Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/2049c210-f365-432f-a7ca-0b5eb86b01c6/0/3230332e37392e32392e302f32342d3234203d3e203435373138.roa
File:                     3230332e37392e32392e302f32342d3234203d3e203435373138.roa (raw, json)
Hash identifier:          ILlvOWLN9Xs8cUbwHU8Z2NUUNxyuB2q6+J4DPU9EvmQ=
Subject key identifier:   9B:DF:9A:B2:D3:17:1A:87:BA:87:3A:04:67:7F:87:0A:A8:83:D9:F4
Certificate issuer:       /CN=E475A8B018BAE58448DDE55D9487442B3BD31D1D
Certificate serial:       4A1D4D408BE1E778AC215694711025C761B6D1BA
Authority key identifier: E4:75:A8:B0:18:BA:E5:84:48:DD:E5:5D:94:87:44:2B:3B:D3:1D:1D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E475A8B018BAE58448DDE55D9487442B3BD31D1D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2049c210-f365-432f-a7ca-0b5eb86b01c6/0/3230332e37392e32392e302f32342d3234203d3e203435373138.roa
Signing time:             Sat 22 Mar 2025 09:00:02 +0000
ROA not before:           Sat 22 Mar 2025 08:55:02 +0000
ROA not after:            Sat 21 Mar 2026 09:00:02 +0000
asID:                     45718
IP address blocks:        203.79.29.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/2049c210-f365-432f-a7ca-0b5eb86b01c6/0/E475A8B018BAE58448DDE55D9487442B3BD31D1D.crl
                          rsync://repo-rpki.idnic.net/repo/2049c210-f365-432f-a7ca-0b5eb86b01c6/0/E475A8B018BAE58448DDE55D9487442B3BD31D1D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E475A8B018BAE58448DDE55D9487442B3BD31D1D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Apr 2025 10:42:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:1d:4d:40:8b:e1:e7:78:ac:21:56:94:71:10:25:c7:61:b6:d1:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E475A8B018BAE58448DDE55D9487442B3BD31D1D
        Validity
            Not Before: Mar 22 08:55:02 2025 GMT
            Not After : Mar 21 09:00:02 2026 GMT
        Subject: CN=9BDF9AB2D3171A87BA873A04677F870AA883D9F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:36:83:4a:97:c9:fd:aa:fc:58:a1:6b:08:b9:
                    0d:45:c6:f2:ec:e7:85:c1:17:75:22:63:0a:f9:1c:
                    d1:7a:0b:68:99:12:4f:87:5e:06:ea:57:d2:08:6e:
                    50:18:8b:cd:e9:b0:5c:d9:68:ff:70:ea:04:35:ab:
                    c4:59:99:3f:05:38:9b:31:33:80:b8:0a:57:86:47:
                    72:df:40:0c:f6:09:1b:d4:60:d5:4f:46:ba:a8:44:
                    a8:da:89:4d:fa:8f:cc:76:41:f6:af:08:b9:e9:0e:
                    50:89:6e:dd:c2:a1:23:2f:4e:5c:79:18:93:0b:1d:
                    96:03:82:24:48:b4:8d:a9:89:44:13:70:6d:2e:a4:
                    aa:b5:ba:33:4b:62:e4:08:38:dd:66:f7:4c:92:03:
                    50:52:45:b3:ee:2d:c8:2d:0a:54:ae:4c:85:8a:2f:
                    f5:70:85:be:7c:a8:9e:80:a0:61:37:e2:50:9c:86:
                    c2:b2:80:c7:b2:de:99:b4:6a:d8:af:df:32:36:15:
                    fe:8b:05:1e:8a:28:50:87:64:2c:19:3c:b6:c4:c6:
                    84:a7:75:cf:a3:60:56:a8:85:d6:e4:4e:4c:0a:d9:
                    b3:fd:db:97:cb:8a:fb:b1:28:5b:72:90:7d:9d:9b:
                    d6:00:e3:dc:a9:d1:3a:e1:dc:95:73:13:f0:0e:10:
                    ae:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:DF:9A:B2:D3:17:1A:87:BA:87:3A:04:67:7F:87:0A:A8:83:D9:F4
            X509v3 Authority Key Identifier:
                keyid:E4:75:A8:B0:18:BA:E5:84:48:DD:E5:5D:94:87:44:2B:3B:D3:1D:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2049c210-f365-432f-a7ca-0b5eb86b01c6/0/E475A8B018BAE58448DDE55D9487442B3BD31D1D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E475A8B018BAE58448DDE55D9487442B3BD31D1D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2049c210-f365-432f-a7ca-0b5eb86b01c6/0/3230332e37392e32392e302f32342d3234203d3e203435373138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.79.29.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:6a:e7:02:26:1a:fb:c0:75:c4:44:5d:7d:aa:0c:78:da:0f:
         e1:0a:b7:a7:7d:ea:9b:ae:d4:bb:a0:bb:58:11:a9:16:3e:83:
         2b:4c:3e:bb:09:e9:bf:b9:3e:8c:e3:5c:5a:de:78:61:5c:d2:
         f9:66:e3:b6:81:76:ea:a1:4f:85:83:74:e2:01:83:26:e0:2c:
         2d:93:6c:32:bc:cf:01:7e:18:52:cd:f3:1d:87:3e:f4:86:bd:
         ff:eb:f5:e2:7c:e4:cb:cb:fe:07:25:a2:84:c9:6f:62:33:ba:
         f6:12:2b:91:f9:a9:d8:85:09:2b:8c:2b:0e:e4:d1:77:fa:14:
         36:b0:41:f4:04:b1:97:de:0c:23:74:81:54:cb:cf:dc:14:83:
         cf:15:5f:9b:95:cb:c6:ac:98:f3:b1:1b:7c:9e:e6:f6:7f:78:
         0f:71:3f:fe:05:af:b0:56:21:a1:c3:ee:c7:0f:16:31:c7:d1:
         34:8a:20:55:fa:8b:0a:b7:45:60:2a:4f:8c:c1:02:64:7e:87:
         8c:e4:b4:7d:9f:a1:8d:3e:ef:1b:38:3c:f8:c1:24:35:c9:ec:
         35:99:44:9a:bb:d1:1e:ae:0f:b6:7d:79:c8:74:48:73:51:24:
         c1:23:fb:dc:0c:1d:57:25:c7:ea:47:e3:0d:9b:5b:90:11:86:
         37:1d:99:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 11:25:12 2025 by rpki-client on console.sobornost.net