Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/6e97dbc6-9374-42e2-a3d0-879ed6a19196/0/3130332e36382e322e302f32342d3234203d3e20313530323635.roa
File:                     3130332e36382e322e302f32342d3234203d3e20313530323635.roa (raw, json)
Hash identifier:          ylhRyjN9O7aHn/zjEzn07ubViFMsJpvDX8p87PLz1EI=
Subject key identifier:   E4:3A:1B:AC:2C:5B:92:3F:8B:5D:04:66:4F:0F:25:22:5F:89:B1:CC
Certificate issuer:       /CN=73BD266EEF13136ED4F4E96AB4984B5A0E310448
Certificate serial:       0B6842791AD636C57EC5EFEF0DA1F3A0DFF3EC1A
Authority key identifier: 73:BD:26:6E:EF:13:13:6E:D4:F4:E9:6A:B4:98:4B:5A:0E:31:04:48
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/73BD266EEF13136ED4F4E96AB4984B5A0E310448.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6e97dbc6-9374-42e2-a3d0-879ed6a19196/0/3130332e36382e322e302f32342d3234203d3e20313530323635.roa
Signing time:             Tue 22 Apr 2025 14:45:54 +0000
ROA not before:           Tue 22 Apr 2025 14:40:54 +0000
ROA not after:            Tue 21 Apr 2026 14:45:54 +0000
asID:                     150265
IP address blocks:        103.68.2.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/6e97dbc6-9374-42e2-a3d0-879ed6a19196/0/73BD266EEF13136ED4F4E96AB4984B5A0E310448.crl
                          rsync://repo-rpki.idnic.net/repo/6e97dbc6-9374-42e2-a3d0-879ed6a19196/0/73BD266EEF13136ED4F4E96AB4984B5A0E310448.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/73BD266EEF13136ED4F4E96AB4984B5A0E310448.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Apr 2025 20:52:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:68:42:79:1a:d6:36:c5:7e:c5:ef:ef:0d:a1:f3:a0:df:f3:ec:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73BD266EEF13136ED4F4E96AB4984B5A0E310448
        Validity
            Not Before: Apr 22 14:40:54 2025 GMT
            Not After : Apr 21 14:45:54 2026 GMT
        Subject: CN=E43A1BAC2C5B923F8B5D04664F0F25225F89B1CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:d1:ff:b9:5d:f9:24:7e:36:b1:64:b8:ad:71:
                    ad:08:d8:76:fd:3d:51:25:a1:1e:ae:13:00:06:4d:
                    41:4a:33:88:0f:38:37:91:aa:39:a4:9b:76:72:e3:
                    a4:36:1f:12:fb:72:6a:8f:85:ff:6d:ef:63:af:77:
                    8e:07:6c:db:b0:e8:5d:7e:fe:38:e8:f7:bd:21:bd:
                    29:f0:dd:bc:29:e7:0a:5e:17:ee:56:88:d4:06:07:
                    f5:81:ee:bb:ff:79:86:8d:4f:e7:03:9a:ab:63:fc:
                    fe:04:60:df:91:b7:c7:88:7f:6e:d6:02:33:d1:7b:
                    1a:bf:15:b0:ae:1e:77:0b:53:b7:cf:77:a4:16:aa:
                    ea:84:84:63:1a:1a:88:90:19:19:91:2f:74:ae:d6:
                    52:b9:d0:53:bf:7c:7a:73:5e:ae:34:5a:4b:9f:3d:
                    a3:71:3f:bb:5f:aa:af:92:25:d9:75:e0:79:7d:fc:
                    ee:3d:7f:e0:75:6f:75:f7:ae:36:a0:98:0f:b5:b5:
                    e3:c8:85:c9:6c:e7:9a:80:03:14:4e:fb:2d:bb:b7:
                    54:eb:6c:34:d3:f2:71:4b:6c:47:5c:97:95:b0:f2:
                    88:09:dc:14:47:03:e6:ac:d7:b7:ce:62:00:a9:e2:
                    cf:f6:6d:a3:d7:1e:ae:c7:62:f5:89:b6:ee:d9:fd:
                    d4:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:3A:1B:AC:2C:5B:92:3F:8B:5D:04:66:4F:0F:25:22:5F:89:B1:CC
            X509v3 Authority Key Identifier:
