Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/9a8f69f7-9332-4cd4-b3e5-cc6c4772cf73/0/3130332e3137312e31382e302f32342d3234203d3e20313336303532.roa
File:                     3130332e3137312e31382e302f32342d3234203d3e20313336303532.roa (raw, json)
Hash identifier:          5h5J8xW62JxvWusBPqO7t7BtPqu0f0FKKCSn5YoWmpk=
Subject key identifier:   85:AA:3A:5F:D0:56:81:6D:55:39:3D:06:63:24:3D:6A:C1:14:F0:20
Certificate issuer:       /CN=3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B
Certificate serial:       5553C00CAB3931824A47DF3D2571829037D78E76
Authority key identifier: 3C:91:48:EF:27:AF:5E:D3:48:13:42:F5:DE:F2:5A:26:A0:CB:9F:8B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/9a8f69f7-9332-4cd4-b3e5-cc6c4772cf73/0/3130332e3137312e31382e302f32342d3234203d3e20313336303532.roa
Signing time:             Fri 04 Apr 2025 05:00:01 +0000
ROA not before:           Fri 04 Apr 2025 04:55:01 +0000
ROA not after:            Fri 03 Apr 2026 05:00:01 +0000
asID:                     136052
IP address blocks:        103.171.18.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/9a8f69f7-9332-4cd4-b3e5-cc6c4772cf73/0/3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B.crl
                          rsync://repo-rpki.idnic.net/repo/9a8f69f7-9332-4cd4-b3e5-cc6c4772cf73/0/3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Apr 2025 16:47:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:53:c0:0c:ab:39:31:82:4a:47:df:3d:25:71:82:90:37:d7:8e:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B
        Validity
            Not Before: Apr  4 04:55:01 2025 GMT
            Not After : Apr  3 05:00:01 2026 GMT
        Subject: CN=85AA3A5FD056816D55393D0663243D6AC114F020
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:41:9e:0c:03:f7:45:48:df:d1:06:81:f4:84:
                    7b:80:0c:63:86:21:d5:34:c3:16:bc:43:10:73:11:
                    f4:8a:b6:01:07:df:4d:a7:9a:f4:ab:41:88:15:fb:
                    66:f0:b4:59:61:c9:53:0f:59:2a:ea:0d:09:3f:26:
                    36:48:6b:12:ad:ba:d2:4b:2c:82:cf:88:1b:5a:a7:
                    e3:60:49:fa:96:a2:42:ba:97:23:f2:74:b6:63:a0:
                    d1:b0:02:1e:f7:1f:be:69:86:ad:e8:00:5b:b7:f3:
                    fe:e2:1d:79:02:e6:6e:f7:ac:2b:4b:2b:d4:e6:da:
                    f1:99:0c:79:f3:d2:c0:4b:3c:3a:b5:d9:de:97:b3:
                    de:d8:8f:74:c7:35:6b:0e:58:0e:9d:98:94:5c:6d:
                    0a:03:0f:27:2c:f3:f8:fa:1e:ba:51:0c:47:14:58:
                    c0:39:2b:34:38:5c:27:37:7f:c8:f0:55:f6:f9:62:
                    ff:29:5f:f9:48:d5:30:c1:fb:72:4f:b5:3a:c6:8d:
                    d7:2d:97:5d:83:5f:ac:2c:3a:b9:20:22:d3:1d:71:
                    3c:90:cd:21:5f:f3:f6:d7:00:92:9f:58:c7:7d:4c:
                    6d:97:9c:d2:43:aa:ca:65:d4:71:2a:1e:e9:7c:08:
                    2f:d9:66:37:c4:f4:59:72:aa:28:54:54:27:fc:19:
                    3e:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:AA:3A:5F:D0:56:81:6D:55:39:3D:06:63:24:3D:6A:C1:14:F0:20
            X509v3 Authority Key Identifier:
                keyid:3C:91:48:EF:27:AF:5E:D3:48:13:42:F5:DE:F2:5A:26:A0:CB:9F:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/9a8f69f7-9332-4cd4-b3e5-cc6c4772cf73/0/3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9a8f69f7-9332-4cd4-b3e5-cc6c4772cf73/0/3130332e3137312e31382e302f32342d3234203d3e20313336303532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.171.18.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:46:8f:e0:87:50:a3:73:32:29:34:8e:68:32:54:fc:3d:09:
         49:07:f5:d4:50:a9:e3:5d:c1:2e:6e:a8:d9:7b:c6:31:3a:4e:
         a8:9e:96:f7:47:f3:50:b8:18:db:65:0b:cf:51:e8:4b:e9:de:
         d3:2d:7a:85:90:85:1c:71:38:bd:ef:4e:85:4c:bb:9a:2d:c2:
         32:34:ca:81:58:91:af:0c:b4:ac:f3:48:31:38:9f:5a:18:85:
         69:07:fb:7f:ee:66:67:7a:65:e9:f6:38:92:8c:a9:fd:7d:a0:
         02:66:11:33:53:dc:28:7f:d1:db:d1:1a:03:39:b9:00:7b:02:
         ad:3e:d6:05:a6:b6:8c:5f:72:44:9d:28:d2:12:c5:37:1f:a0:
         a2:dd:3e:a2:92:77:d8:0e:ad:be:f3:55:ef:59:85:dd:6b:fd:
         9b:54:e2:d2:eb:36:2b:de:cc:05:6b:84:d7:10:f3:07:5c:47:
         3a:45:14:40:19:22:9e:b6:8a:38:c0:f9:37:40:f1:25:71:b9:
         f2:11:36:0e:47:86:3a:45:1c:04:95:9b:d3:1e:4b:ad:e8:ab:
         9f:48:1a:a5:34:be:8d:9c:53:eb:e7:fc:dc:62:fa:c1:52:aa:
         db:ad:d5:39:8c:05:57:e0:e0:9b:23:01:0f:90:0e:93:ca:11:
         4b:98:e3:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 18:17:59 2025 by rpki-client on console.sobornost.net