Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/46cbb6ae-138e-4d2b-93f1-e6b23e6fe8fb/0/3130332e3136392e382e302f32332d3234203d3e20313432333436.roa
File:                     3130332e3136392e382e302f32332d3234203d3e20313432333436.roa (raw, json)
Hash identifier:          /hhYO5wRSFrwibEJunDDF1qr8Z/wP92fyPsYfBATpiA=
Subject key identifier:   F9:12:33:37:A4:E1:3B:B2:8B:D0:7B:68:AA:5D:10:43:C1:40:20:CB
Certificate issuer:       /CN=BF00BBF622014234CC4A26C23F64AC5C143802B6
Certificate serial:       191D5615D86BBBC7695068E507EEF6957EA93628
Authority key identifier: BF:00:BB:F6:22:01:42:34:CC:4A:26:C2:3F:64:AC:5C:14:38:02:B6
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF00BBF622014234CC4A26C23F64AC5C143802B6.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/46cbb6ae-138e-4d2b-93f1-e6b23e6fe8fb/0/3130332e3136392e382e302f32332d3234203d3e20313432333436.roa
Signing time:             Thu 10 Apr 2025 12:00:01 +0000
ROA not before:           Thu 10 Apr 2025 11:55:01 +0000
ROA not after:            Thu 09 Apr 2026 12:00:01 +0000
asID:                     142346
IP address blocks:        103.169.8.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/46cbb6ae-138e-4d2b-93f1-e6b23e6fe8fb/0/BF00BBF622014234CC4A26C23F64AC5C143802B6.crl
                          rsync://repo-rpki.idnic.net/repo/46cbb6ae-138e-4d2b-93f1-e6b23e6fe8fb/0/BF00BBF622014234CC4A26C23F64AC5C143802B6.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF00BBF622014234CC4A26C23F64AC5C143802B6.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Apr 2025 08:44:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:1d:56:15:d8:6b:bb:c7:69:50:68:e5:07:ee:f6:95:7e:a9:36:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF00BBF622014234CC4A26C23F64AC5C143802B6
        Validity
            Not Before: Apr 10 11:55:01 2025 GMT
            Not After : Apr  9 12:00:01 2026 GMT
        Subject: CN=F9123337A4E13BB28BD07B68AA5D1043C14020CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:2f:b3:0e:2c:1b:db:c1:6d:19:9e:8f:6d:68:
                    84:29:fd:c8:24:d9:e4:69:9d:e0:55:ed:59:10:00:
                    c4:f4:48:83:2a:21:1a:91:47:45:4d:d3:17:8c:0f:
                    06:2f:07:65:03:d8:f6:a2:9a:66:08:4a:2c:18:a4:
                    4a:e5:86:98:33:27:9f:f5:5e:48:b9:ce:94:90:61:
                    2a:89:88:d8:5c:bb:37:e9:1b:9f:60:d7:dc:ce:c3:
                    9c:05:09:82:d6:b3:79:7b:8b:f7:f0:3b:00:6c:43:
                    16:c9:1b:2d:b2:e5:a3:0a:dc:de:3f:bd:91:8b:af:
                    1e:fa:d1:02:8a:84:b0:ab:e3:31:2d:a1:36:d4:48:
                    c8:3d:e5:cb:56:a9:f2:83:0b:d0:86:94:35:9a:1e:
                    9a:ed:60:0d:d1:90:5b:5b:bf:56:3f:12:35:e5:59:
                    78:46:dc:71:b4:43:84:87:70:8c:54:71:7e:53:9d:
                    ba:75:f8:20:ea:92:b6:53:38:ab:c1:5c:11:a5:29:
                    1b:b2:8c:cb:56:1b:85:c0:19:f1:f7:30:3e:35:a8:
                    bf:b2:43:3c:10:19:05:8e:2e:9f:cb:d7:c7:7c:53:
                    91:a0:a0:ea:dd:24:05:14:0f:fe:0e:e1:bf:0a:19:
                    2f:4b:d8:8a:90:ae:22:dd:82:32:19:9f:4f:30:e8:
                    9c:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:12:33:37:A4:E1:3B:B2:8B:D0:7B:68:AA:5D:10:43:C1:40:20:CB
            X509v3 Authority Key Identifier:
                keyid:BF:00:BB:F6:22:01:42:34:CC:4A:26:C2:3F:64:AC:5C:14:38:02:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/46cbb6ae-138e-4d2b-93f1-e6b23e6fe8fb/0/BF00BBF622014234CC4A26C23F64AC5C143802B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF00BBF622014234CC4A26C23F64AC5C143802B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/46cbb6ae-138e-4d2b-93f1-e6b23e6fe8fb/0/3130332e3136392e382e302f32332d3234203d3e20313432333436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.169.8.0/23

    Signature Algorithm: sha256WithRSAEncryption
         04:4e:00:e4:a0:92:60:e9:bc:07:97:00:28:e4:67:70:9e:3b:
         5f:ae:e6:92:c2:ee:7b:3c:5a:a7:70:8f:6d:cc:b7:cd:69:20:
         40:27:2d:5f:ad:a6:73:27:16:20:06:4e:6c:d4:2a:33:34:7d:
         2e:29:9e:c7:17:f8:6b:1a:a5:22:4f:c1:12:68:a1:fd:72:3b:
         8d:31:38:38:e6:da:3f:b4:4f:66:64:64:e0:93:12:82:a8:ea:
         23:0f:ac:bb:65:7c:a7:54:13:63:4d:e0:9e:d3:cd:21:5a:ac:
         2b:94:23:c2:e7:93:78:74:e4:90:d7:eb:62:f8:01:79:8b:1d:
         fa:22:a7:80:24:74:e1:ad:b9:90:29:ad:5e:90:51:d3:1e:d7:
         c8:82:3c:c6:6d:8d:7e:3f:67:56:ef:9a:da:f3:52:c5:06:51:
         1d:61:1a:df:00:e5:87:ef:0b:99:d9:e6:98:08:df:42:f8:60:
         50:a6:06:41:a1:c8:cd:9e:d5:93:cd:c0:8e:f1:7a:77:56:c2:
         0c:38:c4:a6:00:a8:a2:56:51:78:14:b2:19:c3:4a:e0:b7:5b:
         25:dc:e6:92:6c:5e:3d:4c:47:c5:e7:a5:e6:3a:31:b0:bb:44:
         8d:a7:89:5b:b1:61:be:2d:29:90:3f:42:99:5d:05:ce:3f:4c:
         99:06:b6:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 06:49:50 2025 by rpki-client on console.sobornost.net