Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e5c8b9e3-b44f-490b-bf51-99f2dd2a1364/0/3130332e37392e3132392e302f32342d3234203d3e20313339393531.roa
File:                     3130332e37392e3132392e302f32342d3234203d3e20313339393531.roa (raw, json)
Hash identifier:          KEbEalVEafBDzV3MLE/Git/FoIDPkOruC23YgT8hoVA=
Subject key identifier:   7D:CE:CE:BC:47:62:A0:0F:53:EB:DA:9D:EC:A7:90:54:82:50:3B:90
Certificate issuer:       /CN=27114CFC585C5DB2E0AC5DA74F04C66C319492F1
Certificate serial:       6EEF4A4F984CB7B702C768D60DE9033A6E615CCD
Authority key identifier: 27:11:4C:FC:58:5C:5D:B2:E0:AC:5D:A7:4F:04:C6:6C:31:94:92:F1
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27114CFC585C5DB2E0AC5DA74F04C66C319492F1.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e5c8b9e3-b44f-490b-bf51-99f2dd2a1364/0/3130332e37392e3132392e302f32342d3234203d3e20313339393531.roa
Signing time:             Wed 23 Apr 2025 05:00:02 +0000
ROA not before:           Wed 23 Apr 2025 04:55:02 +0000
ROA not after:            Wed 22 Apr 2026 05:00:02 +0000
asID:                     139951
IP address blocks:        103.79.129.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e5c8b9e3-b44f-490b-bf51-99f2dd2a1364/0/27114CFC585C5DB2E0AC5DA74F04C66C319492F1.crl
                          rsync://repo-rpki.idnic.net/repo/e5c8b9e3-b44f-490b-bf51-99f2dd2a1364/0/27114CFC585C5DB2E0AC5DA74F04C66C319492F1.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27114CFC585C5DB2E0AC5DA74F04C66C319492F1.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Apr 2025 00:01:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:ef:4a:4f:98:4c:b7:b7:02:c7:68:d6:0d:e9:03:3a:6e:61:5c:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27114CFC585C5DB2E0AC5DA74F04C66C319492F1
        Validity
            Not Before: Apr 23 04:55:02 2025 GMT
            Not After : Apr 22 05:00:02 2026 GMT
        Subject: CN=7DCECEBC4762A00F53EBDA9DECA7905482503B90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:02:b3:81:91:ab:61:71:9e:76:e5:73:5a:46:
                    d9:1b:0d:a9:5a:f2:2a:20:e1:8a:00:28:96:89:00:
                    bd:10:4b:81:ed:26:0e:4a:d6:af:9b:15:d5:b6:d7:
                    e4:92:18:98:0d:dd:a1:f9:78:ec:6a:1c:ba:99:f9:
                    c8:d6:76:05:5a:79:7b:9e:64:58:a7:6e:e8:98:65:
                    f8:39:5b:ca:15:6d:18:14:7c:4a:ca:34:81:74:55:
                    a0:a5:24:3b:eb:3c:23:02:90:b6:cc:a1:12:83:29:
                    f9:36:dd:43:96:59:6a:2e:c0:62:70:46:7f:30:e4:
                    a3:e0:6a:b0:5d:ba:cb:8b:10:3e:39:b6:d1:af:a3:
                    1b:05:bb:d4:9d:2b:4b:05:92:1e:75:f9:65:5b:bc:
                    0f:64:e8:16:54:4c:9c:99:c4:bc:d0:3c:e1:44:01:
                    1b:29:ca:7d:5f:41:79:ac:60:fe:c6:74:1f:2b:86:
                    c5:05:91:b0:4b:74:d8:29:52:0f:9b:ab:1b:9f:03:
                    28:11:de:f5:c3:bf:6b:f2:c2:b4:fb:74:d7:8a:85:
                    0b:8e:de:15:70:a5:54:cd:c0:a3:d4:46:08:7d:c3:
                    cc:df:53:c5:e9:23:8c:a3:a1:ed:bd:1e:54:75:66:
                    db:61:61:43:25:a7:24:2c:e8:77:a2:1d:af:19:00:
                    67:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:CE:CE:BC:47:62:A0:0F:53:EB:DA:9D:EC:A7:90:54:82:50:3B:90
            X509v3 Authority Key Identifier:
                keyid:27:11:4C:FC:58:5C:5D:B2:E0:AC:5D:A7:4F:04:C6:6C:31:94:92:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e5c8b9e3-b44f-490b-bf51-99f2dd2a1364/0/27114CFC585C5DB2E0AC5DA74F04C66C319492F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27114CFC585C5DB2E0AC5DA74F04C66C319492F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e5c8b9e3-b44f-490b-bf51-99f2dd2a1364/0/3130332e37392e3132392e302f32342d3234203d3e20313339393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.79.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:ea:1a:0a:9f:84:4e:13:e9:70:11:62:95:95:b7:2c:c4:f8:
         0b:53:46:39:3d:d7:a8:91:b7:fe:93:8a:1b:fa:96:aa:f0:0d:
         8d:92:20:c2:a0:c6:3a:bd:db:82:44:d1:bd:f8:0b:bc:ad:18:
         b3:73:4f:12:8b:38:0c:18:4b:3a:a8:d3:87:91:b8:9f:2b:4c:
         2b:9b:32:e2:bc:f2:68:dd:92:df:a0:33:34:c4:f9:51:5a:3a:
         f4:01:8c:fd:66:f9:81:d9:47:3a:68:69:dc:9b:bf:d5:da:b4:
         4e:2b:a0:14:f8:3b:d8:c6:11:69:83:cd:fa:c0:a4:7a:58:1d:
         95:1c:2f:aa:d1:83:84:33:cd:8c:36:18:16:99:c3:29:08:be:
         97:7a:02:5a:71:2e:10:3d:e2:fa:ad:c3:c5:f1:78:52:06:6c:
         41:21:cb:57:d9:ef:cd:3c:85:17:5c:90:07:c1:55:b5:9d:04:
         81:6c:6f:b6:b7:1a:71:31:91:a9:0c:39:09:23:2f:82:22:ae:
         50:a5:32:c3:f0:df:91:1f:b5:c2:d8:e5:57:e9:3c:00:b5:3a:
         40:fd:65:31:1f:c0:d2:15:85:88:4c:7b:58:6f:ff:b3:44:da:
         c2:83:9b:20:4e:66:ae:7f:22:f8:2a:86:e8:2f:55:3b:f6:58:
         7f:01:53:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 17:12:03 2025 by rpki-client on console.sobornost.net