Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/86f4d4f1-b36c-4a46-8844-4e6c7a3c97d9/0/3130332e37302e31372e302f32342d3234203d3e20313335343632.roa
File:                     3130332e37302e31372e302f32342d3234203d3e20313335343632.roa (raw, json)
Hash identifier:          6gVzJ3lnoTzbRecAFAnRC8x24kDXXXW3lAWqPBdz2dw=
Subject key identifier:   79:5A:AC:9E:7F:E1:00:9B:7F:8E:6B:83:38:5D:8E:2D:FF:B5:BC:FC
Certificate issuer:       /CN=27B773A173E0400FBC0D7FEDFCFF7809B53695FC
Certificate serial:       369C6C6F1B9036FB1E3BB58FAD199709A384AD05
Authority key identifier: 27:B7:73:A1:73:E0:40:0F:BC:0D:7F:ED:FC:FF:78:09:B5:36:95:FC
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27B773A173E0400FBC0D7FEDFCFF7809B53695FC.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/86f4d4f1-b36c-4a46-8844-4e6c7a3c97d9/0/3130332e37302e31372e302f32342d3234203d3e20313335343632.roa
Signing time:             Sat 01 Mar 2025 04:02:24 +0000
ROA not before:           Sat 01 Mar 2025 03:57:24 +0000
ROA not after:            Sat 28 Feb 2026 04:02:24 +0000
asID:                     135462
IP address blocks:        103.70.17.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/86f4d4f1-b36c-4a46-8844-4e6c7a3c97d9/0/27B773A173E0400FBC0D7FEDFCFF7809B53695FC.crl
                          rsync://repo-rpki.idnic.net/repo/86f4d4f1-b36c-4a46-8844-4e6c7a3c97d9/0/27B773A173E0400FBC0D7FEDFCFF7809B53695FC.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27B773A173E0400FBC0D7FEDFCFF7809B53695FC.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Apr 2025 01:52:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:9c:6c:6f:1b:90:36:fb:1e:3b:b5:8f:ad:19:97:09:a3:84:ad:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27B773A173E0400FBC0D7FEDFCFF7809B53695FC
        Validity
            Not Before: Mar  1 03:57:24 2025 GMT
            Not After : Feb 28 04:02:24 2026 GMT
        Subject: CN=795AAC9E7FE1009B7F8E6B83385D8E2DFFB5BCFC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:e9:d7:97:0a:6f:17:69:34:cf:2b:51:ce:f2:
                    9e:19:b7:18:b3:aa:73:dd:36:f1:5d:d9:ce:39:6c:
                    50:36:3c:e7:38:85:d6:23:14:b5:55:db:bc:02:96:
                    56:f6:38:58:1a:ab:64:99:71:c1:ad:ba:0c:a5:d0:
                    cc:70:ee:03:3c:49:92:2f:eb:4d:4c:bb:6e:ad:e6:
                    4d:53:2b:84:7b:4e:c2:2f:62:b2:16:67:cd:aa:b1:
                    c7:d1:aa:c7:61:89:4c:0f:54:af:3f:e4:e4:82:4b:
                    cb:63:fd:1b:4e:bd:32:81:47:f3:ca:75:53:07:b8:
                    56:11:21:6a:56:d3:5a:7a:0b:94:0d:e7:88:51:62:
                    ee:14:14:37:24:9d:3c:4c:69:d5:9a:3d:45:8d:df:
                    bb:0d:1e:23:1d:4c:77:f7:36:b7:c5:e8:fc:91:6e:
                    01:bd:32:53:0b:82:0f:7e:a3:6f:78:05:73:d8:30:
                    ca:71:a3:98:2b:f8:65:d8:25:1b:5e:e6:f5:50:1d:
                    f4:04:25:de:ba:fe:49:c6:d3:55:ff:6b:98:77:77:
                    2b:5b:f8:55:87:a0:27:70:33:9a:a0:23:f1:c9:13:
                    8e:29:97:e0:80:ce:ea:54:66:90:d0:8b:cb:cc:6a:
                    74:7a:06:0e:13:69:6a:17:19:cb:b0:83:97:22:66:
                    aa:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:5A:AC:9E:7F:E1:00:9B:7F:8E:6B:83:38:5D:8E:2D:FF:B5:BC:FC
            X509v3 Authority Key Identifier:
