Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3589f643-37bc-4ffb-9529-401e4b6ef675/0/3130332e37302e39322e302f32332d3234203d3e20313338303634.roa
File:                     3130332e37302e39322e302f32332d3234203d3e20313338303634.roa (raw, json)
Hash identifier:          TA4sXIkX/1vgSRuW9l2sSfoKt1o5FCsmy++oilBd+h0=
Subject key identifier:   73:2F:B0:61:08:32:E0:A3:3C:EE:82:85:22:C2:1C:67:B7:92:34:34
Certificate issuer:       /CN=6189E4F67BE53DF65282F8E1BB63165CCA784862
Certificate serial:       73E495AF35C256584A1E04130FAC1BD8A11D5981
Authority key identifier: 61:89:E4:F6:7B:E5:3D:F6:52:82:F8:E1:BB:63:16:5C:CA:78:48:62
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6189E4F67BE53DF65282F8E1BB63165CCA784862.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3589f643-37bc-4ffb-9529-401e4b6ef675/0/3130332e37302e39322e302f32332d3234203d3e20313338303634.roa
Signing time:             Wed 02 Apr 2025 22:02:21 +0000
ROA not before:           Wed 02 Apr 2025 21:57:21 +0000
ROA not after:            Wed 01 Apr 2026 22:02:21 +0000
asID:                     138064
IP address blocks:        103.70.92.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/3589f643-37bc-4ffb-9529-401e4b6ef675/0/6189E4F67BE53DF65282F8E1BB63165CCA784862.crl
                          rsync://repo-rpki.idnic.net/repo/3589f643-37bc-4ffb-9529-401e4b6ef675/0/6189E4F67BE53DF65282F8E1BB63165CCA784862.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6189E4F67BE53DF65282F8E1BB63165CCA784862.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 May 2025 08:35:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:e4:95:af:35:c2:56:58:4a:1e:04:13:0f:ac:1b:d8:a1:1d:59:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6189E4F67BE53DF65282F8E1BB63165CCA784862
        Validity
            Not Before: Apr  2 21:57:21 2025 GMT
            Not After : Apr  1 22:02:21 2026 GMT
        Subject: CN=732FB0610832E0A33CEE828522C21C67B7923434
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:ae:37:72:fa:3f:d5:1c:08:5a:56:64:2f:e7:
                    46:77:f3:91:0c:ea:08:6c:ac:6a:09:dd:3b:27:f8:
                    95:a3:1f:c8:8c:c6:ae:7c:5f:64:cd:41:63:2e:ef:
                    2c:8d:b4:fb:3f:a3:b6:68:ac:8d:b2:6e:d8:15:4a:
                    43:77:2f:5a:ca:be:d8:e2:6c:03:4b:44:7b:88:93:
                    35:60:c3:e3:16:3b:e0:97:13:c0:3a:17:03:d3:af:
                    59:fe:57:a0:7f:d3:b5:f9:77:19:f8:4c:97:3e:d6:
                    be:07:53:9f:14:89:5c:e3:c3:b5:76:9e:a3:ae:34:
                    91:52:ba:65:e1:8c:6d:28:5c:3f:61:fd:e5:7b:0d:
                    a1:73:8e:26:f3:dc:eb:11:dd:6b:1a:82:df:64:56:
                    5b:24:ff:cf:ad:a5:37:75:7e:78:24:1b:da:e8:68:
                    1c:b6:4c:5f:f6:ba:13:b4:e7:c5:57:f6:8e:97:bb:
                    6e:54:0f:5a:fb:f0:8b:97:8a:96:f0:79:db:09:4f:
                    d1:83:08:07:c2:0e:c6:9b:65:ab:2b:d1:cd:a8:04:
                    d9:14:bb:ef:ee:0e:09:99:29:e9:23:75:af:8b:bb:
                    75:8a:d2:a4:0e:4b:48:37:46:a9:bb:04:4b:da:ea:
                    b5:c8:10:1f:27:08:01:9e:de:b2:a3:11:63:19:c2:
                    48:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:2F:B0:61:08:32:E0:A3:3C:EE:82:85:22:C2:1C:67:B7:92:34:34
            X509v3 Authority Key Identifier:
                keyid:61:89:E4:F6:7B:E5:3D:F6:52:82:F8:E1:BB:63:16:5C:CA:78:48:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3589f643-37bc-4ffb-9529-401e4b6ef675/0/6189E4F67BE53DF65282F8E1BB63165CCA784862.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6189E4F67BE53DF65282F8E1BB63165CCA784862.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3589f643-37bc-4ffb-9529-401e4b6ef675/0/3130332e37302e39322e302f32332d3234203d3e20313338303634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.70.92.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a8:14:6b:1e:35:55:38:e1:c5:a4:c3:99:ed:bb:df:8b:14:02:
         06:dc:5d:25:16:f6:09:42:ba:69:31:fc:e2:a2:20:8b:89:3a:
         02:81:e5:61:43:e0:e2:0d:81:42:37:9c:26:12:0a:41:17:40:
         c8:96:86:15:a2:9a:27:3f:ab:e4:9a:c1:4a:9e:85:02:4b:07:
         46:21:e9:29:2f:59:02:52:93:2d:df:c4:c6:15:23:20:17:ea:
         9f:ce:2c:09:30:04:1b:8a:09:71:9d:a2:75:86:db:9a:70:cc:
         51:0e:1e:1e:40:89:f6:eb:fd:15:0b:a0:8d:0d:2b:5f:f8:80:
         2c:25:6c:cf:ce:0c:7b:6b:b9:e2:a1:c1:af:ba:5a:68:ae:3d:
         78:3a:f3:41:4e:71:a1:c8:81:a9:de:e6:bc:44:2a:ad:2e:17:
         31:8e:e9:5c:b0:82:42:43:c5:29:53:7f:ee:73:53:9d:b3:e1:
         50:8a:04:09:39:3e:e8:12:3e:db:33:08:f7:b2:0e:d5:19:e5:
         50:67:37:cd:f1:b6:e8:b0:14:dc:1e:6d:19:01:27:87:ff:2d:
         0d:21:e0:dd:b8:2d:f0:51:55:5b:9a:13:b3:aa:e8:3d:65:13:
         f8:dc:ca:a3:15:ee:0c:5a:e5:0a:b2:cd:ca:35:24:d9:bf:99:
         59:5e:68:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 05:58:47 2025 by rpki-client on console.sobornost.net