Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e717bf14-e49a-4acc-9c63-bf172797bcb2/0/3130332e3136312e3230302e302f32332d3233203d3e20313431363632.roa
File:                     3130332e3136312e3230302e302f32332d3233203d3e20313431363632.roa (raw, json)
Hash identifier:          7XmlI6M+t6xtKlx+KMYMWeaUpbehxlLJ481tv0B736o=
Subject key identifier:   2D:28:FF:F9:83:8A:81:DA:06:D9:10:6E:FE:38:3C:A7:E1:34:CF:9D
Certificate issuer:       /CN=6C7DA1DA96788F726F8FF892609842CE1220BCE0
Certificate serial:       7FD61D128421D413DC12502A0CFDE8B06E4C2BF0
Authority key identifier: 6C:7D:A1:DA:96:78:8F:72:6F:8F:F8:92:60:98:42:CE:12:20:BC:E0
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6C7DA1DA96788F726F8FF892609842CE1220BCE0.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e717bf14-e49a-4acc-9c63-bf172797bcb2/0/3130332e3136312e3230302e302f32332d3233203d3e20313431363632.roa
Signing time:             Sat 22 Mar 2025 07:00:00 +0000
ROA not before:           Sat 22 Mar 2025 06:55:00 +0000
ROA not after:            Sat 21 Mar 2026 07:00:00 +0000
asID:                     141662
IP address blocks:        103.161.200.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e717bf14-e49a-4acc-9c63-bf172797bcb2/0/6C7DA1DA96788F726F8FF892609842CE1220BCE0.crl
                          rsync://repo-rpki.idnic.net/repo/e717bf14-e49a-4acc-9c63-bf172797bcb2/0/6C7DA1DA96788F726F8FF892609842CE1220BCE0.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6C7DA1DA96788F726F8FF892609842CE1220BCE0.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Apr 2025 23:43:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:d6:1d:12:84:21:d4:13:dc:12:50:2a:0c:fd:e8:b0:6e:4c:2b:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C7DA1DA96788F726F8FF892609842CE1220BCE0
        Validity
            Not Before: Mar 22 06:55:00 2025 GMT
            Not After : Mar 21 07:00:00 2026 GMT
        Subject: CN=2D28FFF9838A81DA06D9106EFE383CA7E134CF9D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:85:3a:e1:54:ed:7d:d9:80:30:5d:5b:c1:e9:
                    c1:f2:39:0b:e0:00:e9:65:f2:c2:84:de:c6:bb:ec:
                    49:07:af:7c:19:33:92:59:83:b3:71:43:6a:39:9e:
                    86:df:4c:fb:ad:1f:3d:c5:b0:74:d2:f8:cd:97:c4:
                    25:8f:ec:c4:ca:30:2e:c7:fe:b0:d0:d3:24:dd:e6:
                    84:6e:47:3c:f3:28:02:24:e7:64:2d:2b:75:e4:14:
                    1c:fe:c9:5f:be:93:46:91:05:7c:42:ed:2d:c3:ea:
                    9b:bb:f3:4d:22:0b:c2:50:d1:66:e6:09:44:85:70:
                    47:5f:13:ff:80:2d:e5:08:f1:31:be:dc:f8:07:a4:
                    dd:46:f9:4e:7a:05:42:7c:78:df:67:d5:ad:a3:da:
                    d5:94:d4:ac:1f:e3:2b:90:0d:b7:f8:13:3d:0a:59:
                    1d:b6:fb:b7:72:a3:54:71:f4:02:20:8b:0f:eb:19:
                    5f:a5:2f:f8:12:c9:b4:a5:84:0b:33:44:25:c4:ab:
                    63:36:78:9d:b0:5b:8b:88:cd:d9:2e:ba:fd:56:ea:
                    65:da:88:29:31:bd:4f:2e:3e:62:72:77:83:16:c7:
                    15:e1:f5:33:77:d6:5d:3d:ee:e3:b0:46:af:c0:bd:
                    dc:08:c6:06:1c:10:9b:ad:dd:bc:13:de:46:13:f7:
                    f7:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:28:FF:F9:83:8A:81:DA:06:D9:10:6E:FE:38:3C:A7:E1:34:CF:9D
            X509v3 Authority Key Identifier:
                keyid:6C:7D:A1:DA:96:78:8F:72:6F:8F:F8:92:60:98:42:CE:12:20:BC:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e717bf14-e49a-4acc-9c63-bf172797bcb2/0/6C7DA1DA96788F726F8FF892609842CE1220BCE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6C7DA1DA96788F726F8FF892609842CE1220BCE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e717bf14-e49a-4acc-9c63-bf172797bcb2/0/3130332e3136312e3230302e302f32332d3233203d3e20313431363632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.161.200.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0e:49:6f:69:a2:96:c5:3a:16:7e:28:74:c4:6f:3e:6e:16:79:
         27:e1:69:6a:b5:8c:91:8c:27:18:d3:89:c6:10:20:45:05:54:
         bb:f8:1b:c9:e6:93:40:49:6a:31:a1:d6:c6:17:0b:3d:5d:43:
         44:78:90:c8:42:92:cd:b9:7b:40:26:cd:6a:8f:f4:54:5a:22:
         2e:1e:00:17:3b:52:3b:81:4b:0a:25:d4:1d:6a:ad:8f:a2:d6:
         ca:7c:b6:5f:75:a5:bf:d2:6c:80:47:d9:10:32:82:2a:d6:57:
         0d:72:98:d8:57:88:f9:45:f7:e2:4e:f0:2a:63:10:7c:d3:35:
         40:2b:60:d9:00:d9:a0:1c:5e:f4:55:07:0e:0b:76:47:e8:ce:
         12:e8:2f:0d:18:33:ae:25:5c:5a:a0:84:be:5c:46:5e:fd:ec:
         a3:c0:88:f7:6d:a5:75:97:a1:05:be:a7:6d:88:e6:5a:1f:9b:
         ee:28:4a:ef:86:00:29:2c:82:99:0f:8c:7e:d9:ec:8b:c3:16:
         2c:c2:b6:a6:ed:59:10:56:0e:30:05:72:fb:a3:14:33:d4:56:
         83:2a:34:5b:6d:1a:24:25:13:c3:d5:5f:9b:66:a1:20:cc:fd:
         9f:ec:f7:fc:bc:6f:34:17:6f:a3:25:e8:b7:ab:2f:12:19:08:
         0d:14:d3:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:23:51 2025 by rpki-client on console.sobornost.net