Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/7b3eabb4-4db3-4373-a348-fb1ed7055651/0/3130332e3135302e36302e302f32342d3234203d3e20313430333839.roa
File:                     3130332e3135302e36302e302f32342d3234203d3e20313430333839.roa (raw, json)
Hash identifier:          4ZQwGn11qHNiVrKpaqE6sqxjVoPVYCbt4H6xntr7VWc=
Subject key identifier:   6D:67:4E:8D:14:AD:A1:D1:B3:7C:C2:74:AF:CB:CE:21:EB:3B:24:B9
Certificate issuer:       /CN=5C413D56294D9D20E64978B7296A9DA893C32CAB
Certificate serial:       3BC2C903BC70B380D4A6C9F563EC15FA9B01BA61
Authority key identifier: 5C:41:3D:56:29:4D:9D:20:E6:49:78:B7:29:6A:9D:A8:93:C3:2C:AB
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C413D56294D9D20E64978B7296A9DA893C32CAB.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/7b3eabb4-4db3-4373-a348-fb1ed7055651/0/3130332e3135302e36302e302f32342d3234203d3e20313430333839.roa
Signing time:             Fri 14 Mar 2025 19:00:01 +0000
ROA not before:           Fri 14 Mar 2025 18:55:01 +0000
ROA not after:            Fri 13 Mar 2026 19:00:01 +0000
asID:                     140389
IP address blocks:        103.150.60.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/7b3eabb4-4db3-4373-a348-fb1ed7055651/0/5C413D56294D9D20E64978B7296A9DA893C32CAB.crl
                          rsync://repo-rpki.idnic.net/repo/7b3eabb4-4db3-4373-a348-fb1ed7055651/0/5C413D56294D9D20E64978B7296A9DA893C32CAB.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C413D56294D9D20E64978B7296A9DA893C32CAB.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Apr 2025 13:07:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:c2:c9:03:bc:70:b3:80:d4:a6:c9:f5:63:ec:15:fa:9b:01:ba:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5C413D56294D9D20E64978B7296A9DA893C32CAB
        Validity
            Not Before: Mar 14 18:55:01 2025 GMT
            Not After : Mar 13 19:00:01 2026 GMT
        Subject: CN=6D674E8D14ADA1D1B37CC274AFCBCE21EB3B24B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:d7:b2:70:62:cc:79:1a:b1:51:bc:70:9c:e2:
                    d4:df:6e:1e:f1:36:6a:63:89:cc:6f:fc:0c:8e:68:
                    45:6d:9e:ca:0d:82:27:bd:a2:a0:91:71:ad:6a:9c:
                    57:c8:0d:93:4f:5e:56:29:ee:64:8c:d0:78:44:97:
                    e6:65:45:47:ee:39:28:b2:1b:88:4e:2f:3d:1b:ed:
                    a1:c9:3d:da:4a:6a:9f:1c:7d:3b:43:6d:2a:82:0e:
                    c0:14:d9:18:c6:9a:1f:50:99:b2:20:96:81:30:e0:
                    0b:2e:8e:e7:ca:61:a5:b0:dd:11:17:c9:8e:bd:44:
                    74:80:c2:67:69:69:1b:ae:b2:5d:95:83:4a:da:ce:
                    df:1b:37:64:68:d2:94:cb:33:63:9c:e5:22:67:2f:
                    0d:88:81:54:3e:18:42:e0:3f:4a:40:18:f8:c7:7e:
                    0a:48:f5:75:8b:4d:d5:21:b3:9e:ed:5b:c8:82:eb:
                    f2:da:45:d6:60:8c:ad:84:79:dd:37:68:f9:c9:68:
                    85:44:67:f2:5b:ff:7e:a9:90:3c:4e:e3:33:66:d0:
                    05:ee:68:b6:ec:8c:72:a1:aa:7b:1f:b9:38:1f:eb:
                    09:eb:37:02:ef:d1:62:e4:78:9e:9d:6f:15:b2:99:
                    bf:d8:f9:ab:a7:07:0d:49:88:13:5a:ef:23:13:f0:
                    3f:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:67:4E:8D:14:AD:A1:D1:B3:7C:C2:74:AF:CB:CE:21:EB:3B:24:B9
            X509v3 Authority Key Identifier:
                keyid:5C:41:3D:56:29:4D:9D:20:E6:49:78:B7:29:6A:9D:A8:93:C3:2C:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/7b3eabb4-4db3-4373-a348-fb1ed7055651/0/5C413D56294D9D20E64978B7296A9DA893C32CAB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C413D56294D9D20E64978B7296A9DA893C32CAB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7b3eabb4-4db3-4373-a348-fb1ed7055651/0/3130332e3135302e36302e302f32342d3234203d3e20313430333839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.150.60.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c0:88:bb:70:61:ce:21:4c:55:66:e4:a4:dc:c6:0a:4d:18:7f:
         ad:1a:21:2a:f6:b2:3f:79:21:77:ae:b8:5b:a3:5d:be:0e:be:
         86:a8:ff:70:58:95:ef:c2:54:ab:41:c7:1e:17:bc:3c:75:98:
         cb:32:b1:80:14:c3:c6:20:63:98:a0:c4:9a:ce:bd:27:2f:ff:
         c5:6d:b7:0c:7e:09:17:14:fd:5d:05:91:88:71:78:0f:bd:ea:
         a6:0f:64:4d:86:e0:5b:a0:ad:95:8e:6e:c8:ca:a4:db:4d:b1:
         66:75:bf:4e:27:1f:4e:fa:9a:f4:a8:e4:86:c4:a9:dd:cb:55:
         26:c7:d4:01:88:f6:67:ef:8e:7f:fb:3e:9f:cf:1f:11:db:6d:
         ec:08:4c:3e:22:a5:9f:c5:b2:e3:a4:ca:69:e9:96:7a:ee:c5:
         13:f4:7b:26:26:39:57:22:69:0d:be:e9:1c:7e:4f:c4:08:62:
         61:29:bf:9f:68:5a:5e:1a:88:80:e1:6b:4d:c9:78:f7:f4:d7:
         bf:d9:6a:74:f1:34:f4:3c:f9:69:85:37:71:43:67:e4:20:ce:
         0d:38:be:7c:b9:dd:5e:1a:db:2f:bc:b1:06:e8:f3:94:b0:ff:
         4a:b7:cc:fa:c0:24:ab:ea:ae:3a:1b:d4:6d:0c:5a:98:17:4d:
         1e:41:f6:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:36:40 2025 by rpki-client on console.sobornost.net