Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/6e97dbc6-9374-42e2-a3d0-879ed6a19196/0/3130332e36382e302e302f32322d3232203d3e20313335343539.roa
File:                     3130332e36382e302e302f32322d3232203d3e20313335343539.roa (raw, json)
Hash identifier:          hj0aLvHnsN2pt1jXNXHldeHD4msnEKkoRErUA/qhVzM=
Subject key identifier:   9F:E7:6D:C1:99:AC:37:6C:92:AD:BE:41:7E:BB:D6:20:DF:99:D8:5C
Certificate issuer:       /CN=73BD266EEF13136ED4F4E96AB4984B5A0E310448
Certificate serial:       2E3A9834417D37AC5F8E4FFE42E2ABE7E1FFB97C
Authority key identifier: 73:BD:26:6E:EF:13:13:6E:D4:F4:E9:6A:B4:98:4B:5A:0E:31:04:48
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/73BD266EEF13136ED4F4E96AB4984B5A0E310448.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6e97dbc6-9374-42e2-a3d0-879ed6a19196/0/3130332e36382e302e302f32322d3232203d3e20313335343539.roa
Signing time:             Wed 16 Apr 2025 09:02:23 +0000
ROA not before:           Wed 16 Apr 2025 08:57:23 +0000
ROA not after:            Wed 15 Apr 2026 09:02:23 +0000
asID:                     135459
IP address blocks:        103.68.0.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/6e97dbc6-9374-42e2-a3d0-879ed6a19196/0/73BD266EEF13136ED4F4E96AB4984B5A0E310448.crl
                          rsync://repo-rpki.idnic.net/repo/6e97dbc6-9374-42e2-a3d0-879ed6a19196/0/73BD266EEF13136ED4F4E96AB4984B5A0E310448.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/73BD266EEF13136ED4F4E96AB4984B5A0E310448.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Apr 2025 20:52:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:3a:98:34:41:7d:37:ac:5f:8e:4f:fe:42:e2:ab:e7:e1:ff:b9:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73BD266EEF13136ED4F4E96AB4984B5A0E310448
        Validity
            Not Before: Apr 16 08:57:23 2025 GMT
            Not After : Apr 15 09:02:23 2026 GMT
        Subject: CN=9FE76DC199AC376C92ADBE417EBBD620DF99D85C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:6c:73:ff:54:99:92:54:85:ca:52:b5:e1:be:
                    97:ca:ca:eb:35:b2:fa:c1:e4:fa:08:eb:c3:d5:f8:
                    c9:38:0f:9e:cb:5a:c8:7e:70:a5:15:4a:ba:a6:32:
                    c5:0a:4e:b3:4c:a2:99:62:b4:63:31:89:dd:1b:40:
                    04:fb:17:db:de:b7:2b:86:a2:39:57:20:11:54:95:
                    77:0f:fb:2e:af:b6:aa:80:ec:70:ce:2a:b3:e9:5c:
                    a0:da:1d:d3:c3:1a:ba:9a:7c:58:72:7d:58:66:2e:
                    42:34:0e:bc:9b:32:fd:88:ab:6b:e3:75:39:c9:1a:
                    44:c6:84:da:21:ce:65:7e:70:7e:53:fa:04:23:a2:
                    73:2c:e6:5d:a4:93:93:66:59:4b:60:16:56:5b:56:
                    6e:51:a9:e2:55:fc:00:33:f9:61:93:a6:0a:8b:82:
                    92:a6:2f:bf:ed:68:59:62:62:02:e0:02:68:a8:4c:
                    96:31:40:96:95:2b:72:65:17:78:24:09:4c:38:f1:
                    70:7b:d6:f2:12:9b:34:19:c6:db:3f:b6:4b:f6:b1:
                    bc:b0:96:9d:6d:e8:cd:c9:ec:b0:c4:54:b2:60:50:
                    2d:cd:79:f4:15:94:3c:19:eb:fc:56:5d:20:7a:1c:
                    12:94:ae:dc:6a:4e:82:5c:fe:2b:4e:34:14:2b:16:
                    7d:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:E7:6D:C1:99:AC:37:6C:92:AD:BE:41:7E:BB:D6:20:DF:99:D8:5C
            X509v3 Authority Key Identifier:
