Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/400ec43b-433d-407d-bdee-eea6216a6ff4/0/3130332e34332e302e302f32342d3234203d3e203539313333.roa
File:                     3130332e34332e302e302f32342d3234203d3e203539313333.roa (raw, json)
Hash identifier:          jTpS8CTg/g1oQKfqki6RqrjxzFhYFUCSre3OSQ6nGQI=
Subject key identifier:   17:2D:39:E4:C7:D6:9E:65:65:D4:6C:B2:98:EC:B7:96:AE:F5:12:A8
Certificate issuer:       /CN=34C47ECC8EDFAA05EFFF41FBFF0F6A466FA31869
Certificate serial:       1F8B3A98EAC5053988180F09EC8DB9A5C88C6FDB
Authority key identifier: 34:C4:7E:CC:8E:DF:AA:05:EF:FF:41:FB:FF:0F:6A:46:6F:A3:18:69
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34C47ECC8EDFAA05EFFF41FBFF0F6A466FA31869.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/400ec43b-433d-407d-bdee-eea6216a6ff4/0/3130332e34332e302e302f32342d3234203d3e203539313333.roa
Signing time:             Fri 18 Apr 2025 10:02:20 +0000
ROA not before:           Fri 18 Apr 2025 09:57:20 +0000
ROA not after:            Fri 17 Apr 2026 10:02:20 +0000
asID:                     59133
IP address blocks:        103.43.0.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/400ec43b-433d-407d-bdee-eea6216a6ff4/0/34C47ECC8EDFAA05EFFF41FBFF0F6A466FA31869.crl
                          rsync://repo-rpki.idnic.net/repo/400ec43b-433d-407d-bdee-eea6216a6ff4/0/34C47ECC8EDFAA05EFFF41FBFF0F6A466FA31869.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34C47ECC8EDFAA05EFFF41FBFF0F6A466FA31869.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 May 2025 00:57:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:8b:3a:98:ea:c5:05:39:88:18:0f:09:ec:8d:b9:a5:c8:8c:6f:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34C47ECC8EDFAA05EFFF41FBFF0F6A466FA31869
        Validity
            Not Before: Apr 18 09:57:20 2025 GMT
            Not After : Apr 17 10:02:20 2026 GMT
        Subject: CN=172D39E4C7D69E6565D46CB298ECB796AEF512A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:b3:f7:4b:32:1d:80:98:d6:2a:a6:af:9e:06:
                    7a:a8:5c:1a:ae:6b:4c:b6:f7:62:b7:a4:e5:fb:c4:
                    f4:98:02:93:ba:8b:09:c2:3c:03:2f:69:34:ee:6f:
                    44:4e:19:42:d3:74:88:2b:48:23:9a:2c:29:7d:a8:
                    d6:a8:b8:a7:b0:fc:54:7a:e7:e4:7a:90:be:c5:f7:
                    2f:e3:dc:f6:48:c4:d3:4a:1b:54:7b:df:e1:01:80:
                    da:87:56:b0:b7:d1:6a:65:26:5b:4a:7b:6e:39:3d:
                    8d:02:d7:39:6b:0c:e5:bf:b1:f5:4c:71:a7:0b:44:
                    11:67:e7:92:5d:7d:0c:d4:c4:d5:d6:0e:9e:7e:8f:
                    b2:bf:17:62:59:ed:db:5f:2a:96:56:bc:e1:c7:7f:
                    fb:5f:e4:6a:f5:fc:dd:2b:17:7b:c3:9d:cd:67:76:
                    59:db:0a:3a:10:79:50:bc:8c:10:3e:5c:83:43:be:
                    8e:49:ae:fe:c2:52:67:e2:fc:af:48:02:ca:01:4d:
                    f8:90:f1:fb:77:01:b9:c6:0a:70:d1:3a:5d:2a:e4:
                    43:c3:ad:c0:aa:c7:fa:a0:a4:ef:41:34:72:36:c3:
                    f5:53:4f:76:e0:3a:f5:93:89:63:0f:65:7b:e6:ae:
                    f8:db:7b:42:d0:a7:19:8a:66:8d:49:9d:f5:db:c6:
                    08:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:2D:39:E4:C7:D6:9E:65:65:D4:6C:B2:98:EC:B7:96:AE:F5:12:A8
            X509v3 Authority Key Identifier:
                keyid:34:C4:7E:CC:8E:DF:AA:05:EF:FF:41:FB:FF:0F:6A:46:6F:A3:18:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/400ec43b-433d-407d-bdee-eea6216a6ff4/0/34C47ECC8EDFAA05EFFF41FBFF0F6A466FA31869.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34C47ECC8EDFAA05EFFF41FBFF0F6A466FA31869.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/400ec43b-433d-407d-bdee-eea6216a6ff4/0/3130332e34332e302e302f32342d3234203d3e203539313333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.43.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:0a:36:6e:f4:5c:7e:9f:30:a0:a6:33:b0:31:73:f9:a2:ed:
         79:a6:19:78:9e:7b:03:49:b5:61:d9:79:01:8b:ff:23:64:e7:
         53:40:a6:dc:cc:f6:70:cb:64:53:be:20:37:85:c9:61:aa:3a:
         02:44:ac:b3:74:6e:d4:25:4b:01:fa:f1:87:c7:81:b4:c5:de:
         34:66:c7:06:bc:53:fd:02:75:77:66:90:40:87:10:b9:cf:90:
         fa:7f:5d:10:8d:30:59:b9:e6:6e:e8:cb:28:74:8f:de:3d:81:
         fc:75:36:81:fd:2d:6b:fd:95:dd:6c:f1:e2:05:54:b3:44:a1:
         77:68:04:9a:d0:ab:95:64:a4:ee:b5:a4:0a:a6:f8:35:8d:79:
         ca:b4:ae:3c:9c:ee:67:a0:13:7b:12:6d:35:f0:25:bf:86:41:
         c3:bc:ce:38:7d:a0:58:99:32:f6:70:42:9c:7d:77:13:b2:d2:
         50:13:5b:24:63:32:c3:c8:91:df:2b:cb:ce:4b:fd:bd:26:93:
         2d:13:3e:77:09:7e:14:90:c6:aa:76:bd:96:92:d7:a4:a7:8a:
         74:c2:fb:23:00:f3:b7:9b:90:7a:37:9d:67:62:2f:3b:2d:6c:
         16:13:bf:42:b0:ad:2f:98:28:e8:6e:d0:42:c4:8d:44:ef:59:
         0b:74:40:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 19:11:47 2025 by rpki-client on console.sobornost.net