Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3e57d543-baf0-4348-8857-3d2601c3a803/0/3130332e33392e37302e302f32342d3234203d3e20313530323734.roa
File:                     3130332e33392e37302e302f32342d3234203d3e20313530323734.roa (raw, json)
Hash identifier:          n9HiNkJ52DbLxZISXERFZtFdqx3265M08OZ/zKtOVYU=
Subject key identifier:   CC:A3:D3:CD:F9:13:91:C1:1E:6C:80:27:6C:73:34:2C:66:57:E5:87
Certificate issuer:       /CN=9FFC46BAA3F19522AF5BDD60DF7DE92E94F5AB7B
Certificate serial:       7DEA180E8231B530F917CF94BC320D9C996F79CE
Authority key identifier: 9F:FC:46:BA:A3:F1:95:22:AF:5B:DD:60:DF:7D:E9:2E:94:F5:AB:7B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FFC46BAA3F19522AF5BDD60DF7DE92E94F5AB7B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3e57d543-baf0-4348-8857-3d2601c3a803/0/3130332e33392e37302e302f32342d3234203d3e20313530323734.roa
Signing time:             Thu 20 Feb 2025 04:02:49 +0000
ROA not before:           Thu 20 Feb 2025 03:57:49 +0000
ROA not after:            Thu 19 Feb 2026 04:02:49 +0000
asID:                     150274
IP address blocks:        103.39.70.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/3e57d543-baf0-4348-8857-3d2601c3a803/0/9FFC46BAA3F19522AF5BDD60DF7DE92E94F5AB7B.crl
                          rsync://repo-rpki.idnic.net/repo/3e57d543-baf0-4348-8857-3d2601c3a803/0/9FFC46BAA3F19522AF5BDD60DF7DE92E94F5AB7B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FFC46BAA3F19522AF5BDD60DF7DE92E94F5AB7B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Apr 2025 20:52:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:ea:18:0e:82:31:b5:30:f9:17:cf:94:bc:32:0d:9c:99:6f:79:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9FFC46BAA3F19522AF5BDD60DF7DE92E94F5AB7B
        Validity
            Not Before: Feb 20 03:57:49 2025 GMT
            Not After : Feb 19 04:02:49 2026 GMT
        Subject: CN=CCA3D3CDF91391C11E6C80276C73342C6657E587
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:d0:f8:c6:2e:19:17:63:d6:60:99:64:0c:27:
                    b3:fa:fd:b5:fb:35:a9:83:bc:8b:8f:8e:7b:7f:a4:
                    d5:9e:ae:b3:5c:ae:64:21:3a:27:a5:b4:ca:02:04:
                    78:6b:35:df:33:e5:53:5d:19:3f:83:05:5f:86:5c:
                    ed:01:80:ef:67:0c:9c:dd:a3:31:d6:c9:e3:74:19:
                    bc:1e:b5:ef:ff:df:cf:dd:e0:d7:8e:84:a9:26:3e:
                    7e:72:ee:79:38:6e:97:0d:60:6d:4a:d3:7c:7d:ed:
                    e4:61:03:6a:5b:1a:91:30:82:e7:ff:6e:02:0b:30:
                    e0:a9:6b:a5:80:71:06:91:9a:46:0b:b8:66:d9:18:
                    9a:7a:00:6a:90:73:93:e8:d3:97:07:5f:ba:0b:ba:
                    e5:31:c9:34:f0:5c:11:76:3e:b6:ec:84:9a:3d:ae:
                    15:66:03:56:06:61:53:61:ee:cc:5a:d0:25:32:1d:
                    8b:38:06:65:6f:de:f2:43:d0:c6:25:b6:f6:a0:33:
                    bd:b7:e6:61:10:1e:02:a1:f4:79:38:29:f6:84:a3:
                    18:08:25:47:a5:c3:24:ad:0e:32:c1:97:2c:91:67:
                    e2:f0:6e:43:36:dd:62:f8:f9:43:13:f7:fb:1f:c3:
                    54:10:1e:fa:ba:f0:02:5a:aa:b7:f8:f4:4f:17:bd:
                    db:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:A3:D3:CD:F9:13:91:C1:1E:6C:80:27:6C:73:34:2C:66:57:E5:87
            X509v3 Authority Key Identifier:
                keyid:9F:FC:46:BA:A3:F1:95:22:AF:5B:DD:60:DF:7D:E9:2E:94:F5:AB:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3e57d543-baf0-4348-8857-3d2601c3a803/0/9FFC46BAA3F19522AF5BDD60DF7DE92E94F5AB7B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FFC46BAA3F19522AF5BDD60DF7DE92E94F5AB7B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3e57d543-baf0-4348-8857-3d2601c3a803/0/3130332e33392e37302e302f32342d3234203d3e20313530323734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.39.70.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:67:e7:3b:a5:7d:20:e1:3a:4d:72:91:12:47:a2:f0:08:c8:
         e2:d8:1e:93:5c:e1:32:ba:55:78:b3:3d:4f:ae:6f:50:8b:ee:
         9c:44:85:06:15:0d:d4:1e:85:13:67:95:56:25:2a:11:12:cf:
         f6:f1:7b:a5:53:f9:c3:63:34:2c:1e:3b:aa:8e:5b:ea:ab:3c:
         ee:b6:e1:86:2d:f3:62:96:26:4e:7d:83:7d:38:75:b5:6d:30:
         1e:a0:19:5a:7d:c3:8c:08:2f:4e:bd:68:5b:87:45:6b:a7:66:
         38:50:1a:b6:8b:b0:52:ca:88:93:73:8c:1d:06:3a:12:da:70:
         e9:2d:91:9a:01:10:eb:a9:9c:b3:a9:f7:5b:cf:3c:fa:be:a7:
         1a:c3:6b:71:94:2a:b0:35:bd:23:70:1f:d3:1d:24:0e:c6:29:
         fa:fd:5e:b8:21:ae:fe:1c:ae:48:b2:a8:5e:4f:16:74:e4:e3:
         79:3f:84:5e:83:0e:a7:71:6e:10:ad:1d:0a:54:73:2d:14:ab:
         50:56:97:75:e3:ca:07:b4:9c:6f:f0:f4:2c:22:44:59:74:32:
         6f:f4:d8:03:0c:51:a6:44:2f:67:7e:31:7a:83:0d:1b:59:0f:
         10:9f:d5:62:6a:38:97:be:06:2a:b4:8b:cb:ca:dd:c6:8a:65:
         99:69:f7:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:21:08 2025 by rpki-client on console.sobornost.net