Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/d8463ad5-1745-443e-b165-d194eed89e6b/0/3130332e39372e3139392e302f32342d3234203d3e20313530393135.roa
File:                     3130332e39372e3139392e302f32342d3234203d3e20313530393135.roa (raw, json)
Hash identifier:          KpZGTHHITDkYOGDokkGhFBTqUppZ/cNFbsmbPmwF8Cg=
Subject key identifier:   59:86:2D:93:40:41:4D:14:DC:9F:22:EC:F1:F3:E0:ED:C0:B1:37:53
Certificate issuer:       /CN=7B04CE58A1370241E93EF01F597DD18A039D613D
Certificate serial:       318A68E574B805F5920F70A2DDFF182669346B61
Authority key identifier: 7B:04:CE:58:A1:37:02:41:E9:3E:F0:1F:59:7D:D1:8A:03:9D:61:3D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B04CE58A1370241E93EF01F597DD18A039D613D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d8463ad5-1745-443e-b165-d194eed89e6b/0/3130332e39372e3139392e302f32342d3234203d3e20313530393135.roa
Signing time:             Fri 31 Jan 2025 05:00:01 +0000
ROA not before:           Fri 31 Jan 2025 04:55:01 +0000
ROA not after:            Fri 30 Jan 2026 05:00:01 +0000
asID:                     150915
IP address blocks:        103.97.199.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d8463ad5-1745-443e-b165-d194eed89e6b/0/7B04CE58A1370241E93EF01F597DD18A039D613D.crl
                          rsync://repo-rpki.idnic.net/repo/d8463ad5-1745-443e-b165-d194eed89e6b/0/7B04CE58A1370241E93EF01F597DD18A039D613D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B04CE58A1370241E93EF01F597DD18A039D613D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 12 Mar 2025 18:02:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:8a:68:e5:74:b8:05:f5:92:0f:70:a2:dd:ff:18:26:69:34:6b:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B04CE58A1370241E93EF01F597DD18A039D613D
        Validity
            Not Before: Jan 31 04:55:01 2025 GMT
            Not After : Jan 30 05:00:01 2026 GMT
        Subject: CN=59862D9340414D14DC9F22ECF1F3E0EDC0B13753
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:74:80:73:48:58:cb:b8:7e:2b:59:b7:d6:24:
                    a4:ee:28:3d:45:88:6d:b3:31:66:8a:42:27:5c:29:
                    0e:fe:df:51:25:80:5c:b0:8f:4f:aa:92:52:f3:d7:
                    8c:0b:83:c6:5b:af:9f:ab:7a:4e:2d:37:a0:d1:16:
                    35:85:4c:b5:18:7c:06:43:6b:c0:69:bc:91:a9:6f:
                    b9:56:f3:ef:0c:7c:61:ef:7d:f6:bd:c6:58:0a:6a:
                    78:0d:c9:01:15:df:cf:17:6e:e0:40:c2:ef:d1:fd:
                    5e:35:c4:58:a9:37:0c:93:b0:79:ff:21:de:56:1f:
                    04:d6:d5:9b:58:16:fc:53:47:82:55:92:fd:66:60:
                    98:c2:22:1a:b4:b9:bf:39:eb:e4:25:a4:52:0c:b8:
                    a9:ab:99:3b:fb:90:fe:3f:52:23:a5:38:26:d9:0c:
                    55:71:b5:0e:bb:c8:2e:8d:2b:ba:bc:a5:b1:9d:0d:
                    1e:37:cf:a4:98:b0:e1:e9:79:8e:aa:f4:5a:6c:c1:
                    09:85:7e:e9:05:5c:d1:33:66:c8:02:93:09:09:d5:
                    87:ad:8f:5e:c0:50:71:79:ee:39:d3:a2:7f:c0:00:
                    e7:fe:f1:3d:66:9a:19:c2:22:48:ff:ea:5a:20:12:
                    8c:c4:69:c0:48:ca:d5:02:8b:17:c2:9a:45:c8:5a:
                    38:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:86:2D:93:40:41:4D:14:DC:9F:22:EC:F1:F3:E0:ED:C0:B1:37:53
            X509v3 Authority Key Identifier:
                keyid:7B:04:CE:58:A1:37:02:41:E9:3E:F0:1F:59:7D:D1:8A:03:9D:61:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d8463ad5-1745-443e-b165-d194eed89e6b/0/7B04CE58A1370241E93EF01F597DD18A039D613D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B04CE58A1370241E93EF01F597DD18A039D613D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d8463ad5-1745-443e-b165-d194eed89e6b/0/3130332e39372e3139392e302f32342d3234203d3e20313530393135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.97.199.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:98:a0:fb:9d:9b:72:b5:1d:3a:18:7b:1b:e8:f9:a6:aa:fd:
         cb:14:bf:e4:3c:a3:7c:ab:6d:b1:46:f1:c0:75:3e:04:ec:e0:
         5a:7d:63:01:b0:f1:51:ee:8e:5c:d9:07:e7:2e:31:7c:f4:20:
         e1:9a:7a:c5:2c:bd:8e:7d:9d:86:9e:ea:c0:aa:c9:40:65:bb:
         ad:5d:f1:2a:ef:ad:a5:d5:f9:9d:ce:5c:45:82:fe:43:d2:8d:
         21:4b:1f:43:9b:76:7a:bf:12:a0:90:35:1b:c8:1f:68:d8:89:
         2f:b3:84:84:9b:b6:3a:2c:41:4d:9d:dd:8c:f0:df:ea:62:37:
         d4:97:9c:cb:f5:a3:83:61:75:50:6e:ad:07:dc:60:1b:7b:de:
         71:00:8f:36:59:ba:7a:7d:a7:5e:b9:42:24:fa:2e:c7:cb:91:
         c8:1a:2b:93:52:06:bc:83:13:af:6d:d9:74:ef:56:3f:07:54:
         3f:4a:e3:dc:7d:3d:be:9c:f8:76:e0:c9:77:46:0b:ef:8e:cb:
         bd:00:f5:e4:a6:39:24:3d:63:86:53:e9:1a:91:ed:fa:de:a7:
         8a:63:26:e1:36:43:d8:f6:5f:c4:51:39:28:d5:0a:1e:53:aa:
         3c:c9:46:fe:7b:8f:6b:cb:63:73:6d:0e:db:ee:ec:be:8a:91:
         9c:e6:27:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 11 05:05:54 2025 by rpki-client