Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/34322e36322e3137382e302f32342d3234203d3e203535363930.roa
File:                     34322e36322e3137382e302f32342d3234203d3e203535363930.roa (raw, json)
Hash identifier:          pyuYjl7HJM3OX8EabIWp5/TJB6k8ueJKEta6KCZ5rHA=
Subject key identifier:   C9:64:88:17:E4:8E:71:92:BA:92:AC:E0:15:2C:3D:92:87:B8:F4:41
Certificate issuer:       /CN=A0DE21A035CF601BCBD9D5C98BD47DD95F993464
Certificate serial:       69F17D786373FD38EE8B6E4F0798900C38C0B429
Authority key identifier: A0:DE:21:A0:35:CF:60:1B:CB:D9:D5:C9:8B:D4:7D:D9:5F:99:34:64
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0DE21A035CF601BCBD9D5C98BD47DD95F993464.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/34322e36322e3137382e302f32342d3234203d3e203535363930.roa
Signing time:             Tue 11 Mar 2025 11:02:23 +0000
ROA not before:           Tue 11 Mar 2025 10:57:23 +0000
ROA not after:            Tue 10 Mar 2026 11:02:23 +0000
asID:                     55690
IP address blocks:        42.62.178.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/A0DE21A035CF601BCBD9D5C98BD47DD95F993464.crl
                          rsync://repo-rpki.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/A0DE21A035CF601BCBD9D5C98BD47DD95F993464.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0DE21A035CF601BCBD9D5C98BD47DD95F993464.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Apr 2025 17:18:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:f1:7d:78:63:73:fd:38:ee:8b:6e:4f:07:98:90:0c:38:c0:b4:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A0DE21A035CF601BCBD9D5C98BD47DD95F993464
        Validity
            Not Before: Mar 11 10:57:23 2025 GMT
            Not After : Mar 10 11:02:23 2026 GMT
        Subject: CN=C9648817E48E7192BA92ACE0152C3D9287B8F441
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:82:4f:55:e6:47:4c:b7:c7:96:01:d1:02:c0:
                    c3:a7:e0:b4:20:01:be:f5:fd:7b:1d:b8:23:f3:4b:
                    ec:f1:44:c4:46:fb:69:1c:35:5e:3c:55:f9:dc:03:
                    27:37:c7:3e:c1:43:c9:6f:ee:d5:2f:eb:f1:31:fb:
                    af:2b:ab:49:27:bc:89:02:cb:3f:f7:d5:41:f8:03:
                    2a:96:b5:45:e8:21:0a:c8:8e:5b:c3:d5:45:2b:47:
                    bd:ea:b5:ba:a7:6d:3e:97:b6:ef:25:e1:f1:aa:8d:
                    84:d0:bd:3f:c2:b5:f5:d3:1c:ae:e6:f0:cd:f4:aa:
                    57:59:c5:63:f7:ac:f9:b6:a7:30:80:74:31:a0:5e:
                    68:22:ae:a1:0b:ca:a3:09:23:47:77:7d:8d:9d:4b:
                    c0:90:bc:84:1d:a7:15:4f:75:b9:21:f1:be:30:d8:
                    fe:64:a8:42:3f:09:02:5d:14:b7:85:c5:75:17:f4:
                    53:c0:3b:91:a4:4d:55:2f:ce:68:b4:71:61:64:06:
                    29:fa:c5:e6:6a:04:2e:28:2d:dd:6d:bb:8d:d8:a1:
                    f4:96:d8:a7:dc:15:c3:cc:1a:26:f1:ce:b7:a4:45:
                    52:31:ef:80:c6:46:ad:3c:94:a2:59:f2:78:0a:f1:
                    7a:b5:6b:00:11:12:c4:f9:f8:4e:a3:a0:fb:20:0c:
                    35:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:64:88:17:E4:8E:71:92:BA:92:AC:E0:15:2C:3D:92:87:B8:F4:41
            X509v3 Authority Key Identifier:
                keyid:A0:DE:21:A0:35:CF:60:1B:CB:D9:D5:C9:8B:D4:7D:D9:5F:99:34:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/A0DE21A035CF601BCBD9D5C98BD47DD95F993464.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0DE21A035CF601BCBD9D5C98BD47DD95F993464.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/34322e36322e3137382e302f32342d3234203d3e203535363930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  42.62.178.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ab:2c:75:16:e4:33:7c:da:5b:b7:fa:2d:02:6b:86:a2:47:55:
         36:58:0b:59:86:e1:be:2b:db:c4:24:5c:f0:15:8a:82:8a:75:
         5e:13:6a:4e:cc:67:a6:8e:54:75:a6:07:bd:ef:65:ea:54:ed:
         af:db:5c:d4:88:84:7b:3d:8b:98:59:97:ba:16:03:32:3c:53:
         e2:2c:0e:21:a2:4d:37:92:a4:ce:04:8a:3f:91:b7:c3:0a:c2:
         a4:68:98:18:c6:a5:44:bb:dd:ab:95:1f:55:cc:6f:07:4c:2c:
         49:e1:45:cf:71:56:7c:93:de:e2:6c:03:af:3a:e5:b5:39:f3:
         fe:fe:54:9e:d7:73:b7:73:45:7e:8d:4b:80:06:41:5f:9b:e1:
         b8:fe:3d:57:21:53:7a:6f:7c:b9:60:79:51:29:47:74:8f:77:
         81:07:60:f5:6e:33:47:c8:6d:bd:37:3d:b2:da:af:74:2e:a5:
         97:ce:50:42:38:f7:50:e4:0b:44:f1:6b:95:c2:6e:11:f6:d0:
         07:be:52:40:eb:df:91:0c:6e:98:88:9a:1e:a2:04:54:4c:35:
         0d:72:2f:e3:92:dd:a9:76:a6:80:9e:32:ee:76:ec:57:23:22:
         c4:fd:cf:3d:d2:34:41:ed:94:8a:b5:6c:b9:c5:49:9d:47:8c:
         56:df:32:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 15:50:03 2025 by rpki-client on console.sobornost.net