Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/6e97dbc6-9374-42e2-a3d0-879ed6a19196/0/3130332e36382e332e302f32342d3234203d3e20313530323635.roa
File:                     3130332e36382e332e302f32342d3234203d3e20313530323635.roa (raw, json)
Hash identifier:          6BUFoJ7Hjp1ZVmFAkFvuE7S+FDi5d+jGqGQcleOQstI=
Subject key identifier:   E2:50:B4:63:BD:49:A0:A1:7D:28:0B:AC:2E:E9:B7:70:3D:63:72:A1
Certificate issuer:       /CN=73BD266EEF13136ED4F4E96AB4984B5A0E310448
Certificate serial:       37FC064551E999C7338066BD154BEE21CB79B97A
Authority key identifier: 73:BD:26:6E:EF:13:13:6E:D4:F4:E9:6A:B4:98:4B:5A:0E:31:04:48
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/73BD266EEF13136ED4F4E96AB4984B5A0E310448.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6e97dbc6-9374-42e2-a3d0-879ed6a19196/0/3130332e36382e332e302f32342d3234203d3e20313530323635.roa
Signing time:             Tue 22 Apr 2025 14:46:21 +0000
ROA not before:           Tue 22 Apr 2025 14:41:21 +0000
ROA not after:            Tue 21 Apr 2026 14:46:21 +0000
asID:                     150265
IP address blocks:        103.68.3.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/6e97dbc6-9374-42e2-a3d0-879ed6a19196/0/73BD266EEF13136ED4F4E96AB4984B5A0E310448.crl
                          rsync://repo-rpki.idnic.net/repo/6e97dbc6-9374-42e2-a3d0-879ed6a19196/0/73BD266EEF13136ED4F4E96AB4984B5A0E310448.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/73BD266EEF13136ED4F4E96AB4984B5A0E310448.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Apr 2025 20:52:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:fc:06:45:51:e9:99:c7:33:80:66:bd:15:4b:ee:21:cb:79:b9:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73BD266EEF13136ED4F4E96AB4984B5A0E310448
        Validity
            Not Before: Apr 22 14:41:21 2025 GMT
            Not After : Apr 21 14:46:21 2026 GMT
        Subject: CN=E250B463BD49A0A17D280BAC2EE9B7703D6372A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:78:c2:bb:36:12:37:55:88:8c:2d:4b:13:9e:
                    be:23:74:39:d2:c6:52:62:5f:f7:8e:5c:f0:79:b6:
                    88:57:fb:b3:31:17:2f:83:4d:a4:52:e3:b3:b8:fa:
                    0d:6b:50:8f:95:c9:a0:a0:0a:0f:e7:13:aa:dc:a1:
                    da:61:f6:4a:26:92:f1:d5:9c:50:57:36:0d:a7:ba:
                    ab:12:6f:21:9f:00:89:52:74:2e:86:7f:61:73:42:
                    f1:8d:5d:6c:3e:a5:68:b9:25:10:12:a0:a5:e2:03:
                    e7:da:2f:30:52:1c:64:1c:f5:68:26:d2:c2:54:f4:
                    0c:a6:cc:bd:77:05:08:ff:e7:b6:72:a4:18:00:9d:
                    45:68:31:3c:81:90:9b:88:51:13:44:ec:66:75:a4:
                    fa:4b:81:95:bd:c8:4d:d1:e3:9f:d3:55:96:56:70:
                    7a:4e:d6:81:2a:cf:ff:1e:bc:06:85:07:cb:d9:de:
                    d9:30:77:85:a6:2f:35:4c:a5:df:40:be:9c:d3:75:
                    29:3c:b5:59:aa:56:5f:fc:15:a0:46:8d:bb:db:01:
                    4b:66:af:37:31:0f:a9:5a:03:82:0a:8d:9d:1c:16:
                    fe:81:9b:56:26:fd:15:cb:39:42:56:b4:57:5a:13:
                    12:2f:b6:21:a3:06:20:c7:8d:0b:3a:f6:82:2b:7e:
                    90:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:50:B4:63:BD:49:A0:A1:7D:28:0B:AC:2E:E9:B7:70:3D:63:72:A1
            X509v3 Authority Key Identifier:
                keyid:73:BD:26:6E:EF:13:13:6E:D4:F4:E9:6A:B4:98:4B:5A:0E:31:04:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6e97dbc6-9374-42e2-a3d0-879ed6a19196/0/73BD266EEF13136ED4F4E96AB4984B5A0E310448.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/73BD266EEF13136ED4F4E96AB4984B5A0E310448.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6e97dbc6-9374-42e2-a3d0-879ed6a19196/0/3130332e36382e332e302f32342d3234203d3e20313530323635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.68.3.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:92:d6:b6:4a:79:eb:e2:8a:ab:da:a9:77:73:c6:f0:40:37:
         f2:13:17:c5:5e:49:d5:30:46:67:1b:e9:53:78:03:31:9c:34:
         97:a5:3d:ef:61:ba:b3:2f:a0:e0:23:ce:3e:a9:45:2e:3a:28:
         71:0a:66:b9:39:19:16:31:3b:f3:c6:84:fb:b8:c0:a8:c0:1e:
         24:fe:d8:ce:34:49:5d:3e:80:7f:c8:83:d4:02:98:c2:ae:17:
         7d:57:d7:f8:db:c6:2f:b9:51:3f:d8:c2:1e:ad:f4:14:ab:dd:
         0b:bf:03:bd:7a:1b:91:66:73:e3:e0:c7:f8:9b:c6:a0:55:8f:
         97:92:17:e9:96:10:4d:53:84:c6:e8:fc:88:f7:57:2a:b3:4c:
         16:17:ee:c3:75:7d:7f:13:18:91:fb:c8:3a:d9:94:e5:91:27:
         2d:6f:af:4a:59:dd:65:90:b0:b0:0c:17:8a:64:fd:5c:b4:24:
         bc:ef:3d:0b:f5:08:48:c6:53:48:f7:17:ec:82:ea:bb:d1:81:
         cb:dd:21:84:ec:68:df:6a:97:45:00:eb:36:9c:1e:bb:77:42:
         86:8e:df:86:a3:1f:da:eb:1a:58:1a:de:ab:b8:60:02:3a:b1:
         f6:b4:53:be:1d:8a:88:3e:75:20:80:fb:aa:47:5f:2f:a5:0b:
         4a:0e:05:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:11 2025 by rpki-client on console.sobornost.net