Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/ae0e5ac2-b6bb-4bec-9dc9-e430a6733216/0/3130332e38342e3231302e302f32342d3234203d3e20313336303735.roa
File:                     3130332e38342e3231302e302f32342d3234203d3e20313336303735.roa (raw, json)
Hash identifier:          YVW6U8qaSLxFWjHeTdwpm9kiRp4vZO+dMYcJdXXF9qE=
Subject key identifier:   3E:22:5B:EA:57:5F:BF:9F:2C:A0:2F:11:4C:8A:79:DD:FA:3A:6E:AF
Certificate issuer:       /CN=0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96
Certificate serial:       2F3F62B5060CEA9920709F7D386921B2AD26B3C0
Authority key identifier: 0E:42:26:A5:F1:76:6A:EA:E7:68:A2:A6:76:C3:E8:B2:CA:EA:DC:96
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ae0e5ac2-b6bb-4bec-9dc9-e430a6733216/0/3130332e38342e3231302e302f32342d3234203d3e20313336303735.roa
Signing time:             Fri 18 Apr 2025 15:00:00 +0000
ROA not before:           Fri 18 Apr 2025 14:55:00 +0000
ROA not after:            Fri 17 Apr 2026 15:00:00 +0000
asID:                     136075
IP address blocks:        103.84.210.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ae0e5ac2-b6bb-4bec-9dc9-e430a6733216/0/0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.crl
                          rsync://repo-rpki.idnic.net/repo/ae0e5ac2-b6bb-4bec-9dc9-e430a6733216/0/0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 May 2025 16:07:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:3f:62:b5:06:0c:ea:99:20:70:9f:7d:38:69:21:b2:ad:26:b3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96
        Validity
            Not Before: Apr 18 14:55:00 2025 GMT
            Not After : Apr 17 15:00:00 2026 GMT
        Subject: CN=3E225BEA575FBF9F2CA02F114C8A79DDFA3A6EAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:60:dd:0e:fe:fd:25:d2:5d:44:27:55:b7:64:
                    a1:33:80:75:a9:5c:56:c4:37:77:b8:49:b6:36:bb:
                    49:bb:d7:22:20:35:f4:84:eb:3a:b4:5d:0a:2d:4f:
                    e1:c8:da:41:09:8f:42:af:d4:65:59:66:90:8b:7d:
                    ec:d7:b8:2e:2c:b1:b9:47:7b:77:e5:96:c3:3b:59:
                    68:4d:8d:f7:0d:3b:1c:1a:61:7c:c8:22:c4:79:e0:
                    89:5c:13:0f:13:44:1c:e5:a0:22:a2:02:ad:1e:b9:
                    f7:7f:1e:a3:bb:b4:c6:62:3c:ce:e1:85:3c:70:03:
                    2c:50:2e:66:64:55:58:d1:63:27:87:57:d2:74:1f:
                    e0:56:1d:4f:24:83:71:63:0a:b0:65:f3:4f:55:a2:
                    cf:19:f7:0d:be:84:46:62:ec:c7:21:c9:61:9f:20:
                    3b:87:6c:5f:1c:2d:83:49:77:76:b0:25:b9:67:dd:
                    50:15:db:e6:29:b5:81:13:3d:dd:43:55:a5:6d:4c:
                    9b:f4:2a:d9:4f:4a:fa:2a:12:36:85:03:6c:f6:39:
                    ae:9a:79:e7:55:b7:95:1d:15:02:c2:1d:ac:03:3c:
                    c3:cd:15:e2:a5:72:a9:b1:e2:84:54:39:a3:ca:82:
                    08:54:a1:95:61:7a:fa:35:1d:9b:13:e7:16:f0:ce:
                    34:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:22:5B:EA:57:5F:BF:9F:2C:A0:2F:11:4C:8A:79:DD:FA:3A:6E:AF
            X509v3 Authority Key Identifier:
                keyid:0E:42:26:A5:F1:76:6A:EA:E7:68:A2:A6:76:C3:E8:B2:CA:EA:DC:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ae0e5ac2-b6bb-4bec-9dc9-e430a6733216/0/0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae0e5ac2-b6bb-4bec-9dc9-e430a6733216/0/3130332e38342e3231302e302f32342d3234203d3e20313336303735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.84.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:cf:0e:4b:e1:57:34:ba:83:f0:42:3d:7d:c1:10:07:02:9b:
         93:9a:fc:a7:93:5c:b3:90:d2:3e:e4:4b:60:f2:55:ac:9e:4b:
         71:f1:ac:4b:f0:d4:74:a5:24:58:a5:b0:23:93:72:80:7a:58:
         44:74:a5:23:62:dd:49:6e:16:26:23:85:bd:26:27:5c:31:75:
         1b:82:f0:18:62:47:e0:5f:84:9a:57:39:c7:67:03:69:c1:65:
         22:06:c4:56:da:d9:8c:38:ff:a1:02:a2:be:90:cf:1d:51:ee:
         54:80:17:a2:7f:4b:ba:64:9b:bc:06:2c:60:28:3e:0a:44:70:
         34:04:53:ab:0b:65:ac:b1:f0:da:e6:13:5f:7e:cb:d4:f4:ca:
         0b:df:74:1c:eb:07:6a:5b:50:5e:47:a3:f1:2f:5d:ec:42:87:
         93:cb:eb:b4:4c:94:b0:1a:1d:cb:7f:51:87:f8:14:99:2e:69:
         fe:4f:86:49:aa:0e:2c:2f:43:aa:28:05:10:ce:7d:4f:7c:28:
         2f:40:64:d8:e1:f6:75:ea:08:22:c2:23:01:a3:d1:1f:64:3f:
         2d:07:3e:b9:29:00:94:70:e7:20:7a:d3:48:42:c6:e6:f6:9d:
         5c:9e:d2:3e:1f:ef:f7:f1:a1:f3:60:cf:b3:d1:97:13:b9:59:
         c4:8e:d1:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:37:46 2025 by rpki-client on console.sobornost.net