                keyid:73:BD:26:6E:EF:13:13:6E:D4:F4:E9:6A:B4:98:4B:5A:0E:31:04:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6e97dbc6-9374-42e2-a3d0-879ed6a19196/0/73BD266EEF13136ED4F4E96AB4984B5A0E310448.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/73BD266EEF13136ED4F4E96AB4984B5A0E310448.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6e97dbc6-9374-42e2-a3d0-879ed6a19196/0/3130332e36382e302e302f32322d3232203d3e20313335343539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.68.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b2:a1:96:16:57:e7:ec:9b:72:66:19:4a:4d:4d:0d:95:ce:82:
         ae:c8:d5:a2:73:3f:b2:7c:72:0f:1f:85:c0:6b:d0:1f:4b:38:
         45:68:68:c5:4d:88:53:82:fd:56:b5:8c:0f:67:5c:0a:ca:71:
         27:4f:ae:63:ff:9c:73:8e:7a:6e:91:73:5e:0d:2f:db:61:9d:
         51:14:5c:02:d7:fb:c9:56:8e:2e:19:28:31:97:bf:5a:77:dd:
         0d:60:39:bd:68:a1:cc:20:28:d3:1a:58:71:b4:ce:7b:d2:5d:
         3f:54:91:d6:f9:f7:76:5f:6b:23:ec:bc:fb:9a:cc:0f:d1:4e:
         b2:9c:57:5e:75:00:c2:0b:d9:90:53:1a:3e:35:93:cc:c0:cd:
         23:a9:de:35:b1:ef:46:d0:8f:af:1c:5b:49:ef:d6:c0:82:ed:
         09:e5:11:d5:8d:bc:ee:86:f9:ff:ec:1a:c8:5e:ce:16:bb:12:
         21:a9:ba:70:6b:a1:d4:81:ac:61:20:c1:46:86:22:1e:f7:17:
         64:e1:e4:2a:57:93:db:45:f7:55:26:30:b9:b2:4b:df:85:7c:
         82:ed:e6:df:4a:2a:5a:0d:7b:e5:b1:0f:98:86:2e:2e:f5:85:
         c1:e9:18:ea:93:31:e3:d7:06:91:08:c7:50:bd:03:8e:c3:49:
         39:a0:1e:f2
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIULjqYNEF9N6xfjk/+QuKr5+H/uXwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzNCRDI2NkVFRjEzMTM2RUQ0RjRFOTZBQjQ5ODRCNUEw
RTMxMDQ0ODAeFw0yNTA0MTYwODU3MjNaFw0yNjA0MTUwOTAyMjNaMDMxMTAvBgNV
BAMTKDlGRTc2REMxOTlBQzM3NkM5MkFEQkU0MTdFQkJENjIwREY5OUQ4NUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdbHP/VJmSVIXKUrXhvpfKyus1
svrB5PoI68PV+Mk4D57LWsh+cKUVSrqmMsUKTrNMoplitGMxid0bQAT7F9vetyuG
ojlXIBFUlXcP+y6vtqqA7HDOKrPpXKDaHdPDGrqafFhyfVhmLkI0DrybMv2Iq2vj
dTnJGkTGhNohzmV+cH5T+gQjonMs5l2kk5NmWUtgFlZbVm5RqeJV/AAz+WGTpgqL
gpKmL7/taFliYgLgAmioTJYxQJaVK3JlF3gkCUw48XB71vISmzQZxts/tkv2sbyw
lp1t6M3J7LDEVLJgUC3NefQVlDwZ6/xWXSB6HBKUrtxqToJc/itONBQrFn2lAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQUn+dtwZmsN2ySrb5BfrvWIN+Z2FwwHwYDVR0j
BBgwFoAUc70mbu8TE27U9OlqtJhLWg4xBEgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82
ZTk3ZGJjNi05Mzc0LTQyZTItYTNkMC04NzllZDZhMTkxOTYvMC83M0JEMjY2RUVG
MTMxMzZFRDRGNEU5NkFCNDk4NEI1QTBFMzEwNDQ4LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNzNCRDI2NkVFRjEzMTM2RUQ0RjRFOTZBQjQ5ODRCNUEwRTMx
MDQ0OC5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzZlOTdkYmM2LTkzNzQtNDJlMi1h
M2QwLTg3OWVkNmExOTE5Ni8wLzMxMzAzMzJlMzYzODJlMzAyZTMwMmYzMjMyMmQz
MjMyMjAzZDNlMjAzMTMzMzUzNDM1Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJnRAAwDQYJKoZIhvcN
AQELBQADggEBALKhlhZX5+ybcmYZSk1NDZXOgq7I1aJzP7J8cg8fhcBr0B9LOEVo
aMVNiFOC/Va1jA9nXArKcSdPrmP/nHOOem6Rc14NL9thnVEUXALX+8lWji4ZKDGX
v1p33Q1gOb1oocwgKNMaWHG0znvSXT9Ukdb593ZfayPsvPuazA/RTrKcV151AMIL
2ZBTGj41k8zAzSOp3jWx70bQj68cW0nv1sCC7QnlEdWNvO6G+f/sGshezha7EiGp
unBrodSBrGEgwUaGIh73F2Th5CpXk9tF91UmMLmyS9+FfILt5t9KKloNe+WxD5iG
Li71hcHpGOqTMePXBpEIx1C9A47DSTmgHvI=
-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:11 2025 by rpki-client on console.sobornost.net