Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3e57d543-baf0-4348-8857-3d2601c3a803/0/3130332e33392e37312e302f32342d3234203d3e20313530323734.roa
File:                     3130332e33392e37312e302f32342d3234203d3e20313530323734.roa (raw, json)
Hash identifier:          vX/A9y9l7mDzRfDBjuCxoiwVgHmV7OjNWsTWxTukflI=
Subject key identifier:   BF:8B:B9:B5:15:DA:88:82:F9:A2:10:35:9E:D6:9C:CB:25:E3:80:AB
Certificate issuer:       /CN=9FFC46BAA3F19522AF5BDD60DF7DE92E94F5AB7B
Certificate serial:       78A2D98A0D6FB7468D0F5AA91391F53C0C2F76B3
Authority key identifier: 9F:FC:46:BA:A3:F1:95:22:AF:5B:DD:60:DF:7D:E9:2E:94:F5:AB:7B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FFC46BAA3F19522AF5BDD60DF7DE92E94F5AB7B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3e57d543-baf0-4348-8857-3d2601c3a803/0/3130332e33392e37312e302f32342d3234203d3e20313530323734.roa
Signing time:             Thu 20 Feb 2025 04:02:49 +0000
ROA not before:           Thu 20 Feb 2025 03:57:49 +0000
ROA not after:            Thu 19 Feb 2026 04:02:49 +0000
asID:                     150274
IP address blocks:        103.39.71.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/3e57d543-baf0-4348-8857-3d2601c3a803/0/9FFC46BAA3F19522AF5BDD60DF7DE92E94F5AB7B.crl
                          rsync://repo-rpki.idnic.net/repo/3e57d543-baf0-4348-8857-3d2601c3a803/0/9FFC46BAA3F19522AF5BDD60DF7DE92E94F5AB7B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FFC46BAA3F19522AF5BDD60DF7DE92E94F5AB7B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Apr 2025 20:52:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:a2:d9:8a:0d:6f:b7:46:8d:0f:5a:a9:13:91:f5:3c:0c:2f:76:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9FFC46BAA3F19522AF5BDD60DF7DE92E94F5AB7B
        Validity
            Not Before: Feb 20 03:57:49 2025 GMT
            Not After : Feb 19 04:02:49 2026 GMT
        Subject: CN=BF8BB9B515DA8882F9A210359ED69CCB25E380AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:64:f5:71:97:55:56:f0:65:9e:32:aa:1d:d4:
                    a1:73:ed:57:0f:a9:a7:bc:10:d2:2e:e2:d1:72:ae:
                    57:30:5b:3c:41:57:b8:60:f9:11:9d:53:b7:76:03:
                    05:ac:af:5a:76:7b:7c:fa:86:36:df:c4:4c:47:74:
                    3b:f4:eb:73:42:26:c8:17:65:a5:5c:a0:0b:8a:1b:
                    04:0c:6f:e5:91:9c:18:9e:36:ad:ff:4c:c5:3c:32:
                    ca:28:32:f9:49:66:de:bf:be:33:13:ae:97:5e:69:
                    81:ae:83:cc:bf:96:4e:b5:1f:1a:96:20:27:f8:8b:
                    2a:10:44:f0:f3:ca:41:d9:bb:bb:0d:90:1e:c2:f6:
                    83:10:49:50:59:6b:c6:06:05:2b:d6:e5:8a:e6:07:
                    3f:2d:87:a0:a9:3d:1d:a7:5a:e0:49:12:24:b5:a0:
                    3a:fe:f0:10:01:ec:29:a4:c6:6e:32:56:87:ac:dd:
                    b4:9b:85:a5:4d:5a:36:53:1b:40:03:b3:f7:e6:7e:
                    8e:98:25:a8:5e:3b:69:df:78:c1:e3:2f:2b:9a:34:
                    9e:08:22:27:db:6b:55:27:d5:04:09:1b:0e:ea:2f:
                    51:d2:21:ba:8e:39:3c:d9:7d:36:2c:a6:a2:17:d3:
                    44:0b:ed:21:14:f9:1f:ed:3f:27:ed:50:4c:b6:24:
                    4e:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:8B:B9:B5:15:DA:88:82:F9:A2:10:35:9E:D6:9C:CB:25:E3:80:AB
            X509v3 Authority Key Identifier:
                keyid:9F:FC:46:BA:A3:F1:95:22:AF:5B:DD:60:DF:7D:E9:2E:94:F5:AB:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3e57d543-baf0-4348-8857-3d2601c3a803/0/9FFC46BAA3F19522AF5BDD60DF7DE92E94F5AB7B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FFC46BAA3F19522AF5BDD60DF7DE92E94F5AB7B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3e57d543-baf0-4348-8857-3d2601c3a803/0/3130332e33392e37312e302f32342d3234203d3e20313530323734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.39.71.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:df:1e:f6:87:15:d7:4f:a6:35:00:a7:28:5f:92:01:52:a0:
         6e:48:17:6d:b4:50:e8:3d:59:16:7e:f2:61:10:ab:2c:c5:0a:
         ea:a5:d7:43:4d:29:d3:b4:38:e0:3a:d3:69:8c:83:f7:9d:25:
         24:9a:14:57:4f:ae:bc:0b:a3:46:d5:f9:4e:d5:38:41:0a:1d:
         69:d5:c8:b2:af:38:5c:5d:72:43:e4:bd:1b:9a:cf:7c:c0:ac:
         43:2d:d8:53:2f:a4:ef:32:0a:e4:bb:29:49:8f:fe:6f:a6:63:
         76:39:50:97:18:89:81:97:fa:e5:a9:93:52:80:c7:65:9f:f1:
         a3:c8:f8:05:33:c2:75:4c:5d:84:35:c7:7e:ef:03:29:b0:ce:
         23:84:4b:3c:76:00:c9:99:39:cc:e1:17:3c:35:09:92:3d:9b:
         b4:f1:b6:26:e7:55:65:5b:b5:65:de:62:af:ac:f9:bd:3a:4d:
         43:d6:35:a8:42:f8:06:b8:f5:b8:fb:04:2e:e0:24:b3:f7:d5:
         8d:52:f5:79:c8:58:84:a3:c9:5d:e3:ad:6b:5b:35:5b:2a:68:
         25:90:b4:c0:5b:9b:65:49:9d:6f:82:a5:d3:5d:45:90:05:1a:
         9b:38:f6:42:30:c4:19:49:01:d1:2d:63:ac:be:8a:74:c9:de:
         17:6b:55:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:21:08 2025 by rpki-client on console.sobornost.net