Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/17216425-6aa3-4429-b175-86901bb0cb1f/0/3130332e3137362e39392e302f32342d3234203d3e20313439333434.roa
File:                     3130332e3137362e39392e302f32342d3234203d3e20313439333434.roa (raw, json)
Hash identifier:          1SXRbeE4Zo2BpgZYkA81FPjpBzqJO4ahWylO9ct7G/4=
Subject key identifier:   E7:CD:1D:8E:77:E7:A0:F4:24:FC:ED:09:8B:62:66:CC:0E:F9:A2:74
Certificate issuer:       /CN=B247FB55BE5739FCE4EBBD20B84542267C15D192
Certificate serial:       529C29F2DD36F991C6001DE055BA5F384F62B526
Authority key identifier: B2:47:FB:55:BE:57:39:FC:E4:EB:BD:20:B8:45:42:26:7C:15:D1:92
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B247FB55BE5739FCE4EBBD20B84542267C15D192.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/17216425-6aa3-4429-b175-86901bb0cb1f/0/3130332e3137362e39392e302f32342d3234203d3e20313439333434.roa
Signing time:             Tue 18 Mar 2025 16:00:01 +0000
ROA not before:           Tue 18 Mar 2025 15:55:01 +0000
ROA not after:            Tue 17 Mar 2026 16:00:01 +0000
asID:                     149344
IP address blocks:        103.176.99.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/17216425-6aa3-4429-b175-86901bb0cb1f/0/B247FB55BE5739FCE4EBBD20B84542267C15D192.crl
                          rsync://repo-rpki.idnic.net/repo/17216425-6aa3-4429-b175-86901bb0cb1f/0/B247FB55BE5739FCE4EBBD20B84542267C15D192.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B247FB55BE5739FCE4EBBD20B84542267C15D192.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Apr 2025 14:02:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:9c:29:f2:dd:36:f9:91:c6:00:1d:e0:55:ba:5f:38:4f:62:b5:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B247FB55BE5739FCE4EBBD20B84542267C15D192
        Validity
            Not Before: Mar 18 15:55:01 2025 GMT
            Not After : Mar 17 16:00:01 2026 GMT
        Subject: CN=E7CD1D8E77E7A0F424FCED098B6266CC0EF9A274
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:40:87:9f:1d:fc:2c:c4:49:b1:f9:5b:bc:98:
                    84:08:a7:7f:1d:f8:1d:6a:d2:a0:d3:92:e2:a9:78:
                    37:e8:5f:82:00:7f:3d:07:bc:80:a2:d5:d0:59:45:
                    63:28:0c:b7:55:04:f8:e9:46:0b:b0:0a:72:5d:b1:
                    22:df:c3:d8:74:b7:d7:6d:23:ea:7a:ee:c3:42:d6:
                    be:72:74:08:63:23:cc:f8:9b:a4:a6:8c:f0:94:49:
                    ba:cf:30:13:07:99:19:45:8b:f1:4a:52:da:f3:c8:
                    d3:4f:ea:2c:9c:e7:ed:22:34:e2:b1:b5:b2:ef:52:
                    c0:8b:e5:d1:6d:89:be:43:f6:b1:56:97:35:69:c1:
                    94:fe:5b:e4:81:38:7f:31:12:e3:7a:3e:6c:c8:23:
                    b4:29:57:7a:e7:af:6c:65:6d:a3:69:bd:3e:06:66:
                    4f:3a:39:25:ef:49:a9:a2:7b:09:ef:7f:40:12:21:
                    2d:05:f5:68:0a:b2:5c:9f:88:0e:4c:6f:ed:59:81:
                    d0:2d:5a:9b:b1:b0:93:53:38:0f:e6:eb:15:56:09:
                    38:53:82:0e:60:86:db:5c:2b:d5:ba:dc:3f:2c:e8:
                    52:09:0e:1a:be:5d:21:a6:3f:84:dd:1b:de:09:7b:
                    b6:96:44:f6:28:de:49:c3:54:0f:0e:2e:46:ab:15:
                    71:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:CD:1D:8E:77:E7:A0:F4:24:FC:ED:09:8B:62:66:CC:0E:F9:A2:74
            X509v3 Authority Key Identifier:
                keyid:B2:47:FB:55:BE:57:39:FC:E4:EB:BD:20:B8:45:42:26:7C:15:D1:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/17216425-6aa3-4429-b175-86901bb0cb1f/0/B247FB55BE5739FCE4EBBD20B84542267C15D192.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B247FB55BE5739FCE4EBBD20B84542267C15D192.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/17216425-6aa3-4429-b175-86901bb0cb1f/0/3130332e3137362e39392e302f32342d3234203d3e20313439333434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.176.99.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:61:31:77:aa:e3:88:5e:4a:92:bc:58:db:c2:cf:ba:f2:b2:
         ff:37:b7:7c:2f:d4:67:4b:d3:8e:f3:76:39:68:9d:bd:9d:f1:
         0a:41:97:99:70:58:03:be:80:19:34:9b:ed:0f:a6:49:ce:2b:
         8e:ff:aa:43:6d:24:d2:e7:5e:52:75:2e:91:92:62:81:52:a7:
         9f:b1:89:76:84:3a:6a:16:db:c1:04:2d:2e:e9:bf:23:c2:70:
         b3:c3:28:ae:22:0f:27:b6:7d:ae:80:7f:e7:3e:e5:d3:b3:88:
         48:5f:99:a5:a2:87:8e:12:34:52:82:90:47:63:a5:36:2a:59:
         2e:b4:0d:3e:82:4c:51:8a:f2:62:de:83:e4:78:c8:ca:3a:cd:
         f8:86:42:35:c7:7d:f5:7a:96:b8:b6:5b:65:3f:5d:4b:d4:da:
         d2:3e:fa:74:98:12:f2:0a:c3:85:50:ce:54:6f:f9:29:d3:5f:
         d8:4c:3f:78:70:dd:b0:a6:85:12:df:f9:6f:d9:fd:0f:f0:2a:
         c0:f8:0f:e3:ea:b1:ae:3d:c7:e1:a4:c8:84:66:96:0a:7d:f5:
         2a:4f:ef:b1:19:09:ab:d2:36:80:4b:52:08:6e:c9:b6:8d:4b:
         eb:7a:ef:0d:ea:6b:97:29:fd:41:9d:8d:a7:61:e6:1d:2d:1c:
         58:e9:a1:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:54:05 2025 by rpki-client on console.sobornost.net