c3e3-7b59-4490-84cf-fef1585ac75b/0/3130332e3137352e3230342e302f32342d3234203d3e20313437313139.roa
Signing time:             Wed 03 Apr 2024 03:54:53 +0000
ROA not before:           Wed 03 Apr 2024 03:49:53 +0000
ROA not after:            Wed 02 Apr 2025 03:54:53 +0000
asID:                     147119
IP address blocks:        103.175.204.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/6469c3e3-7b59-4490-84cf-fef1585ac75b/0/A575236C1BE8E700EF4D54FB243030C7256654C6.crl
                          rsync://repo-rpki.idnic.net/repo/6469c3e3-7b59-4490-84cf-fef1585ac75b/0/A575236C1BE8E700EF4D54FB243030C7256654C6.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A575236C1BE8E700EF4D54FB243030C7256654C6.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 22 Feb 2025 11:05:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:64:07:fd:36:ab:1c:13:42:6e:41:cb:82:54:ad:a4:ce:f1:3d:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A575236C1BE8E700EF4D54FB243030C7256654C6
        Validity
            Not Before: Apr  3 03:49:53 2024 GMT
            Not After : Apr  2 03:54:53 2025 GMT
        Subject: CN=63A9DDAE8ABCD8986DAC0DC281679A0159121571
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:32:66:39:43:a0:a8:26:7b:2f:fe:90:12:fb:
                    50:9a:52:90:d2:b6:8d:0f:37:37:04:88:a9:05:e9:
                    5c:b2:1d:bb:ec:c9:09:4a:e2:19:c3:ba:0b:e5:d9:
                    c4:05:ca:7f:10:6f:06:3e:f4:1d:31:d3:4f:12:13:
                    f7:29:6a:0f:42:a2:21:d4:17:de:20:c2:e4:59:c5:
                    d3:64:fe:61:42:77:da:c0:ac:d7:20:23:3a:b9:e6:
                    54:60:93:72:4b:97:f7:71:c4:47:95:be:29:95:9c:
                    ae:96:bc:2b:6d:6f:b0:87:44:b3:3c:3f:9b:4b:2b:
                    39:19:67:17:d2:20:e3:e6:c7:bd:c5:8f:50:87:fa:
                    cf:6e:1d:78:1e:91:98:0b:d5:14:0d:ec:76:fc:3c:
                    7f:73:6d:25:b0:48:7c:15:25:d6:48:e7:57:7e:ed:
                    b8:2c:12:51:c3:07:34:f0:92:98:08:b2:17:3f:7b:
                    7a:fe:5a:14:73:1a:ca:8b:ca:94:22:01:7b:f9:b9:
                    55:9b:0b:b5:da:cb:2b:7a:98:0b:a5:11:e4:38:87:
                    d3:ca:24:b2:2c:34:a2:d9:7e:36:f7:b1:ff:ea:6d:
                    a0:9f:e4:7b:bb:33:bf:1d:94:8e:77:34:b6:1b:b7:
                    2d:a1:06:a9:97:db:e3:6c:3e:04:b9:b3:fa:48:5e:
                    3d:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:A9:DD:AE:8A:BC:D8:98:6D:AC:0D:C2:81:67:9A:01:59:12:15:71
            X509v3 Authority Key Identifier:
                keyid:A5:75:23:6C:1B:E8:E7:00:EF:4D:54:FB:24:30:30:C7:25:66:54:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6469c3e3-7b59-4490-84cf-fef1585ac75b/0/A575236C1BE8E700EF4D54FB243030C7256654C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A575236C1BE8E700EF4D54FB243030C7256654C6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6469c3e3-7b59-4490-84cf-fef1585ac75b/0/3130332e3137352e3230342e302f32342d3234203d3e20313437313139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.175.204.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:91:76:1a:4f:cc:2f:17:f7:43:6f:4c:5c:6b:3e:b9:ab:2f:
         93:dd:21:e8:ad:99:57:66:aa:48:3b:d7:95:54:3b:5a:02:e7:
         56:92:b8:34:ba:b3:b6:b1:8e:34:bb:9e:2d:0c:8a:e2:0b:89:
         55:a9:ab:81:d0:b1:30:5a:dc:ba:b0:38:f2:f2:85:3b:19:f3:
         b2:02:72:a2:b4:d3:ad:81:69:7c:31:e5:65:36:a8:31:77:05:
         e5:1e:cd:56:b6:ba:e9:c3:e9:b3:39:9e:b4:1f:f9:a7:0d:db:
         b3:90:b6:6b:54:74:69:d1:e7:4e:01:0b:50:a7:fc:f8:d4:63:
         be:00:aa:29:c5:77:11:b3:3e:4b:2d:42:be:75:d2:97:f2:fe:
         d8:60:27:c3:67:49:6a:a7:46:14:19:fa:66:7e:b9:3b:72:44:
         e9:e7:5b:07:53:25:01:5d:43:93:d6:29:1c:fb:23:74:b6:7f:
         0d:7b:07:54:28:e6:84:83:ae:db:ea:0b:7d:a3:54:72:24:3e:
         57:0d:69:2f:e9:94:31:10:c9:7f:81:d2:83:23:69:40:35:20:
         ef:1a:9c:6c:12:3d:4b:5b:4d:5f:83:d1:fe:b2:0e:f2:60:5e:
         1d:ee:18:07:50:91:84:29:3b:ca:cf:1c:12:4e:2d:31:a0:55:
         51:eb:81:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:09:44 2025 by rpki-client