Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/907608ce-c3f8-44eb-aee7-b784ae20c9c7/0/3130332e3135352e32342e302f32332d3233203d3e20313431303734.roa
File:                     3130332e3135352e32342e302f32332d3233203d3e20313431303734.roa (raw, json)
Hash identifier:          6aU9uz5CHHldU1HIevUJsAf5erVKI657uWFvNEr+ic0=
Subject key identifier:   6D:26:A7:19:E7:F8:70:E6:3F:BD:21:80:BD:F8:26:AF:4A:BD:3E:B3
Certificate issuer:       /CN=DE4325727D17555F6DABCC72788E361C741D47CF
Certificate serial:       0A149ECD5337193CE8E4D30D67569BCB554CA062
Authority key identifier: DE:43:25:72:7D:17:55:5F:6D:AB:CC:72:78:8E:36:1C:74:1D:47:CF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE4325727D17555F6DABCC72788E361C741D47CF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/907608ce-c3f8-44eb-aee7-b784ae20c9c7/0/3130332e3135352e32342e302f32332d3233203d3e20313431303734.roa
Signing time:             Thu 06 Mar 2025 06:00:01 +0000
ROA not before:           Thu 06 Mar 2025 05:55:01 +0000
ROA not after:            Thu 05 Mar 2026 06:00:01 +0000
asID:                     141074
IP address blocks:        103.155.24.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/907608ce-c3f8-44eb-aee7-b784ae20c9c7/0/DE4325727D17555F6DABCC72788E361C741D47CF.crl
                          rsync://repo-rpki.idnic.net/repo/907608ce-c3f8-44eb-aee7-b784ae20c9c7/0/DE4325727D17555F6DABCC72788E361C741D47CF.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE4325727D17555F6DABCC72788E361C741D47CF.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 08 Apr 2025 16:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:14:9e:cd:53:37:19:3c:e8:e4:d3:0d:67:56:9b:cb:55:4c:a0:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DE4325727D17555F6DABCC72788E361C741D47CF
        Validity
            Not Before: Mar  6 05:55:01 2025 GMT
            Not After : Mar  5 06:00:01 2026 GMT
        Subject: CN=6D26A719E7F870E63FBD2180BDF826AF4ABD3EB3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:c9:e7:fe:30:57:57:c3:00:d6:2b:8f:8d:bf:
                    8d:80:e1:2f:76:94:ec:ad:62:d6:d7:42:f9:48:67:
                    3d:89:c7:07:63:a9:8b:bc:90:2e:80:3d:10:5f:6c:
                    f3:6b:1c:6a:84:f7:02:75:d6:36:a5:d4:09:49:e3:
                    d5:db:42:da:72:9c:a7:13:7d:18:6b:56:c2:21:86:
                    18:24:3a:b8:a2:16:bb:63:88:b1:12:e8:6e:72:cd:
                    db:2e:8c:66:c2:a5:b2:4d:f6:5c:ad:7d:da:41:d8:
                    48:78:42:b5:a1:43:e8:b6:47:87:78:ea:ea:3b:60:
                    b3:af:98:e7:bb:0f:eb:d0:05:74:fb:fa:52:62:dd:
                    51:91:ec:73:ee:1d:56:1a:24:60:35:8b:e6:7c:b4:
                    bc:e6:5c:7a:05:ff:fc:2e:20:40:02:cc:b7:71:4d:
                    31:a2:a7:5c:08:58:96:a9:ec:83:07:76:12:74:f7:
                    64:68:3d:02:98:2f:14:ec:d2:31:33:17:bb:72:f0:
                    af:d4:3a:8c:b8:8c:09:5c:4d:e2:0d:63:24:42:a5:
                    11:5f:ee:6f:ca:af:e7:e0:32:c0:ff:fe:c0:cf:83:
                    c0:0e:db:3c:dd:0f:ef:44:81:80:65:f0:00:82:15:
                    cf:24:e6:40:aa:6b:9d:dc:c8:c8:e5:e5:23:93:64:
                    41:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:26:A7:19:E7:F8:70:E6:3F:BD:21:80:BD:F8:26:AF:4A:BD:3E:B3
            X509v3 Authority Key Identifier:
                keyid:DE:43:25:72:7D:17:55:5F:6D:AB:CC:72:78:8E:36:1C:74:1D:47:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/907608ce-c3f8-44eb-aee7-b784ae20c9c7/0/DE4325727D17555F6DABCC72788E361C741D47CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE4325727D17555F6DABCC72788E361C741D47CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/907608ce-c3f8-44eb-aee7-b784ae20c9c7/0/3130332e3135352e32342e302f32332d3233203d3e20313431303734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.155.24.0/23

    Signature Algorithm: sha256WithRSAEncryption
         df:08:da:ed:b5:61:e1:0c:df:92:cf:d5:63:01:11:c0:2a:52:
         58:45:02:e2:9e:9e:ba:48:a4:94:73:38:e2:56:e7:44:aa:21:
         1f:2f:84:97:f2:7f:fc:07:77:69:52:30:4c:b3:d7:5a:29:d0:
         cf:a6:ca:2f:8d:e3:87:91:87:4a:39:a1:fa:13:30:b5:a0:3c:
         3d:33:7c:b1:12:f7:2c:fd:fb:63:4e:25:7a:cb:f3:f7:c2:27:
         d2:ba:9f:63:c9:4c:e6:ae:da:15:cc:b8:8d:fa:68:4d:ad:63:
         74:80:82:cd:d0:db:b6:e4:95:7f:43:d0:39:28:eb:42:f8:0d:
         dd:cc:7b:f2:ba:49:19:0f:61:a5:6f:5c:14:24:1c:19:fd:be:
         3e:6d:6e:f2:36:85:13:4c:ae:4b:28:32:ff:17:63:51:cd:3b:
         97:36:67:e3:05:74:bf:7c:b3:6e:6f:64:fe:a6:b2:f7:b8:85:
         3e:cd:34:6f:aa:61:11:4c:5d:5f:6c:44:2c:63:c8:69:54:ea:
         4d:db:29:5e:27:d6:88:65:22:39:1c:7f:91:b3:47:54:c4:0a:
         1d:d0:20:fa:bb:0b:76:c2:d5:ce:8c:f4:84:a4:0e:c7:57:7f:
         af:d8:b4:73:4d:f5:ea:a0:d9:c2:8a:08:03:95:11:20:6f:43:
         0f:12:1f:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:13:38 2025 by rpki-client