Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/8392f899-e83c-4706-a9a1-82256bd48236/0/3130332e3137372e3138382e302f32332d3233203d3e20313439333533.roa
File:                     3130332e3137372e3138382e302f32332d3233203d3e20313439333533.roa (raw, json)
Hash identifier:          SC3nnyfsyA5bEyARFBloY8n1qyf6YOcVCdvguQUIDxI=
Subject key identifier:   DE:C6:5A:E0:B1:7F:89:89:60:A5:E0:BC:EC:B5:9E:98:B2:F7:55:72
Certificate issuer:       /CN=1C49A098778B751B36DDC816E9E5106C08F3E99E
Certificate serial:       1732022DBAC07C9CFC87AF84FB945BB81E72CA76
Authority key identifier: 1C:49:A0:98:77:8B:75:1B:36:DD:C8:16:E9:E5:10:6C:08:F3:E9:9E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1C49A098778B751B36DDC816E9E5106C08F3E99E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8392f899-e83c-4706-a9a1-82256bd48236/0/3130332e3137372e3138382e302f32332d3233203d3e20313439333533.roa
Signing time:             Thu 02 Jan 2025 17:02:28 +0000
ROA not before:           Thu 02 Jan 2025 16:57:28 +0000
ROA not after:            Thu 01 Jan 2026 17:02:28 +0000
asID:                     149353
IP address blocks:        103.177.188.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8392f899-e83c-4706-a9a1-82256bd48236/0/1C49A098778B751B36DDC816E9E5106C08F3E99E.crl
                          rsync://repo-rpki.idnic.net/repo/8392f899-e83c-4706-a9a1-82256bd48236/0/1C49A098778B751B36DDC816E9E5106C08F3E99E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1C49A098778B751B36DDC816E9E5106C08F3E99E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 07 Apr 2025 17:03:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:32:02:2d:ba:c0:7c:9c:fc:87:af:84:fb:94:5b:b8:1e:72:ca:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C49A098778B751B36DDC816E9E5106C08F3E99E
        Validity
            Not Before: Jan  2 16:57:28 2025 GMT
            Not After : Jan  1 17:02:28 2026 GMT
        Subject: CN=DEC65AE0B17F898960A5E0BCECB59E98B2F75572
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:e9:7e:c9:94:c2:40:8e:e8:f9:40:ce:c4:62:
                    e5:69:26:f2:1e:11:c2:fa:a0:e1:2c:ed:b0:da:4c:
                    81:98:e5:7b:c3:bb:5d:da:30:e1:46:df:c0:17:f6:
                    ec:15:27:6c:1e:a9:87:fa:71:9c:20:91:12:19:58:
                    f6:f2:7f:61:93:ec:16:ef:c9:09:ad:84:9e:95:53:
                    01:fb:ad:9a:ca:25:9d:2a:1f:2f:86:00:59:f8:cb:
                    86:d5:2c:7a:8f:61:8b:fe:a2:3b:81:b2:a7:cf:b1:
                    bb:eb:af:6f:86:f3:08:a5:22:68:85:ab:14:78:c4:
                    ce:a0:fb:1b:8a:ec:12:5c:a4:ab:b5:c6:68:3c:35:
                    69:4c:19:dc:9c:f1:5d:d8:b2:b1:e4:59:f4:2e:56:
                    a8:37:fb:4f:7b:6c:4e:7a:ea:7c:8f:21:00:05:53:
                    c5:e5:ca:f2:1d:9c:a9:f3:72:00:27:24:5e:e1:d4:
                    99:d2:f6:e7:02:b7:47:18:1e:12:fb:5a:5c:99:1c:
                    24:29:29:0d:9f:2a:7b:31:24:85:53:6a:b4:10:38:
                    d5:a9:71:44:77:8d:da:e7:36:14:2f:40:35:54:b0:
                    22:64:95:1e:e4:c5:7f:00:0c:92:7a:69:a2:99:44:
                    9b:5b:54:37:25:f0:c1:35:eb:92:4e:b5:0b:22:ba:
                    e1:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:C6:5A:E0:B1:7F:89:89:60:A5:E0:BC:EC:B5:9E:98:B2:F7:55:72
            X509v3 Authority Key Identifier:
                keyid:1C:49:A0:98:77:8B:75:1B:36:DD:C8:16:E9:E5:10:6C:08:F3:E9:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8392f899-e83c-4706-a9a1-82256bd48236/0/1C49A098778B751B36DDC816E9E5106C08F3E99E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1C49A098778B751B36DDC816E9E5106C08F3E99E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8392f899-e83c-4706-a9a1-82256bd48236/0/3130332e3137372e3138382e302f32332d3233203d3e20313439333533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.177.188.0/23

    Signature Algorithm: sha256WithRSAEncryption
         89:e0:80:c9:24:91:83:17:4b:09:89:13:d0:42:1f:ce:e1:dc:
         3b:35:d1:1e:f2:55:6b:5b:3b:ad:57:f4:9b:ea:52:e0:81:1a:
         e8:13:65:1c:32:a7:28:3a:a3:03:53:c6:12:d5:c1:c1:69:98:
         78:f1:ef:d0:35:24:9e:c9:dc:2c:1e:15:32:14:d9:c5:a0:b3:
         e2:e4:83:40:d7:ed:51:38:ef:f2:1c:ad:9c:c2:5f:84:89:9c:
         6f:b9:66:f6:ab:ba:bd:35:52:e9:c4:10:2c:cc:02:04:b3:26:
         b5:03:2c:7b:27:c7:36:bc:b2:aa:c5:71:fd:29:d9:4f:f9:c5:
         2a:94:4e:32:04:21:e6:a6:9a:aa:06:56:b9:10:c5:e4:87:44:
         81:49:60:15:a4:d7:52:a6:8f:15:25:54:22:8f:a9:ba:3d:c0:
         85:34:46:5f:20:44:f1:24:77:01:12:85:52:9b:a2:23:55:9f:
         4b:f4:3e:c6:8f:88:14:20:81:2c:4f:af:dd:67:c2:d1:16:f2:
         1f:77:0b:14:d5:f5:27:cd:f9:47:11:07:d2:3f:33:83:f4:77:
         e3:13:d0:51:a1:41:91:9f:d0:25:1d:a7:80:82:a5:7f:17:4b:
         5f:9d:32:a4:bc:00:56:16:91:4f:ff:1d:49:88:c4:f0:2a:de:
         92:97:66:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:36:47 2025 by rpki-client