Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/ae0e5ac2-b6bb-4bec-9dc9-e430a6733216/0/3130332e38342e3230392e302f32342d3234203d3e20313336303735.roa
File:                     3130332e38342e3230392e302f32342d3234203d3e20313336303735.roa (raw, json)
Hash identifier:          aKqDqYBnpCKhc8gJwr/XqiZQGx53wEdqRvJeZczMctg=
Subject key identifier:   E1:FD:44:71:46:BE:4B:36:A7:BE:64:0E:78:32:55:7F:24:76:BE:D9
Certificate issuer:       /CN=0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96
Certificate serial:       3CDF85B8CF1C8C98F864D9515B5ADD972D7B71D4
Authority key identifier: 0E:42:26:A5:F1:76:6A:EA:E7:68:A2:A6:76:C3:E8:B2:CA:EA:DC:96
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ae0e5ac2-b6bb-4bec-9dc9-e430a6733216/0/3130332e38342e3230392e302f32342d3234203d3e20313336303735.roa
Signing time:             Sat 19 Apr 2025 20:00:00 +0000
ROA not before:           Sat 19 Apr 2025 19:55:00 +0000
ROA not after:            Sat 18 Apr 2026 20:00:00 +0000
asID:                     136075
IP address blocks:        103.84.209.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ae0e5ac2-b6bb-4bec-9dc9-e430a6733216/0/0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.crl
                          rsync://repo-rpki.idnic.net/repo/ae0e5ac2-b6bb-4bec-9dc9-e430a6733216/0/0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 May 2025 16:07:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:df:85:b8:cf:1c:8c:98:f8:64:d9:51:5b:5a:dd:97:2d:7b:71:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96
        Validity
            Not Before: Apr 19 19:55:00 2025 GMT
            Not After : Apr 18 20:00:00 2026 GMT
        Subject: CN=E1FD447146BE4B36A7BE640E7832557F2476BED9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:02:a6:21:5a:24:51:41:e8:53:db:b9:5e:16:
                    bd:93:c3:fd:e6:a0:82:c8:72:f0:9b:37:69:9d:e8:
                    7c:3d:84:17:3b:51:3e:e3:38:5b:0a:2e:76:82:e7:
                    2b:ef:4e:c2:d6:dd:5d:71:f8:76:c4:39:7a:a1:23:
                    c1:20:a1:4e:34:2c:d3:ed:8f:aa:02:9c:41:d4:8a:
                    f7:65:7a:28:6d:76:9b:b7:85:33:09:95:93:f0:f6:
                    b0:e6:a5:ca:88:92:0d:d4:ce:60:8e:14:fa:35:bd:
                    1b:0b:85:2e:39:e0:df:f2:33:6d:5e:d6:9c:05:da:
                    77:9e:b0:a4:e9:c6:6e:3d:24:1b:c1:c9:8a:0f:95:
                    21:bc:f5:55:21:62:16:bf:00:89:d6:43:9c:08:d7:
                    e4:02:55:ec:f8:c3:88:2d:6c:c7:f3:52:72:e6:af:
                    f3:4b:6a:63:19:4b:b5:11:3c:49:e5:d7:23:8d:bc:
                    f6:ed:c6:1d:26:08:b8:d6:14:b9:4d:eb:09:fb:ae:
                    25:7e:da:a6:2e:17:d1:35:d8:be:1e:d5:9d:a0:e7:
                    f3:34:58:3b:38:d4:aa:ec:81:0d:2a:58:0f:68:db:
                    0f:37:51:67:96:45:1f:dc:85:59:12:9b:70:fb:7c:
                    5c:19:f2:67:71:47:bb:7e:76:0d:74:bc:5e:fe:0f:
                    7c:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:FD:44:71:46:BE:4B:36:A7:BE:64:0E:78:32:55:7F:24:76:BE:D9
            X509v3 Authority Key Identifier:
                keyid:0E:42:26:A5:F1:76:6A:EA:E7:68:A2:A6:76:C3:E8:B2:CA:EA:DC:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ae0e5ac2-b6bb-4bec-9dc9-e430a6733216/0/0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae0e5ac2-b6bb-4bec-9dc9-e430a6733216/0/3130332e38342e3230392e302f32342d3234203d3e20313336303735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.84.209.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:c0:e4:2a:c2:e8:9f:d2:4b:18:3f:ce:0d:ca:3d:d7:0e:bb:
         2c:98:7e:8d:0a:b9:e4:1e:e7:5c:5c:c3:5b:75:88:b0:32:d3:
         4c:61:16:6a:71:59:46:ee:e1:99:f8:ce:ad:ac:c6:08:c7:07:
         8d:73:ef:cc:8b:0b:3b:5b:a4:b9:c0:d2:d0:84:f5:cc:12:67:
         41:1b:2e:64:04:63:1d:67:0e:c7:c6:d1:03:64:fb:d7:6a:de:
         e5:ea:fb:cb:eb:cf:ce:2f:73:89:fe:71:06:de:97:b1:a4:0d:
         ba:d0:d7:e1:12:a6:8b:10:02:0e:ac:26:77:da:41:ff:c5:1c:
         77:7c:94:b4:d7:bc:41:36:d5:12:45:5f:78:c7:fb:ff:02:34:
         1a:e2:4f:6c:36:5e:18:db:19:5d:01:5f:87:af:cf:aa:fc:d0:
         f5:6f:5c:44:54:43:2e:a5:14:8c:f4:be:f2:32:5b:2a:13:40:
         17:89:ab:7d:e3:e8:12:fd:30:3b:21:0b:91:de:c9:9e:d4:4d:
         3e:e8:4f:d6:c7:07:3b:c2:37:8f:c4:84:9e:91:4c:58:f9:c0:
         29:68:ba:36:8e:2e:45:04:bf:f6:86:73:69:30:fd:fd:1e:8f:
         c9:b8:16:55:18:12:3d:70:57:f7:41:b9:2d:9e:75:0b:21:38:
         e6:e3:2c:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:37:46 2025 by rpki-client on console.sobornost.net