Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/d36ab04d-68c7-4249-b109-46b28cf803f3/0/3130332e3130372e3137362e302f32342d3234203d3e20313530393434.roa
File:                     3130332e3130372e3137362e302f32342d3234203d3e20313530393434.roa (raw, json)
Hash identifier:          t5cP9pI7pfpZ95tebj5VAs5xM+wyda4Uz0LABi641BU=
Subject key identifier:   C9:92:3B:7B:F3:45:21:67:06:CE:5A:62:9B:08:A0:24:FA:3E:8B:C9
Certificate issuer:       /CN=1D4A7562F096F3F753E388C14594BA75AE09E7F3
Certificate serial:       758D7B78B98D41A8461B72DFE52D065FCDFF1D05
Authority key identifier: 1D:4A:75:62:F0:96:F3:F7:53:E3:88:C1:45:94:BA:75:AE:09:E7:F3
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D4A7562F096F3F753E388C14594BA75AE09E7F3.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d36ab04d-68c7-4249-b109-46b28cf803f3/0/3130332e3130372e3137362e302f32342d3234203d3e20313530393434.roa
Signing time:             Tue 08 Apr 2025 01:13:31 +0000
ROA not before:           Tue 08 Apr 2025 01:08:31 +0000
ROA not after:            Tue 07 Apr 2026 01:13:31 +0000
asID:                     150944
IP address blocks:        103.107.176.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d36ab04d-68c7-4249-b109-46b28cf803f3/0/1D4A7562F096F3F753E388C14594BA75AE09E7F3.crl
                          rsync://repo-rpki.idnic.net/repo/d36ab04d-68c7-4249-b109-46b28cf803f3/0/1D4A7562F096F3F753E388C14594BA75AE09E7F3.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D4A7562F096F3F753E388C14594BA75AE09E7F3.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Apr 2025 00:35:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:8d:7b:78:b9:8d:41:a8:46:1b:72:df:e5:2d:06:5f:cd:ff:1d:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1D4A7562F096F3F753E388C14594BA75AE09E7F3
        Validity
            Not Before: Apr  8 01:08:31 2025 GMT
            Not After : Apr  7 01:13:31 2026 GMT
        Subject: CN=C9923B7BF345216706CE5A629B08A024FA3E8BC9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:a5:6b:61:1c:dc:05:aa:35:18:8a:8a:68:cf:
                    d8:c7:e8:36:0b:38:b7:c1:b7:41:e4:85:3a:ea:7f:
                    dd:10:06:42:b3:af:10:64:53:8a:c2:a0:e2:ab:fe:
                    00:f2:74:bf:ca:1e:bb:8c:34:cd:19:65:7e:48:b1:
                    c7:8b:48:5a:f3:74:d1:49:03:17:68:2d:c5:26:1b:
                    a3:f7:64:eb:b2:dc:e0:99:8e:68:a4:09:87:88:e4:
                    ea:34:47:fb:00:a5:63:9c:88:a0:29:39:05:e4:5a:
                    b2:06:5a:96:83:e5:10:66:3a:65:ea:94:af:d3:a1:
                    b5:58:8e:0c:7e:83:ae:aa:53:d3:92:25:e6:59:3d:
                    ed:ad:09:51:c0:20:b3:05:bf:85:1f:a0:56:6a:bd:
                    f9:84:28:7b:41:cc:89:b3:c9:8e:27:8d:ad:05:72:
                    24:8c:18:1f:1a:f3:36:ed:ed:86:ea:74:b5:ff:a4:
                    fd:44:ac:e4:42:fe:fd:3d:9b:f9:b8:54:f3:9e:23:
                    37:d8:60:7e:fa:ee:fb:37:3b:db:83:be:2e:5f:ca:
                    f0:ea:0b:ca:fb:82:0e:ca:92:4b:71:d3:42:73:1e:
                    8d:dd:ba:a2:da:19:b4:80:48:92:3f:65:f0:c3:bd:
                    31:67:e2:27:5d:74:ec:bf:da:6e:28:a0:6a:75:5d:
                    a8:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:92:3B:7B:F3:45:21:67:06:CE:5A:62:9B:08:A0:24:FA:3E:8B:C9
            X509v3 Authority Key Identifier:
                keyid:1D:4A:75:62:F0:96:F3:F7:53:E3:88:C1:45:94:BA:75:AE:09:E7:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d36ab04d-68c7-4249-b109-46b28cf803f3/0/1D4A7562F096F3F753E388C14594BA75AE09E7F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D4A7562F096F3F753E388C14594BA75AE09E7F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d36ab04d-68c7-4249-b109-46b28cf803f3/0/3130332e3130372e3137362e302f32342d3234203d3e20313530393434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.107.176.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:4b:24:8d:8c:fa:b8:90:50:7f:60:22:94:9c:9c:3c:f1:29:
         4b:7b:9f:28:3b:e7:5a:81:6f:47:f0:d8:4d:d0:fe:69:ed:05:
         d6:66:e6:ce:45:7b:a4:22:af:5c:f9:1b:fd:c1:42:f6:b5:00:
         3b:97:b8:a1:e2:23:96:11:99:3c:08:85:58:a0:08:7c:bf:fc:
         3c:9d:71:8b:ea:f3:a3:10:8c:8c:cb:29:5d:ab:ca:b1:0e:70:
         7f:8a:a8:db:9c:b3:2b:ae:33:6f:04:d7:ce:7b:03:a6:6d:21:
         83:4d:72:37:87:a3:a0:8f:da:41:d7:74:f5:50:95:7d:91:8a:
         9b:70:46:6a:91:f9:b8:d1:f9:cc:55:31:5b:5c:20:9d:3a:bb:
         9e:31:f7:2b:9f:1c:9e:82:ca:b8:31:19:bc:bd:86:d3:e9:87:
         71:79:82:71:55:0d:81:78:91:8d:c8:d9:69:27:b8:d4:86:9a:
         9f:68:a9:e8:b3:f5:93:82:d5:56:fb:e7:35:61:c1:92:98:55:
         b3:e9:9a:ac:10:7c:39:5d:55:bd:7e:c7:31:77:3d:e5:9f:79:
         d8:7a:4c:5f:1d:9d:19:2d:8a:62:9c:f4:32:84:6a:37:9b:58:
         79:d6:f2:76:a6:03:61:35:72:a2:63:42:ab:c8:84:4a:d5:94:
         c9:8a:31:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:07:26 2025 by rpki-client on console.sobornost.net