Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c13739e1-b5db-4734-838a-b0b580beb9f3/0/3130332e3137382e39312e302f32342d3234203d3e20313430343034.roa
File:                     3130332e3137382e39312e302f32342d3234203d3e20313430343034.roa (raw, json)
Hash identifier:          vr+BxfkmoPeng8pSy2LdmDpMjQR/gXY9KvmthDLXE0s=
Subject key identifier:   A6:F3:70:4B:F8:85:65:06:F6:4A:40:B1:07:6E:CE:C2:FC:2B:FB:E7
Certificate issuer:       /CN=411479424B4016269EB9E266CD48905F63DC9F0B
Certificate serial:       537B096029AEF622A8D55E059C53A67E060C94D8
Authority key identifier: 41:14:79:42:4B:40:16:26:9E:B9:E2:66:CD:48:90:5F:63:DC:9F:0B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/411479424B4016269EB9E266CD48905F63DC9F0B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c13739e1-b5db-4734-838a-b0b580beb9f3/0/3130332e3137382e39312e302f32342d3234203d3e20313430343034.roa
Signing time:             Mon 07 Apr 2025 18:00:00 +0000
ROA not before:           Mon 07 Apr 2025 17:55:00 +0000
ROA not after:            Mon 06 Apr 2026 18:00:00 +0000
asID:                     140404
IP address blocks:        103.178.91.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c13739e1-b5db-4734-838a-b0b580beb9f3/0/411479424B4016269EB9E266CD48905F63DC9F0B.crl
                          rsync://repo-rpki.idnic.net/repo/c13739e1-b5db-4734-838a-b0b580beb9f3/0/411479424B4016269EB9E266CD48905F63DC9F0B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/411479424B4016269EB9E266CD48905F63DC9F0B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Apr 2025 22:58:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:7b:09:60:29:ae:f6:22:a8:d5:5e:05:9c:53:a6:7e:06:0c:94:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=411479424B4016269EB9E266CD48905F63DC9F0B
        Validity
            Not Before: Apr  7 17:55:00 2025 GMT
            Not After : Apr  6 18:00:00 2026 GMT
        Subject: CN=A6F3704BF8856506F64A40B1076ECEC2FC2BFBE7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b8:7e:a5:b5:b8:34:ac:72:35:5c:83:b2:31:
                    82:ff:7c:3a:63:33:63:d3:e7:b8:79:89:32:39:a7:
                    44:9b:dc:69:8e:90:13:10:a7:d8:93:cb:12:f2:b1:
                    6f:43:52:62:3a:77:b3:b6:58:b1:fd:19:cd:74:a5:
                    9f:9a:05:42:39:ae:2a:7c:03:2e:1a:78:21:ab:1d:
                    19:75:a9:8b:46:52:92:f6:f0:af:f5:c7:6f:dc:5e:
                    a7:c7:eb:1c:ee:0b:ac:4b:8c:50:a4:de:88:0e:27:
                    ea:75:c6:51:22:23:09:d2:6a:c6:2a:ce:59:06:48:
                    aa:87:ec:91:33:e4:67:ff:f0:e8:66:2d:ab:b7:ee:
                    b1:7b:8c:3c:e9:64:99:f8:0a:af:a0:29:21:4c:b2:
                    41:2d:82:47:bd:00:70:e0:2e:9e:3d:68:37:6a:d8:
                    be:93:75:ef:aa:05:6f:87:83:79:3f:99:de:ff:49:
                    89:a9:51:a8:78:7b:62:f8:54:13:17:9f:19:fe:e6:
                    6a:08:98:bb:be:62:da:80:49:a5:75:37:1b:bc:40:
                    40:29:f8:f8:ee:c9:8d:61:5f:ea:ca:2f:5f:46:09:
                    16:77:6d:7c:22:96:1a:b9:1c:5a:e0:5d:5f:b4:10:
                    69:69:aa:a0:00:39:41:ea:cf:ce:e1:c8:2a:ea:8b:
                    74:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:F3:70:4B:F8:85:65:06:F6:4A:40:B1:07:6E:CE:C2:FC:2B:FB:E7
            X509v3 Authority Key Identifier:
                keyid:41:14:79:42:4B:40:16:26:9E:B9:E2:66:CD:48:90:5F:63:DC:9F:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c13739e1-b5db-4734-838a-b0b580beb9f3/0/411479424B4016269EB9E266CD48905F63DC9F0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/411479424B4016269EB9E266CD48905F63DC9F0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c13739e1-b5db-4734-838a-b0b580beb9f3/0/3130332e3137382e39312e302f32342d3234203d3e20313430343034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.178.91.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:fd:64:7e:8b:00:26:6f:af:4d:6b:d8:3a:dc:50:c3:89:46:
         df:64:f1:0c:fd:db:1a:70:e4:f7:be:e2:cd:75:aa:c5:a5:7d:
         5f:4d:8c:bf:30:11:3c:3b:3b:7e:4d:7b:22:1f:e2:d4:ba:72:
         a0:56:20:b4:a3:f8:08:ad:7a:e7:5b:79:80:84:27:c5:c6:56:
         fb:ab:88:d7:e6:52:49:55:be:4c:ca:e2:4d:7f:42:83:fe:21:
         d1:a1:d7:da:76:3e:c4:ac:15:16:e0:b1:35:09:86:6a:e2:b8:
         a6:44:d3:62:df:10:77:c5:b8:a0:3d:67:e5:d6:d6:1d:b6:c9:
         be:b4:ee:b2:f9:4a:4e:c3:90:74:be:03:0c:a0:a0:fc:e5:46:
         b9:9c:6e:c4:ac:b2:68:b4:d8:f0:f1:d1:cd:9e:ff:9c:8f:c1:
         ea:ac:56:0a:6b:58:84:49:91:99:84:ff:c1:fd:ad:b5:3d:82:
         91:9b:d7:f8:d8:b8:8f:ac:b7:cb:83:d4:97:f2:2b:14:06:e1:
         87:ae:08:15:1b:31:41:80:2c:92:c4:28:3e:e0:dd:d6:9b:fc:
         ea:b5:ff:53:fb:71:63:fe:3b:68:78:bd:27:f7:91:9e:8c:69:
         6e:9c:e5:45:c5:99:15:ca:96:6c:69:8a:0b:3b:9d:80:ac:b5:
         0c:0d:60:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:23:50 2025 by rpki-client on console.sobornost.net