Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/9229ca50-e95c-45bb-9c30-63e12af7a5e1/0/3130332e3139312e35362e302f32342d3234203d3e20313331373433.roa
File:                     3130332e3139312e35362e302f32342d3234203d3e20313331373433.roa (raw, json)
Hash identifier:          YfWdCVoIH1DQu9Nb8zknsBq3gjAx6STdl7+GflAiVVY=
Subject key identifier:   63:75:AA:8A:A6:67:8B:7C:95:DB:6B:0B:8E:EF:7D:2D:19:99:0A:35
Certificate issuer:       /CN=3448C84DDFF9B9912D9D17493FEBDB9FBA0B39BB
Certificate serial:       2D9286877736006E7C8E6A9794DCA9708AC59ACC
Authority key identifier: 34:48:C8:4D:DF:F9:B9:91:2D:9D:17:49:3F:EB:DB:9F:BA:0B:39:BB
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3448C84DDFF9B9912D9D17493FEBDB9FBA0B39BB.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/9229ca50-e95c-45bb-9c30-63e12af7a5e1/0/3130332e3139312e35362e302f32342d3234203d3e20313331373433.roa
Signing time:             Tue 22 Apr 2025 06:00:59 +0000
ROA not before:           Tue 22 Apr 2025 05:55:59 +0000
ROA not after:            Tue 21 Apr 2026 06:00:59 +0000
asID:                     131743
IP address blocks:        103.191.56.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/9229ca50-e95c-45bb-9c30-63e12af7a5e1/0/3448C84DDFF9B9912D9D17493FEBDB9FBA0B39BB.crl
                          rsync://repo-rpki.idnic.net/repo/9229ca50-e95c-45bb-9c30-63e12af7a5e1/0/3448C84DDFF9B9912D9D17493FEBDB9FBA0B39BB.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3448C84DDFF9B9912D9D17493FEBDB9FBA0B39BB.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Apr 2025 19:07:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:92:86:87:77:36:00:6e:7c:8e:6a:97:94:dc:a9:70:8a:c5:9a:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3448C84DDFF9B9912D9D17493FEBDB9FBA0B39BB
        Validity
            Not Before: Apr 22 05:55:59 2025 GMT
            Not After : Apr 21 06:00:59 2026 GMT
        Subject: CN=6375AA8AA6678B7C95DB6B0B8EEF7D2D19990A35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:7f:08:3a:f0:59:9e:14:1d:63:76:7e:70:9b:
                    e4:86:b1:22:03:bc:80:d6:78:48:51:07:a4:c2:5f:
                    b8:fb:dc:55:90:89:5b:56:e8:89:43:a3:dc:a9:7b:
                    e6:f1:e6:09:34:0f:91:31:61:05:f2:10:c2:f9:e8:
                    7a:6c:d9:9a:40:dd:05:66:1f:e5:a4:16:9c:2e:78:
                    6b:35:02:d5:b3:e6:4e:20:2e:a0:e8:80:d2:29:55:
                    cd:e8:44:0c:79:eb:f7:0d:6a:18:9a:ac:2e:41:90:
                    06:76:c5:93:47:8b:f3:a4:5c:74:ca:ab:01:34:58:
                    16:95:32:d8:f7:4c:99:d2:d2:43:1a:07:09:d1:f4:
                    65:5b:74:e5:8d:56:07:0d:ae:e7:5a:32:74:d2:ad:
                    6a:fc:3d:46:95:06:8d:38:64:eb:28:b6:fd:52:3c:
                    69:8c:65:cf:50:9c:5d:df:bc:e2:93:a0:ba:b6:1e:
                    f1:a0:bf:05:58:cd:5f:96:26:8d:ba:40:28:40:a9:
                    77:07:c2:42:f5:45:ca:7a:12:af:80:a8:34:3d:5e:
                    c9:80:e9:4a:75:f8:93:a6:3f:81:29:68:60:f2:9b:
                    54:67:b0:f6:c9:f5:b3:bd:a7:0c:48:ee:23:b1:45:
                    f4:56:7a:ee:67:00:45:72:88:2e:19:1f:0c:b6:9f:
                    37:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:75:AA:8A:A6:67:8B:7C:95:DB:6B:0B:8E:EF:7D:2D:19:99:0A:35
            X509v3 Authority Key Identifier:
                keyid:34:48:C8:4D:DF:F9:B9:91:2D:9D:17:49:3F:EB:DB:9F:BA:0B:39:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/9229ca50-e95c-45bb-9c30-63e12af7a5e1/0/3448C84DDFF9B9912D9D17493FEBDB9FBA0B39BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3448C84DDFF9B9912D9D17493FEBDB9FBA0B39BB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9229ca50-e95c-45bb-9c30-63e12af7a5e1/0/3130332e3139312e35362e302f32342d3234203d3e20313331373433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.191.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:6f:44:aa:df:8e:d0:cf:1e:36:70:87:cf:2d:07:03:a7:2f:
         f4:82:28:31:0d:f9:2f:e2:5d:ec:ef:d1:ea:be:80:66:7c:0e:
         8d:7f:89:9c:03:fd:b2:33:f6:99:25:4b:c1:f8:bc:e6:7d:3c:
         6c:73:37:55:86:73:14:88:16:d5:be:0c:ee:76:c3:ac:aa:bd:
         5e:9a:94:49:4b:67:f0:84:03:d7:6e:51:f7:ab:36:5e:d8:a6:
         13:48:5f:6a:a9:be:74:6b:96:32:d4:1e:80:4e:de:6d:f5:21:
         58:23:39:67:87:bc:2f:54:f9:f3:e0:c1:7f:62:c8:6f:a5:60:
         a0:0e:68:81:46:1c:fe:be:b2:b6:37:c4:a8:e8:81:eb:fa:4f:
         52:e3:ef:d7:d4:d6:a4:b4:14:2a:10:5b:0a:ff:84:24:3d:82:
         7e:71:02:4f:a9:a8:a3:ef:bd:03:d2:c4:08:1c:90:b3:40:ec:
         99:38:d3:da:16:04:4d:ed:22:8e:cb:37:14:76:7c:bc:ee:f0:
         b9:96:5a:fd:16:03:e7:18:73:8c:f5:1e:fc:26:27:fe:80:4b:
         e4:89:b4:37:3f:6e:bf:fb:aa:50:5a:9e:9a:24:bb:ea:d8:be:
         96:6d:13:cf:ce:67:09:73:56:c5:78:34:ab:57:95:29:da:08:
         72:7a:6d:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 18:01:27 2025 by rpki-client on console.sobornost.net