Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/86f4d4f1-b36c-4a46-8844-4e6c7a3c97d9/0/3130332e37302e31362e302f32342d3234203d3e20313335343632.roa
File:                     3130332e37302e31362e302f32342d3234203d3e20313335343632.roa (raw, json)
Hash identifier:          JiNsqLJvEYFIyhrR6R0JR1hrj3KWiaaB75HG9L5QPcg=
Subject key identifier:   A1:C8:24:D6:AC:27:AF:6F:D1:8C:9C:4F:67:BE:21:65:C1:28:07:44
Certificate issuer:       /CN=27B773A173E0400FBC0D7FEDFCFF7809B53695FC
Certificate serial:       0AC5452940745B7EE659A66891CD3D9A2F7D89C7
Authority key identifier: 27:B7:73:A1:73:E0:40:0F:BC:0D:7F:ED:FC:FF:78:09:B5:36:95:FC
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27B773A173E0400FBC0D7FEDFCFF7809B53695FC.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/86f4d4f1-b36c-4a46-8844-4e6c7a3c97d9/0/3130332e37302e31362e302f32342d3234203d3e20313335343632.roa
Signing time:             Sat 01 Mar 2025 04:02:24 +0000
ROA not before:           Sat 01 Mar 2025 03:57:24 +0000
ROA not after:            Sat 28 Feb 2026 04:02:24 +0000
asID:                     135462
IP address blocks:        103.70.16.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/86f4d4f1-b36c-4a46-8844-4e6c7a3c97d9/0/27B773A173E0400FBC0D7FEDFCFF7809B53695FC.crl
                          rsync://repo-rpki.idnic.net/repo/86f4d4f1-b36c-4a46-8844-4e6c7a3c97d9/0/27B773A173E0400FBC0D7FEDFCFF7809B53695FC.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27B773A173E0400FBC0D7FEDFCFF7809B53695FC.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Apr 2025 01:52:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:c5:45:29:40:74:5b:7e:e6:59:a6:68:91:cd:3d:9a:2f:7d:89:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27B773A173E0400FBC0D7FEDFCFF7809B53695FC
        Validity
            Not Before: Mar  1 03:57:24 2025 GMT
            Not After : Feb 28 04:02:24 2026 GMT
        Subject: CN=A1C824D6AC27AF6FD18C9C4F67BE2165C1280744
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:a9:e8:87:6d:01:08:90:9c:c6:b7:5f:5b:94:
                    61:c5:14:29:7c:25:ba:1c:d0:c5:b1:03:86:cd:39:
                    9a:f5:a7:3a:51:8e:a4:5f:18:3e:a1:74:47:83:6f:
                    d9:84:ff:2a:90:f8:32:1d:72:b6:ce:f8:0d:7e:d1:
                    61:97:88:18:a7:3c:4a:23:c7:bb:25:46:a3:78:d2:
                    42:7f:a7:00:7c:32:45:be:8d:2f:0d:36:a9:db:b2:
                    ff:7b:c7:5a:f0:98:b5:0a:2f:f5:cf:da:84:6a:c3:
                    6c:b9:1b:2f:22:3a:e9:7a:26:b3:a0:23:19:33:9b:
                    d1:fc:56:04:24:e7:1b:a4:c9:8b:3f:f4:35:4a:b9:
                    6a:bd:74:25:d9:86:d2:da:57:9c:a6:82:56:0a:7a:
                    8e:b6:fa:d8:3a:60:fc:2a:f1:ff:d6:17:0a:bf:f6:
                    53:a6:a5:d0:fe:ea:90:ec:9a:54:12:42:01:f9:c5:
                    99:a6:88:5e:eb:e7:89:f0:15:ce:d2:9d:4f:09:8a:
                    7e:95:c7:89:14:56:4b:1f:bb:1b:22:d8:27:fe:01:
                    72:f5:3d:e3:4a:f2:ec:e1:aa:bc:f2:b7:69:ac:85:
                    cf:b3:11:4e:0b:63:29:d9:9a:17:8e:5b:81:75:53:
                    ed:6c:d4:cd:02:d6:e2:ec:9c:90:15:e3:f8:25:2e:
                    c8:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:C8:24:D6:AC:27:AF:6F:D1:8C:9C:4F:67:BE:21:65:C1:28:07:44
            X509v3 Authority Key Identifier:
                keyid:27:B7:73:A1:73:E0:40:0F:BC:0D:7F:ED:FC:FF:78:09:B5:36:95:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/86f4d4f1-b36c-4a46-8844-4e6c7a3c97d9/0/27B773A173E0400FBC0D7FEDFCFF7809B53695FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27B773A173E0400FBC0D7FEDFCFF7809B53695FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/86f4d4f1-b36c-4a46-8844-4e6c7a3c97d9/0/3130332e37302e31362e302f32342d3234203d3e20313335343632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.70.16.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:a1:7f:af:4d:5a:ac:93:91:4c:1d:80:ac:d9:c9:6e:18:24:
         25:9c:33:fb:ea:ed:d0:ac:18:7c:69:1f:74:e2:ec:7e:10:28:
         2d:77:90:5b:38:e7:b0:e6:fb:28:8b:6f:b2:70:60:77:ac:32:
         00:86:5a:1e:95:1e:e8:8d:83:a4:a9:fb:3f:f5:8e:78:3d:2c:
         b5:52:2b:c6:27:2a:c9:7f:d3:f5:29:f5:57:f0:38:79:58:02:
         be:d1:8d:e8:ea:da:58:99:84:5e:5f:a1:a5:73:24:c9:64:98:
         5d:c9:f3:a9:c2:1e:c8:6c:1b:a8:87:70:3c:ef:ed:07:64:aa:
         5a:be:32:a0:bc:97:51:1e:aa:1e:fc:c5:0f:89:75:4a:44:a5:
         82:17:fb:d6:98:83:33:df:bc:4d:94:90:27:75:a7:e9:ad:3a:
         a7:10:31:fd:66:dd:f1:a3:59:92:de:a7:d6:72:a6:a3:2e:e4:
         7d:3e:2d:b5:19:83:c0:bf:d9:4e:c9:bf:26:a3:96:c3:9b:06:
         71:67:4b:3a:32:b3:44:ef:66:a6:5b:ff:d4:ab:87:78:22:83:
         45:29:5a:85:f7:45:b9:d1:dc:fb:80:d7:14:1b:d3:85:8a:3c:
         49:8c:6d:bf:2b:dd:a9:a6:0e:85:68:48:78:1a:a7:d0:73:35:
         d9:1c:7a:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 01:45:14 2025 by rpki-client on console.sobornost.net