Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/20c171f4-bd11-48ed-87f0-27ea1209064f/0/3130332e3135392e36322e302f32342d3234203d3e20313431353931.roa
File:                     3130332e3135392e36322e302f32342d3234203d3e20313431353931.roa (raw, json)
Hash identifier:          Ss0eIh55eF1+18NBRc56XTthBY2pyra5MKG9X4X5KfE=
Subject key identifier:   DD:77:64:93:C9:50:B8:AC:0D:AB:4F:A2:33:D7:21:2D:00:72:EE:89
Certificate issuer:       /CN=AE4002B7E92AF59C76E7F8BE4B349193F05481B1
Certificate serial:       5831CD44B2808E2B607D8743DC54F7F8FA20187A
Authority key identifier: AE:40:02:B7:E9:2A:F5:9C:76:E7:F8:BE:4B:34:91:93:F0:54:81:B1
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE4002B7E92AF59C76E7F8BE4B349193F05481B1.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/20c171f4-bd11-48ed-87f0-27ea1209064f/0/3130332e3135392e36322e302f32342d3234203d3e20313431353931.roa
Signing time:             Wed 16 Apr 2025 11:00:05 +0000
ROA not before:           Wed 16 Apr 2025 10:55:05 +0000
ROA not after:            Wed 15 Apr 2026 11:00:05 +0000
asID:                     141591
IP address blocks:        103.159.62.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/20c171f4-bd11-48ed-87f0-27ea1209064f/0/AE4002B7E92AF59C76E7F8BE4B349193F05481B1.crl
                          rsync://repo-rpki.idnic.net/repo/20c171f4-bd11-48ed-87f0-27ea1209064f/0/AE4002B7E92AF59C76E7F8BE4B349193F05481B1.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE4002B7E92AF59C76E7F8BE4B349193F05481B1.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Apr 2025 17:56:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:31:cd:44:b2:80:8e:2b:60:7d:87:43:dc:54:f7:f8:fa:20:18:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE4002B7E92AF59C76E7F8BE4B349193F05481B1
        Validity
            Not Before: Apr 16 10:55:05 2025 GMT
            Not After : Apr 15 11:00:05 2026 GMT
        Subject: CN=DD776493C950B8AC0DAB4FA233D7212D0072EE89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:54:df:57:4b:d0:6a:d6:a7:1e:95:fa:af:42:
                    f5:2b:3f:f9:9e:4e:2e:e2:63:57:7c:94:cf:8f:b8:
                    77:86:60:ed:f7:c6:a6:24:b9:08:34:f6:24:37:2c:
                    a3:6f:db:b9:f0:f6:ce:56:90:0c:28:7d:15:4a:01:
                    b2:1b:a1:cd:d7:15:55:a1:4a:c9:a3:79:47:e5:7e:
                    78:b8:7a:43:5e:d4:74:92:09:ea:85:10:78:99:07:
                    6f:c0:a5:a7:63:d6:56:3e:20:41:fc:e4:d3:b7:cf:
                    97:6b:dd:9e:61:cf:3b:37:d0:86:1c:e7:95:62:a9:
                    6d:38:56:ad:7c:68:3c:e1:b5:3b:8c:93:f0:98:44:
                    d2:06:da:c8:63:08:c0:64:57:5b:1d:92:fe:46:a0:
                    e0:c3:59:fb:74:52:4e:a1:5f:9f:42:05:82:94:06:
                    1b:ae:91:7b:4e:b3:00:89:6b:5e:01:d1:78:bb:7b:
                    cf:39:bf:ad:7d:c0:7a:aa:fb:81:94:49:84:60:28:
                    02:04:14:43:1c:b5:89:5e:d6:fc:5f:a7:5b:8b:fe:
                    f0:23:08:3b:56:47:84:1a:63:19:1c:71:a7:5d:eb:
                    82:23:1a:90:af:4e:b0:9a:63:0e:be:08:05:3c:d1:
                    24:f0:db:50:4d:d3:7b:61:fa:24:ae:19:88:b0:3a:
                    ff:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:77:64:93:C9:50:B8:AC:0D:AB:4F:A2:33:D7:21:2D:00:72:EE:89
            X509v3 Authority Key Identifier:
                keyid:AE:40:02:B7:E9:2A:F5:9C:76:E7:F8:BE:4B:34:91:93:F0:54:81:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/20c171f4-bd11-48ed-87f0-27ea1209064f/0/AE4002B7E92AF59C76E7F8BE4B349193F05481B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE4002B7E92AF59C76E7F8BE4B349193F05481B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/20c171f4-bd11-48ed-87f0-27ea1209064f/0/3130332e3135392e36322e302f32342d3234203d3e20313431353931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.159.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:28:cb:6a:89:ba:8b:e3:04:cc:46:8a:1f:0d:88:b8:f8:f6:
         1a:fb:e9:28:52:56:73:ba:ca:bf:56:ed:1f:cc:f7:f5:5e:27:
         7f:cc:40:5a:bb:9d:e7:8b:e3:9b:a5:1d:ec:bd:f8:27:67:f4:
         30:96:47:5b:38:38:b9:4b:b3:0a:2a:ab:77:d6:83:d4:80:a8:
         22:ab:a3:e9:5d:d3:e4:2d:00:5f:a5:bc:92:97:76:3d:c3:f0:
         ca:1a:5e:1f:b5:86:12:50:fa:66:d1:d3:87:06:6d:cb:61:d4:
         bf:b3:42:0e:ac:4c:6d:3b:3e:89:da:1c:51:83:7c:33:56:af:
         8e:1c:9b:bc:84:b7:98:65:23:41:ed:fb:77:83:6a:36:b0:a1:
         c4:c2:02:58:89:38:db:43:6d:2c:df:6c:d0:c2:a5:5b:5f:95:
         34:80:70:67:b3:8f:89:8c:f1:ac:de:a9:76:aa:a3:cc:21:d4:
         3c:2e:b3:0c:a4:76:36:4a:37:05:46:a2:c8:07:33:db:6d:54:
         c9:94:13:9c:53:cc:61:16:2b:35:67:cd:eb:d0:fe:db:fe:3e:
         f6:1c:be:38:b8:df:b0:64:21:98:90:24:46:2a:a7:02:94:44:
         d9:54:df:e0:b0:20:66:c2:cf:ea:a6:52:3c:80:69:cb:b9:04:
         0f:0a:ce:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 17:11:50 2025 by rpki-client on console.sobornost.net