Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/70da5882-b804-4154-959b-6336b24e18b2/0/3130332e3137302e3139382e302f32342d3234203d3e20313530343634.roa
File:                     3130332e3137302e3139382e302f32342d3234203d3e20313530343634.roa (raw, json)
Hash identifier:          0bZb0428Qs9WgXKe/lQqf94hdv+XNfzIhYjEupAnHpI=
Subject key identifier:   DD:92:22:EC:0F:23:D4:A0:24:83:2D:87:7D:EA:0A:28:F2:4F:D7:1B
Certificate issuer:       /CN=597734A26158D77A6ED02222DF93D1CE2BD6EA03
Certificate serial:       301361C87FBCF12B992B0C5BCBF8B81D9903077F
Authority key identifier: 59:77:34:A2:61:58:D7:7A:6E:D0:22:22:DF:93:D1:CE:2B:D6:EA:03
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/597734A26158D77A6ED02222DF93D1CE2BD6EA03.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/70da5882-b804-4154-959b-6336b24e18b2/0/3130332e3137302e3139382e302f32342d3234203d3e20313530343634.roa
Signing time:             Mon 21 Apr 2025 06:04:42 +0000
ROA not before:           Mon 21 Apr 2025 05:59:42 +0000
ROA not after:            Mon 20 Apr 2026 06:04:42 +0000
asID:                     150464
IP address blocks:        103.170.198.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/70da5882-b804-4154-959b-6336b24e18b2/0/597734A26158D77A6ED02222DF93D1CE2BD6EA03.crl
                          rsync://repo-rpki.idnic.net/repo/70da5882-b804-4154-959b-6336b24e18b2/0/597734A26158D77A6ED02222DF93D1CE2BD6EA03.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/597734A26158D77A6ED02222DF93D1CE2BD6EA03.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Apr 2025 22:58:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:13:61:c8:7f:bc:f1:2b:99:2b:0c:5b:cb:f8:b8:1d:99:03:07:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=597734A26158D77A6ED02222DF93D1CE2BD6EA03
        Validity
            Not Before: Apr 21 05:59:42 2025 GMT
            Not After : Apr 20 06:04:42 2026 GMT
        Subject: CN=DD9222EC0F23D4A024832D877DEA0A28F24FD71B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:e2:54:bf:9f:05:6c:67:91:99:6e:76:98:0c:
                    cc:c4:b2:87:29:53:a0:19:f2:6f:70:f9:fe:37:be:
                    03:15:b3:f6:94:c9:6d:85:e1:1c:45:f6:9f:89:70:
                    a3:20:e3:bd:79:9a:d2:f7:78:70:7f:44:79:45:2d:
                    1c:06:10:05:76:2e:d7:d2:cc:f0:c4:a1:7c:88:25:
                    08:ab:b3:d9:ac:c7:5a:9b:a2:3b:8a:58:fb:b3:90:
                    39:a8:e8:a4:e5:e5:e2:d9:85:8a:6f:b9:07:90:f9:
                    18:a3:83:e5:c2:f4:3f:15:48:e3:52:e5:78:e6:10:
                    32:a0:bc:54:1c:1a:54:a1:15:74:44:6e:c0:f6:31:
                    81:8e:12:c1:22:85:b9:e7:4f:20:e3:5a:3d:ea:12:
                    97:d1:57:f7:e7:7c:f7:0c:ff:eb:c3:41:73:bf:5a:
                    5b:c5:a1:5e:30:f3:38:55:9d:53:6b:17:e3:cc:65:
                    4a:15:da:52:b3:19:aa:75:fd:d1:fc:2c:93:0b:31:
                    2f:2e:08:84:72:93:76:7b:44:fc:a0:e0:3d:a0:cc:
                    de:2d:32:71:0b:27:ba:40:f4:46:0f:fa:d7:21:0b:
                    99:89:7f:84:fe:1d:d8:70:76:90:de:ac:bc:4e:95:
                    84:a7:18:6e:31:00:f0:17:19:7d:c9:52:36:4c:ee:
                    fa:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:92:22:EC:0F:23:D4:A0:24:83:2D:87:7D:EA:0A:28:F2:4F:D7:1B
            X509v3 Authority Key Identifier:
                keyid:59:77:34:A2:61:58:D7:7A:6E:D0:22:22:DF:93:D1:CE:2B:D6:EA:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/70da5882-b804-4154-959b-6336b24e18b2/0/597734A26158D77A6ED02222DF93D1CE2BD6EA03.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/597734A26158D77A6ED02222DF93D1CE2BD6EA03.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/70da5882-b804-4154-959b-6336b24e18b2/0/3130332e3137302e3139382e302f32342d3234203d3e20313530343634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.170.198.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:fc:63:35:93:5f:49:6e:5d:7d:f0:fb:92:21:bf:7b:f9:91:
         b8:a2:9b:c2:25:b6:0e:61:6c:14:88:25:9b:7b:bd:56:a9:20:
         b7:32:0d:a6:41:32:27:ca:41:04:93:18:d2:ae:25:0b:4c:37:
         52:d6:77:fb:38:40:3e:5d:d4:cb:14:8e:68:e0:2a:e5:a6:65:
         a3:99:4b:27:b2:70:17:17:a8:72:a3:9e:94:12:0b:ae:8d:f4:
         1a:1c:a1:a3:82:66:67:70:88:f6:34:99:af:23:20:ee:86:8a:
         8f:e2:22:89:31:ed:13:0e:9e:05:3d:b2:2c:fc:a7:58:69:de:
         5e:88:bd:6d:d2:81:44:be:06:c8:b5:b6:dc:09:63:8c:0f:dc:
         5f:f0:f2:3e:ba:4e:73:f9:85:2b:ed:0b:52:e7:de:55:2a:0b:
         97:4b:bc:ee:88:8d:9b:a4:73:f1:60:cf:24:d3:aa:73:6f:ff:
         d3:64:7c:17:7a:71:32:48:ec:e7:bb:cb:6e:2e:e0:35:6a:5a:
         15:7d:26:1e:00:3d:cb:07:c5:b5:83:92:d9:26:52:40:9e:c1:
         86:be:d0:77:59:9c:1b:b7:e7:f8:d9:c4:85:24:7a:e3:a2:12:
         17:ba:08:80:ad:63:72:60:bb:03:70:20:47:15:8b:cd:b9:45:
         16:7e:54:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 19:50:41 2025 by rpki-client on console.sobornost.net