Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/7f3404e6-bb2a-44b0-bede-a8b35014612d/0/3130332e3130382e3139302e302f32342d3234203d3e20313336313031.roa
File:                     3130332e3130382e3139302e302f32342d3234203d3e20313336313031.roa (raw, json)
Hash identifier:          T2D7Ik57LWitANbUBj1vncC8ew04uMky94+sr3cdwuM=
Subject key identifier:   65:A0:47:69:83:72:B7:B9:DF:09:2D:B4:B6:5B:0A:2D:3D:BA:8E:19
Certificate issuer:       /CN=0104E70C07F39CF9F3B1D592DF9043B5EABBD171
Certificate serial:       7568CEC3E4DB8CCEA6CEE36BD2683876511B91AF
Authority key identifier: 01:04:E7:0C:07:F3:9C:F9:F3:B1:D5:92:DF:90:43:B5:EA:BB:D1:71
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0104E70C07F39CF9F3B1D592DF9043B5EABBD171.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/7f3404e6-bb2a-44b0-bede-a8b35014612d/0/3130332e3130382e3139302e302f32342d3234203d3e20313336313031.roa
Signing time:             Thu 17 Apr 2025 03:02:24 +0000
ROA not before:           Thu 17 Apr 2025 02:57:24 +0000
ROA not after:            Thu 16 Apr 2026 03:02:24 +0000
asID:                     136101
IP address blocks:        103.108.190.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/7f3404e6-bb2a-44b0-bede-a8b35014612d/0/0104E70C07F39CF9F3B1D592DF9043B5EABBD171.crl
                          rsync://repo-rpki.idnic.net/repo/7f3404e6-bb2a-44b0-bede-a8b35014612d/0/0104E70C07F39CF9F3B1D592DF9043B5EABBD171.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0104E70C07F39CF9F3B1D592DF9043B5EABBD171.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Apr 2025 08:10:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:68:ce:c3:e4:db:8c:ce:a6:ce:e3:6b:d2:68:38:76:51:1b:91:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0104E70C07F39CF9F3B1D592DF9043B5EABBD171
        Validity
            Not Before: Apr 17 02:57:24 2025 GMT
            Not After : Apr 16 03:02:24 2026 GMT
        Subject: CN=65A047698372B7B9DF092DB4B65B0A2D3DBA8E19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:cf:59:a9:70:8e:b2:4a:03:8c:84:c2:1d:91:
                    64:6f:6b:1c:17:30:9e:7e:80:b1:7a:c3:f4:df:37:
                    ea:ab:e9:9f:9f:40:9e:65:16:e3:d9:ab:c5:13:5b:
                    92:fe:89:99:d7:e1:91:69:33:41:0f:a4:ee:40:37:
                    a0:ea:bf:d4:36:0b:34:da:61:b5:62:9f:4e:b9:ea:
                    20:8a:dc:25:ce:76:7e:19:a7:34:8c:75:a2:56:0d:
                    b1:b9:a7:ca:a3:68:78:22:c0:d5:35:b2:86:1f:ef:
                    3d:69:4c:43:f9:35:88:84:ad:25:98:6f:0c:c2:2d:
                    c1:29:d8:a7:88:53:02:87:44:36:8b:1d:38:c3:24:
                    ee:0d:6f:62:b0:31:b5:8f:d9:31:81:9f:af:af:86:
                    ee:ff:44:ca:d3:46:9a:42:40:46:d1:fd:f7:74:c4:
                    e8:12:a8:31:d4:cd:30:2d:d2:ba:c7:c8:63:ac:00:
                    6a:c8:d0:2b:fe:52:75:48:d6:8f:72:99:25:01:33:
                    77:1c:2b:f3:20:3f:d6:9c:fe:f6:81:eb:53:e4:7c:
                    39:c9:30:b0:2d:b1:ae:36:27:0a:61:3a:22:32:1a:
                    b2:d9:b4:cb:16:2e:63:41:5b:2e:3a:26:97:fb:ab:
                    6d:5b:6f:6a:da:f7:1f:d7:69:fb:90:8a:41:1a:8b:
                    e1:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:A0:47:69:83:72:B7:B9:DF:09:2D:B4:B6:5B:0A:2D:3D:BA:8E:19
            X509v3 Authority Key Identifier:
                keyid:01:04:E7:0C:07:F3:9C:F9:F3:B1:D5:92:DF:90:43:B5:EA:BB:D1:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/7f3404e6-bb2a-44b0-bede-a8b35014612d/0/0104E70C07F39CF9F3B1D592DF9043B5EABBD171.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0104E70C07F39CF9F3B1D592DF9043B5EABBD171.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7f3404e6-bb2a-44b0-bede-a8b35014612d/0/3130332e3130382e3139302e302f32342d3234203d3e20313336313031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.108.190.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:8a:a3:dd:21:d8:75:a3:73:c8:8b:5f:f4:95:ed:4e:f9:39:
         f9:21:a7:c2:96:0e:63:17:60:86:46:a4:36:54:bc:7e:fe:6f:
         7c:dd:35:dc:ab:6b:a8:fc:65:a0:8a:1c:e7:81:e6:38:7c:bf:
         ec:29:c2:e0:18:c6:30:ec:00:aa:d2:f7:5a:4f:2c:11:07:a4:
         7a:09:32:9d:eb:74:67:2c:d3:d6:b5:27:ee:d9:00:ba:78:2b:
         aa:09:07:5a:47:60:54:92:9c:7d:27:12:93:03:ec:dc:0b:4f:
         10:f9:47:13:af:13:44:11:1e:c4:f1:ad:bf:31:f9:32:e9:06:
         3f:46:6e:76:bf:b9:e6:29:61:ca:44:a7:73:73:11:64:36:8e:
         e5:49:e3:84:65:21:1d:2f:17:d7:17:07:16:60:43:7a:69:17:
         e7:da:35:a7:ea:0c:cf:e8:be:5c:cd:bd:54:b0:a8:a8:92:fd:
         26:78:94:56:62:37:ce:06:4f:aa:a4:8d:ec:a4:24:7a:2a:df:
         95:aa:d4:0d:3c:91:5c:09:51:5d:28:02:3a:6e:cf:3d:33:48:
         1b:4e:ea:c0:d2:82:d0:72:54:d2:58:5e:d7:58:b9:44:03:57:
         75:eb:94:70:50:a6:f1:6f:1f:8c:0d:a1:46:9d:62:9e:01:bb:
         e1:44:66:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 04:31:38 2025 by rpki-client on console.sobornost.net