Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3230332e38392e3134362e302f32332d3234203d3e2039333431.roa
File:                     3230332e38392e3134362e302f32332d3234203d3e2039333431.roa (raw, json)
Hash identifier:          Q8nuJeq7u8l5Q0cXqBE3i2dEbrm4wt3jT4DJr72raHs=
Subject key identifier:   3F:37:5F:72:64:DB:B0:10:EC:07:E9:6C:D9:30:24:47:32:88:35:7E
Certificate issuer:       /CN=61566F205F7037962069571320603B274357CC6D
Certificate serial:       16396B110C5949A365B3DD515838345CD8D2F781
Authority key identifier: 61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3230332e38392e3134362e302f32332d3234203d3e2039333431.roa
Signing time:             Thu 24 Apr 2025 01:00:01 +0000
ROA not before:           Thu 24 Apr 2025 00:55:01 +0000
ROA not after:            Thu 23 Apr 2026 01:00:01 +0000
asID:                     9341
IP address blocks:        203.89.146.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.crl
                          rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Apr 2025 03:30:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:39:6b:11:0c:59:49:a3:65:b3:dd:51:58:38:34:5c:d8:d2:f7:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61566F205F7037962069571320603B274357CC6D
        Validity
            Not Before: Apr 24 00:55:01 2025 GMT
            Not After : Apr 23 01:00:01 2026 GMT
        Subject: CN=3F375F7264DBB010EC07E96CD93024473288357E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:5a:19:72:34:bc:9c:f6:4f:29:88:30:fd:47:
                    cf:1a:0c:6c:26:31:24:b6:be:57:9b:3d:7f:f4:0b:
                    90:1f:68:01:0c:65:16:89:d8:e1:5e:fb:a4:f8:31:
                    c6:00:52:85:d9:1f:29:0a:9c:22:d0:c6:7b:59:cf:
                    fb:c8:3f:96:df:c0:b2:2a:89:dc:0c:5b:58:72:a0:
                    73:9d:f6:35:ab:a2:4a:6d:39:c8:cb:ca:7c:2d:5a:
                    fe:28:72:43:e0:9d:f9:74:a3:f5:9e:ff:a4:63:28:
                    7a:22:6c:e6:6c:67:20:99:3f:cf:d9:7e:df:7c:b7:
                    16:12:ce:cf:3a:1c:b4:c8:fd:3b:c9:69:cb:fd:8c:
                    2e:fa:f6:5c:fb:36:29:d2:6e:5d:86:df:3e:89:99:
                    56:bb:46:72:8f:47:19:30:31:3c:ec:90:0d:d6:1f:
                    89:57:5f:84:d3:83:c0:39:8f:75:a8:70:5c:72:36:
                    6a:ab:f1:46:29:6c:a1:70:74:68:0d:4a:f9:70:9a:
                    2c:e1:13:f8:8a:0b:d7:e9:41:67:eb:84:f1:c4:32:
                    37:ea:21:22:9c:37:1b:c6:ea:21:23:c5:6d:0b:8e:
                    a9:0e:f1:59:ed:d3:49:3c:71:2c:e3:bd:76:2a:c5:
                    3f:ec:1a:33:07:e5:bc:83:4a:3c:6a:fc:e8:6f:60:
                    5e:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:37:5F:72:64:DB:B0:10:EC:07:E9:6C:D9:30:24:47:32:88:35:7E
            X509v3 Authority Key Identifier:
                keyid:61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3230332e38392e3134362e302f32332d3234203d3e2039333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.89.146.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a3:d4:19:0d:62:fd:e1:4c:08:68:a8:6e:a3:01:09:4b:83:03:
         da:44:92:b9:96:9e:3a:14:c9:f1:86:b1:b2:c6:7f:fd:63:bd:
         a7:36:c6:d1:9d:f9:69:a1:8d:4d:92:95:76:bc:c1:1f:4b:61:
         46:6f:49:3a:ca:88:7e:8e:3c:32:20:03:87:f3:7e:d2:ea:0d:
         63:b2:55:a8:29:e7:d0:5a:c9:5a:a5:9e:49:50:68:b0:36:a8:
         71:c1:d5:32:34:a4:af:06:77:8d:0e:71:01:81:f4:eb:d1:c8:
         aa:01:a8:cd:05:3f:1c:f2:f7:21:3e:fa:bb:bc:93:c3:81:fd:
         0a:9c:fd:a8:97:ca:8f:00:25:a0:69:9b:db:92:c0:33:ce:40:
         aa:b3:fe:f7:c1:41:0a:9f:cf:ec:39:fe:94:23:22:ce:fe:ef:
         be:f6:93:ef:59:53:55:19:b9:d0:de:56:a9:fb:1c:0f:82:6e:
         c4:f1:4e:48:fb:96:cc:c7:3c:1f:88:5c:3d:2c:b2:53:d4:0a:
         15:19:b3:06:63:37:ef:39:1d:74:78:6d:9f:ea:ac:1b:43:9e:
         56:51:7f:1b:5a:8d:cb:07:79:0d:1f:0e:0b:8e:f3:e3:bf:80:
         79:73:cd:82:7a:e2:72:cb:c9:e9:a8:1a:4c:37:7c:6c:84:36:
         fd:4a:6f:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 04:31:38 2025 by rpki-client on console.sobornost.net