Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/f56d0b78-7e81-4a8c-a875-95522b467938/0/3130332e3138352e3131302e302f32332d3233203d3e20313439383832.roa
File:                     3130332e3138352e3131302e302f32332d3233203d3e20313439383832.roa (raw, json)
Hash identifier:          ud1p/krhRE3733a1j5mqZ8KrI1sOH5O1a7m3DIDez2o=
Subject key identifier:   46:90:42:A3:27:E6:18:80:2E:0A:DB:8D:16:CC:C0:03:2C:8D:BF:08
Certificate issuer:       /CN=466C942AFFDB262DABF7B65D913F3E9E92C9A0C6
Certificate serial:       0AA5737002B10C9E692A45C94D32C8D9CACB85AA
Authority key identifier: 46:6C:94:2A:FF:DB:26:2D:AB:F7:B6:5D:91:3F:3E:9E:92:C9:A0:C6
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/466C942AFFDB262DABF7B65D913F3E9E92C9A0C6.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f56d0b78-7e81-4a8c-a875-95522b467938/0/3130332e3138352e3131302e302f32332d3233203d3e20313439383832.roa
Signing time:             Wed 04 Jun 2025 06:01:52 +0000
ROA not before:           Wed 04 Jun 2025 05:56:52 +0000
ROA not after:            Wed 03 Jun 2026 06:01:52 +0000
asID:                     149882
IP address blocks:        103.185.110.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/f56d0b78-7e81-4a8c-a875-95522b467938/0/466C942AFFDB262DABF7B65D913F3E9E92C9A0C6.crl
                          rsync://repo-rpki.idnic.net/repo/f56d0b78-7e81-4a8c-a875-95522b467938/0/466C942AFFDB262DABF7B65D913F3E9E92C9A0C6.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/466C942AFFDB262DABF7B65D913F3E9E92C9A0C6.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Jun 2025 06:19:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:a5:73:70:02:b1:0c:9e:69:2a:45:c9:4d:32:c8:d9:ca:cb:85:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=466C942AFFDB262DABF7B65D913F3E9E92C9A0C6
        Validity
            Not Before: Jun  4 05:56:52 2025 GMT
            Not After : Jun  3 06:01:52 2026 GMT
        Subject: CN=469042A327E618802E0ADB8D16CCC0032C8DBF08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:dc:07:0d:e7:a3:17:d7:7b:a1:89:95:a9:4c:
                    1d:62:d6:5a:51:74:12:65:f5:45:2e:9a:f9:c9:0d:
                    3e:97:52:9b:89:22:3e:07:21:35:35:8b:f7:3e:cb:
                    ae:83:3d:cf:4f:a0:fa:b0:20:78:38:3c:22:cb:12:
                    51:b6:1b:0f:5b:13:d9:21:fb:4b:91:c5:24:f2:00:
                    f1:18:69:b0:28:01:20:7e:3d:b4:e2:cb:78:14:1b:
                    d9:7a:54:a1:d6:65:48:94:ad:a5:80:37:1e:3e:89:
                    62:ae:a8:66:df:77:e7:82:be:06:6b:51:e5:cb:7a:
                    f7:35:9c:02:3a:b6:88:13:c6:9e:b2:08:dc:4f:75:
                    56:4d:9b:98:6a:cc:15:34:30:eb:a6:d1:40:0b:8b:
                    7e:db:13:75:7d:f8:51:5b:8b:80:ed:ad:0a:0c:7d:
                    e6:6a:98:42:e7:48:00:6e:d9:cb:9c:88:74:f3:b7:
                    29:8f:7e:31:98:e0:25:65:8c:3f:99:82:cf:80:b8:
                    f2:d6:99:42:f0:55:4e:a0:08:0e:eb:4d:ff:eb:23:
                    d3:b0:1d:1d:78:6a:e0:44:f7:df:27:83:88:89:34:
                    26:4a:08:1c:76:48:35:37:e6:b5:68:b3:9f:9f:6e:
                    59:9b:94:6b:db:71:d2:29:6f:c0:9b:83:3e:91:3b:
                    ff:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:90:42:A3:27:E6:18:80:2E:0A:DB:8D:16:CC:C0:03:2C:8D:BF:08
            X509v3 Authority Key Identifier:
                keyid:46:6C:94:2A:FF:DB:26:2D:AB:F7:B6:5D:91:3F:3E:9E:92:C9:A0:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f56d0b78-7e81-4a8c-a875-95522b467938/0/466C942AFFDB262DABF7B65D913F3E9E92C9A0C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/466C942AFFDB262DABF7B65D913F3E9E92C9A0C6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f56d0b78-7e81-4a8c-a875-95522b467938/0/3130332e3138352e3131302e302f32332d3233203d3e20313439383832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.185.110.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b3:25:df:bf:f7:fb:de:1a:4a:61:18:34:9c:20:61:96:49:8c:
         25:39:25:ba:c2:d1:c6:59:a5:48:e1:1d:29:8e:ad:52:1f:67:
         0f:1a:2a:7b:93:87:46:2b:ee:bf:9c:36:e2:05:51:54:cc:32:
         19:27:a6:cb:84:1f:17:1d:62:70:4a:27:7e:7b:7e:2c:60:de:
         91:a6:cb:ad:9f:2b:24:9b:72:2b:da:7b:7f:5b:00:04:6a:91:
         32:f4:17:24:f7:5f:bf:b0:20:61:48:29:80:b5:d9:74:69:0d:
         06:e8:3c:1d:00:33:92:02:5d:14:e8:13:d4:ed:49:08:ef:68:
         bf:df:43:d2:f9:82:a8:8b:10:ad:49:fc:73:c7:d1:87:ed:5f:
         bf:38:9a:6a:2b:aa:ac:8e:98:a3:f7:75:c4:39:57:fa:e2:54:
         3e:31:ed:d6:02:23:78:be:a7:7e:c4:8c:68:4e:e4:0b:b4:6c:
         bd:25:47:14:82:39:2e:b6:a7:b9:e3:5a:54:5a:69:4c:56:67:
         43:c4:d4:a0:30:a7:63:8f:7a:b1:a2:9d:d2:72:b2:3c:a7:03:
         63:eb:f9:66:92:c8:94:84:ba:b9:3a:be:7b:39:98:40:95:b4:
         e9:12:26:a4:73:ed:f7:8e:95:99:37:ef:1b:ce:a6:ce:9a:a2:
         54:b2:80:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:30:07 2025 by rpki-client