Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/b94c1e95-a738-4e47-8e5c-7af681b36b00/0/3130332e3138362e39312e302f32342d3234203d3e20313439373037.roa
File:                     3130332e3138362e39312e302f32342d3234203d3e20313439373037.roa (raw, json)
Hash identifier:          v7WXEnDaWLgLHCCs0/IjJD0cW6T6d8CeSIJNddKA634=
Subject key identifier:   71:50:9B:E1:68:31:88:57:1F:D2:D6:8A:27:72:23:84:A9:10:44:E8
Certificate issuer:       /CN=8DBECF314BD3C829923A3A97BFC62113A61F8EE1
Certificate serial:       772EB611EEB943C2DB08C14CB28D38F8030E019B
Authority key identifier: 8D:BE:CF:31:4B:D3:C8:29:92:3A:3A:97:BF:C6:21:13:A6:1F:8E:E1
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DBECF314BD3C829923A3A97BFC62113A61F8EE1.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/b94c1e95-a738-4e47-8e5c-7af681b36b00/0/3130332e3138362e39312e302f32342d3234203d3e20313439373037.roa
Signing time:             Sat 19 Apr 2025 17:00:00 +0000
ROA not before:           Sat 19 Apr 2025 16:55:00 +0000
ROA not after:            Sat 18 Apr 2026 17:00:00 +0000
asID:                     149707
IP address blocks:        103.186.91.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/b94c1e95-a738-4e47-8e5c-7af681b36b00/0/8DBECF314BD3C829923A3A97BFC62113A61F8EE1.crl
                          rsync://repo-rpki.idnic.net/repo/b94c1e95-a738-4e47-8e5c-7af681b36b00/0/8DBECF314BD3C829923A3A97BFC62113A61F8EE1.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DBECF314BD3C829923A3A97BFC62113A61F8EE1.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Apr 2025 17:17:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:2e:b6:11:ee:b9:43:c2:db:08:c1:4c:b2:8d:38:f8:03:0e:01:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8DBECF314BD3C829923A3A97BFC62113A61F8EE1
        Validity
            Not Before: Apr 19 16:55:00 2025 GMT
            Not After : Apr 18 17:00:00 2026 GMT
        Subject: CN=71509BE1683188571FD2D68A27722384A91044E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:94:32:03:20:b6:4d:cd:df:d0:49:dd:78:04:
                    28:5a:f3:ed:90:7f:84:a3:75:64:2c:a8:f0:cd:73:
                    28:a3:f8:26:70:37:76:f9:95:8f:de:1a:41:8d:24:
                    99:c7:40:ae:59:5b:32:b8:8a:6c:d3:d3:bd:8a:50:
                    1f:ee:8a:56:51:77:4d:57:dd:69:c9:e7:43:ff:64:
                    c0:44:77:f5:41:f6:c9:f4:ac:15:84:9a:7b:46:42:
                    3e:1d:bd:79:e5:59:35:32:47:43:4f:25:ff:5b:08:
                    ac:a4:d5:2a:f0:9f:50:53:c4:61:2d:68:f6:c0:d3:
                    ce:63:7d:17:e5:83:3c:cf:d8:04:ba:cd:77:e2:24:
                    57:f5:87:2a:e9:8c:cc:d9:c4:76:78:6c:cd:0f:0c:
                    3e:dd:f0:c2:2d:e3:f0:80:80:ca:0c:8d:7d:2c:f1:
                    ae:38:11:ff:19:f8:28:6e:8a:fa:05:9f:fb:3f:e3:
                    81:db:51:39:96:85:b5:f0:69:30:c7:77:77:01:d7:
                    a8:41:75:b9:2e:c2:1e:c4:ee:3c:06:a9:a5:a2:c1:
                    7f:7f:19:f8:ae:7d:90:a0:73:3f:ab:26:de:62:14:
                    54:0e:14:b9:a1:d7:d3:24:f7:30:43:8a:31:3b:e8:
                    e7:0c:bb:fe:87:30:f8:34:bb:1f:df:40:8c:06:8c:
                    16:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:50:9B:E1:68:31:88:57:1F:D2:D6:8A:27:72:23:84:A9:10:44:E8
            X509v3 Authority Key Identifier:
                keyid:8D:BE:CF:31:4B:D3:C8:29:92:3A:3A:97:BF:C6:21:13:A6:1F:8E:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/b94c1e95-a738-4e47-8e5c-7af681b36b00/0/8DBECF314BD3C829923A3A97BFC62113A61F8EE1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DBECF314BD3C829923A3A97BFC62113A61F8EE1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b94c1e95-a738-4e47-8e5c-7af681b36b00/0/3130332e3138362e39312e302f32342d3234203d3e20313439373037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.186.91.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:a4:82:b0:eb:7f:aa:79:3e:75:96:ea:f4:0c:0b:75:83:70:
         1e:6e:51:c1:c1:c7:62:73:a9:fc:2c:1e:50:8f:82:b6:cc:17:
         f5:b7:fe:81:52:f0:77:96:0f:e1:4b:38:52:94:c8:6a:ac:43:
         06:5e:77:5e:18:e0:9d:7c:79:b9:d1:26:36:ee:5f:14:92:f7:
         1d:af:be:9e:76:f4:f7:cd:ff:00:95:3d:9c:48:de:af:97:e7:
         68:a3:8b:87:78:32:3d:64:6d:35:86:2a:e5:63:b3:52:9f:04:
         94:47:35:4b:1d:f0:ff:ba:a1:4c:8d:90:f2:5d:a6:bf:4a:cf:
         e6:85:0a:bc:10:f9:71:08:b5:d5:d4:68:71:36:22:11:89:2e:
         33:80:e2:95:81:3f:bf:b3:9b:eb:ae:c3:b5:28:6c:e5:c0:d3:
         99:53:54:8e:f2:de:e8:d2:62:5a:43:bd:b6:89:99:bc:41:4f:
         e9:46:76:70:60:bb:57:86:ca:89:61:13:0e:b8:7b:2f:bc:12:
         c9:ab:2e:bf:92:3d:f2:85:fa:6f:7e:8c:6a:eb:e9:bf:7f:4a:
         05:bd:6e:3b:de:ea:6c:5d:26:45:51:cb:0d:ba:97:a0:33:b3:
         54:e2:32:fb:e8:c4:fe:1b:d8:16:9d:0c:f4:76:b8:f3:f5:61:
         75:36:88:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 13:39:00 2025 by rpki-client on console.sobornost.net