Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/9904f670-7dac-4cf4-991d-50539e3d3f5e/0/3130332e3133312e31362e302f32342d3234203d3e20313338303830.roa
File:                     3130332e3133312e31362e302f32342d3234203d3e20313338303830.roa (raw, json)
Hash identifier:          jnfNcnB+y2Q/Js+Xk6qsTAImY9znB3rTNWg1cK+QNKk=
Subject key identifier:   01:F3:E9:9D:18:7D:70:D0:AE:60:67:32:AC:D0:2F:73:4A:BA:D0:7E
Certificate issuer:       /CN=62DD415142DDD76FB165A3918E09BA5891D6ADD0
Certificate serial:       11D6B89E7D6576897974B497FEDAA9CF4E005414
Authority key identifier: 62:DD:41:51:42:DD:D7:6F:B1:65:A3:91:8E:09:BA:58:91:D6:AD:D0
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/62DD415142DDD76FB165A3918E09BA5891D6ADD0.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/9904f670-7dac-4cf4-991d-50539e3d3f5e/0/3130332e3133312e31362e302f32342d3234203d3e20313338303830.roa
Signing time:             Wed 19 Mar 2025 07:03:26 +0000
ROA not before:           Wed 19 Mar 2025 06:58:26 +0000
ROA not after:            Wed 18 Mar 2026 07:03:26 +0000
asID:                     138080
IP address blocks:        103.131.16.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/9904f670-7dac-4cf4-991d-50539e3d3f5e/0/62DD415142DDD76FB165A3918E09BA5891D6ADD0.crl
                          rsync://repo-rpki.idnic.net/repo/9904f670-7dac-4cf4-991d-50539e3d3f5e/0/62DD415142DDD76FB165A3918E09BA5891D6ADD0.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/62DD415142DDD76FB165A3918E09BA5891D6ADD0.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Apr 2025 19:15:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:d6:b8:9e:7d:65:76:89:79:74:b4:97:fe:da:a9:cf:4e:00:54:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62DD415142DDD76FB165A3918E09BA5891D6ADD0
        Validity
            Not Before: Mar 19 06:58:26 2025 GMT
            Not After : Mar 18 07:03:26 2026 GMT
        Subject: CN=01F3E99D187D70D0AE606732ACD02F734ABAD07E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f5:09:1b:43:0f:d9:9e:90:1c:d6:fe:77:17:
                    d1:05:f9:70:2c:a0:f9:99:98:c9:40:10:56:7e:08:
                    0d:aa:11:05:b8:c6:cc:1c:f4:c9:d4:09:d1:b5:ed:
                    99:cc:33:22:a3:f6:75:21:f1:5a:9f:c0:30:2d:fd:
                    d7:76:84:15:e1:1c:eb:41:b7:82:8e:f9:22:07:30:
                    b1:e9:06:f1:07:da:8f:fb:c7:0d:c1:11:54:d0:8c:
                    40:ad:cb:f4:1f:10:02:e8:e4:5b:8a:da:ae:d7:6e:
                    bc:ca:23:ce:c6:ca:eb:6e:63:ab:e4:a0:6b:f7:1e:
                    6d:69:35:78:f1:66:4c:14:a7:d5:35:90:2f:c8:57:
                    83:c3:2b:9f:71:d9:f0:96:72:43:3f:98:ff:b6:8a:
                    0e:84:3f:56:48:5a:ec:64:eb:f1:f1:cb:e7:e5:88:
                    ae:59:08:39:04:8a:3b:7a:81:37:65:5a:c2:fe:e5:
                    cf:e2:82:bf:38:8f:fc:54:4f:9d:f6:4a:74:8a:b9:
                    d9:76:a8:ba:1d:5f:36:34:ad:b2:34:a6:11:05:fc:
                    cf:b9:56:83:5a:7f:e1:7c:65:c2:90:c1:ab:e9:9f:
                    3e:33:97:a2:33:b2:43:67:77:a2:e9:df:96:52:b0:
                    4b:bb:0b:1b:88:08:32:85:8c:72:b7:48:f5:c1:cc:
                    41:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:F3:E9:9D:18:7D:70:D0:AE:60:67:32:AC:D0:2F:73:4A:BA:D0:7E
            X509v3 Authority Key Identifier:
                keyid:62:DD:41:51:42:DD:D7:6F:B1:65:A3:91:8E:09:BA:58:91:D6:AD:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/9904f670-7dac-4cf4-991d-50539e3d3f5e/0/62DD415142DDD76FB165A3918E09BA5891D6ADD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/62DD415142DDD76FB165A3918E09BA5891D6ADD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9904f670-7dac-4cf4-991d-50539e3d3f5e/0/3130332e3133312e31362e302f32342d3234203d3e20313338303830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.131.16.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:b8:0d:64:b0:00:88:26:ed:66:c3:ae:28:85:fc:a4:be:39:
         78:f1:b3:a1:c1:01:39:2f:4c:b6:2f:26:1f:ba:88:90:22:1a:
         a0:26:82:72:67:f3:a5:7f:06:c9:d5:62:6e:10:05:93:f6:79:
         17:da:b6:28:43:e2:4e:32:ad:d7:f4:2a:0e:26:d4:59:c4:2b:
         12:53:e6:30:a1:e0:01:b6:f7:6f:2d:25:e8:fa:8c:bd:87:fe:
         a5:6a:97:e0:7f:3b:dc:be:02:c3:fe:36:fe:2d:fa:53:2d:06:
         fb:cb:a3:bb:2c:1e:ee:ff:36:9f:52:80:ca:08:a6:e8:89:6c:
         d9:64:03:fc:a9:2b:9f:83:57:ba:b5:32:53:68:cf:4d:37:62:
         3a:43:12:fb:83:0c:10:ed:c8:5e:ed:90:d3:8f:86:12:26:d3:
         e2:50:5d:20:6c:53:60:c2:e9:19:58:b5:0a:f9:74:c9:02:47:
         28:28:3a:14:9e:01:e7:92:4b:1f:61:cc:3c:a6:2c:b6:de:82:
         2f:23:8e:53:9f:88:63:9d:10:5e:6e:b2:12:07:18:c9:75:78:
         06:17:94:f6:60:7b:cb:62:cd:d1:11:da:31:af:97:ef:1e:97:
         aa:32:e8:38:d6:c9:99:1a:55:a6:4a:d1:cf:e9:a1:4d:f7:dc:
         7a:4f:3f:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 17:11:51 2025 by rpki-client on console.sobornost.net