Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/0f659904-3702-4797-bd1b-447ab8c94e0c/0/3130332e3138392e3136392e302f32342d3234203d3e2039333431.roa
File:                     3130332e3138392e3136392e302f32342d3234203d3e2039333431.roa (raw, json)
Hash identifier:          XLXbrSM75a4OOhdIFSVSWGya3QA7TZER3P7tGhI+wW0=
Subject key identifier:   6E:21:CB:86:F9:C6:E7:53:CA:E7:1A:A6:37:E0:59:47:C8:A3:15:A9
Certificate issuer:       /CN=6FC0C93340FF73593434C8EFFCED8EB31DB08FDA
Certificate serial:       751B477CDBFC9BF5EDECEC0377F9E16E7E6F9F35
Authority key identifier: 6F:C0:C9:33:40:FF:73:59:34:34:C8:EF:FC:ED:8E:B3:1D:B0:8F:DA
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/0f659904-3702-4797-bd1b-447ab8c94e0c/0/3130332e3138392e3136392e302f32342d3234203d3e2039333431.roa
Signing time:             Wed 16 Apr 2025 08:00:01 +0000
ROA not before:           Wed 16 Apr 2025 07:55:01 +0000
ROA not after:            Wed 15 Apr 2026 08:00:01 +0000
asID:                     9341
IP address blocks:        103.189.169.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/0f659904-3702-4797-bd1b-447ab8c94e0c/0/6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.crl
                          rsync://repo-rpki.idnic.net/repo/0f659904-3702-4797-bd1b-447ab8c94e0c/0/6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Apr 2025 20:52:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:1b:47:7c:db:fc:9b:f5:ed:ec:ec:03:77:f9:e1:6e:7e:6f:9f:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6FC0C93340FF73593434C8EFFCED8EB31DB08FDA
        Validity
            Not Before: Apr 16 07:55:01 2025 GMT
            Not After : Apr 15 08:00:01 2026 GMT
        Subject: CN=6E21CB86F9C6E753CAE71AA637E05947C8A315A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:22:d3:cc:4a:c6:21:fd:73:38:e0:b8:cd:ff:
                    97:c3:1c:da:da:19:38:ee:d3:ed:12:27:cc:ba:82:
                    9f:3c:b5:35:98:58:26:49:71:47:3e:8d:b7:b9:05:
                    9c:84:55:ea:d4:80:d2:f0:67:01:89:d1:c4:40:97:
                    cd:ea:72:5d:54:18:1e:95:b5:a7:6b:2f:98:0e:31:
                    d0:90:ca:c4:23:05:cd:fe:43:bb:99:01:4b:a4:70:
                    9e:bc:9a:f6:86:b0:65:1f:b2:0e:69:63:20:a0:af:
                    70:14:cb:1b:79:91:86:6e:ff:85:ac:be:63:df:f0:
                    9b:06:2e:a7:1d:1f:92:59:74:ef:cd:eb:8b:47:f1:
                    e7:3c:a7:e8:59:8b:76:57:81:3f:46:1c:4d:4c:3e:
                    68:e1:96:6b:c4:f2:9a:ab:84:cc:76:f5:dd:be:88:
                    11:fc:63:e6:7b:59:2d:9c:49:6c:ee:2b:0a:64:ce:
                    cb:88:2c:21:26:c5:34:df:25:d9:24:98:34:60:29:
                    c9:12:d5:9c:71:e6:03:ab:11:ce:de:16:68:bc:cf:
                    3f:f7:5e:97:5a:65:a8:59:2a:3e:de:f3:df:10:c3:
                    9a:5d:20:e7:df:56:94:e4:6c:91:3b:a0:a2:d0:30:
                    04:d7:9f:25:1c:d7:be:de:7f:28:4f:97:79:e5:08:
                    e4:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:21:CB:86:F9:C6:E7:53:CA:E7:1A:A6:37:E0:59:47:C8:A3:15:A9
            X509v3 Authority Key Identifier:
                keyid:6F:C0:C9:33:40:FF:73:59:34:34:C8:EF:FC:ED:8E:B3:1D:B0:8F:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/0f659904-3702-4797-bd1b-447ab8c94e0c/0/6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0f659904-3702-4797-bd1b-447ab8c94e0c/0/3130332e3138392e3136392e302f32342d3234203d3e2039333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.189.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:93:fd:0a:62:79:3e:9d:c8:eb:81:48:dd:8f:bc:e7:51:b7:
         db:8b:50:61:86:88:ab:3f:3a:f4:e4:55:ac:ae:98:5c:a0:b4:
         e1:2f:4b:2d:67:cf:28:70:5f:4f:06:1b:53:2a:1f:58:71:a0:
         e1:50:8f:5d:68:dc:30:a7:66:bf:41:90:6f:6a:9d:bb:a1:e3:
         a2:24:59:93:40:4d:f3:f3:5a:7e:be:e2:0d:3b:27:10:25:39:
         a2:a6:14:0f:bc:92:25:91:fc:cb:27:0f:46:3b:ef:e4:1a:af:
         e9:5e:ea:22:3b:48:6b:0a:f2:42:bf:81:f5:ac:92:f1:5e:82:
         7c:6f:12:c1:ae:66:c7:94:79:f8:29:ba:6e:7d:ce:81:d6:78:
         38:60:b4:2e:37:e4:b0:26:b2:ad:3d:5b:c2:5e:19:35:02:65:
         7d:97:b9:70:55:cc:dd:f2:c2:b5:b3:22:60:dc:c0:2c:e6:50:
         1e:fe:9e:a8:a4:30:98:13:58:48:59:e5:a3:c5:8f:ac:c6:df:
         68:22:97:bc:81:58:c4:e2:c1:2a:f6:df:bc:8e:0e:c1:14:c6:
         d4:26:5f:87:ad:69:47:3c:e9:75:32:9d:22:1b:8a:e5:dc:ac:
         0e:2c:94:d4:f2:5f:63:a7:76:44:7b:16:94:ef:05:83:4d:30:
         58:bd:09:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:02:21 2025 by rpki-client on console.sobornost.net