Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3130332e3230362e3234302e302f32322d3234203d3e2039333431.roa
File:                     3130332e3230362e3234302e302f32322d3234203d3e2039333431.roa (raw, json)
Hash identifier:          WFwLbu82eDfKkzO9fL559RlfcHAyVW8VZIUbOGe3XKo=
Subject key identifier:   84:96:BB:D1:3B:33:A0:15:55:B4:1B:23:CE:E1:3D:CB:71:C4:54:A8
Certificate issuer:       /CN=61566F205F7037962069571320603B274357CC6D
Certificate serial:       11F177962D4C8BDB38E116B19B65316D031E0148
Authority key identifier: 61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3130332e3230362e3234302e302f32322d3234203d3e2039333431.roa
Signing time:             Thu 24 Apr 2025 01:00:01 +0000
ROA not before:           Thu 24 Apr 2025 00:55:01 +0000
ROA not after:            Thu 23 Apr 2026 01:00:01 +0000
asID:                     9341
IP address blocks:        103.206.240.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.crl
                          rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Apr 2025 03:30:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:f1:77:96:2d:4c:8b:db:38:e1:16:b1:9b:65:31:6d:03:1e:01:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61566F205F7037962069571320603B274357CC6D
        Validity
            Not Before: Apr 24 00:55:01 2025 GMT
            Not After : Apr 23 01:00:01 2026 GMT
        Subject: CN=8496BBD13B33A01555B41B23CEE13DCB71C454A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:8e:1a:3e:29:ad:89:38:79:03:01:6d:46:c1:
                    66:17:9c:1e:8d:7a:ab:55:60:fd:f9:27:73:5f:04:
                    a5:01:72:1c:0d:c0:0b:01:43:4f:9d:25:42:63:e0:
                    52:c5:ef:ca:0f:45:62:6d:f0:b8:39:d1:6f:66:b6:
                    50:d7:76:f4:0c:38:aa:21:85:ea:26:5b:b6:96:a7:
                    85:02:d9:e0:ec:3d:0a:ae:b1:17:64:71:a0:97:83:
                    fe:9a:00:a8:ac:98:4f:9f:bc:6b:6b:10:fd:ea:17:
                    58:49:a5:a5:68:4f:52:80:7c:eb:c3:a5:d6:7c:d4:
                    02:79:f0:6e:49:22:ae:7f:c8:de:36:5d:3d:95:48:
                    d8:9a:c0:a6:1f:37:c9:ab:79:dd:bd:18:a4:d9:16:
                    f3:df:d5:cd:9c:fe:2b:95:fd:4a:f4:9a:6b:8b:70:
                    4f:85:13:82:03:d0:c2:57:72:24:26:10:d8:f3:e6:
                    fa:8b:b9:83:77:29:0f:4b:30:10:ab:d3:32:56:a2:
                    73:b0:74:84:25:ee:36:f7:9d:b7:f4:6b:11:bb:e3:
                    b3:ad:1c:f6:1a:c0:d3:e1:b8:17:9c:99:3a:63:3a:
                    e2:15:2c:f1:36:88:fc:58:0d:e9:29:5f:2e:47:bf:
                    a1:de:ad:37:9d:26:97:7b:3d:f9:b0:1f:8c:24:eb:
                    5b:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:96:BB:D1:3B:33:A0:15:55:B4:1B:23:CE:E1:3D:CB:71:C4:54:A8
            X509v3 Authority Key Identifier:
