Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/3131372e37342e3132322e302f32342d3234203d3e203338353135.roa
File:                     3131372e37342e3132322e302f32342d3234203d3e203338353135.roa (raw, json)
Hash identifier:          3SF0bAW+7rz1kqWvQ04ZAo3EXSDUW7WAvx83Y52xCYs=
Subject key identifier:   6C:D8:7C:12:3D:0B:07:8F:CB:EB:A8:D2:9D:92:5C:13:15:48:8B:0B
Certificate issuer:       /CN=935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3
Certificate serial:       0A7B02D3F6B100D398B00C3BCB336CDC5D3A5AEC
Authority key identifier: 93:5D:B2:D4:48:8F:AE:2C:11:E1:BF:3B:DF:20:D8:2A:2D:DF:D8:F3
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/3131372e37342e3132322e302f32342d3234203d3e203338353135.roa
Signing time:             Wed 09 Apr 2025 08:00:00 +0000
ROA not before:           Wed 09 Apr 2025 07:55:00 +0000
ROA not after:            Wed 08 Apr 2026 08:00:00 +0000
asID:                     38515
IP address blocks:        117.74.122.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.crl
                          rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Apr 2025 20:52:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:7b:02:d3:f6:b1:00:d3:98:b0:0c:3b:cb:33:6c:dc:5d:3a:5a:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3
        Validity
            Not Before: Apr  9 07:55:00 2025 GMT
            Not After : Apr  8 08:00:00 2026 GMT
        Subject: CN=6CD87C123D0B078FCBEBA8D29D925C1315488B0B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:c1:5e:7e:0a:7d:98:17:7a:18:3a:ea:a0:5d:
                    b4:ad:3c:2d:0f:a1:a4:e4:e4:c3:99:5d:09:d6:31:
                    9a:79:d5:7d:ca:65:ef:5a:8a:05:80:89:35:32:22:
                    5b:bf:73:24:60:be:9d:e8:0c:fb:54:29:e9:00:77:
                    db:a9:6f:45:5a:81:d6:04:64:95:66:c7:52:bf:af:
                    8f:e1:a7:6e:b1:2a:9b:39:7c:28:45:c6:a6:a4:c6:
                    db:d9:4a:78:fe:3d:db:99:20:c5:c8:5b:fc:56:b8:
                    43:60:59:dd:67:2f:af:c9:d9:2a:67:d8:97:79:92:
                    3f:cd:06:d0:f1:02:91:7c:9e:e3:b8:d2:97:b6:31:
                    03:c4:51:ce:19:5d:f7:bb:3f:57:e8:03:0a:dc:34:
                    42:1c:92:4f:78:5f:ae:4a:bc:22:5e:7a:8f:e8:00:
                    bb:28:05:72:ba:3c:71:91:88:91:30:f3:43:0d:ae:
                    0f:e9:90:08:dd:b6:91:fc:2a:99:f3:ac:67:bd:50:
                    62:71:28:4d:82:c9:f0:43:fc:98:ea:da:a9:ea:81:
                    0d:3f:27:97:03:d0:a0:b0:1a:c4:0e:4a:9f:91:c2:
                    2f:c5:9e:9e:be:ed:41:47:4c:d3:33:4f:a3:25:cb:
                    a6:de:47:94:c3:b2:61:db:a9:26:25:ff:9c:34:b1:
                    be:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:D8:7C:12:3D:0B:07:8F:CB:EB:A8:D2:9D:92:5C:13:15:48:8B:0B
            X509v3 Authority Key Identifier:
                keyid:93:5D:B2:D4:48:8F:AE:2C:11:E1:BF:3B:DF:20:D8:2A:2D:DF:D8:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/3131372e37342e3132322e302f32342d3234203d3e203338353135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  117.74.122.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:2d:06:4d:db:03:49:44:fd:30:6a:45:71:a0:d6:7b:25:78:
         17:7f:51:52:b6:33:42:9a:9e:3d:83:52:6f:cf:c5:0d:35:b5:
         16:16:4c:0b:41:ce:91:11:e6:13:b3:4a:13:d8:72:2a:4f:63:
         8c:da:3a:5f:cb:2a:d3:11:bc:52:77:d8:a2:a9:cd:8c:ce:38:
         49:f4:92:96:d9:32:46:ae:6d:80:53:a9:36:db:05:07:b7:7c:
         93:83:27:dd:42:35:c2:8f:e5:2f:6c:88:26:ff:7e:9e:1e:95:
         76:9c:a5:9b:2d:ca:a8:c9:ed:86:4e:97:c9:b9:48:5d:c4:a8:
         ec:7d:9f:d3:51:7a:78:a1:0a:b5:98:36:38:49:85:7c:df:e2:
         69:d3:95:49:aa:0b:16:12:a6:11:a3:61:fd:a7:c4:f1:b3:96:
         e3:4e:09:e2:ac:3e:18:b2:d7:f4:32:1f:7a:a8:59:ce:a7:ee:
         49:95:3a:eb:35:06:b4:91:4d:a2:50:de:31:70:a6:60:e3:27:
         97:90:8e:c2:6b:10:5b:6a:46:8d:b7:6c:98:a1:70:73:9f:0e:
         59:67:4c:d7:67:71:7a:28:66:80:da:50:8b:fa:6b:02:5d:04:
         97:62:c3:03:5b:92:dc:f0:68:4a:91:c8:ce:c8:cf:d0:4e:d7:
         13:e6:86:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:21:08 2025 by rpki-client on console.sobornost.net