Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/561cf777-8adf-4ef1-8d6f-9862c55620ea/0/3130332e3137302e3130302e302f32332d3234203d3e20313432333634.roa
File:                     3130332e3137302e3130302e302f32332d3234203d3e20313432333634.roa (raw, json)
Hash identifier:          qe46wqYoj4z+C+Tgta7yX78S6Rqx69jq5NSyjAXg4Xk=
Subject key identifier:   52:01:CF:78:B4:BC:05:07:42:7E:3A:C3:D3:7F:A3:99:2D:A1:7E:E1
Certificate issuer:       /CN=CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F
Certificate serial:       57BBC4E6B9A2122352EFDBD85299AC14396A45F0
Authority key identifier: CE:C5:FE:18:3A:39:10:5C:9E:27:02:CC:2B:F0:89:1F:C3:5E:1E:4F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/561cf777-8adf-4ef1-8d6f-9862c55620ea/0/3130332e3137302e3130302e302f32332d3234203d3e20313432333634.roa
Signing time:             Wed 12 Feb 2025 16:00:02 +0000
ROA not before:           Wed 12 Feb 2025 15:55:02 +0000
ROA not after:            Wed 11 Feb 2026 16:00:02 +0000
asID:                     142364
IP address blocks:        103.170.100.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/561cf777-8adf-4ef1-8d6f-9862c55620ea/0/CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F.crl
                          rsync://repo-rpki.idnic.net/repo/561cf777-8adf-4ef1-8d6f-9862c55620ea/0/CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Apr 2025 18:14:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:bb:c4:e6:b9:a2:12:23:52:ef:db:d8:52:99:ac:14:39:6a:45:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F
        Validity
            Not Before: Feb 12 15:55:02 2025 GMT
            Not After : Feb 11 16:00:02 2026 GMT
        Subject: CN=5201CF78B4BC0507427E3AC3D37FA3992DA17EE1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:5e:aa:c6:de:62:47:62:c0:ae:27:4e:9c:f3:
                    c3:ad:25:ef:b3:e8:91:e7:95:44:f4:4e:f6:73:76:
                    a3:50:a6:18:08:1a:c0:36:43:f8:84:3a:6f:6d:60:
                    7a:bc:c6:89:6b:1c:b4:5b:79:1d:e9:0b:ed:e1:e1:
                    fa:c0:0c:7d:cf:14:79:b4:bb:fb:ed:ec:11:f6:3e:
                    27:f3:eb:54:5b:16:2d:d1:37:05:77:e7:32:39:10:
                    4e:ec:3b:57:d8:55:21:3a:8c:22:c0:bd:e0:d8:1d:
                    7c:46:c9:84:e8:f5:f3:fc:62:95:89:5b:3a:83:ad:
                    aa:6c:26:75:72:32:71:d7:85:23:e5:12:10:67:8c:
                    75:8b:5f:af:19:a2:ed:df:9a:b5:b1:24:47:c1:6e:
                    7a:ed:e9:9d:01:80:30:a8:97:80:22:c5:2f:41:3e:
                    5c:76:3a:27:21:38:97:3d:9b:17:b3:af:c6:f3:15:
                    1b:b3:c1:9d:c1:06:47:de:2e:e9:f9:82:e3:82:ae:
                    78:21:f4:a2:7f:2c:89:a6:60:a2:4c:d4:68:f1:4d:
                    c8:28:fb:53:2a:c6:4b:0e:70:2c:16:6f:ad:72:11:
                    3c:e4:60:83:04:bf:9b:47:b2:ae:57:76:e5:f7:c4:
                    06:3f:98:1e:4f:45:7c:89:9a:ea:1b:ed:a3:f1:42:
                    a6:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:01:CF:78:B4:BC:05:07:42:7E:3A:C3:D3:7F:A3:99:2D:A1:7E:E1
            X509v3 Authority Key Identifier:
                keyid:CE:C5:FE:18:3A:39:10:5C:9E:27:02:CC:2B:F0:89:1F:C3:5E:1E:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/561cf777-8adf-4ef1-8d6f-9862c55620ea/0/CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/561cf777-8adf-4ef1-8d6f-9862c55620ea/0/3130332e3137302e3130302e302f32332d3234203d3e20313432333634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.170.100.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6f:00:e5:e8:e3:e0:9d:b1:7a:da:56:d6:b3:5b:10:21:18:98:
         7d:bd:df:08:5e:2f:56:d2:c3:5d:ab:50:20:83:a6:a2:60:46:
         7e:35:dc:8a:d3:bc:7a:a7:88:b3:65:66:a9:79:06:40:cf:8a:
         d2:f6:87:dd:51:f2:91:19:c7:98:0a:15:83:77:2c:2b:41:f8:
         c6:d5:f6:e4:4a:f8:c9:8c:de:5a:95:b9:85:2c:6c:b9:d4:81:
         75:68:93:bc:3a:d1:22:f4:be:d9:b2:6a:d3:24:f6:fc:86:68:
         65:94:fc:1c:94:bb:43:ed:5e:0f:04:71:8c:d8:ab:2d:4c:89:
         44:fc:66:b7:6d:5c:ba:70:60:88:31:ea:ef:64:7d:c4:94:0b:
         0b:b9:43:bc:65:95:69:6a:30:5f:88:9b:09:9c:16:a5:d7:fe:
         36:85:51:2f:22:40:f5:61:32:22:5f:2e:b7:64:da:d0:2a:14:
         19:89:93:7e:39:69:0b:cf:a8:6e:b4:86:ec:8c:39:6a:04:ed:
         7c:20:50:d4:dd:dc:91:42:7c:5a:b2:85:a0:2f:63:40:9c:a7:
         a6:79:05:d1:a3:72:5c:0f:54:b8:f3:bf:fc:31:e8:e2:a9:2d:
         a0:0a:2c:43:1c:76:82:95:44:f3:7e:b7:01:5c:fe:c8:6e:e7:
         6d:84:91:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:23:49 2025 by rpki-client on console.sobornost.net