Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/05e603e3-f23e-4c6a-bb3c-06409d65c838/0/3130332e3136362e302e302f32342d3234203d3e20313431393238.roa
File:                     3130332e3136362e302e302f32342d3234203d3e20313431393238.roa (raw, json)
Hash identifier:          meaRs6wyk1QjNIKGW41CEEaArTRNShkA67gAO4asuCg=
Subject key identifier:   D4:ED:23:4F:35:AB:8F:9B:AB:F7:4A:1B:0D:0A:07:CF:05:77:0E:4F
Certificate issuer:       /CN=011400263413DE61A797AA22B58664ACD84FD8DF
Certificate serial:       184881B6AF7375E45DBE7873F1B81029CE94D276
Authority key identifier: 01:14:00:26:34:13:DE:61:A7:97:AA:22:B5:86:64:AC:D8:4F:D8:DF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/011400263413DE61A797AA22B58664ACD84FD8DF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/05e603e3-f23e-4c6a-bb3c-06409d65c838/0/3130332e3136362e302e302f32342d3234203d3e20313431393238.roa
Signing time:             Wed 12 Mar 2025 13:00:02 +0000
ROA not before:           Wed 12 Mar 2025 12:55:02 +0000
ROA not after:            Wed 11 Mar 2026 13:00:02 +0000
asID:                     141928
IP address blocks:        103.166.0.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/05e603e3-f23e-4c6a-bb3c-06409d65c838/0/011400263413DE61A797AA22B58664ACD84FD8DF.crl
                          rsync://repo-rpki.idnic.net/repo/05e603e3-f23e-4c6a-bb3c-06409d65c838/0/011400263413DE61A797AA22B58664ACD84FD8DF.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/011400263413DE61A797AA22B58664ACD84FD8DF.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Apr 2025 02:10:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:48:81:b6:af:73:75:e4:5d:be:78:73:f1:b8:10:29:ce:94:d2:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=011400263413DE61A797AA22B58664ACD84FD8DF
        Validity
            Not Before: Mar 12 12:55:02 2025 GMT
            Not After : Mar 11 13:00:02 2026 GMT
        Subject: CN=D4ED234F35AB8F9BABF74A1B0D0A07CF05770E4F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:7a:39:e2:90:49:bf:5d:fa:fc:25:3c:a9:5e:
                    12:ed:0a:6e:92:2c:6f:46:ed:5b:e5:d6:30:a4:7c:
                    ed:c8:ee:62:3e:a0:a8:84:cd:f8:b3:36:98:d7:1d:
                    90:6c:26:3a:b2:d8:65:18:dd:9a:3b:e9:bc:88:43:
                    92:86:e5:8e:dc:91:cc:de:7a:01:1e:8c:50:11:f3:
                    42:9a:4c:e4:77:3b:04:0f:19:e6:37:d0:a0:01:31:
                    4e:ec:1f:67:f1:2a:22:26:04:b0:01:ad:85:99:0f:
                    e0:ad:3b:ee:27:70:7c:10:47:0e:05:11:fa:0b:3c:
                    6d:61:92:8c:9b:14:f1:68:e4:86:14:0b:3a:00:9b:
                    76:cb:67:6b:6b:43:0d:a6:a0:4a:61:31:80:28:52:
                    fc:2a:13:e0:b0:83:6b:e2:a3:78:06:3b:96:8d:12:
                    1a:b3:0f:dd:6b:cf:f3:e9:e7:7a:cc:99:f3:70:8d:
                    ff:20:5b:dc:8f:a3:39:24:43:19:9f:92:04:65:65:
                    44:61:6f:16:cd:2a:52:0e:73:df:b1:0d:0c:19:4f:
                    70:f5:65:e9:10:cc:27:92:ef:84:61:7c:4a:b5:ba:
                    57:ed:62:3b:5d:44:3a:c4:4d:04:a8:5d:f1:3e:76:
                    60:98:e9:88:8d:78:56:82:98:05:73:f7:ad:a6:eb:
                    e2:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:ED:23:4F:35:AB:8F:9B:AB:F7:4A:1B:0D:0A:07:CF:05:77:0E:4F
            X509v3 Authority Key Identifier:
                keyid:01:14:00:26:34:13:DE:61:A7:97:AA:22:B5:86:64:AC:D8:4F:D8:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/05e603e3-f23e-4c6a-bb3c-06409d65c838/0/011400263413DE61A797AA22B58664ACD84FD8DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/011400263413DE61A797AA22B58664ACD84FD8DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/05e603e3-f23e-4c6a-bb3c-06409d65c838/0/3130332e3136362e302e302f32342d3234203d3e20313431393238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.166.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:73:73:39:62:b3:42:e8:2d:7e:27:bc:e8:22:7d:40:4c:71:
         f2:19:dc:36:3c:d4:46:c1:55:a6:3e:66:91:96:6e:c1:0d:18:
         2a:63:64:ab:8d:9a:99:f2:86:74:e9:8b:df:c0:d7:98:6d:06:
         b2:05:d7:74:73:b6:74:60:ee:50:bc:94:fe:9d:fc:59:a1:87:
         95:8d:f5:29:a1:8e:b4:46:80:4d:a8:ee:65:9e:ea:4b:ae:fe:
         db:22:dc:c5:35:35:a4:e3:e7:f3:07:86:1a:8f:09:98:30:68:
         a8:09:16:d1:fd:23:9e:49:8c:b8:14:a8:cb:1c:da:f2:9a:3c:
         9c:f2:65:eb:52:ce:f0:cb:24:ef:4c:52:ae:8a:49:07:6d:97:
         f3:16:ec:42:3f:d1:78:5d:dd:1b:d0:2f:ec:7e:9d:09:73:03:
         d1:6c:f7:97:f2:c0:20:53:2c:4a:64:1f:f6:bc:e7:23:47:bc:
         a8:78:f7:95:51:fa:4a:88:e9:62:24:91:fe:55:81:ad:6c:1c:
         bc:5a:4c:6d:ac:aa:15:fc:3e:65:c1:f1:25:eb:0e:5d:8a:9d:
         bc:cc:60:39:5d:90:76:e0:0f:32:64:fb:7d:cc:b9:3b:c7:67:
         7a:dc:99:5a:36:9c:19:8a:9d:06:b3:d9:25:ac:ad:32:1a:97:
         2e:00:75:14
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUGEiBtq9zdeRdvnhz8bgQKc6U0nYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDExNDAwMjYzNDEzREU2MUE3OTdBQTIyQjU4NjY0QUNE
ODRGRDhERjAeFw0yNTAzMTIxMjU1MDJaFw0yNjAzMTExMzAwMDJaMDMxMTAvBgNV
BAMTKEQ0RUQyMzRGMzVBQjhGOUJBQkY3NEExQjBEMEEwN0NGMDU3NzBFNEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiejnikEm/Xfr8JTypXhLtCm6S
LG9G7Vvl1jCkfO3I7mI+oKiEzfizNpjXHZBsJjqy2GUY3Zo76byIQ5KG5Y7ckcze
egEejFAR80KaTOR3OwQPGeY30KABMU7sH2fxKiImBLABrYWZD+CtO+4ncHwQRw4F
EfoLPG1hkoybFPFo5IYUCzoAm3bLZ2trQw2moEphMYAoUvwqE+Cwg2vio3gGO5aN
EhqzD91rz/Pp53rMmfNwjf8gW9yPozkkQxmfkgRlZURhbxbNKlIOc9+xDQwZT3D1
ZekQzCeS74RhfEq1ulftYjtdRDrETQSoXfE+dmCY6YiNeFaCmAVz962m6+IZAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQU1O0jTzWrj5ur90obDQoHzwV3Dk8wHwYDVR0j
BBgwFoAUARQAJjQT3mGnl6oitYZkrNhP2N8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w
NWU2MDNlMy1mMjNlLTRjNmEtYmIzYy0wNjQwOWQ2NWM4MzgvMC8wMTE0MDAyNjM0
MTNERTYxQTc5N0FBMjJCNTg2NjRBQ0Q4NEZEOERGLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMDExNDAwMjYzNDEzREU2MUE3OTdBQTIyQjU4NjY0QUNEODRG
RDhERi5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzA1ZTYwM2UzLWYyM2UtNGM2YS1i
YjNjLTA2NDA5ZDY1YzgzOC8wLzMxMzAzMzJlMzEzNjM2MmUzMDJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDMxMzQzMTM5MzIzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGemADANBgkqhkiG
9w0BAQsFAAOCAQEADHNzOWKzQugtfie86CJ9QExx8hncNjzURsFVpj5mkZZuwQ0Y
KmNkq42amfKGdOmL38DXmG0GsgXXdHO2dGDuULyU/p38WaGHlY31KaGOtEaATaju
ZZ7qS67+2yLcxTU1pOPn8weGGo8JmDBoqAkW0f0jnkmMuBSoyxza8po8nPJl61LO
8Msk70xSropJB22X8xbsQj/ReF3dG9Av7H6dCXMD0Wz3l/LAIFMsSmQf9rznI0e8
qHj3lVH6SojpYiSR/lWBrWwcvFpMbayqFfw+ZcHxJesOXYqdvMxgOV2QduAPMmT7
fcy5O8dnetyZWjacGYqdBrPZJaytMhqXLgB1FA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 04:31:37 2025 by rpki-client on console.sobornost.net