Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c846f422-c302-4462-b584-700e9346ca09/0/3130332e32332e39392e302f32342d3234203d3e20313530323435.roa
File:                     3130332e32332e39392e302f32342d3234203d3e20313530323435.roa (raw, json)
Hash identifier:          7tXNJtByPVAUWKN7rPTJrICa1r391Ty+571rFNCuCe4=
Subject key identifier:   1D:FB:BB:9A:9E:09:2F:94:D8:13:4D:74:91:DF:F9:39:E9:08:A8:8A
Certificate issuer:       /CN=B2B2F42BF1978AD094186480A7DA0086FD7C2919
Certificate serial:       2FCAB1D5C1589CDC4F20A2F72C19C2A3F4B33649
Authority key identifier: B2:B2:F4:2B:F1:97:8A:D0:94:18:64:80:A7:DA:00:86:FD:7C:29:19
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2B2F42BF1978AD094186480A7DA0086FD7C2919.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c846f422-c302-4462-b584-700e9346ca09/0/3130332e32332e39392e302f32342d3234203d3e20313530323435.roa
Signing time:             Sat 15 Feb 2025 07:00:01 +0000
ROA not before:           Sat 15 Feb 2025 06:55:01 +0000
ROA not after:            Sat 14 Feb 2026 07:00:01 +0000
asID:                     150245
IP address blocks:        103.23.99.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c846f422-c302-4462-b584-700e9346ca09/0/B2B2F42BF1978AD094186480A7DA0086FD7C2919.crl
                          rsync://repo-rpki.idnic.net/repo/c846f422-c302-4462-b584-700e9346ca09/0/B2B2F42BF1978AD094186480A7DA0086FD7C2919.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2B2F42BF1978AD094186480A7DA0086FD7C2919.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 07 Apr 2025 16:47:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:ca:b1:d5:c1:58:9c:dc:4f:20:a2:f7:2c:19:c2:a3:f4:b3:36:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B2B2F42BF1978AD094186480A7DA0086FD7C2919
        Validity
            Not Before: Feb 15 06:55:01 2025 GMT
            Not After : Feb 14 07:00:01 2026 GMT
        Subject: CN=1DFBBB9A9E092F94D8134D7491DFF939E908A88A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:55:56:cd:c5:1d:6e:85:38:8f:bb:94:9a:13:
                    1e:15:17:12:7e:01:24:3b:59:07:3f:9a:5d:41:48:
                    69:c6:82:d8:3f:af:a7:d8:f8:18:a4:df:fa:2c:d2:
                    0c:95:31:45:d5:27:15:af:6f:ff:0a:fa:0c:83:9a:
                    cb:f0:f6:69:76:07:19:a9:f5:46:d9:3c:61:54:b4:
                    41:d0:22:56:f9:51:98:7a:4e:14:f3:c2:70:3f:0a:
                    8d:71:38:5c:52:3f:32:17:87:2b:9b:2a:69:86:a5:
                    c4:bc:35:5d:17:cc:da:d1:ac:9b:28:39:58:cd:b9:
                    31:bc:1d:d1:69:11:a6:13:26:97:30:d4:e5:36:a2:
                    45:84:c9:36:d7:c8:70:b1:77:56:1b:a5:96:e5:f5:
                    d7:ab:11:6f:08:1f:a8:89:13:31:24:31:58:6e:79:
                    36:e9:b2:29:d9:05:86:6a:d8:9d:6b:25:dc:69:15:
                    f7:7e:dc:41:e7:d9:68:02:07:9b:d6:55:97:99:6a:
                    e0:d9:d8:7d:44:4c:11:b9:d5:18:e6:c7:4b:05:c3:
                    13:6f:77:2b:07:d7:7d:1f:88:d5:1c:ff:f8:54:f9:
                    eb:14:6c:46:27:67:c0:33:24:44:76:b3:38:ad:56:
                    1c:2a:a6:06:69:e9:3a:b5:01:bb:bd:b6:ba:c7:f1:
                    c9:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:FB:BB:9A:9E:09:2F:94:D8:13:4D:74:91:DF:F9:39:E9:08:A8:8A
            X509v3 Authority Key Identifier:
                keyid:B2:B2:F4:2B:F1:97:8A:D0:94:18:64:80:A7:DA:00:86:FD:7C:29:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c846f422-c302-4462-b584-700e9346ca09/0/B2B2F42BF1978AD094186480A7DA0086FD7C2919.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2B2F42BF1978AD094186480A7DA0086FD7C2919.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c846f422-c302-4462-b584-700e9346ca09/0/3130332e32332e39392e302f32342d3234203d3e20313530323435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.23.99.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:c6:0f:69:b2:ea:9a:0e:ea:bc:da:ee:1b:eb:cf:c4:93:16:
         e4:09:55:92:c5:c4:0b:cd:b2:fa:6a:62:ed:25:ff:21:b3:5f:
         11:b8:14:01:5d:2f:f9:3e:29:cc:5e:4e:e5:89:b2:a9:39:24:
         71:27:a7:91:13:42:26:c7:75:9d:fa:92:f0:c3:62:aa:b8:e9:
         28:83:f0:34:41:b8:7a:cf:9a:68:b1:23:f2:f6:97:0d:a9:81:
         4a:39:49:76:a1:96:61:cf:38:d5:7d:a3:73:22:96:0e:fb:9b:
         74:34:cb:1c:03:9d:98:62:22:02:3c:48:60:99:db:03:5d:f1:
         41:97:d6:33:29:12:76:27:e0:ce:9f:ea:67:d1:f3:1a:ca:56:
         0b:b9:64:61:72:86:c6:aa:81:e2:ac:78:17:5f:b6:6d:5f:f7:
         ce:a2:f6:4d:f3:36:aa:8e:a6:b6:ba:43:33:ac:1d:48:cf:fe:
         af:ae:85:85:66:12:86:2d:a1:87:89:66:ca:c2:c9:46:d4:09:
         50:6d:98:0c:25:a9:89:a2:40:02:34:02:1c:bf:7d:fd:83:fc:
         56:f3:52:09:28:0d:65:90:b6:37:ac:9d:8e:d4:a2:7e:24:85:
         0c:3f:bf:7f:38:22:63:60:eb:b4:f7:fd:0e:15:bf:5a:99:af:
         a8:a6:d7:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 14:51:55 2025 by rpki-client