Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/ecdae0a5-b4f6-4e08-8beb-63ebe0853df3/0/3130332e34302e39322e302f32332d3233203d3e203633353034.roa
File:                     3130332e34302e39322e302f32332d3233203d3e203633353034.roa (raw, json)
Hash identifier:          SFyP6dQXcZeCfICHfcQqBzkquUF0rSVZjhOo/oTB3lM=
Subject key identifier:   04:76:17:97:69:D0:53:DB:CD:98:2B:01:C5:C1:3D:1E:08:88:EA:1F
Certificate issuer:       /CN=B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC
Certificate serial:       43FDBE3F71E22B9D9C920CC461BF84CF03F9C2FB
Authority key identifier: B8:A9:E4:5E:7E:2D:EA:66:24:14:0C:03:DE:02:5D:16:B9:1C:B9:DC
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ecdae0a5-b4f6-4e08-8beb-63ebe0853df3/0/3130332e34302e39322e302f32332d3233203d3e203633353034.roa
Signing time:             Tue 06 May 2025 06:00:02 +0000
ROA not before:           Tue 06 May 2025 05:55:02 +0000
ROA not after:            Tue 05 May 2026 06:00:02 +0000
asID:                     63504
IP address blocks:        103.40.92.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ecdae0a5-b4f6-4e08-8beb-63ebe0853df3/0/B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC.crl
                          rsync://repo-rpki.idnic.net/repo/ecdae0a5-b4f6-4e08-8beb-63ebe0853df3/0/B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 15 May 2025 18:34:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:fd:be:3f:71:e2:2b:9d:9c:92:0c:c4:61:bf:84:cf:03:f9:c2:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC
        Validity
            Not Before: May  6 05:55:02 2025 GMT
            Not After : May  5 06:00:02 2026 GMT
        Subject: CN=0476179769D053DBCD982B01C5C13D1E0888EA1F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:a7:ed:bd:f3:39:4b:a7:c7:b8:e5:e5:a5:b1:
                    dc:a3:7a:b0:7d:3a:a0:86:fc:3f:74:56:6f:c1:58:
                    09:37:48:ab:62:f8:bc:3b:84:25:80:71:ca:47:a6:
                    74:32:73:88:1e:23:f1:a5:89:24:19:95:ec:66:d8:
                    71:7e:df:fb:a4:ed:71:f4:b8:36:f3:98:cf:a3:54:
                    7f:2f:e6:62:22:51:a1:2b:6d:b5:2a:61:6a:22:ad:
                    79:9d:08:a1:11:31:3c:ce:be:98:d7:40:e1:73:52:
                    ae:c7:fb:c7:dd:70:dd:0c:ca:33:ba:d6:23:4d:2e:
                    2b:ce:a4:e1:ef:76:55:70:80:03:99:9b:30:00:e8:
                    85:35:eb:93:c5:ec:2d:39:4b:4b:29:1d:3c:f3:9d:
                    1d:d7:b9:fb:69:a7:87:c0:4a:d1:ed:2d:35:dd:57:
                    49:a5:94:16:ca:77:58:0c:c7:8b:5d:a1:4a:d1:70:
                    22:75:91:3d:d0:25:73:11:96:45:68:3f:3b:c7:35:
                    00:56:49:fd:d7:a1:7b:90:c8:63:5f:2e:c3:ea:0a:
                    9c:f3:7e:9e:f5:55:c0:92:d8:bd:f9:46:29:93:50:
                    9b:a1:5a:49:d4:62:33:f3:6f:f1:42:ac:01:74:f0:
                    6d:8a:2e:62:90:10:5b:ed:43:8b:42:3c:6b:81:a2:
                    36:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:76:17:97:69:D0:53:DB:CD:98:2B:01:C5:C1:3D:1E:08:88:EA:1F
            X509v3 Authority Key Identifier:
                keyid:B8:A9:E4:5E:7E:2D:EA:66:24:14:0C:03:DE:02:5D:16:B9:1C:B9:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ecdae0a5-b4f6-4e08-8beb-63ebe0853df3/0/B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ecdae0a5-b4f6-4e08-8beb-63ebe0853df3/0/3130332e34302e39322e302f32332d3233203d3e203633353034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.40.92.0/23

    Signature Algorithm: sha256WithRSAEncryption
         af:33:b3:59:36:ac:38:07:a4:1d:b7:ec:c4:0a:4a:a8:c2:a9:
         a9:53:9f:84:36:86:88:33:03:5b:1f:17:18:8a:84:b3:f2:6d:
         b9:8a:46:0a:5f:aa:04:63:ba:b3:3a:5d:56:96:fe:ab:27:60:
         32:29:ae:49:06:cd:9e:3b:d8:64:bf:0a:4a:97:89:35:c7:80:
         c6:c2:43:94:95:78:1b:7a:42:63:85:a0:10:ff:82:71:54:69:
         c5:05:04:29:c1:86:96:f2:5e:67:33:d4:ad:c0:ea:c9:4e:ae:
         54:df:da:f2:15:b2:44:ac:94:3a:83:42:76:41:f1:f9:9d:33:
         18:3f:e3:38:bb:a5:22:b0:1e:75:2f:e0:32:f7:26:9b:a8:4f:
         c9:48:f2:79:b3:28:fc:43:77:33:06:dc:23:7b:44:95:57:9c:
         d0:64:32:bf:8c:e4:27:72:e1:10:05:06:36:a9:07:59:a7:6a:
         14:4d:a7:59:ba:ab:27:fd:03:47:64:ce:f3:76:26:c4:6b:9b:
         14:1f:3c:e0:a8:e1:10:50:9d:7a:75:29:b6:c5:2a:8c:3e:ad:
         f0:a2:82:41:e8:c3:02:24:d5:54:ff:19:c6:1d:43:dc:ad:ea:
         05:8e:43:0c:24:50:a6:2e:4e:56:34:27:7d:93:b6:65:7e:8c:
         8c:24:a9:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 13:25:54 2025 by rpki-client