Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/8ab3c03d-2e2e-4897-869b-21ce48601619/0/3130332e3136322e3135322e302f32342d3234203d3e20313431363630.roa
File:                     3130332e3136322e3135322e302f32342d3234203d3e20313431363630.roa (raw, json)
Hash identifier:          y57hfH1lBOVunH6wiRrVTULW7uqhPZnP/h9yu/EhF5I=
Subject key identifier:   0E:DD:AA:01:59:93:9B:32:A2:20:F0:09:5C:B9:23:59:47:C5:00:9D
Certificate issuer:       /CN=83906AB18A49EC17ADD841F2072FDC55E0EC22F6
Certificate serial:       3EA0F9DDA580FD63E37F5C49A1DE4442ED9A9650
Authority key identifier: 83:90:6A:B1:8A:49:EC:17:AD:D8:41:F2:07:2F:DC:55:E0:EC:22:F6
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/83906AB18A49EC17ADD841F2072FDC55E0EC22F6.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8ab3c03d-2e2e-4897-869b-21ce48601619/0/3130332e3136322e3135322e302f32342d3234203d3e20313431363630.roa
Signing time:             Tue 08 Apr 2025 06:00:46 +0000
ROA not before:           Tue 08 Apr 2025 05:55:46 +0000
ROA not after:            Tue 07 Apr 2026 06:00:46 +0000
asID:                     141660
IP address blocks:        103.162.152.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8ab3c03d-2e2e-4897-869b-21ce48601619/0/83906AB18A49EC17ADD841F2072FDC55E0EC22F6.crl
                          rsync://repo-rpki.idnic.net/repo/8ab3c03d-2e2e-4897-869b-21ce48601619/0/83906AB18A49EC17ADD841F2072FDC55E0EC22F6.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/83906AB18A49EC17ADD841F2072FDC55E0EC22F6.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Apr 2025 15:28:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:a0:f9:dd:a5:80:fd:63:e3:7f:5c:49:a1:de:44:42:ed:9a:96:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83906AB18A49EC17ADD841F2072FDC55E0EC22F6
        Validity
            Not Before: Apr  8 05:55:46 2025 GMT
            Not After : Apr  7 06:00:46 2026 GMT
        Subject: CN=0EDDAA0159939B32A220F0095CB9235947C5009D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:1f:74:45:34:09:f0:09:e1:bf:06:f4:bb:cf:
                    f0:1b:57:41:4c:67:5c:7d:2e:89:e7:9f:b9:86:bc:
                    62:18:29:2d:21:e1:e2:a0:a7:80:7f:eb:f9:de:0d:
                    18:b9:98:84:94:a7:a0:0b:3d:f3:02:c8:d6:d2:83:
                    49:72:bb:b8:87:d2:09:36:8b:6d:9b:a1:ea:79:2d:
                    0c:5d:e5:0e:f8:ce:07:00:bb:bc:3b:7c:92:93:97:
                    dd:26:f2:81:9f:b0:eb:13:62:af:3a:d7:05:b5:8f:
                    8b:de:14:48:63:8b:d5:fe:26:66:39:05:80:58:df:
                    4d:b4:e1:86:6f:32:4a:f1:6e:a1:71:a5:3b:02:22:
                    b1:ee:54:89:06:62:d6:06:aa:ab:1b:f0:98:cb:57:
                    e9:aa:7b:fb:8d:ec:1c:36:df:73:36:0d:37:13:b5:
                    35:d9:24:f3:72:6c:d4:2b:2e:c3:af:80:3b:9c:2e:
                    d8:16:31:e2:da:c4:9f:50:8f:c4:6c:91:1f:36:a1:
                    7c:3f:a2:b6:7e:d2:41:cf:ec:62:d6:01:26:a0:83:
                    d9:2b:f5:5e:75:38:fa:98:88:b2:97:f1:86:17:f5:
                    c4:ff:30:aa:38:51:9b:37:39:2a:b8:af:01:16:a5:
                    4b:d7:bc:9d:ad:78:88:07:d2:d1:d4:fd:04:9f:0a:
                    b0:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:DD:AA:01:59:93:9B:32:A2:20:F0:09:5C:B9:23:59:47:C5:00:9D
            X509v3 Authority Key Identifier:
                keyid:83:90:6A:B1:8A:49:EC:17:AD:D8:41:F2:07:2F:DC:55:E0:EC:22:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8ab3c03d-2e2e-4897-869b-21ce48601619/0/83906AB18A49EC17ADD841F2072FDC55E0EC22F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/83906AB18A49EC17ADD841F2072FDC55E0EC22F6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8ab3c03d-2e2e-4897-869b-21ce48601619/0/3130332e3136322e3135322e302f32342d3234203d3e20313431363630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.162.152.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:e1:b6:1c:dd:75:cd:d0:9d:5c:a2:15:85:ee:c6:76:49:97:
         06:cd:5b:6f:6d:e9:37:a9:ca:5b:1a:2a:8d:c9:d9:09:f4:3f:
         63:00:41:08:1b:47:b9:c7:eb:6d:3f:31:9a:10:6f:33:6e:5c:
         43:33:9e:37:ee:3b:5c:b4:e2:a0:e3:a1:f4:f4:1a:1b:7e:b9:
         0c:81:7e:a5:9b:4e:9e:61:89:00:90:c4:44:fa:72:1b:59:2e:
         1c:96:0c:ab:1b:d6:24:70:02:40:1c:c2:f5:4b:83:35:f2:05:
         bb:23:58:41:be:69:0a:67:71:73:1d:da:26:65:eb:d1:93:e3:
         27:08:b9:36:3b:ad:00:3c:bd:e3:3a:6c:09:18:57:33:c7:98:
         76:5b:b0:0f:43:17:ad:39:20:8c:63:99:3d:99:33:6e:5c:1a:
         2c:7e:5a:b7:00:0b:f4:1d:4d:ea:8f:d9:db:d5:22:3a:25:29:
         0f:b2:a4:65:19:14:ae:2a:d8:e9:e9:73:a7:9c:cf:19:3b:6a:
         c8:89:bd:82:09:b9:64:8a:3d:2c:1a:4f:81:a7:86:89:8e:32:
         da:84:66:9d:c5:0d:11:23:cf:c6:c5:e9:03:44:1f:aa:d0:7a:
         5c:87:04:7a:b4:60:b5:27:92:3e:c1:f0:03:3c:a9:b3:d3:4d:
         7e:9d:7f:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 14:50:33 2025 by rpki-client on console.sobornost.net