Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/3130332e37312e382e302f32342d3234203d3e203535363632.roa
File:                     3130332e37312e382e302f32342d3234203d3e203535363632.roa (raw, json)
Hash identifier:          v1lwgCqlxe08nRCwq3Lx4ps146WIDqmds9glA+YHFpk=
Subject key identifier:   27:23:1E:B3:1E:5F:75:3C:FF:AE:43:7A:49:58:68:BE:91:91:8D:D3
Certificate issuer:       /CN=87CE66700720FB0B31EA1EA3295AF636C6F3B2F9
Certificate serial:       17E4CCB659845DB77BFA45F7FDA6311897207422
Authority key identifier: 87:CE:66:70:07:20:FB:0B:31:EA:1E:A3:29:5A:F6:36:C6:F3:B2:F9
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/3130332e37312e382e302f32342d3234203d3e203535363632.roa
Signing time:             Tue 15 Apr 2025 08:02:22 +0000
ROA not before:           Tue 15 Apr 2025 07:57:22 +0000
ROA not after:            Tue 14 Apr 2026 08:02:22 +0000
asID:                     55662
IP address blocks:        103.71.8.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.crl
                          rsync://repo-rpki.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Apr 2025 09:52:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:e4:cc:b6:59:84:5d:b7:7b:fa:45:f7:fd:a6:31:18:97:20:74:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87CE66700720FB0B31EA1EA3295AF636C6F3B2F9
        Validity
            Not Before: Apr 15 07:57:22 2025 GMT
            Not After : Apr 14 08:02:22 2026 GMT
        Subject: CN=27231EB31E5F753CFFAE437A495868BE91918DD3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:07:c5:42:2a:f8:1f:4d:78:27:62:46:9d:85:
                    84:04:d5:c6:42:aa:ca:3a:8a:2f:31:9b:a9:7b:3d:
                    08:e0:67:68:71:cc:b1:2a:d6:a9:4e:f0:22:c1:98:
                    ee:30:5e:ab:0c:e7:5f:25:7a:e8:93:7c:65:3f:13:
                    67:20:53:d3:f4:03:b4:00:c8:32:ac:0d:86:1f:a5:
                    82:73:ca:66:f5:d8:0c:3e:51:45:cb:b0:a3:7e:d5:
                    b3:b2:aa:84:20:3b:02:f1:a7:df:0a:01:72:0b:8b:
                    d9:60:69:7d:ae:d8:67:ec:58:01:24:37:0d:74:b3:
                    b9:82:9f:b9:d8:0d:58:a3:a5:79:ac:b5:a9:ee:27:
                    48:a5:94:d3:9c:64:5c:5c:d4:96:f2:cc:ee:32:98:
                    b2:61:94:15:a2:2d:e0:18:95:34:62:dd:8f:82:8e:
                    ce:d5:24:b8:d1:4b:26:fb:4c:5b:e8:ca:fb:6a:ff:
                    20:10:34:89:53:06:8e:28:87:1b:45:24:37:ba:dc:
                    91:e4:30:e4:70:c1:9e:2f:9a:50:3b:39:a7:7a:8e:
                    77:cf:74:17:0e:32:27:1f:aa:64:4a:1c:29:74:74:
                    27:1f:3a:7a:0d:46:42:a9:89:03:dc:fd:82:ee:e5:
                    39:6d:7a:9f:6b:5c:14:d3:f6:47:42:2a:af:c6:08:
                    a4:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:23:1E:B3:1E:5F:75:3C:FF:AE:43:7A:49:58:68:BE:91:91:8D:D3
            X509v3 Authority Key Identifier:
                keyid:87:CE:66:70:07:20:FB:0B:31:EA:1E:A3:29:5A:F6:36:C6:F3:B2:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/3130332e37312e382e302f32342d3234203d3e203535363632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.71.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:2b:6e:11:69:15:b5:8b:62:56:86:72:06:25:5d:80:03:b9:
         fa:a6:1b:87:06:3e:4f:59:4e:49:33:ae:c5:4d:be:13:e2:1f:
         67:e5:d2:ec:52:03:3a:fb:df:ce:d2:b7:8f:56:3a:71:b8:0b:
         9b:f7:4f:d7:e9:36:d9:9a:c8:54:b1:7f:bd:d3:72:9f:07:4e:
         87:4b:95:81:46:29:47:79:e9:d5:32:a0:a6:0c:90:f4:26:c5:
         17:02:40:67:a9:8a:f6:03:5a:f2:a2:fb:6c:59:92:32:4b:5f:
         be:a1:d0:57:29:1e:a6:b8:aa:ce:cc:22:66:03:ea:5f:b7:c1:
         3a:5b:d7:6b:81:6b:9a:71:41:76:38:73:59:86:64:b1:e7:3b:
         53:7a:09:19:41:fb:21:ce:e8:d6:29:f3:38:e9:af:91:d4:61:
         ea:09:0a:0f:fb:a2:1d:28:c1:0d:80:70:f4:fe:5c:b3:4f:e0:
         e9:fe:3a:8c:6c:95:90:03:7e:ff:5d:3d:b9:b3:ab:7b:4e:78:
         1b:36:6a:73:da:d5:1c:97:b8:0d:52:e8:8a:7d:f7:bb:3e:ca:
         35:a2:38:a4:03:ac:c4:53:f9:cd:63:06:70:c2:67:10:b6:a9:
         46:1a:88:34:d4:8b:1e:b4:96:0d:32:0e:6a:27:96:dd:9e:88:
         48:23:9d:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:37:03 2025 by rpki-client on console.sobornost.net