Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/f56d0b78-7e81-4a8c-a875-95522b467938/0/3130332e3138352e3131302e302f32342d3234203d3e20313439383832.roa
File:                     3130332e3138352e3131302e302f32342d3234203d3e20313439383832.roa (raw, json)
Hash identifier:          T43mwQraRyi575f86B/bD8SqNqwCu4jo7VbbVp7OBJI=
Subject key identifier:   26:F7:76:BE:51:BE:B9:38:14:93:AD:E3:F6:59:52:27:99:55:CA:F0
Certificate issuer:       /CN=466C942AFFDB262DABF7B65D913F3E9E92C9A0C6
Certificate serial:       534AC888C03E1EB70D0F931E0FE9E22A8B55FDB5
Authority key identifier: 46:6C:94:2A:FF:DB:26:2D:AB:F7:B6:5D:91:3F:3E:9E:92:C9:A0:C6
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/466C942AFFDB262DABF7B65D913F3E9E92C9A0C6.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f56d0b78-7e81-4a8c-a875-95522b467938/0/3130332e3138352e3131302e302f32342d3234203d3e20313439383832.roa
Signing time:             Wed 03 Jul 2024 06:00:01 +0000
ROA not before:           Wed 03 Jul 2024 05:55:01 +0000
ROA not after:            Wed 02 Jul 2025 06:00:01 +0000
asID:                     149882
IP address blocks:        103.185.110.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/f56d0b78-7e81-4a8c-a875-95522b467938/0/466C942AFFDB262DABF7B65D913F3E9E92C9A0C6.crl
                          rsync://repo-rpki.idnic.net/repo/f56d0b78-7e81-4a8c-a875-95522b467938/0/466C942AFFDB262DABF7B65D913F3E9E92C9A0C6.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/466C942AFFDB262DABF7B65D913F3E9E92C9A0C6.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Mar 2025 13:20:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:4a:c8:88:c0:3e:1e:b7:0d:0f:93:1e:0f:e9:e2:2a:8b:55:fd:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=466C942AFFDB262DABF7B65D913F3E9E92C9A0C6
        Validity
            Not Before: Jul  3 05:55:01 2024 GMT
            Not After : Jul  2 06:00:01 2025 GMT
        Subject: CN=26F776BE51BEB9381493ADE3F65952279955CAF0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:84:9e:1b:f1:77:04:9b:75:07:72:c4:fb:bf:
                    25:47:bf:2b:ab:dd:f9:df:4f:0d:f0:6c:43:1f:1c:
                    c3:e0:19:04:6d:2e:1a:d3:63:c8:23:35:e3:7a:ec:
                    be:13:13:1e:9f:77:e4:d7:fe:24:13:06:0d:a1:31:
                    f4:13:2f:08:df:70:a9:a1:af:64:e5:c6:9f:f3:7d:
                    bd:24:65:65:29:f0:de:bd:79:01:de:92:b3:59:d0:
                    35:a3:96:00:44:3f:df:58:c4:ae:30:5f:cb:09:83:
                    cf:53:3d:8b:40:9e:f9:dd:35:39:d5:26:38:8d:0b:
                    25:c2:31:20:4c:85:86:48:d8:3b:ba:db:37:62:bd:
                    df:70:c4:1b:c7:fe:d6:bd:8b:c0:d8:08:a5:77:74:
                    33:74:2c:4d:8f:b0:81:23:a2:e6:68:a3:8a:08:10:
                    7a:ab:23:97:4d:54:83:0f:39:4f:b5:a1:cf:a6:f1:
                    31:66:e0:61:77:38:72:f2:50:fc:28:21:c8:d3:7a:
                    3e:bb:f2:56:b7:df:45:03:75:bd:32:01:4c:02:90:
                    1f:b9:10:18:15:85:90:3d:83:fd:c9:a9:7a:95:b5:
                    0b:17:0f:93:b9:ee:d3:af:fe:ac:fb:f3:59:5c:08:
                    3a:0e:76:59:f4:72:0c:bf:4f:f2:e6:dd:2a:63:8b:
                    08:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:F7:76:BE:51:BE:B9:38:14:93:AD:E3:F6:59:52:27:99:55:CA:F0
            X509v3 Authority Key Identifier:
                keyid:46:6C:94:2A:FF:DB:26:2D:AB:F7:B6:5D:91:3F:3E:9E:92:C9:A0:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f56d0b78-7e81-4a8c-a875-95522b467938/0/466C942AFFDB262DABF7B65D913F3E9E92C9A0C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/466C942AFFDB262DABF7B65D913F3E9E92C9A0C6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f56d0b78-7e81-4a8c-a875-95522b467938/0/3130332e3138352e3131302e302f32342d3234203d3e20313439383832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.185.110.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:d8:f0:40:2f:ea:ec:98:2d:96:88:dc:c7:c2:c6:60:dd:75:
         b8:61:ef:67:a3:71:62:c0:e2:0b:a9:f7:45:6b:98:cd:95:8e:
         0b:ff:cb:45:2a:9f:ce:98:78:63:0e:be:18:7d:85:49:cb:83:
         fc:99:ce:75:fa:2a:6e:58:3e:12:31:69:56:9b:07:0f:74:3e:
         44:0d:d8:f3:e9:3f:df:fd:75:c5:a1:d7:fc:a3:18:60:19:67:
         ff:a0:93:3d:fc:c5:16:0e:47:82:e3:08:e0:53:cc:0d:08:d0:
         d2:2f:b0:22:69:fa:cf:f5:e1:fa:d4:6d:76:f2:77:22:ca:7f:
         79:55:50:ca:6b:4f:29:a7:f7:7b:cb:3a:45:41:bb:7b:6b:6e:
         4b:19:ef:68:9f:d2:04:ef:56:49:db:aa:80:58:42:85:55:b9:
         0b:82:51:78:8a:2d:12:bf:b6:96:74:7a:27:bb:24:49:93:cf:
         cb:a9:db:22:4f:cd:f9:f9:c7:fb:81:86:c3:ed:49:a0:97:6d:
         80:b4:d5:52:26:07:5e:1a:d4:79:f8:61:55:2e:34:d6:e1:f2:
         70:f0:f5:f4:ee:55:03:56:ee:e8:dd:52:eb:91:15:0d:cd:01:
         e5:bf:9a:ec:f8:e3:e2:f8:1a:d3:24:20:99:5e:e9:71:79:87:
         a2:2a:59:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 11 05:06:00 2025 by rpki-client