Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/b8993a93-5889-4e02-9e95-769cb89e0035/0/3130332e3139342e34362e302f32332d3233203d3e20313439393731.roa
File:                     3130332e3139342e34362e302f32332d3233203d3e20313439393731.roa (raw, json)
Hash identifier:          qGWFSgLLJyliy4tuTPo/36VY8oY9Xuwl0QaLpSpVJjk=
Subject key identifier:   CC:41:0D:88:C4:7C:46:0E:19:BF:FE:75:A5:B0:EB:E1:65:44:2A:0C
Certificate issuer:       /CN=4F679A207D2588B709C82CDAB000736182F881E1
Certificate serial:       41158DE51DF37D426B558A68FFA3747DA0AA2F26
Authority key identifier: 4F:67:9A:20:7D:25:88:B7:09:C8:2C:DA:B0:00:73:61:82:F8:81:E1
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F679A207D2588B709C82CDAB000736182F881E1.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/b8993a93-5889-4e02-9e95-769cb89e0035/0/3130332e3139342e34362e302f32332d3233203d3e20313439393731.roa
Signing time:             Thu 08 May 2025 05:38:40 +0000
ROA not before:           Thu 08 May 2025 05:33:40 +0000
ROA not after:            Thu 07 May 2026 05:38:40 +0000
asID:                     149971
IP address blocks:        103.194.46.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/b8993a93-5889-4e02-9e95-769cb89e0035/0/4F679A207D2588B709C82CDAB000736182F881E1.crl
                          rsync://repo-rpki.idnic.net/repo/b8993a93-5889-4e02-9e95-769cb89e0035/0/4F679A207D2588B709C82CDAB000736182F881E1.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F679A207D2588B709C82CDAB000736182F881E1.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 15 May 2025 10:15:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:15:8d:e5:1d:f3:7d:42:6b:55:8a:68:ff:a3:74:7d:a0:aa:2f:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F679A207D2588B709C82CDAB000736182F881E1
        Validity
            Not Before: May  8 05:33:40 2025 GMT
            Not After : May  7 05:38:40 2026 GMT
        Subject: CN=CC410D88C47C460E19BFFE75A5B0EBE165442A0C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:b4:4d:bb:d9:d7:f5:32:09:4a:50:ca:c7:ec:
                    76:6f:1d:c1:79:65:0b:bb:18:cb:f3:b4:c4:d4:65:
                    c6:04:b7:69:1c:72:35:a8:b9:77:6e:77:26:45:57:
                    ac:d0:99:0d:8e:a2:eb:0e:d1:af:4c:66:b1:3f:ac:
                    0d:45:a1:3d:b0:a1:55:08:db:6f:50:b2:db:78:4f:
                    ba:aa:bc:f4:19:f7:67:7d:a0:a7:9e:02:90:8b:93:
                    5d:a5:d4:9c:fe:44:fa:4d:08:dc:ba:46:e7:2d:42:
                    02:c6:18:fa:3a:78:49:64:a9:cc:0e:cc:e9:2d:ee:
                    cf:07:ce:fc:d6:af:43:41:84:75:2d:66:7e:43:78:
                    5c:ec:1c:ed:9f:a5:08:d9:f8:a9:92:0e:25:08:e7:
                    a7:2f:f8:7b:44:c6:49:4b:c0:af:96:c7:8d:46:0d:
                    7c:50:b7:59:59:98:ab:5b:13:f8:c1:81:d0:be:32:
                    03:22:33:a2:40:13:36:44:e6:e5:14:39:95:dc:c0:
                    84:f8:10:09:3e:90:9b:4c:6f:e2:19:8a:0a:a8:49:
                    e5:b8:e8:b6:b3:d8:f3:13:a0:9d:ed:e5:1e:a2:19:
                    73:b8:45:18:23:e1:89:38:92:6b:ed:f1:87:3c:b8:
                    a4:33:2a:d1:8d:db:9b:5f:ed:ca:a9:25:94:42:a1:
                    35:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:41:0D:88:C4:7C:46:0E:19:BF:FE:75:A5:B0:EB:E1:65:44:2A:0C
            X509v3 Authority Key Identifier:
                keyid:4F:67:9A:20:7D:25:88:B7:09:C8:2C:DA:B0:00:73:61:82:F8:81:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/b8993a93-5889-4e02-9e95-769cb89e0035/0/4F679A207D2588B709C82CDAB000736182F881E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F679A207D2588B709C82CDAB000736182F881E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b8993a93-5889-4e02-9e95-769cb89e0035/0/3130332e3139342e34362e302f32332d3233203d3e20313439393731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.194.46.0/23

    Signature Algorithm: sha256WithRSAEncryption
         06:59:66:38:d6:ed:a1:81:58:49:93:49:8a:64:4c:b7:1f:10:
         39:0c:72:65:a6:bd:12:ad:30:07:0d:02:f4:78:87:2f:d3:eb:
         e0:c7:80:1e:a0:70:aa:a0:c4:ac:bd:67:af:37:2e:4d:c0:49:
         e8:e7:81:35:d6:78:6b:b8:2d:73:04:d6:91:10:35:6b:e9:44:
         fd:1d:98:25:dd:b9:2a:73:53:72:0b:94:f7:db:5f:b9:1b:bf:
         be:05:6f:5a:29:57:7e:ce:1f:06:1c:a3:f2:89:4c:5a:90:a4:
         7b:94:69:47:6a:7e:d8:01:e4:af:e6:55:a7:08:9c:d8:b5:e7:
         87:2c:60:a5:b5:ed:69:f8:b7:a3:d2:0c:5f:11:35:83:02:33:
         7d:3a:c5:6e:18:7f:6b:f0:81:52:e8:ee:32:9b:0d:6f:4f:13:
         65:3a:33:6b:cd:c5:58:20:24:5e:44:1a:e5:4b:26:14:71:59:
         eb:7b:61:88:c0:22:03:e4:8f:12:0f:77:de:14:b0:39:61:08:
         bd:8d:40:dc:3d:9b:73:27:e1:ae:d5:95:79:f7:aa:29:05:14:
         1e:ed:88:55:d8:03:d7:e4:53:88:07:4a:3f:91:b9:4e:4c:0b:
         28:5c:f5:5e:9b:04:b7:4f:14:25:65:ea:8e:45:0c:28:7a:3a:
         c4:aa:21:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 18:40:52 2025 by rpki-client