Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/3130332e32312e3231362e302f32322d3234203d3e2039393035.roa
File:                     3130332e32312e3231362e302f32322d3234203d3e2039393035.roa (raw, json)
Hash identifier:          8eevJS9pxrM3fHDZO0I++OgKsjlzEGpxSrMYJVpjJC4=
Subject key identifier:   6F:26:6C:2F:36:44:1A:6B:11:D6:F6:BA:41:70:4C:31:8D:F0:35:C7
Certificate issuer:       /CN=782637B58B8E07EC64A0FAAE1769AF17AF0999E7
Certificate serial:       4243BA6CAC102B0C842DE66ACC1D8802AAA64D5A
Authority key identifier: 78:26:37:B5:8B:8E:07:EC:64:A0:FA:AE:17:69:AF:17:AF:09:99:E7
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/782637B58B8E07EC64A0FAAE1769AF17AF0999E7.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/3130332e32312e3231362e302f32322d3234203d3e2039393035.roa
Signing time:             Wed 16 Apr 2025 23:00:01 +0000
ROA not before:           Wed 16 Apr 2025 22:55:01 +0000
ROA not after:            Wed 15 Apr 2026 23:00:01 +0000
asID:                     9905
IP address blocks:        103.21.216.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/782637B58B8E07EC64A0FAAE1769AF17AF0999E7.crl
                          rsync://repo-rpki.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/782637B58B8E07EC64A0FAAE1769AF17AF0999E7.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/782637B58B8E07EC64A0FAAE1769AF17AF0999E7.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Apr 2025 22:39:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:43:ba:6c:ac:10:2b:0c:84:2d:e6:6a:cc:1d:88:02:aa:a6:4d:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=782637B58B8E07EC64A0FAAE1769AF17AF0999E7
        Validity
            Not Before: Apr 16 22:55:01 2025 GMT
            Not After : Apr 15 23:00:01 2026 GMT
        Subject: CN=6F266C2F36441A6B11D6F6BA41704C318DF035C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:46:42:74:0f:9e:50:cd:dd:6d:8e:dc:6b:46:
                    95:3a:b3:1e:1d:2f:6a:c6:59:15:09:d1:63:21:5f:
                    96:02:8d:03:ca:36:8c:95:52:fd:a9:00:b2:37:75:
                    c0:09:1c:90:97:54:b3:7c:d5:9a:e7:9e:47:c3:ed:
                    f7:f2:74:4f:33:ee:69:ad:79:c2:26:1b:a6:cb:dc:
                    df:f9:b2:ef:b7:fc:c2:14:d0:38:79:00:dd:06:f3:
                    d8:58:96:d9:82:90:7a:d5:ef:d0:6c:fa:42:6c:97:
                    64:75:9e:a7:99:c7:54:2c:e0:f1:02:43:89:2c:a8:
                    8d:70:bd:1f:06:bb:10:51:24:c2:f6:e9:80:58:21:
                    e9:94:2b:00:94:c7:02:ba:00:3a:2a:5f:b7:46:1e:
                    d6:ca:db:19:51:84:84:33:e4:fc:42:e8:8b:78:42:
                    50:90:18:5e:67:33:0f:e1:3c:e7:24:b5:6d:ee:b1:
                    5e:bd:38:61:99:49:25:7a:3f:52:fe:e8:a4:51:e3:
                    35:7e:fc:99:89:19:84:5b:4c:57:f6:bb:b7:bf:5f:
                    be:90:84:96:dc:fd:62:a0:76:25:c1:12:6e:fd:bb:
                    b9:e8:ca:d2:15:fa:f5:de:0f:a2:5a:75:f4:76:a8:
                    9c:32:8b:9e:d5:1c:13:ec:bb:43:58:75:55:21:b2:
                    ab:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:26:6C:2F:36:44:1A:6B:11:D6:F6:BA:41:70:4C:31:8D:F0:35:C7
            X509v3 Authority Key Identifier:
                keyid:78:26:37:B5:8B:8E:07:EC:64:A0:FA:AE:17:69:AF:17:AF:09:99:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/782637B58B8E07EC64A0FAAE1769AF17AF0999E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/782637B58B8E07EC64A0FAAE1769AF17AF0999E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/3130332e32312e3231362e302f32322d3234203d3e2039393035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.21.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         90:81:2a:eb:91:1c:ee:6d:90:7a:21:6f:77:09:d9:27:f6:90:
         5f:7a:e2:4c:bd:7e:60:90:d7:0d:50:c4:1a:e0:6f:0a:6d:57:
         e9:f6:2d:28:20:8a:a7:1e:00:1b:d7:5e:be:75:b8:09:1e:ed:
         ab:3a:c6:bc:84:f6:a3:77:bb:cb:be:65:85:44:67:f4:1a:e8:
         41:18:56:b3:0f:6f:9e:6d:61:13:a8:28:b9:5f:1d:2b:80:c5:
         4d:34:69:33:96:69:10:cf:84:6d:69:e1:aa:fd:33:65:d3:9c:
         bd:21:f3:e9:dc:c5:e4:ec:25:ca:17:9f:94:66:1c:84:39:95:
         a3:99:53:de:6a:f3:4b:b0:9a:8f:c8:27:03:4f:94:86:04:6b:
         b8:be:a6:02:eb:b9:6d:02:4c:2d:15:13:7a:4f:e9:29:ac:e3:
         81:c9:25:f7:76:3e:76:23:e3:d7:a4:0c:88:bf:55:4b:4c:f6:
         b0:3f:b9:b9:a5:62:2d:5d:ab:bd:7f:6c:be:12:50:f9:40:53:
         69:a0:ab:86:04:c9:ad:a3:51:5e:68:72:66:9e:61:49:51:42:
         3f:e6:f4:9f:63:31:b9:79:40:25:4e:8e:38:4f:98:d2:fd:06:
         e1:ae:d1:79:96:ce:b9:74:01:81:78:56:8a:c0:84:db:cb:c7:
         cc:ea:c2:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 01:45:13 2025 by rpki-client on console.sobornost.net