Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/d36ab04d-68c7-4249-b109-46b28cf803f3/0/3130332e3130372e3137372e302f32342d3234203d3e20313530393434.roa
File:                     3130332e3130372e3137372e302f32342d3234203d3e20313530393434.roa (raw, json)
Hash identifier:          Tu2pBk/URNroZW6zOqNNP1pzL3rQikcBMBsuhpkJzRA=
Subject key identifier:   FF:45:29:0F:1E:0C:53:BD:4B:99:85:6D:C3:F4:05:C9:B6:BA:BF:9D
Certificate issuer:       /CN=1D4A7562F096F3F753E388C14594BA75AE09E7F3
Certificate serial:       04557C7BD1C886DB8D053B5786E76646D857174F
Authority key identifier: 1D:4A:75:62:F0:96:F3:F7:53:E3:88:C1:45:94:BA:75:AE:09:E7:F3
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D4A7562F096F3F753E388C14594BA75AE09E7F3.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d36ab04d-68c7-4249-b109-46b28cf803f3/0/3130332e3130372e3137372e302f32342d3234203d3e20313530393434.roa
Signing time:             Tue 08 Apr 2025 01:10:56 +0000
ROA not before:           Tue 08 Apr 2025 01:05:56 +0000
ROA not after:            Tue 07 Apr 2026 01:10:56 +0000
asID:                     150944
IP address blocks:        103.107.177.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d36ab04d-68c7-4249-b109-46b28cf803f3/0/1D4A7562F096F3F753E388C14594BA75AE09E7F3.crl
                          rsync://repo-rpki.idnic.net/repo/d36ab04d-68c7-4249-b109-46b28cf803f3/0/1D4A7562F096F3F753E388C14594BA75AE09E7F3.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D4A7562F096F3F753E388C14594BA75AE09E7F3.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Apr 2025 00:35:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:55:7c:7b:d1:c8:86:db:8d:05:3b:57:86:e7:66:46:d8:57:17:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1D4A7562F096F3F753E388C14594BA75AE09E7F3
        Validity
            Not Before: Apr  8 01:05:56 2025 GMT
            Not After : Apr  7 01:10:56 2026 GMT
        Subject: CN=FF45290F1E0C53BD4B99856DC3F405C9B6BABF9D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:bc:c5:76:6c:9c:22:03:60:14:bc:1a:df:13:
                    70:5c:39:39:80:5e:28:e0:aa:22:b6:ad:b0:f4:6a:
                    65:c0:fa:f4:03:d2:87:ba:b2:34:4d:10:58:49:55:
                    d9:41:9b:c0:87:00:29:a3:4f:3f:ba:76:56:c5:85:
                    f5:d4:77:47:88:fa:a6:d4:94:00:9d:25:1d:aa:51:
                    59:88:77:a0:27:1b:37:a5:f8:e9:c3:a0:3c:5a:cb:
                    cc:44:9b:ae:54:bc:13:11:d3:b3:58:b2:c1:18:5f:
                    5f:62:22:a4:a8:0a:bb:a3:0f:04:f8:c0:09:c2:0a:
                    6c:23:3a:a0:51:4e:e4:03:e8:51:82:10:2c:93:a7:
                    90:99:a5:78:97:e8:6e:a4:35:22:ba:1f:72:7f:03:
                    8e:f4:74:89:bd:ba:85:4c:0f:45:b5:f9:f9:97:12:
                    a7:8d:25:54:86:bb:a7:00:a4:08:00:8c:17:9f:15:
                    b3:cb:7f:65:d4:cc:87:a0:5e:24:e3:9a:8a:5e:d1:
                    cc:26:52:6e:38:2a:07:86:0d:f9:48:8b:e0:bc:a7:
                    d0:72:94:aa:5c:4b:ce:27:51:df:b7:53:25:4f:31:
                    8c:27:8a:b0:48:da:69:63:9c:0d:fb:ae:1f:86:10:
                    6b:3c:fa:6e:96:83:d0:a2:9d:fc:8c:25:7e:18:4f:
                    b6:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:45:29:0F:1E:0C:53:BD:4B:99:85:6D:C3:F4:05:C9:B6:BA:BF:9D
            X509v3 Authority Key Identifier:
                keyid:1D:4A:75:62:F0:96:F3:F7:53:E3:88:C1:45:94:BA:75:AE:09:E7:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d36ab04d-68c7-4249-b109-46b28cf803f3/0/1D4A7562F096F3F753E388C14594BA75AE09E7F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D4A7562F096F3F753E388C14594BA75AE09E7F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d36ab04d-68c7-4249-b109-46b28cf803f3/0/3130332e3130372e3137372e302f32342d3234203d3e20313530393434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.107.177.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c9:f8:14:ac:e3:25:1d:ad:90:b8:34:6d:5b:54:99:df:53:36:
         5a:5b:37:ea:6f:3c:9b:ac:90:e8:1b:91:5f:b5:c6:ba:2f:4c:
         4b:29:9d:ec:fb:0d:11:4b:e7:e5:b3:fb:24:56:46:9c:ec:b9:
         94:7a:26:3b:ab:98:a3:cd:e6:dc:56:c9:3f:d0:96:58:3c:ed:
         a2:04:0f:3a:e0:31:07:5c:aa:b0:74:63:f5:87:91:5f:41:8c:
         17:cc:e6:8a:b1:3e:ec:f3:01:82:03:8c:4b:1a:6d:0f:9e:53:
         85:b2:7a:23:97:aa:96:80:77:96:68:06:b2:23:c1:3a:46:bc:
         7c:23:19:e0:07:dd:6c:7c:12:21:dd:7c:e7:60:ae:28:44:d5:
         6e:ff:b3:dd:51:69:b4:89:f8:7a:fa:94:26:ac:08:e9:68:f2:
         0b:61:d6:03:be:38:f0:0b:c5:f9:ef:f0:e3:76:d2:d9:75:25:
         95:e0:86:22:2a:b9:2c:22:9c:27:dc:63:b9:63:d8:99:ec:ad:
         79:9a:63:0a:65:28:d7:b0:6e:47:41:30:de:06:52:92:eb:ea:
         2e:05:ff:51:8e:4b:9b:00:32:5d:00:55:2d:5e:96:87:97:a7:
         17:d5:21:15:3b:a7:af:99:e6:f7:62:a8:72:12:2e:d6:4d:4f:
         a0:68:1a:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:07:26 2025 by rpki-client on console.sobornost.net