Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/3138302e3231312e39342e302f32332d3233203d3e203435373235.roa
File:                     3138302e3231312e39342e302f32332d3233203d3e203435373235.roa (raw, json)
Hash identifier:          P35zqgp/DvY+opYrPtfb+V3CygXLWvgpif4jdHfrT6Q=
Subject key identifier:   62:3B:F4:57:CB:97:EF:06:B9:81:4B:23:0B:93:20:DC:F6:4E:F1:F7
Certificate issuer:       /CN=BE7F813F3C6CA289A9CDAC5630975B7627458103
Certificate serial:       1F8CB0C2E7535D86CA221EC5D818C0EA159B0786
Authority key identifier: BE:7F:81:3F:3C:6C:A2:89:A9:CD:AC:56:30:97:5B:76:27:45:81:03
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE7F813F3C6CA289A9CDAC5630975B7627458103.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/3138302e3231312e39342e302f32332d3233203d3e203435373235.roa
Signing time:             Sun 06 Apr 2025 15:13:50 +0000
ROA not before:           Sun 06 Apr 2025 15:08:50 +0000
ROA not after:            Sun 05 Apr 2026 15:13:50 +0000
asID:                     45725
IP address blocks:        180.211.94.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/BE7F813F3C6CA289A9CDAC5630975B7627458103.crl
                          rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/BE7F813F3C6CA289A9CDAC5630975B7627458103.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE7F813F3C6CA289A9CDAC5630975B7627458103.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Apr 2025 17:18:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:8c:b0:c2:e7:53:5d:86:ca:22:1e:c5:d8:18:c0:ea:15:9b:07:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE7F813F3C6CA289A9CDAC5630975B7627458103
        Validity
            Not Before: Apr  6 15:08:50 2025 GMT
            Not After : Apr  5 15:13:50 2026 GMT
        Subject: CN=623BF457CB97EF06B9814B230B9320DCF64EF1F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d5:2f:16:1a:a5:34:88:15:d4:5e:20:3d:dc:
                    c6:c6:14:8b:dc:62:81:24:49:b5:8c:9a:91:b0:8c:
                    4b:37:8a:ad:dd:8f:1a:03:56:75:7c:df:ff:eb:af:
                    cb:fb:43:f2:45:ac:cc:c0:4a:2b:f6:e9:86:02:3d:
                    76:f0:51:52:ac:19:7b:48:cc:e7:cb:16:f2:01:a9:
                    46:c0:88:0e:e6:14:c2:32:f3:a1:c6:dd:d4:4a:f3:
                    49:3f:09:94:65:79:b4:9f:61:05:c5:12:8c:18:4e:
                    a6:a2:10:6c:ec:fe:d2:a0:ad:62:39:75:28:7c:04:
                    bf:0e:4b:9a:80:e0:4a:07:78:47:83:a8:d1:19:f7:
                    17:ba:70:a7:00:51:91:1f:f1:b1:e0:5a:19:40:d5:
                    7d:26:b4:6b:b5:c3:39:f8:16:95:26:9a:61:d5:ab:
                    da:b2:ba:b3:8a:1b:d6:91:41:ee:6b:fc:5d:0d:96:
                    8b:a9:a5:29:3e:93:47:b4:e9:8e:5f:31:59:1f:c7:
                    99:b9:bf:7a:7f:1e:87:63:e7:33:88:45:b1:03:03:
                    42:26:36:5f:dc:1c:85:f2:07:92:5c:51:2d:aa:77:
                    01:84:1c:07:08:84:12:76:7f:85:e1:7b:e9:4f:83:
                    37:59:1c:78:59:0a:06:8c:a1:e7:75:d3:2a:23:23:
                    28:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:3B:F4:57:CB:97:EF:06:B9:81:4B:23:0B:93:20:DC:F6:4E:F1:F7
            X509v3 Authority Key Identifier:
                keyid:BE:7F:81:3F:3C:6C:A2:89:A9:CD:AC:56:30:97:5B:76:27:45:81:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/BE7F813F3C6CA289A9CDAC5630975B7627458103.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE7F813F3C6CA289A9CDAC5630975B7627458103.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/3138302e3231312e39342e302f32332d3233203d3e203435373235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.211.94.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9b:a1:f9:4e:8f:c8:c3:16:4f:ca:21:1c:9e:1c:59:35:4a:ea:
         8b:45:41:91:a1:3d:a2:c7:a5:4c:b6:62:9f:ca:f6:8d:54:15:
         92:1e:ce:a3:e6:28:1d:48:99:ed:b1:59:10:5c:91:c5:d5:10:
         33:16:d9:13:5c:76:4c:f0:0c:4f:f0:1e:41:d7:7d:00:b2:c0:
         ef:c4:02:b1:07:22:18:3d:ab:d4:67:9e:17:8a:72:ae:3e:29:
         78:38:b2:18:47:cc:4c:e5:8f:bd:61:d7:ec:bd:38:3c:a4:ca:
         2d:5d:68:aa:a7:0d:3d:a7:5b:28:09:1c:a5:42:29:95:f0:88:
         33:61:11:b0:bf:14:d8:4c:e5:e7:d9:9a:5d:bf:9d:ea:e7:55:
         88:71:90:69:ed:d3:a6:6c:f6:d2:19:45:c3:db:b1:bc:b9:0e:
         3b:34:cc:cd:3f:89:31:49:fa:0a:ec:50:00:1b:a4:82:42:a4:
         a7:49:a3:6f:3f:86:ac:e5:85:d3:b6:d5:6d:7d:54:0a:a9:92:
         31:da:e2:f7:00:8d:b5:70:73:c1:d2:be:d9:7e:4f:1a:b2:02:
         db:d3:c6:48:d8:e9:35:5d:ef:76:a7:07:a6:9b:fd:e2:bb:4d:
         01:09:b1:ae:4d:f1:cc:b8:7a:25:4d:e0:fd:60:23:de:f9:68:
         be:cc:7e:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 15:50:03 2025 by rpki-client on console.sobornost.net