Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/d9093ad6-b115-4f10-88d7-6e57dcfd3223/0/3130332e3136362e33302e302f32342d3234203d3e20313431393430.roa
File:                     3130332e3136362e33302e302f32342d3234203d3e20313431393430.roa (raw, json)
Hash identifier:          t11QqdTM2g6bD0yLgDwQ54lubiayCOppdK4lspJl/fw=
Subject key identifier:   27:64:5B:CE:40:C5:DF:1E:F0:48:80:86:E5:F5:6B:60:20:D6:37:74
Certificate issuer:       /CN=4F50242149BE32942675690F53BF8FE81E99F74D
Certificate serial:       13A217AE4AFC3AB28A3A6BBA78D1841DC384BEBE
Authority key identifier: 4F:50:24:21:49:BE:32:94:26:75:69:0F:53:BF:8F:E8:1E:99:F7:4D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F50242149BE32942675690F53BF8FE81E99F74D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d9093ad6-b115-4f10-88d7-6e57dcfd3223/0/3130332e3136362e33302e302f32342d3234203d3e20313431393430.roa
Signing time:             Wed 02 Apr 2025 11:00:02 +0000
ROA not before:           Wed 02 Apr 2025 10:55:02 +0000
ROA not after:            Wed 01 Apr 2026 11:00:02 +0000
asID:                     141940
IP address blocks:        103.166.30.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d9093ad6-b115-4f10-88d7-6e57dcfd3223/0/4F50242149BE32942675690F53BF8FE81E99F74D.crl
                          rsync://repo-rpki.idnic.net/repo/d9093ad6-b115-4f10-88d7-6e57dcfd3223/0/4F50242149BE32942675690F53BF8FE81E99F74D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F50242149BE32942675690F53BF8FE81E99F74D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Apr 2025 20:52:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:a2:17:ae:4a:fc:3a:b2:8a:3a:6b:ba:78:d1:84:1d:c3:84:be:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F50242149BE32942675690F53BF8FE81E99F74D
        Validity
            Not Before: Apr  2 10:55:02 2025 GMT
            Not After : Apr  1 11:00:02 2026 GMT
        Subject: CN=27645BCE40C5DF1EF0488086E5F56B6020D63774
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a2:47:ac:5c:77:8a:58:00:be:d9:4e:4b:ff:
                    53:24:59:fd:42:d2:f5:a5:60:de:44:4b:79:5a:56:
                    24:ed:30:cd:82:23:d8:12:b5:41:90:1d:0e:44:e6:
                    bb:ea:3e:21:32:04:7f:a6:24:be:da:fb:70:42:69:
                    7c:ae:af:64:33:e5:35:dd:a5:20:47:f1:f4:7a:d5:
                    fd:34:21:24:6c:7c:02:26:90:6a:2d:23:ac:b5:d8:
                    1e:e1:99:e2:5c:99:b7:db:11:0d:58:8a:5b:87:67:
                    74:fd:5e:6a:82:9f:25:e2:44:b8:f0:fc:43:56:1d:
                    a1:b0:29:f7:86:43:95:e4:20:d0:4d:d2:0d:da:31:
                    ef:b4:c6:13:f2:69:c7:e5:1b:65:34:ef:86:09:0f:
                    b4:83:91:8c:0d:db:e6:0a:2c:57:f6:ed:7a:76:17:
                    56:bc:11:28:6f:ba:d2:97:05:fe:d3:5f:07:90:0c:
                    04:fc:21:67:fc:b1:91:ea:55:c1:be:9c:ba:22:00:
                    07:56:64:52:d4:3f:7c:c5:52:8e:63:94:30:9a:fa:
                    dc:f8:6d:63:52:10:88:61:57:26:48:5f:e9:59:ff:
                    75:53:e8:42:15:0a:f9:0a:93:0f:91:ae:ea:2e:75:
                    49:1b:3c:27:29:f6:1f:ce:eb:2f:f6:24:6d:3f:85:
                    69:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:64:5B:CE:40:C5:DF:1E:F0:48:80:86:E5:F5:6B:60:20:D6:37:74
            X509v3 Authority Key Identifier:
                keyid:4F:50:24:21:49:BE:32:94:26:75:69:0F:53:BF:8F:E8:1E:99:F7:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d9093ad6-b115-4f10-88d7-6e57dcfd3223/0/4F50242149BE32942675690F53BF8FE81E99F74D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F50242149BE32942675690F53BF8FE81E99F74D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d9093ad6-b115-4f10-88d7-6e57dcfd3223/0/3130332e3136362e33302e302f32342d3234203d3e20313431393430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.166.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:a0:83:0b:5c:ef:83:b4:7a:f6:7d:53:09:56:45:13:0a:e5:
         0a:66:63:f5:39:50:c5:fe:c4:fe:4d:15:51:b1:45:68:78:47:
         f1:a8:d8:3a:31:db:f6:a2:65:4e:2e:27:ed:21:63:02:13:b3:
         c8:8c:3e:1f:1a:6f:0f:f5:38:58:1e:74:68:87:ef:01:e6:6a:
         60:30:9f:9d:f1:bf:e5:1e:35:26:ef:fa:4f:98:84:cb:c1:54:
         28:6b:fa:26:d6:12:77:2e:68:4e:82:e3:02:03:6e:6c:60:cd:
         32:f2:b6:b8:d3:22:26:cb:a6:44:20:60:88:71:f9:bc:eb:04:
         77:62:c7:d5:8b:be:b2:61:b6:7c:e7:34:96:74:7e:82:b2:56:
         c2:db:55:55:2d:e5:b3:53:74:b8:d7:2a:69:35:d6:e3:45:56:
         ee:cd:62:41:2a:06:5e:73:76:56:80:aa:be:17:81:bb:00:a7:
         1d:a3:17:8b:3f:82:d0:f5:75:54:8a:15:38:6a:31:cc:c8:56:
         5d:d4:56:a0:62:95:0a:ba:c1:d0:ea:65:71:9a:b8:03:c4:98:
         fd:96:d1:1b:cb:1f:2f:8e:13:f4:0a:47:8c:63:0b:0c:28:57:
         f1:cd:ca:dd:10:a2:f9:f9:99:9b:ab:ba:ac:b0:da:f8:49:49:
         af:7b:16:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:24 2025 by rpki-client on console.sobornost.net