Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/6469c3e3-7b59-4490-84cf-fef1585ac75b/0/3130332e3137352e3230342e302f32342d3234203d3e20313437313139.roa
File:                     3130332e3137352e3230342e302f32342d3234203d3e20313437313139.roa (raw, json)
Hash identifier:          FwokdY5Winm64kPdNPud+dd5Ep75CI564UTa5xn81h0=
Subject key identifier:   3A:54:1E:F1:75:83:3C:94:B8:9D:77:EA:DB:46:33:29:0A:84:F0:7B
Certificate issuer:       /CN=A575236C1BE8E700EF4D54FB243030C7256654C6
Certificate serial:       2829D9C3768C99DB5749AF5115F87331858DA849
Authority key identifier: A5:75:23:6C:1B:E8:E7:00:EF:4D:54:FB:24:30:30:C7:25:66:54:C6
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A575236C1BE8E700EF4D54FB243030C7256654C6.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6469c3e3-7b59-4490-84cf-fef1585ac75b/0/3130332e3137352e3230342e302f32342d3234203d3e20313437313139.roa
Signing time:             Wed 05 Mar 2025 04:00:00 +0000
ROA not before:           Wed 05 Mar 2025 03:55:00 +0000
ROA not after:            Wed 04 Mar 2026 04:00:00 +0000
asID:                     147119
IP address blocks:        103.175.204.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/6469c3e3-7b59-4490-84cf-fef1585ac75b/0/A575236C1BE8E700EF4D54FB243030C7256654C6.crl
                          rsync://repo-rpki.idnic.net/repo/6469c3e3-7b59-4490-84cf-fef1585ac75b/0/A575236C1BE8E700EF4D54FB243030C7256654C6.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A575236C1BE8E700EF4D54FB243030C7256654C6.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Apr 2025 04:04:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:29:d9:c3:76:8c:99:db:57:49:af:51:15:f8:73:31:85:8d:a8:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A575236C1BE8E700EF4D54FB243030C7256654C6
        Validity
            Not Before: Mar  5 03:55:00 2025 GMT
            Not After : Mar  4 04:00:00 2026 GMT
        Subject: CN=3A541EF175833C94B89D77EADB4633290A84F07B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:24:64:35:a6:70:22:f8:1e:8b:25:c3:a1:64:
                    54:5b:6d:4f:5a:3b:f3:d1:ab:0d:65:d6:38:02:ae:
                    10:77:10:19:f7:33:98:4c:f5:66:1f:ec:31:7e:1f:
                    bc:01:70:93:d7:e3:70:b4:83:af:b4:85:b7:c6:48:
                    cd:23:bc:35:66:78:52:05:0b:8c:24:8d:98:23:39:
                    4c:18:16:5e:93:31:80:6f:c6:24:23:10:82:0e:e1:
                    09:68:38:be:29:38:ca:02:7a:07:81:06:85:4a:08:
                    fb:02:ab:76:6f:d1:e7:9d:15:dc:df:68:8b:3f:85:
                    f9:f2:45:40:77:d2:e0:ad:9c:75:4c:5b:48:ec:e8:
                    eb:26:ff:de:8f:8f:3e:72:89:60:3f:f9:c7:97:a0:
                    84:f6:0a:24:7f:ce:8d:9f:22:6c:88:a0:b3:21:6c:
                    71:55:7f:1a:c4:0d:e3:37:cd:b4:7f:10:d5:b0:c5:
                    39:64:d6:a3:ad:82:92:82:c9:8f:48:b7:0e:c8:86:
                    9c:b3:6f:b9:66:b5:0b:8e:b7:d4:e3:44:de:10:13:
                    ea:b6:a0:28:f2:43:ef:04:9a:e9:5e:cb:c2:64:3f:
                    95:d9:d1:eb:8d:f7:4b:09:fc:57:42:5f:83:42:5d:
                    5f:66:38:47:d5:83:80:58:c1:52:91:e8:71:3b:02:
                    71:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:54:1E:F1:75:83:3C:94:B8:9D:77:EA:DB:46:33:29:0A:84:F0:7B
            X509v3 Authority Key Identifier:
                keyid:A5:75:23:6C:1B:E8:E7:00:EF:4D:54:FB:24:30:30:C7:25:66:54:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6469c3e3-7b59-4490-84cf-fef1585ac75b/0/A575236C1BE8E700EF4D54FB243030C7256654C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A575236C1BE8E700EF4D54FB243030C7256654C6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6469c3e3-7b59-4490-84cf-fef1585ac75b/0/3130332e3137352e3230342e302f32342d3234203d3e20313437313139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.175.204.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:1a:23:e3:ad:fd:98:b1:65:a9:fa:37:3c:ac:74:52:6b:71:
         2c:e1:5c:28:b8:a0:b2:0f:7c:e1:03:1d:ab:7f:60:6b:ed:52:
         26:e7:43:39:2c:38:b7:fc:90:c9:bf:af:14:8a:3c:6f:1d:bf:
         60:05:62:79:04:6a:1c:1e:1c:cf:a9:06:e1:c8:34:ea:c7:89:
         22:ab:a1:6b:6c:60:14:2a:b9:93:e4:e9:a8:ef:5a:f4:8f:a1:
         da:c3:6d:a3:31:56:f0:5f:77:a1:ca:37:71:d0:77:1a:32:6c:
         02:fb:1d:4c:c2:9a:fb:9c:55:b3:7a:7c:d0:20:57:a2:dd:70:
         b3:17:51:0c:f1:7c:ee:17:94:fd:00:5e:e2:60:88:5a:79:8b:
         a8:7c:ea:08:be:ef:d4:14:c4:1b:78:73:83:b7:42:79:56:cc:
         06:07:77:73:21:d4:13:ee:05:f8:b6:9d:99:8f:df:9d:59:e1:
         7f:1b:db:00:6e:1f:a6:28:d7:ca:45:49:44:42:cf:6b:cb:87:
         c7:d4:97:11:00:cf:6a:7c:76:7f:8f:23:df:81:0c:81:b5:34:
         9d:ef:32:09:be:84:a7:6f:d0:8e:13:1c:f7:37:bc:a1:7a:e7:
         54:64:09:84:36:5d:33:c7:3f:be:43:b6:eb:f4:bd:29:5b:31:
         b6:5b:dd:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 16:04:54 2025 by rpki-client