Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/832c823d-a4b7-4005-9ab8-d3b2c8bbf763/0/3130332e3136392e3139342e302f32342d3234203d3e20313432333536.roa
File:                     3130332e3136392e3139342e302f32342d3234203d3e20313432333536.roa (raw, json)
Hash identifier:          /JgZ/3Dc8d37h8AUWlmBK2pFzp3Z0endISYcFZpQbYk=
Subject key identifier:   24:D0:3A:72:FB:2E:74:9A:86:77:5A:0B:8E:A5:D7:F1:D3:3B:F8:7D
Certificate issuer:       /CN=9BFE3F2FE97677A590AC77278DA8666C8389D7BF
Certificate serial:       63059BA259005C50F3CDB9B3BD0F1BB0A473A708
Authority key identifier: 9B:FE:3F:2F:E9:76:77:A5:90:AC:77:27:8D:A8:66:6C:83:89:D7:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9BFE3F2FE97677A590AC77278DA8666C8389D7BF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/832c823d-a4b7-4005-9ab8-d3b2c8bbf763/0/3130332e3136392e3139342e302f32342d3234203d3e20313432333536.roa
Signing time:             Thu 03 Apr 2025 12:00:41 +0000
ROA not before:           Thu 03 Apr 2025 11:55:41 +0000
ROA not after:            Thu 02 Apr 2026 12:00:41 +0000
asID:                     142356
IP address blocks:        103.169.194.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/832c823d-a4b7-4005-9ab8-d3b2c8bbf763/0/9BFE3F2FE97677A590AC77278DA8666C8389D7BF.crl
                          rsync://repo-rpki.idnic.net/repo/832c823d-a4b7-4005-9ab8-d3b2c8bbf763/0/9BFE3F2FE97677A590AC77278DA8666C8389D7BF.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9BFE3F2FE97677A590AC77278DA8666C8389D7BF.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Apr 2025 09:52:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:05:9b:a2:59:00:5c:50:f3:cd:b9:b3:bd:0f:1b:b0:a4:73:a7:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BFE3F2FE97677A590AC77278DA8666C8389D7BF
        Validity
            Not Before: Apr  3 11:55:41 2025 GMT
            Not After : Apr  2 12:00:41 2026 GMT
        Subject: CN=24D03A72FB2E749A86775A0B8EA5D7F1D33BF87D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:14:aa:98:22:63:02:03:3b:41:90:ac:87:d0:
                    11:84:91:05:69:a9:ff:9e:8e:e9:68:05:b6:39:cf:
                    6d:01:fb:18:86:07:16:d7:ab:d8:82:82:83:5c:13:
                    da:11:bb:0a:57:8e:d6:11:df:d5:ed:f9:f1:9c:bd:
                    1f:2f:8e:3e:fc:e2:d8:77:d6:ef:06:cd:42:2b:2e:
                    34:b3:2e:94:40:78:72:da:b0:7c:2d:8f:37:87:85:
                    db:ec:13:87:6c:bb:a1:47:81:3b:20:dc:38:4d:99:
                    99:22:a4:ca:6c:53:65:64:f2:c4:a9:59:51:33:ba:
                    0a:5d:fc:a7:46:04:5d:b0:54:f3:6d:ff:38:73:0c:
                    6e:4f:d0:94:12:eb:b1:c2:94:aa:c3:64:08:e0:42:
                    09:27:60:78:a0:3e:06:f3:a8:73:39:59:1c:c8:93:
                    9b:37:be:c7:cb:39:e5:a3:0c:a7:53:86:c7:bc:59:
                    22:06:77:55:49:28:6b:30:6d:50:b6:eb:0e:ad:cf:
                    98:31:57:88:3d:18:21:ad:4e:26:f6:86:b6:9b:b8:
                    af:f8:c4:9f:38:76:52:0f:4b:c3:04:3d:19:05:3e:
                    af:19:55:53:c3:49:ef:fa:02:8c:3e:aa:0d:54:87:
                    62:d1:88:7d:ce:5d:d3:33:fe:73:18:68:a4:56:61:
                    26:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:D0:3A:72:FB:2E:74:9A:86:77:5A:0B:8E:A5:D7:F1:D3:3B:F8:7D
            X509v3 Authority Key Identifier:
                keyid:9B:FE:3F:2F:E9:76:77:A5:90:AC:77:27:8D:A8:66:6C:83:89:D7:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/832c823d-a4b7-4005-9ab8-d3b2c8bbf763/0/9BFE3F2FE97677A590AC77278DA8666C8389D7BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9BFE3F2FE97677A590AC77278DA8666C8389D7BF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/832c823d-a4b7-4005-9ab8-d3b2c8bbf763/0/3130332e3136392e3139342e302f32342d3234203d3e20313432333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.169.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:91:dc:c0:8d:c8:c8:76:d6:4e:21:a3:59:3a:13:9d:62:04:
         3d:26:f1:23:ba:f3:c6:e6:c7:14:67:32:5a:df:66:6b:10:f9:
         5f:fe:41:3d:45:b3:d6:aa:49:8a:e8:36:de:d5:48:7b:fa:89:
         1d:20:74:d1:dd:2b:a0:52:3e:4e:67:cf:d2:09:c7:ee:cd:77:
         31:db:e4:14:56:e4:49:75:a3:d8:aa:d5:07:40:6f:ea:a4:d4:
         58:99:6e:ad:ce:e6:b9:f0:0e:fa:25:74:eb:c7:99:50:0e:aa:
         5a:49:e5:31:d3:b7:bf:fe:cb:c6:31:14:cc:d9:c6:ad:38:2e:
         20:af:71:6e:2c:8e:69:44:3d:1d:9b:b6:b8:4a:ad:82:0e:04:
         0b:ca:c4:29:94:dd:60:e1:5b:f2:78:cb:78:95:87:34:4b:e2:
         fa:12:1b:05:7b:22:28:94:d2:9e:16:e9:73:d4:ca:7a:67:ea:
         c2:74:cd:e4:79:52:5c:c8:3c:9d:af:2b:3c:56:49:6b:3d:3d:
         74:aa:9b:dc:ee:5e:5f:f1:46:76:05:dc:b9:27:66:7e:e5:9e:
         88:63:2f:35:bb:ec:7f:f2:be:da:e6:d0:4a:90:38:ef:09:db:
         8b:27:f5:36:01:d9:d5:08:4c:03:27:1c:d0:4a:45:9d:26:b4:
         fd:5a:72:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:46:12 2025 by rpki-client on console.sobornost.net