Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c2b0bdd5-6e30-4a10-b993-77d48251f3a1/0/3130332e3139302e3131352e302f32342d3234203d3e203435333035.roa
File:                     3130332e3139302e3131352e302f32342d3234203d3e203435333035.roa (raw, json)
Hash identifier:          dEnaKQdLZdizpCqpcJnXth7f6FKcdGy1/gEWNghJ+nU=
Subject key identifier:   01:62:2F:13:C3:D8:7E:92:33:8D:F7:A6:01:A2:98:07:C7:73:EE:F5
Certificate issuer:       /CN=8B237B2BC0581B556DD5B4B0847F9C83408BA93D
Certificate serial:       518874160FDFF443BEF2F58A0EECA8740329F500
Authority key identifier: 8B:23:7B:2B:C0:58:1B:55:6D:D5:B4:B0:84:7F:9C:83:40:8B:A9:3D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B237B2BC0581B556DD5B4B0847F9C83408BA93D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c2b0bdd5-6e30-4a10-b993-77d48251f3a1/0/3130332e3139302e3131352e302f32342d3234203d3e203435333035.roa
Signing time:             Fri 02 May 2025 01:00:02 +0000
ROA not before:           Fri 02 May 2025 00:55:02 +0000
ROA not after:            Fri 01 May 2026 01:00:02 +0000
asID:                     45305
IP address blocks:        103.190.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c2b0bdd5-6e30-4a10-b993-77d48251f3a1/0/8B237B2BC0581B556DD5B4B0847F9C83408BA93D.crl
                          rsync://repo-rpki.idnic.net/repo/c2b0bdd5-6e30-4a10-b993-77d48251f3a1/0/8B237B2BC0581B556DD5B4B0847F9C83408BA93D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B237B2BC0581B556DD5B4B0847F9C83408BA93D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 09 May 2025 21:48:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:88:74:16:0f:df:f4:43:be:f2:f5:8a:0e:ec:a8:74:03:29:f5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B237B2BC0581B556DD5B4B0847F9C83408BA93D
        Validity
            Not Before: May  2 00:55:02 2025 GMT
            Not After : May  1 01:00:02 2026 GMT
        Subject: CN=01622F13C3D87E92338DF7A601A29807C773EEF5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ec:9f:97:04:7d:d9:5a:ed:1c:8d:ee:81:db:
                    2e:a7:fa:d1:7a:48:15:2a:7f:e7:a0:0c:69:89:5b:
                    d2:3a:3b:01:8d:b8:5f:7f:33:89:0d:15:73:95:48:
                    04:bd:9b:78:29:63:c9:07:0a:86:6d:a2:6d:ba:af:
                    d8:68:ba:f8:f4:ae:ae:f3:89:8b:99:bb:da:6e:47:
                    87:30:8c:06:77:77:54:13:db:4c:5a:11:7c:37:b7:
                    dd:dc:0f:18:88:07:64:13:a4:34:bd:47:7f:1a:d6:
                    fd:1f:3a:97:97:ff:6d:d3:04:67:ef:aa:ce:88:5d:
                    cc:94:fe:ef:08:17:34:a2:ae:ce:d5:ad:40:9e:ff:
                    c2:f7:2c:57:cd:55:fe:09:1b:68:07:26:f1:5b:20:
                    bb:4c:f7:b9:55:9e:11:cf:90:48:c4:6d:73:fa:c2:
                    76:b5:92:66:09:ac:9b:b7:d2:29:56:a6:b9:7c:60:
                    e5:f5:df:8a:4b:7c:0e:1c:db:1e:97:a0:15:a0:16:
                    5e:8a:a3:a4:f4:3b:76:00:5c:fd:2b:3c:6d:75:45:
                    7b:32:ac:ce:e2:7d:46:26:b5:b7:76:8e:cb:9c:e5:
                    00:04:5f:c2:73:48:96:44:7d:1d:f8:35:c7:81:52:
                    9d:f8:81:3b:33:46:c8:bc:f5:a8:9c:c6:65:83:04:
                    b1:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:62:2F:13:C3:D8:7E:92:33:8D:F7:A6:01:A2:98:07:C7:73:EE:F5
            X509v3 Authority Key Identifier:
                keyid:8B:23:7B:2B:C0:58:1B:55:6D:D5:B4:B0:84:7F:9C:83:40:8B:A9:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c2b0bdd5-6e30-4a10-b993-77d48251f3a1/0/8B237B2BC0581B556DD5B4B0847F9C83408BA93D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B237B2BC0581B556DD5B4B0847F9C83408BA93D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c2b0bdd5-6e30-4a10-b993-77d48251f3a1/0/3130332e3139302e3131352e302f32342d3234203d3e203435333035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.190.115.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:8f:bd:43:74:52:49:a7:bf:d7:23:62:ba:58:7d:16:b3:d4:
         79:32:73:93:46:3a:db:76:36:c4:cc:c5:bd:dd:82:2b:34:1e:
         a8:f8:b0:11:93:23:90:e0:9a:6c:3f:cc:5a:f7:2f:f0:00:f2:
         62:58:c2:b9:59:a4:b6:76:84:51:1c:b1:37:e8:58:89:92:14:
         31:11:b4:26:06:6b:ee:ac:47:e2:9c:e4:a9:34:c1:95:70:f2:
         8d:88:2d:b9:80:1c:58:b6:87:b7:56:98:f9:1d:94:20:fe:c7:
         d7:ef:8d:30:5e:d0:a4:be:89:2b:e0:0b:42:ee:74:e9:f4:0c:
         72:78:db:0f:52:e0:c2:10:f2:85:02:08:ae:16:97:8d:d1:78:
         b4:d4:2b:f7:c2:74:80:d1:52:e3:66:98:e2:45:ea:d4:cb:cc:
         6c:35:46:e1:17:38:54:ca:c6:3b:16:a2:8f:77:96:97:8d:30:
         77:13:4d:0c:4e:3c:22:d5:38:3b:a8:0e:77:37:f0:43:14:f6:
         32:48:30:16:08:bc:a8:ab:51:de:d4:f8:e0:f2:27:db:df:b4:
         45:06:75:c9:53:74:07:8d:91:59:bf:d8:07:ec:a3:f4:b0:30:
         45:73:f1:9b:69:6b:f0:1b:3c:13:01:25:c1:00:73:50:ce:69:
         1e:c0:bd:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 21:22:35 2025 by rpki-client