Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/16c1c529-6244-4503-af56-69459e4a760f/0/3130332e3135382e3136332e302f32342d3234203d3e203137393935.roa
File:                     3130332e3135382e3136332e302f32342d3234203d3e203137393935.roa (raw, json)
Hash identifier:          4RAEHcKydfbmdG7JZ2oBClEPFrTNelxiK32dkCNM718=
Subject key identifier:   5B:BF:86:7B:43:07:0F:41:45:41:C3:1F:1A:1E:69:E5:CC:A1:30:9F
Certificate issuer:       /CN=A398FBDF357790C7DC67C6D92A15A3D4617558A6
Certificate serial:       3D24B440D688AEFA4801BDEFD73074C480A4F77C
Authority key identifier: A3:98:FB:DF:35:77:90:C7:DC:67:C6:D9:2A:15:A3:D4:61:75:58:A6
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A398FBDF357790C7DC67C6D92A15A3D4617558A6.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/16c1c529-6244-4503-af56-69459e4a760f/0/3130332e3135382e3136332e302f32342d3234203d3e203137393935.roa
Signing time:             Wed 09 Apr 2025 10:02:03 +0000
ROA not before:           Wed 09 Apr 2025 09:57:03 +0000
ROA not after:            Wed 08 Apr 2026 10:02:03 +0000
asID:                     17995
IP address blocks:        103.158.163.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/16c1c529-6244-4503-af56-69459e4a760f/0/A398FBDF357790C7DC67C6D92A15A3D4617558A6.crl
                          rsync://repo-rpki.idnic.net/repo/16c1c529-6244-4503-af56-69459e4a760f/0/A398FBDF357790C7DC67C6D92A15A3D4617558A6.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A398FBDF357790C7DC67C6D92A15A3D4617558A6.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Apr 2025 20:52:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:24:b4:40:d6:88:ae:fa:48:01:bd:ef:d7:30:74:c4:80:a4:f7:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A398FBDF357790C7DC67C6D92A15A3D4617558A6
        Validity
            Not Before: Apr  9 09:57:03 2025 GMT
            Not After : Apr  8 10:02:03 2026 GMT
        Subject: CN=5BBF867B43070F414541C31F1A1E69E5CCA1309F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:99:d6:07:ef:a4:1a:97:9d:21:6f:00:74:8f:
                    db:0b:69:32:3e:00:cf:f9:87:5b:83:f4:58:7b:91:
                    f5:9c:bc:fa:cc:79:5d:74:4d:fd:1c:a4:e9:f6:81:
                    40:54:2b:5c:89:c4:1b:8f:45:80:d3:e5:d7:2d:71:
                    7e:77:61:e8:99:9d:67:57:09:c2:e1:91:f2:8c:62:
                    db:ab:74:36:93:c0:96:06:bb:10:b3:30:b0:29:34:
                    8f:9f:e6:1c:f0:a5:1e:5c:f2:97:5a:01:41:f6:e6:
                    b6:bc:55:6b:3e:99:60:2b:61:3c:c0:68:a5:00:62:
                    25:51:30:92:95:dd:82:92:85:9f:44:d0:7b:c5:d8:
                    41:ca:7b:9b:29:da:0e:9a:e2:7f:34:f2:a1:4b:38:
                    d0:99:8f:e0:92:4b:74:5e:9c:32:66:b6:b6:46:80:
                    20:9d:77:04:eb:f8:f2:6d:26:ad:b6:2d:ec:bb:23:
                    bd:39:40:c7:1a:d8:0f:e7:63:12:46:1b:2c:8a:b0:
                    52:d4:3f:61:1f:2c:a8:0b:43:c6:24:f1:ea:b7:55:
                    e3:57:0e:69:98:d5:0e:84:bf:d4:99:f1:80:77:fa:
                    91:e4:35:a9:e5:60:7b:ca:be:44:9b:21:38:65:78:
                    f7:63:0e:0c:10:95:be:21:8e:80:73:8d:ac:4c:1c:
                    d2:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:BF:86:7B:43:07:0F:41:45:41:C3:1F:1A:1E:69:E5:CC:A1:30:9F
            X509v3 Authority Key Identifier:
                keyid:A3:98:FB:DF:35:77:90:C7:DC:67:C6:D9:2A:15:A3:D4:61:75:58:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/16c1c529-6244-4503-af56-69459e4a760f/0/A398FBDF357790C7DC67C6D92A15A3D4617558A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A398FBDF357790C7DC67C6D92A15A3D4617558A6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/16c1c529-6244-4503-af56-69459e4a760f/0/3130332e3135382e3136332e302f32342d3234203d3e203137393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.158.163.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b7:44:36:20:6b:35:f0:96:f2:80:31:6b:31:f4:61:76:54:00:
         cc:2c:52:24:b8:bf:ea:1a:05:e4:4e:5a:5f:00:78:0c:bd:2e:
         b1:3c:66:c7:3f:8e:ab:b1:90:32:39:16:ea:85:76:62:ad:6a:
         04:96:5b:b0:39:9c:67:ea:41:38:78:f8:f0:b7:65:4b:ab:72:
         cd:04:be:66:a1:2f:1c:0a:5b:57:89:6c:fe:29:e8:a4:87:f8:
         1d:9d:f6:ff:e9:e6:81:7b:87:b9:c8:03:4f:55:86:02:55:cc:
         b7:eb:3a:81:0c:0e:e9:f4:11:fd:a3:b4:67:5c:1f:a0:2a:0f:
         4a:c0:4f:5d:fa:ce:36:33:f0:e0:17:a8:25:e6:e9:0e:28:5e:
         3c:cf:a5:ec:49:7c:ba:b1:bb:31:ea:20:bc:0f:17:9a:58:24:
         a5:4d:38:f8:04:24:0f:f2:14:e7:05:7b:c5:e2:8d:2e:e5:aa:
         47:be:af:e7:41:34:49:50:71:1a:85:66:91:5b:48:07:1a:ed:
         7b:2b:df:f2:4c:33:43:6b:46:05:c4:d2:e7:31:fc:92:44:df:
         07:51:cb:0d:69:d4:a2:62:a0:83:f2:2b:03:8f:f7:dd:b1:d4:
         1d:74:27:5b:4a:eb:04:20:bb:8a:b2:44:1f:c7:52:fb:b0:d2:
         ca:25:49:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:02:21 2025 by rpki-client on console.sobornost.net