Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/ae0e5ac2-b6bb-4bec-9dc9-e430a6733216/0/3130332e38342e3231312e302f32342d3234203d3e20313336303735.roa
File:                     3130332e38342e3231312e302f32342d3234203d3e20313336303735.roa (raw, json)
Hash identifier:          yEcjBYMEhWAt95OnuEgZE8+ngUIiXOyjNrn3KEwiAMQ=
Subject key identifier:   C8:00:B7:10:3B:3D:BD:09:D4:C6:4E:75:79:24:56:72:E1:2F:7D:26
Certificate issuer:       /CN=0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96
Certificate serial:       4392F86FF5C1E9F82D60B906B375726342A0D70E
Authority key identifier: 0E:42:26:A5:F1:76:6A:EA:E7:68:A2:A6:76:C3:E8:B2:CA:EA:DC:96
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ae0e5ac2-b6bb-4bec-9dc9-e430a6733216/0/3130332e38342e3231312e302f32342d3234203d3e20313336303735.roa
Signing time:             Sat 19 Apr 2025 19:00:00 +0000
ROA not before:           Sat 19 Apr 2025 18:55:00 +0000
ROA not after:            Sat 18 Apr 2026 19:00:00 +0000
asID:                     136075
IP address blocks:        103.84.211.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ae0e5ac2-b6bb-4bec-9dc9-e430a6733216/0/0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.crl
                          rsync://repo-rpki.idnic.net/repo/ae0e5ac2-b6bb-4bec-9dc9-e430a6733216/0/0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 May 2025 16:07:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:92:f8:6f:f5:c1:e9:f8:2d:60:b9:06:b3:75:72:63:42:a0:d7:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96
        Validity
            Not Before: Apr 19 18:55:00 2025 GMT
            Not After : Apr 18 19:00:00 2026 GMT
        Subject: CN=C800B7103B3DBD09D4C64E7579245672E12F7D26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:01:6f:14:e6:7c:7b:2b:fe:a7:b6:9f:15:d5:
                    ff:06:11:30:9b:0f:97:7a:f0:ff:a5:04:15:b5:61:
                    bb:21:25:27:47:80:fe:0b:64:a1:e4:99:73:fa:b2:
                    13:b0:89:b5:a3:a3:42:d4:42:a1:28:66:0b:6a:5d:
                    24:ba:62:bd:9b:fd:d6:47:2d:14:2a:c7:23:e1:2d:
                    c2:73:97:1f:d7:c3:e2:b5:40:b4:c1:f0:18:b6:64:
                    0d:f8:95:f9:3b:eb:fd:02:0e:46:21:cf:9c:5e:94:
                    e7:a8:91:f7:82:2e:76:07:ff:24:c7:01:bb:65:4b:
                    f5:99:71:39:7d:f7:c6:9c:e1:05:bf:52:9d:86:c6:
                    af:9c:ca:30:f7:9e:8b:7e:64:dc:c5:87:13:64:37:
                    eb:a4:1c:72:4b:c2:44:f7:26:4f:82:1f:47:18:b2:
                    87:9a:46:9e:0d:c7:41:d6:d6:8d:bc:29:96:e4:4f:
                    ab:af:07:c8:75:f7:1f:12:90:8b:93:df:e9:b7:26:
                    95:12:5a:6f:01:e3:ce:4e:5e:b9:da:8e:ff:4a:78:
                    41:55:ea:db:df:cf:05:3f:26:f5:98:1e:19:23:6c:
                    ef:aa:c5:39:d6:a6:54:06:f7:b0:31:f8:fe:9d:02:
                    34:86:3e:6b:f6:68:9d:3c:5e:37:36:8e:b9:33:8b:
                    38:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:00:B7:10:3B:3D:BD:09:D4:C6:4E:75:79:24:56:72:E1:2F:7D:26
            X509v3 Authority Key Identifier:
                keyid:0E:42:26:A5:F1:76:6A:EA:E7:68:A2:A6:76:C3:E8:B2:CA:EA:DC:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ae0e5ac2-b6bb-4bec-9dc9-e430a6733216/0/0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae0e5ac2-b6bb-4bec-9dc9-e430a6733216/0/3130332e38342e3231312e302f32342d3234203d3e20313336303735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.84.211.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b1:ab:eb:9e:ec:b8:14:5d:3c:62:a4:ed:55:7d:36:3a:57:75:
         66:b9:ed:3d:b3:c0:22:b5:f3:f9:91:96:62:46:1e:72:71:27:
         7f:07:71:f8:be:72:52:81:b3:1b:fb:44:29:34:3f:fd:53:5f:
         74:de:20:33:0b:dc:5f:b2:77:0d:c7:37:92:08:55:34:b1:d8:
         5d:0c:92:e8:dc:bb:4b:6b:fb:6e:2f:58:d0:18:eb:20:c0:ec:
         c7:f6:6e:43:3e:de:97:20:eb:65:75:a6:ac:f7:74:f3:7e:35:
         b5:07:8e:65:cf:5d:18:aa:a2:3f:e5:20:a5:81:d9:26:0f:50:
         e0:6c:7b:ef:56:76:e1:95:47:74:a1:dc:29:1e:9a:67:67:06:
         6a:aa:64:85:3f:67:19:56:7a:89:a8:27:38:f6:70:af:ea:72:
         83:9c:1e:8c:c5:10:c7:36:34:ad:1e:a3:4f:a0:9b:ea:10:e0:
         ee:7a:d2:9d:e9:a6:e6:82:7b:13:ba:8f:5c:69:8d:1d:cb:9c:
         c1:27:95:00:80:2c:84:53:ad:32:22:a1:d2:37:0c:98:1c:ea:
         4c:08:79:96:24:d3:e0:7d:84:d4:84:ca:0f:53:bc:77:1a:8f:
         86:82:35:8a:8a:e8:5a:c6:e1:c5:50:f3:ee:7d:98:19:d8:19:
         d6:aa:b5:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:37:46 2025 by rpki-client on console.sobornost.net