Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/b94c1e95-a738-4e47-8e5c-7af681b36b00/0/3130332e3138362e39302e302f32342d3234203d3e20313439373037.roa
File:                     3130332e3138362e39302e302f32342d3234203d3e20313439373037.roa (raw, json)
Hash identifier:          656gLN35OIXcG6Vik35XhI6XoKD7dIobeeOabAVD0UQ=
Subject key identifier:   25:0C:A4:B6:08:FF:48:2A:6F:AE:01:7C:D1:D1:5E:6A:E5:58:93:B5
Certificate issuer:       /CN=8DBECF314BD3C829923A3A97BFC62113A61F8EE1
Certificate serial:       3073662E6B5A0B44805DB06203D2FF1D547A48B2
Authority key identifier: 8D:BE:CF:31:4B:D3:C8:29:92:3A:3A:97:BF:C6:21:13:A6:1F:8E:E1
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DBECF314BD3C829923A3A97BFC62113A61F8EE1.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/b94c1e95-a738-4e47-8e5c-7af681b36b00/0/3130332e3138362e39302e302f32342d3234203d3e20313439373037.roa
Signing time:             Sat 19 Apr 2025 17:00:00 +0000
ROA not before:           Sat 19 Apr 2025 16:55:00 +0000
ROA not after:            Sat 18 Apr 2026 17:00:00 +0000
asID:                     149707
IP address blocks:        103.186.90.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/b94c1e95-a738-4e47-8e5c-7af681b36b00/0/8DBECF314BD3C829923A3A97BFC62113A61F8EE1.crl
                          rsync://repo-rpki.idnic.net/repo/b94c1e95-a738-4e47-8e5c-7af681b36b00/0/8DBECF314BD3C829923A3A97BFC62113A61F8EE1.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DBECF314BD3C829923A3A97BFC62113A61F8EE1.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Apr 2025 17:17:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:73:66:2e:6b:5a:0b:44:80:5d:b0:62:03:d2:ff:1d:54:7a:48:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8DBECF314BD3C829923A3A97BFC62113A61F8EE1
        Validity
            Not Before: Apr 19 16:55:00 2025 GMT
            Not After : Apr 18 17:00:00 2026 GMT
        Subject: CN=250CA4B608FF482A6FAE017CD1D15E6AE55893B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:cf:44:b8:22:ea:6a:04:fd:40:22:68:51:47:
                    01:a4:a4:02:f1:9b:7c:95:8d:67:94:56:62:b6:98:
                    4d:6f:6d:3a:da:b2:84:ff:96:f6:db:e6:60:cf:e0:
                    f1:d3:20:25:bd:a5:26:0b:ab:6b:38:2e:09:f3:cb:
                    09:d9:da:ad:af:33:b9:d0:82:28:dc:9f:af:3b:90:
                    c7:13:76:d8:13:d6:2f:03:97:45:13:71:28:35:d3:
                    0d:ac:3f:a0:83:ec:a4:c9:d8:06:37:37:c5:13:b5:
                    8a:56:e6:2a:69:35:ca:a1:a9:87:17:32:4d:0c:42:
                    0f:80:c0:d5:ad:8c:4c:30:b6:ad:70:9b:77:c1:1a:
                    43:64:81:a6:20:98:62:49:6a:5e:69:9f:62:49:98:
                    b2:19:c5:60:38:6a:64:da:ed:25:0c:d6:53:b8:e7:
                    38:29:a8:3a:e3:bf:77:58:a1:6c:d1:35:50:f5:17:
                    f0:88:2c:d4:86:cb:34:5b:d7:fd:d7:4f:e2:22:c6:
                    79:64:ea:82:ff:d1:2f:d8:e1:c7:d9:6a:fa:d0:8e:
                    1e:5f:ac:25:b6:d7:b4:da:d2:fd:65:4b:f1:11:72:
                    a8:ba:58:cc:5f:aa:8d:e9:d2:75:ec:c8:c7:6a:96:
                    67:00:63:dc:b5:cd:74:66:cc:64:5b:a6:ce:57:63:
                    35:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:0C:A4:B6:08:FF:48:2A:6F:AE:01:7C:D1:D1:5E:6A:E5:58:93:B5
            X509v3 Authority Key Identifier:
                keyid:8D:BE:CF:31:4B:D3:C8:29:92:3A:3A:97:BF:C6:21:13:A6:1F:8E:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/b94c1e95-a738-4e47-8e5c-7af681b36b00/0/8DBECF314BD3C829923A3A97BFC62113A61F8EE1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DBECF314BD3C829923A3A97BFC62113A61F8EE1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b94c1e95-a738-4e47-8e5c-7af681b36b00/0/3130332e3138362e39302e302f32342d3234203d3e20313439373037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.186.90.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:e8:b4:9a:f9:66:22:00:e4:51:11:6b:44:7d:c9:5f:27:98:
         c9:79:50:07:ac:2d:c9:72:f2:80:c5:17:28:47:5a:8c:e7:17:
         0b:c1:84:3b:cb:95:d8:47:1c:6d:f6:fa:af:51:83:0d:61:7b:
         6d:77:9e:23:e3:4f:d1:df:23:9a:4d:e4:9e:57:8f:72:37:90:
         64:f6:29:38:2a:d8:c1:7f:13:2b:b8:17:07:39:38:1c:19:ac:
         d7:51:74:ec:b8:fc:15:39:41:d4:a2:dc:b4:31:1f:75:c4:59:
         05:52:50:2b:1d:2f:0f:d2:73:d9:f4:b0:ff:c1:4e:78:bf:da:
         37:ad:29:ba:fa:7a:6b:86:85:bf:9c:71:58:9d:65:48:d4:5a:
         06:92:47:69:a7:1a:68:6a:3c:7b:1c:d1:03:49:54:79:10:37:
         f4:20:49:0c:08:e9:67:53:2a:af:0b:5a:1e:5e:2c:45:eb:10:
         f2:64:41:22:cc:df:47:e1:5e:60:e3:77:6d:ae:55:c4:87:82:
         1d:05:6e:55:32:1c:da:89:f7:bf:c2:84:b5:7b:44:70:f1:c5:
         94:a2:32:04:41:dc:37:00:af:2e:cb:e1:a4:b8:77:bd:ea:dd:
         60:a1:b0:5c:ef:b0:76:b1:c9:d7:10:4c:fa:7a:87:20:65:52:
         18:3b:03:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 13:39:00 2025 by rpki-client on console.sobornost.net