                keyid:27:B7:73:A1:73:E0:40:0F:BC:0D:7F:ED:FC:FF:78:09:B5:36:95:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/86f4d4f1-b36c-4a46-8844-4e6c7a3c97d9/0/27B773A173E0400FBC0D7FEDFCFF7809B53695FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27B773A173E0400FBC0D7FEDFCFF7809B53695FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/86f4d4f1-b36c-4a46-8844-4e6c7a3c97d9/0/3130332e37302e31372e302f32342d3234203d3e20313335343632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.70.17.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:fe:ae:ba:47:27:fb:38:16:6e:04:3c:95:a1:fe:25:b2:79:
         7e:af:70:d7:15:1e:1e:e8:c7:b5:20:a1:26:43:77:37:ba:2e:
         57:0e:08:4c:38:9e:09:9e:72:29:72:ca:91:29:7f:ee:8c:c7:
         b1:6b:f8:0e:82:68:52:6b:a6:8e:24:5c:6e:7e:5e:24:f3:12:
         f3:b8:26:c8:64:b3:71:63:f7:8d:10:4b:9a:84:1b:8e:e7:af:
         0e:2d:31:74:28:73:45:5e:a9:88:43:4a:eb:ab:1b:8f:9b:c1:
         83:bd:86:19:ac:5e:20:65:25:2a:45:2a:b1:16:52:e4:9e:54:
         a3:02:5a:32:c1:33:55:12:d5:41:52:35:9c:fd:f8:49:d6:fc:
         ea:c4:56:11:96:b7:31:e4:ae:6d:cf:6f:5d:fd:75:d6:3e:d7:
         1e:55:0b:1e:38:b0:e7:2e:a5:83:81:94:15:58:47:f2:98:77:
         cb:57:3f:2f:1d:37:0f:b7:e9:73:23:8d:3e:89:30:59:92:5f:
         a2:d7:cf:e8:e9:65:9f:7f:4e:4e:e9:d2:00:e5:b6:72:06:27:
         3f:15:85:22:32:61:13:55:2a:0e:1a:2d:ec:59:36:7a:68:8f:
         e8:4f:41:84:e9:66:5b:46:d3:17:d9:b5:2e:34:6c:24:d8:88:
         30:42:c6:24
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUNpxsbxuQNvseO7WPrRmXCaOErQUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjdCNzczQTE3M0UwNDAwRkJDMEQ3RkVERkNGRjc4MDlC
NTM2OTVGQzAeFw0yNTAzMDEwMzU3MjRaFw0yNjAyMjgwNDAyMjRaMDMxMTAvBgNV
BAMTKDc5NUFBQzlFN0ZFMTAwOUI3RjhFNkI4MzM4NUQ4RTJERkZCNUJDRkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD6deXCm8XaTTPK1HO8p4Ztxiz
qnPdNvFd2c45bFA2POc4hdYjFLVV27wCllb2OFgaq2SZccGtugyl0Mxw7gM8SZIv
601Mu26t5k1TK4R7TsIvYrIWZ82qscfRqsdhiUwPVK8/5OSCS8tj/RtOvTKBR/PK
dVMHuFYRIWpW01p6C5QN54hRYu4UFDcknTxMadWaPUWN37sNHiMdTHf3NrfF6PyR
bgG9MlMLgg9+o294BXPYMMpxo5gr+GXYJRte5vVQHfQEJd66/knG01X/a5h3dytb
+FWHoCdwM5qgI/HJE44pl+CAzupUZpDQi8vManR6Bg4TaWoXGcuwg5ciZqrhAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUeVqsnn/hAJt/jmuDOF2OLf+1vPwwHwYDVR0j
BBgwFoAUJ7dzoXPgQA+8DX/t/P94CbU2lfwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84
NmY0ZDRmMS1iMzZjLTRhNDYtODg0NC00ZTZjN2EzYzk3ZDkvMC8yN0I3NzNBMTcz
RTA0MDBGQkMwRDdGRURGQ0ZGNzgwOUI1MzY5NUZDLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMjdCNzczQTE3M0UwNDAwRkJDMEQ3RkVERkNGRjc4MDlCNTM2
OTVGQy5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzg2ZjRkNGYxLWIzNmMtNGE0Ni04
ODQ0LTRlNmM3YTNjOTdkOS8wLzMxMzAzMzJlMzczMDJlMzEzNzJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDMxMzMzNTM0MzYzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGdGETANBgkqhkiG
9w0BAQsFAAOCAQEAUP6uukcn+zgWbgQ8laH+JbJ5fq9w1xUeHujHtSChJkN3N7ou
Vw4ITDieCZ5yKXLKkSl/7ozHsWv4DoJoUmumjiRcbn5eJPMS87gmyGSzcWP3jRBL
moQbjuevDi0xdChzRV6piENK66sbj5vBg72GGaxeIGUlKkUqsRZS5J5UowJaMsEz
VRLVQVI1nP34Sdb86sRWEZa3MeSubc9vXf111j7XHlULHjiw5y6lg4GUFVhH8ph3
y1c/Lx03D7fpcyONPokwWZJfotfP6Olln39OTunSAOW2cgYnPxWFIjJhE1UqDhot
7Fk2emiP6E9BhOlmW0bTF9m1LjRsJNiIMELGJA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 01:45:14 2025 by rpki-client on console.sobornost.net