Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/3130332e3135342e3137382e302f32342d3234203d3e20313331373035.roa
File:                     3130332e3135342e3137382e302f32342d3234203d3e20313331373035.roa (raw, json)
Hash identifier:          dY5S+6E2tTu7kTt3kud9rHyNZ8ICT/4MYY6A5gKdkm0=
Subject key identifier:   58:04:27:45:36:6E:82:48:13:41:B3:7D:C7:00:69:65:A1:9B:98:3D
Certificate issuer:       /CN=0A8E8E063785238467D4AD1F507CC97B30DBB959
Certificate serial:       733EC2618DDCA55A43DA403279B8AC5976D47898
Authority key identifier: 0A:8E:8E:06:37:85:23:84:67:D4:AD:1F:50:7C:C9:7B:30:DB:B9:59
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A8E8E063785238467D4AD1F507CC97B30DBB959.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/3130332e3135342e3137382e302f32342d3234203d3e20313331373035.roa
Signing time:             Fri 16 May 2025 07:00:01 +0000
ROA not before:           Fri 16 May 2025 06:55:01 +0000
ROA not after:            Fri 15 May 2026 07:00:01 +0000
asID:                     131705
IP address blocks:        103.154.178.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/0A8E8E063785238467D4AD1F507CC97B30DBB959.crl
                          rsync://repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/0A8E8E063785238467D4AD1F507CC97B30DBB959.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A8E8E063785238467D4AD1F507CC97B30DBB959.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Jun 2025 03:58:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:3e:c2:61:8d:dc:a5:5a:43:da:40:32:79:b8:ac:59:76:d4:78:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A8E8E063785238467D4AD1F507CC97B30DBB959
        Validity
            Not Before: May 16 06:55:01 2025 GMT
            Not After : May 15 07:00:01 2026 GMT
        Subject: CN=58042745366E82481341B37DC7006965A19B983D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:27:f9:ab:7b:6c:67:81:4c:8a:b8:60:ef:ed:
                    64:4a:7a:3d:ec:3d:ab:e3:20:5f:a4:78:91:29:b3:
                    5a:34:78:b6:54:7d:9d:40:32:87:a3:ad:49:32:21:
                    2c:df:21:0e:4e:36:4a:5c:d9:0f:d0:08:b1:6a:63:
                    29:10:f1:be:93:57:2a:d2:30:c4:09:d7:4f:9b:5b:
                    f7:ca:20:25:ec:1e:54:4d:9d:8d:ae:d3:e6:c2:04:
                    8a:06:a0:59:45:5b:98:3c:be:64:c9:97:04:05:2c:
                    81:90:f0:09:38:8a:9d:da:ae:89:e1:1b:fb:1a:c0:
                    3d:ca:2f:c2:fa:8c:d0:31:0a:e6:68:69:c4:f3:75:
                    5f:15:c2:e1:94:e1:e3:e9:4c:1d:4b:30:14:73:a6:
                    c9:56:36:2f:7c:d1:46:a1:10:b2:48:cb:3d:cd:a5:
                    1d:d5:4b:18:7a:64:1b:e3:93:32:75:87:13:3e:e0:
                    9e:90:97:14:9f:58:2e:4d:04:71:4c:3b:c1:3d:78:
                    55:03:47:e5:39:4e:f6:f3:f7:7d:22:9c:88:15:84:
                    5e:4e:b0:72:eb:51:54:7a:f4:fb:ce:af:63:28:51:
                    a8:ba:9e:aa:5b:06:7b:ea:6e:a5:ab:5a:d5:e7:bd:
                    a4:3c:49:6e:aa:90:17:32:86:8e:b8:4f:ec:05:d8:
                    0d:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:04:27:45:36:6E:82:48:13:41:B3:7D:C7:00:69:65:A1:9B:98:3D
            X509v3 Authority Key Identifier:
                keyid:0A:8E:8E:06:37:85:23:84:67:D4:AD:1F:50:7C:C9:7B:30:DB:B9:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/0A8E8E063785238467D4AD1F507CC97B30DBB959.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A8E8E063785238467D4AD1F507CC97B30DBB959.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/3130332e3135342e3137382e302f32342d3234203d3e20313331373035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.154.178.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:02:51:b7:29:57:bd:97:4a:2c:b0:5a:13:f5:79:77:66:75:
         c9:f8:3a:b7:61:e0:01:fe:1d:56:da:94:27:ab:ec:9d:0b:c6:
         e4:a5:6f:09:a5:b7:75:44:97:1f:02:30:78:1c:41:9a:00:84:
         dd:75:94:19:95:2d:89:7d:d6:88:e3:98:4a:90:2a:59:c8:28:
         32:0c:d2:c3:a4:d4:29:a2:97:94:1a:da:76:c8:14:8d:ee:b6:
         e9:04:eb:e4:c3:c4:f7:f0:2f:b0:ba:a4:f6:62:73:82:98:b4:
         dc:c1:2d:4d:2f:d8:59:5c:82:fa:87:05:0f:48:3e:59:4e:85:
         f8:4f:2e:6d:89:74:b9:fa:67:9d:c6:a1:be:fa:7e:7d:f8:cb:
         c9:9f:5a:34:ef:c8:9c:33:4a:f2:25:58:74:ee:62:c7:11:e0:
         6f:a6:c2:e9:46:bd:44:f3:7d:2e:3f:96:48:8f:b2:bc:a1:8a:
         41:fe:d6:eb:f3:df:57:a7:36:ce:29:df:07:1e:fa:de:65:72:
         00:b5:fd:9b:63:b8:1d:3e:43:76:3f:16:67:0e:be:40:24:92:
         42:1f:62:02:c5:ab:2f:51:0f:9a:4b:16:2d:39:be:81:f1:ed:
         a7:37:19:f5:43:62:d0:d3:3c:09:4d:f1:03:e6:50:a1:d0:cc:
         44:30:66:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:42:02 2025 by rpki-client