                keyid:61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3130332e3230362e3234302e302f32322d3234203d3e2039333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.206.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         47:73:e7:b8:34:3b:ad:9f:eb:9e:29:89:ed:9c:b5:6d:b1:95:
         be:04:b6:a5:2d:9f:ca:32:7c:72:30:45:d7:0d:a8:dc:99:18:
         68:a4:69:df:38:de:18:d5:ba:eb:13:3c:f3:2f:1f:e4:03:f4:
         da:89:a3:0e:93:23:4e:01:40:e0:7b:28:29:c4:86:ae:f3:8e:
         aa:03:45:be:4e:9d:57:2a:79:92:b7:33:29:1e:93:ed:d2:83:
         f5:a9:50:29:2c:9d:81:e2:4b:49:d5:31:12:00:3f:9d:3b:91:
         47:62:64:fb:aa:a6:1d:c1:d4:93:02:ab:87:4f:ae:47:d3:c5:
         17:44:6e:87:f1:27:34:93:d6:8e:30:3c:46:eb:4f:0c:1c:63:
         db:76:63:87:c7:0d:ef:e6:67:b0:24:0c:aa:04:cd:85:7e:de:
         47:32:a3:bf:f6:90:d3:58:62:b0:25:3e:67:ed:81:47:3f:5e:
         c7:8e:ea:c8:07:5b:58:54:b9:e0:80:98:a8:bb:df:83:b5:c8:
         a9:e4:83:ab:d7:2a:10:b0:52:15:a5:2d:df:f6:9e:6e:41:a0:
         ec:1f:9b:18:15:fb:de:b5:7c:bb:41:42:56:96:85:71:de:08:
         3b:5a:56:5a:01:f8:2d:61:60:8e:76:0f:4e:ef:ce:69:8e:93:
         e5:05:89:32
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUEfF3li1Mi9s44Raxm2UxbQMeAUgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjE1NjZGMjA1RjcwMzc5NjIwNjk1NzEzMjA2MDNCMjc0
MzU3Q0M2RDAeFw0yNTA0MjQwMDU1MDFaFw0yNjA0MjMwMTAwMDFaMDMxMTAvBgNV
BAMTKDg0OTZCQkQxM0IzM0EwMTU1NUI0MUIyM0NFRTEzRENCNzFDNDU0QTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnjho+Ka2JOHkDAW1GwWYXnB6N
eqtVYP35J3NfBKUBchwNwAsBQ0+dJUJj4FLF78oPRWJt8Lg50W9mtlDXdvQMOKoh
heomW7aWp4UC2eDsPQqusRdkcaCXg/6aAKismE+fvGtrEP3qF1hJpaVoT1KAfOvD
pdZ81AJ58G5JIq5/yN42XT2VSNiawKYfN8mred29GKTZFvPf1c2c/iuV/Ur0mmuL
cE+FE4ID0MJXciQmENjz5vqLuYN3KQ9LMBCr0zJWonOwdIQl7jb3nbf0axG747Ot
HPYawNPhuBecmTpjOuIVLPE2iPxYDekpXy5Hv6HerTedJpd7PfmwH4wk61svAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUhJa70TszoBVVtBsjzuE9y3HEVKgwHwYDVR0j
BBgwFoAUYVZvIF9wN5YgaVcTIGA7J0NXzG0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83
M2JkY2JhZS0yZTlkLTRmM2YtOGFiOS0zNDI0ZTQ0ODQ4NGUvMC82MTU2NkYyMDVG
NzAzNzk2MjA2OTU3MTMyMDYwM0IyNzQzNTdDQzZELmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNjE1NjZGMjA1RjcwMzc5NjIwNjk1NzEzMjA2MDNCMjc0MzU3
Q0M2RC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzczYmRjYmFlLTJlOWQtNGYzZi04
YWI5LTM0MjRlNDQ4NDg0ZS8wLzMxMzAzMzJlMzIzMDM2MmUzMjM0MzAyZTMwMmYz
MjMyMmQzMjM0MjAzZDNlMjAzOTMzMzQzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAmfO8DANBgkqhkiG
9w0BAQsFAAOCAQEAR3PnuDQ7rZ/rnimJ7Zy1bbGVvgS2pS2fyjJ8cjBF1w2o3JkY
aKRp3zjeGNW66xM88y8f5AP02omjDpMjTgFA4HsoKcSGrvOOqgNFvk6dVyp5krcz
KR6T7dKD9alQKSydgeJLSdUxEgA/nTuRR2Jk+6qmHcHUkwKrh0+uR9PFF0Ruh/En
NJPWjjA8RutPDBxj23Zjh8cN7+ZnsCQMqgTNhX7eRzKjv/aQ01hisCU+Z+2BRz9e
x47qyAdbWFS54ICYqLvfg7XIqeSDq9cqELBSFaUt3/aebkGg7B+bGBX73rV8u0FC
VpaFcd4IO1pWWgH4LWFgjnYPTu/OaY6T5QWJMg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 04:31:38 2025 by rpki-client on console.sobornost.net