Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/5004e530-2fcf-4cd6-b05c-eb3c0c135608/0/3130332e3137332e37322e302f32342d3234203d3e20313437313133.roa
File:                     3130332e3137332e37322e302f32342d3234203d3e20313437313133.roa (raw, json)
Hash identifier:          CjoIHvi7yqXvHMVwjtTCYFagfhfgPFy7R0tpEnYKeXM=
Subject key identifier:   7B:8D:88:1B:06:AA:32:C2:4E:3D:36:AA:99:39:B0:F6:A7:FC:E0:48
Certificate issuer:       /CN=F03499B3CFC25C7C508C14462AC4268BF1E9F67D
Certificate serial:       3367B5B701E5F9A03EB6624F3FA561CAA06AF69D
Authority key identifier: F0:34:99:B3:CF:C2:5C:7C:50:8C:14:46:2A:C4:26:8B:F1:E9:F6:7D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F03499B3CFC25C7C508C14462AC4268BF1E9F67D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5004e530-2fcf-4cd6-b05c-eb3c0c135608/0/3130332e3137332e37322e302f32342d3234203d3e20313437313133.roa
Signing time:             Tue 15 Apr 2025 14:02:18 +0000
ROA not before:           Tue 15 Apr 2025 13:57:18 +0000
ROA not after:            Tue 14 Apr 2026 14:02:18 +0000
asID:                     147113
IP address blocks:        103.173.72.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/5004e530-2fcf-4cd6-b05c-eb3c0c135608/0/F03499B3CFC25C7C508C14462AC4268BF1E9F67D.crl
                          rsync://repo-rpki.idnic.net/repo/5004e530-2fcf-4cd6-b05c-eb3c0c135608/0/F03499B3CFC25C7C508C14462AC4268BF1E9F67D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F03499B3CFC25C7C508C14462AC4268BF1E9F67D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Apr 2025 20:52:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:67:b5:b7:01:e5:f9:a0:3e:b6:62:4f:3f:a5:61:ca:a0:6a:f6:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F03499B3CFC25C7C508C14462AC4268BF1E9F67D
        Validity
            Not Before: Apr 15 13:57:18 2025 GMT
            Not After : Apr 14 14:02:18 2026 GMT
        Subject: CN=7B8D881B06AA32C24E3D36AA9939B0F6A7FCE048
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:61:0b:fd:c1:ed:38:a7:d1:db:08:07:06:fc:
                    e1:ee:44:eb:1a:d5:7c:7f:e0:1f:96:25:48:a2:d5:
                    0b:a0:54:b6:f8:6e:09:df:af:0d:32:41:a3:a1:50:
                    59:dc:7c:76:ce:1f:82:2d:90:2e:94:9d:b5:69:aa:
                    47:ae:1c:8e:20:9e:dd:2b:57:a2:2c:29:3f:67:58:
                    c5:22:3a:71:a3:a1:ce:34:c7:11:07:55:fb:22:d5:
                    4b:7f:69:2d:37:ca:55:32:b9:8f:20:dd:e9:07:c5:
                    3e:4d:af:c6:2b:3e:1a:86:df:cb:85:30:9f:90:01:
                    2f:ee:b6:d8:92:c0:b3:88:f8:1e:a4:14:c6:27:94:
                    c0:da:c1:b5:52:78:bd:06:4f:63:4e:11:e7:4d:4f:
                    eb:14:ae:7f:53:bb:16:a4:de:d7:83:82:5e:a2:3b:
                    0a:02:9a:ef:e0:b5:d8:ef:67:a6:85:92:7b:5e:7a:
                    a1:0a:22:92:4c:f3:a8:ed:cb:f4:a3:eb:0b:b9:74:
                    2c:c2:c7:4c:92:4f:aa:c5:27:9a:5f:2f:b3:50:48:
                    1f:16:86:63:15:75:5e:a7:4d:b5:9f:26:fa:55:1d:
                    df:12:ab:f0:c3:d6:e9:9e:c3:3b:d6:0a:08:a5:08:
                    ff:9a:85:57:66:35:32:22:d3:5f:9c:20:4a:92:46:
                    99:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:8D:88:1B:06:AA:32:C2:4E:3D:36:AA:99:39:B0:F6:A7:FC:E0:48
            X509v3 Authority Key Identifier:
                keyid:F0:34:99:B3:CF:C2:5C:7C:50:8C:14:46:2A:C4:26:8B:F1:E9:F6:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5004e530-2fcf-4cd6-b05c-eb3c0c135608/0/F03499B3CFC25C7C508C14462AC4268BF1E9F67D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F03499B3CFC25C7C508C14462AC4268BF1E9F67D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5004e530-2fcf-4cd6-b05c-eb3c0c135608/0/3130332e3137332e37322e302f32342d3234203d3e20313437313133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.173.72.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d4:16:fb:ca:8c:2e:ae:62:e3:a5:2c:70:05:ce:48:c9:08:bf:
         a8:58:2c:ac:de:9f:e8:bc:0d:63:3e:01:10:03:8c:aa:f4:d5:
         46:38:c4:b0:84:39:20:f9:4d:13:11:a3:6b:99:31:ca:ba:e4:
         bb:8b:d6:85:ae:c7:46:5b:c3:85:9d:68:e8:91:c5:24:a9:b1:
         fb:95:0d:35:d8:5b:2b:d6:da:69:10:c3:74:c4:1a:5e:b5:e9:
         2b:ef:55:66:a2:d2:20:d0:56:8b:e5:2a:d1:8c:ea:1f:d5:e4:
         77:86:9a:01:11:47:ad:df:15:18:98:0e:40:cb:bf:81:e4:4d:
         79:3c:a8:dc:03:c3:c5:6b:a2:cb:df:29:49:b2:92:23:3e:eb:
         98:0e:16:36:2b:80:58:9d:3d:f6:6a:8c:4f:90:7d:46:1d:c7:
         17:98:b7:74:df:f8:65:1d:9e:c3:46:a3:f8:31:9c:e9:6a:2b:
         3f:0c:2e:4f:02:15:b5:28:02:78:3e:c1:43:01:a8:81:8b:6b:
         1d:fa:b2:fd:8a:5e:e9:da:a3:4b:65:b1:af:b8:fd:dd:7a:11:
         1d:ff:a5:89:b0:b2:c2:37:1c:c0:f8:b8:62:d3:4a:87:36:49:
         7c:b4:85:90:b2:25:b5:fd:f3:b8:ea:9c:bf:a2:8f:c3:81:da:
         59:57:5f:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:06:28 2025 by rpki-client on console.sobornost.net