                keyid:73:BD:26:6E:EF:13:13:6E:D4:F4:E9:6A:B4:98:4B:5A:0E:31:04:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6e97dbc6-9374-42e2-a3d0-879ed6a19196/0/73BD266EEF13136ED4F4E96AB4984B5A0E310448.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/73BD266EEF13136ED4F4E96AB4984B5A0E310448.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6e97dbc6-9374-42e2-a3d0-879ed6a19196/0/3130332e36382e322e302f32342d3234203d3e20313530323635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.68.2.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:e9:12:03:9d:4f:2a:97:69:87:9c:a7:be:49:52:1c:b2:d9:
         0d:f5:d7:fd:85:98:c7:c9:21:7a:46:de:19:bc:22:a9:de:3d:
         1d:74:70:31:71:26:83:6e:0f:2c:70:bf:4a:8d:0d:c7:78:ff:
         aa:df:da:6a:53:07:ea:d5:5c:e1:af:59:9b:73:d4:b9:c1:7f:
         86:8c:ef:db:78:b2:13:e7:33:90:ea:40:6a:32:87:34:e4:50:
         fe:0f:b0:09:7d:62:35:1d:1f:a4:a4:cf:04:ed:58:8d:9f:e3:
         33:96:2a:29:1a:cd:a7:d2:6d:67:70:52:91:32:2c:f2:0e:cc:
         db:b8:35:97:26:50:36:41:93:2f:03:7d:f4:54:b0:09:cc:3e:
         e6:d5:a7:bd:9a:2b:35:84:77:59:9e:f4:33:52:20:d3:de:bd:
         46:20:86:3a:49:39:29:7d:5a:a7:72:50:59:b8:ae:de:fb:19:
         6f:14:ff:51:f1:c3:b4:c7:a0:29:1a:26:95:55:77:ab:68:1d:
         6f:88:cb:4f:d3:63:86:7a:0c:bf:ab:ab:6d:d6:ff:8b:a9:ad:
         33:88:63:4b:55:8f:55:6c:ae:4c:1f:82:5d:65:cb:2b:39:71:
         3d:78:4d:98:8c:8f:8b:78:17:99:f1:f9:ff:29:47:bd:52:41:
         a9:d3:29:7b
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUC2hCeRrWNsV+xe/vDaHzoN/z7BowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzNCRDI2NkVFRjEzMTM2RUQ0RjRFOTZBQjQ5ODRCNUEw
RTMxMDQ0ODAeFw0yNTA0MjIxNDQwNTRaFw0yNjA0MjExNDQ1NTRaMDMxMTAvBgNV
BAMTKEU0M0ExQkFDMkM1QjkyM0Y4QjVEMDQ2NjRGMEYyNTIyNUY4OUIxQ0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC80f+5XfkkfjaxZLitca0I2Hb9
PVEloR6uEwAGTUFKM4gPODeRqjmkm3Zy46Q2HxL7cmqPhf9t72Ovd44HbNuw6F1+
/jjo970hvSnw3bwp5wpeF+5WiNQGB/WB7rv/eYaNT+cDmqtj/P4EYN+Rt8eIf27W
AjPRexq/FbCuHncLU7fPd6QWquqEhGMaGoiQGRmRL3Su1lK50FO/fHpzXq40Wkuf
PaNxP7tfqq+SJdl14Hl9/O49f+B1b3X3rjagmA+1tePIhcls55qAAxRO+y27t1Tr
bDTT8nFLbEdcl5Ww8ogJ3BRHA+as17fOYgCp4s/2baPXHq7HYvWJtu7Z/dRrAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQU5DobrCxbkj+LXQRmTw8lIl+JscwwHwYDVR0j
BBgwFoAUc70mbu8TE27U9OlqtJhLWg4xBEgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82
ZTk3ZGJjNi05Mzc0LTQyZTItYTNkMC04NzllZDZhMTkxOTYvMC83M0JEMjY2RUVG
MTMxMzZFRDRGNEU5NkFCNDk4NEI1QTBFMzEwNDQ4LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNzNCRDI2NkVFRjEzMTM2RUQ0RjRFOTZBQjQ5ODRCNUEwRTMx
MDQ0OC5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzZlOTdkYmM2LTkzNzQtNDJlMi1h
M2QwLTg3OWVkNmExOTE5Ni8wLzMxMzAzMzJlMzYzODJlMzIyZTMwMmYzMjM0MmQz
MjM0MjAzZDNlMjAzMTM1MzAzMjM2MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnRAIwDQYJKoZIhvcN
AQELBQADggEBAFnpEgOdTyqXaYecp75JUhyy2Q311/2FmMfJIXpG3hm8IqnePR10
cDFxJoNuDyxwv0qNDcd4/6rf2mpTB+rVXOGvWZtz1LnBf4aM79t4shPnM5DqQGoy
hzTkUP4PsAl9YjUdH6SkzwTtWI2f4zOWKikazafSbWdwUpEyLPIOzNu4NZcmUDZB
ky8DffRUsAnMPubVp72aKzWEd1me9DNSINPevUYghjpJOSl9WqdyUFm4rt77GW8U
/1Hxw7THoCkaJpVVd6toHW+Iy0/TY4Z6DL+rq23W/4uprTOIY0tVj1Vsrkwfgl1l
yys5cT14TZiMj4t4F5nx+f8pR71SQanTKXs=
-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:11 2025 by rpki-client on console.sobornost.net