Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/bb17c206-9b63-4c56-9436-475d82141a66/0/3130332e3136342e36312e302f32342d3234203d3e20313431393632.roa
File:                     3130332e3136342e36312e302f32342d3234203d3e20313431393632.roa (raw, json)
Hash identifier:          jkJd+M5rwtfeJj5Wy3BROoY6ivNRSiwWeiLPr6W2/x8=
Subject key identifier:   EC:D7:B2:4D:AD:D8:55:7A:A4:40:EC:C7:21:56:70:E9:C4:D4:5D:9D
Certificate issuer:       /CN=D454E26475969CECE78A97B9152AFC76DB922AA3
Certificate serial:       49AC9348416687332918BA9CDE204E83262797DD
Authority key identifier: D4:54:E2:64:75:96:9C:EC:E7:8A:97:B9:15:2A:FC:76:DB:92:2A:A3
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D454E26475969CECE78A97B9152AFC76DB922AA3.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/bb17c206-9b63-4c56-9436-475d82141a66/0/3130332e3136342e36312e302f32342d3234203d3e20313431393632.roa
Signing time:             Fri 17 Jan 2025 17:53:23 +0000
ROA not before:           Fri 17 Jan 2025 17:48:23 +0000
ROA not after:            Fri 16 Jan 2026 17:53:23 +0000
asID:                     141962
IP address blocks:        103.164.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/bb17c206-9b63-4c56-9436-475d82141a66/0/D454E26475969CECE78A97B9152AFC76DB922AA3.crl
                          rsync://repo-rpki.idnic.net/repo/bb17c206-9b63-4c56-9436-475d82141a66/0/D454E26475969CECE78A97B9152AFC76DB922AA3.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D454E26475969CECE78A97B9152AFC76DB922AA3.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Apr 2025 02:36:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:ac:93:48:41:66:87:33:29:18:ba:9c:de:20:4e:83:26:27:97:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D454E26475969CECE78A97B9152AFC76DB922AA3
        Validity
            Not Before: Jan 17 17:48:23 2025 GMT
            Not After : Jan 16 17:53:23 2026 GMT
        Subject: CN=ECD7B24DADD8557AA440ECC7215670E9C4D45D9D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:26:72:c6:b2:ab:7c:d2:18:d9:87:3c:2f:82:
                    2e:1b:ca:51:0d:2f:f9:bd:2a:75:8e:37:8a:a5:de:
                    1f:43:03:b7:a9:c5:93:0f:2b:3f:bd:84:d2:88:48:
                    15:b0:97:b3:7e:f0:ac:c2:9a:f8:84:99:8d:cd:4f:
                    6a:88:90:9d:47:1e:79:91:58:56:be:a2:97:b0:8e:
                    fe:47:73:8c:2f:8f:53:87:e8:be:89:d3:a4:29:d1:
                    50:d8:85:96:76:48:8c:8e:ab:69:4b:0d:7c:be:2a:
                    93:59:53:db:11:49:83:de:ac:f6:1f:3e:1c:90:af:
                    6d:70:58:c3:f2:9b:43:b6:68:7e:05:45:9b:59:1c:
                    d3:66:a7:74:2c:ea:1f:a0:e9:51:ed:b7:14:28:7f:
                    13:14:c2:0b:2e:f5:31:05:34:dd:fe:8f:c6:e4:1e:
                    a9:bf:ef:2b:79:38:8e:7a:a4:c7:67:e1:bf:f0:b7:
                    f3:1c:76:00:6f:1f:2d:ae:29:6d:46:e6:1c:34:ee:
                    64:2e:d1:d6:28:d3:3b:de:59:4b:21:88:5c:b7:44:
                    64:c4:d5:fc:6a:d1:23:88:b3:7f:82:82:4c:09:43:
                    e3:cf:f6:78:fd:1b:07:f1:9b:0b:f1:e0:8f:4e:dd:
                    a9:a9:d9:ae:9f:af:1d:25:13:07:04:c0:72:b2:61:
                    30:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:D7:B2:4D:AD:D8:55:7A:A4:40:EC:C7:21:56:70:E9:C4:D4:5D:9D
            X509v3 Authority Key Identifier:
                keyid:D4:54:E2:64:75:96:9C:EC:E7:8A:97:B9:15:2A:FC:76:DB:92:2A:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/bb17c206-9b63-4c56-9436-475d82141a66/0/D454E26475969CECE78A97B9152AFC76DB922AA3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D454E26475969CECE78A97B9152AFC76DB922AA3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bb17c206-9b63-4c56-9436-475d82141a66/0/3130332e3136342e36312e302f32342d3234203d3e20313431393632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.164.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:2a:57:70:0d:62:82:81:13:94:78:86:72:f6:fd:2a:cd:92:
         b8:0f:95:ce:2a:77:07:36:07:cc:90:f1:4a:4e:f9:c2:5a:2f:
         ce:6a:16:b5:19:5d:11:53:5a:c7:9c:d4:8d:32:77:be:1a:11:
         ef:d8:f8:a8:42:27:cf:f1:fe:91:75:1c:98:39:07:25:7a:99:
         3d:d5:d8:93:a9:1f:b9:e4:d6:a5:32:8d:0e:c1:d1:1d:11:a8:
         58:30:b4:a8:b2:44:ff:e0:8e:4b:a8:12:a8:65:c2:8a:f4:1f:
         85:a8:c9:0e:c9:8d:89:ee:3c:ee:86:7f:2d:0c:45:ea:ce:d1:
         8c:7a:a6:2b:e8:d5:d8:af:c1:e4:b8:fe:c1:ac:3f:44:ce:7f:
         1a:7d:61:d7:43:46:41:fe:4e:a8:c8:91:7a:8e:4a:a5:33:1e:
         ed:fb:2f:23:0f:a6:1d:0f:a1:50:81:75:d8:b8:30:c3:7f:6b:
         df:cf:de:e4:11:31:80:e0:00:f4:73:b0:f4:55:4a:3f:89:fc:
         75:55:29:01:38:77:66:b1:e7:f5:a8:42:96:d9:13:fe:c1:87:
         10:94:8e:c8:1f:11:e2:ec:87:5f:f3:1f:3d:4a:9e:de:5a:1b:
         c8:19:f7:7f:10:8b:5e:b6:da:c4:f4:ec:e6:f7:5a:4e:9d:42:
         d3:a0:4d:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:49:54 2025 by rpki-client