Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/d70d629a-96ed-451a-8787-34122282a706/0/3130332e3138302e3136322e302f32342d3234203d3e20313439333737.roa
File:                     3130332e3138302e3136322e302f32342d3234203d3e20313439333737.roa (raw, json)
Hash identifier:          9RpvEpb4MDeR7vKuO5QULV5yAgtCcQbQomTWzkC1nrk=
Subject key identifier:   AD:E4:7E:8B:1D:A5:49:F8:53:16:C2:69:F4:67:B3:B2:88:E3:F8:BB
Certificate issuer:       /CN=08435803278DC5796EE67697996454D656195D4C
Certificate serial:       2F2CAFF6EAA7263C33C0D9123C257F6D14ABC1DD
Authority key identifier: 08:43:58:03:27:8D:C5:79:6E:E6:76:97:99:64:54:D6:56:19:5D:4C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08435803278DC5796EE67697996454D656195D4C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d70d629a-96ed-451a-8787-34122282a706/0/3130332e3138302e3136322e302f32342d3234203d3e20313439333737.roa
Signing time:             Tue 18 Feb 2025 07:02:37 +0000
ROA not before:           Tue 18 Feb 2025 06:57:37 +0000
ROA not after:            Tue 17 Feb 2026 07:02:37 +0000
asID:                     149377
IP address blocks:        103.180.162.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d70d629a-96ed-451a-8787-34122282a706/0/08435803278DC5796EE67697996454D656195D4C.crl
                          rsync://repo-rpki.idnic.net/repo/d70d629a-96ed-451a-8787-34122282a706/0/08435803278DC5796EE67697996454D656195D4C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08435803278DC5796EE67697996454D656195D4C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Apr 2025 07:38:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:2c:af:f6:ea:a7:26:3c:33:c0:d9:12:3c:25:7f:6d:14:ab:c1:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08435803278DC5796EE67697996454D656195D4C
        Validity
            Not Before: Feb 18 06:57:37 2025 GMT
            Not After : Feb 17 07:02:37 2026 GMT
        Subject: CN=ADE47E8B1DA549F85316C269F467B3B288E3F8BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:d6:dd:55:6c:6c:fd:24:e9:13:41:4a:fd:25:
                    2a:16:c6:74:d7:fc:f7:3d:57:9b:6a:85:ad:6a:36:
                    63:f5:d7:03:63:e1:16:29:a9:13:8f:a3:db:89:cb:
                    e5:3a:35:0d:c8:6d:2e:0a:96:94:0b:08:f7:8f:c7:
                    d5:79:a5:35:99:13:80:ce:5f:d9:1e:45:2c:79:e9:
                    65:e0:a2:17:94:4c:c6:36:78:61:e9:30:f2:c1:6b:
                    78:c3:1e:27:50:8c:59:77:8e:f6:99:59:a8:1a:fd:
                    47:15:c6:2b:9b:2a:a8:95:f8:cd:d1:48:06:5d:76:
                    cd:f8:12:30:f3:0f:1e:da:4c:06:dc:d9:27:73:75:
                    19:18:05:f7:2c:7b:10:00:32:fc:a7:d7:bf:63:6f:
                    5e:d0:14:d6:36:12:4a:49:b2:08:94:93:eb:a1:b9:
                    51:dc:3b:e8:b7:3c:d0:ab:6d:b5:54:aa:2b:d2:bf:
                    4e:3a:2b:ef:10:f9:3d:21:7f:a8:06:39:f2:6d:2e:
                    00:6f:df:77:05:d6:d9:4e:29:75:8d:bd:ce:9a:e1:
                    61:81:61:64:ee:50:52:39:ad:63:37:a2:94:53:7c:
                    47:18:9e:18:7b:6d:06:80:a4:35:52:8c:8b:46:bb:
                    9e:02:ec:74:d7:3f:ce:db:ea:dc:61:29:f8:87:80:
                    f3:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:E4:7E:8B:1D:A5:49:F8:53:16:C2:69:F4:67:B3:B2:88:E3:F8:BB
            X509v3 Authority Key Identifier:
                keyid:08:43:58:03:27:8D:C5:79:6E:E6:76:97:99:64:54:D6:56:19:5D:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d70d629a-96ed-451a-8787-34122282a706/0/08435803278DC5796EE67697996454D656195D4C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08435803278DC5796EE67697996454D656195D4C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d70d629a-96ed-451a-8787-34122282a706/0/3130332e3138302e3136322e302f32342d3234203d3e20313439333737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.180.162.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a2:05:3b:8b:46:12:cc:c4:04:76:af:18:0f:1c:2e:df:56:05:
         ce:79:32:bd:ed:f7:6c:08:1b:2e:84:d9:71:09:c4:94:1a:ea:
         4d:c2:2a:d6:c9:9d:64:4d:57:33:26:81:9a:28:96:f1:40:68:
         0b:6f:c6:82:5b:a5:00:c4:76:5e:a6:83:45:4d:2a:3e:bf:66:
         dc:87:4f:42:f2:2e:40:c4:cd:9e:43:14:ba:4f:48:13:98:04:
         09:38:76:30:8e:1c:cd:ec:c6:c0:7f:35:10:40:f0:40:21:b7:
         ba:04:62:bc:f0:5f:56:5d:a9:fc:c2:b4:cc:0b:96:4f:82:ab:
         fd:9b:df:35:71:ff:cd:05:37:5d:e4:f6:62:f0:fa:40:51:87:
         0d:e8:0c:25:c0:f6:51:fe:a0:e5:ca:2d:62:8d:1a:04:1e:91:
         48:c2:09:1e:94:22:0a:c0:cc:c2:09:e5:9e:1e:5c:36:b0:d8:
         b9:90:88:eb:f7:2b:23:ca:22:08:3e:f7:7b:79:87:44:29:35:
         47:0f:44:50:d4:96:50:ba:b8:4f:a7:e4:a9:61:b1:ed:51:2d:
         4e:1b:2f:e6:8c:31:2b:6b:e7:74:c4:2c:af:83:4a:d5:8f:78:
         bf:b5:3c:00:2d:7b:b7:4d:9a:6c:1b:43:39:0f:39:5e:3e:77:
         c1:90:3c:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:36:04 2025 by rpki-client