Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e9ffb43b-f8b5-4f1f-9b8f-5b02ddbb6fcf/0/3130332e3137362e3235322e302f32332d3234203d3e20313437313433.roa
File:                     3130332e3137362e3235322e302f32332d3234203d3e20313437313433.roa (raw, json)
Hash identifier:          0eR/sossty6R9CW6sl77Vt0ZhuUxrN0f/0JSjyj94i0=
Subject key identifier:   15:DC:FA:64:22:8E:66:92:3F:10:8A:90:CD:02:07:17:83:FA:B6:B3
Certificate issuer:       /CN=E82AE8B691C7C53E1CE0B396D8975747F15604D5
Certificate serial:       582D8080E8B43B1616F0F85B04B4D9DF82AD391A
Authority key identifier: E8:2A:E8:B6:91:C7:C5:3E:1C:E0:B3:96:D8:97:57:47:F1:56:04:D5
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E82AE8B691C7C53E1CE0B396D8975747F15604D5.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e9ffb43b-f8b5-4f1f-9b8f-5b02ddbb6fcf/0/3130332e3137362e3235322e302f32332d3234203d3e20313437313433.roa
Signing time:             Fri 25 Apr 2025 14:00:02 +0000
ROA not before:           Fri 25 Apr 2025 13:55:02 +0000
ROA not after:            Fri 24 Apr 2026 14:00:02 +0000
asID:                     147143
IP address blocks:        103.176.252.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e9ffb43b-f8b5-4f1f-9b8f-5b02ddbb6fcf/0/E82AE8B691C7C53E1CE0B396D8975747F15604D5.crl
                          rsync://repo-rpki.idnic.net/repo/e9ffb43b-f8b5-4f1f-9b8f-5b02ddbb6fcf/0/E82AE8B691C7C53E1CE0B396D8975747F15604D5.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E82AE8B691C7C53E1CE0B396D8975747F15604D5.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Apr 2025 20:16:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:2d:80:80:e8:b4:3b:16:16:f0:f8:5b:04:b4:d9:df:82:ad:39:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E82AE8B691C7C53E1CE0B396D8975747F15604D5
        Validity
            Not Before: Apr 25 13:55:02 2025 GMT
            Not After : Apr 24 14:00:02 2026 GMT
        Subject: CN=15DCFA64228E66923F108A90CD02071783FAB6B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:3d:29:f8:4e:c2:f0:fe:cb:70:47:4f:40:6d:
                    95:b1:a2:15:22:63:b2:0b:55:44:6f:75:7b:0e:b4:
                    42:56:26:42:58:07:7a:4e:4d:fc:05:5b:b6:bf:41:
                    bf:3e:fa:86:40:40:6e:64:0b:a3:e9:76:75:fc:6f:
                    af:7d:26:e8:77:ae:d0:c9:73:de:e8:f5:b2:3a:bb:
                    5b:36:b1:1b:0c:1f:00:2a:4d:ca:74:56:f0:c5:eb:
                    3f:35:99:03:e9:46:9c:9c:5e:e7:a0:71:64:1e:8c:
                    c0:a7:43:33:4b:8f:a2:25:cb:07:0d:9f:15:59:da:
                    91:31:05:87:7a:2c:8a:66:77:8f:cb:4c:bf:ea:82:
                    2f:47:2c:19:3e:ca:35:23:b3:ae:1b:72:77:3f:9d:
                    5c:e8:b2:c4:bc:02:ba:f6:ef:11:bd:3c:b0:5a:d2:
                    36:f4:0f:5d:2a:eb:23:03:32:8e:e5:0e:c8:24:32:
                    37:51:6e:41:41:97:be:ed:ba:60:b0:61:5b:10:cf:
                    d6:37:4b:bc:47:8b:99:67:da:6d:fe:0e:69:45:6e:
                    f7:10:c4:6b:f0:b9:f3:7a:f1:8f:49:46:5f:a5:1c:
                    f3:a3:27:b5:00:ee:d6:90:92:0a:5b:7a:47:1a:84:
                    1e:13:57:4c:7b:a9:63:7e:e4:c2:ad:33:ee:cc:c8:
                    45:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:DC:FA:64:22:8E:66:92:3F:10:8A:90:CD:02:07:17:83:FA:B6:B3
            X509v3 Authority Key Identifier:
                keyid:E8:2A:E8:B6:91:C7:C5:3E:1C:E0:B3:96:D8:97:57:47:F1:56:04:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e9ffb43b-f8b5-4f1f-9b8f-5b02ddbb6fcf/0/E82AE8B691C7C53E1CE0B396D8975747F15604D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E82AE8B691C7C53E1CE0B396D8975747F15604D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e9ffb43b-f8b5-4f1f-9b8f-5b02ddbb6fcf/0/3130332e3137362e3235322e302f32332d3234203d3e20313437313433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.176.252.0/23

    Signature Algorithm: sha256WithRSAEncryption
         09:f7:77:33:21:f8:70:67:74:a4:b7:6c:fd:ea:9e:4a:8b:7a:
         11:8d:db:78:c3:6a:b3:e9:6c:dd:d2:88:9d:82:a9:ba:be:57:
         6c:a3:e4:bf:bb:19:79:da:ae:8b:92:a2:4c:5f:1d:27:0a:b0:
         07:64:89:dc:69:36:ee:0d:03:8c:3d:94:ff:02:6e:5f:b6:ff:
         73:dc:cf:67:c1:77:20:89:02:6f:5d:90:df:e6:8f:00:73:1d:
         83:70:97:f1:9d:50:a3:92:e0:76:ab:d1:48:ad:d1:a0:92:b0:
         29:31:67:bc:bf:df:44:91:74:38:bc:05:fc:44:23:12:05:54:
         94:af:97:55:d0:17:fd:6d:0c:e5:4c:e5:3d:5f:40:ab:1b:9e:
         a0:8e:9b:43:b6:2b:44:e4:f7:e7:55:9a:9c:c1:ed:94:aa:4c:
         53:58:4d:6e:47:77:57:72:7a:32:3a:50:9c:22:90:51:3b:25:
         85:44:0d:45:22:9e:a9:fb:f3:86:fb:4f:76:c9:cc:5e:8d:8f:
         59:d9:a7:24:5c:9d:59:19:aa:46:09:7c:9d:b3:28:d0:04:5f:
         a3:bb:f9:47:af:d5:1d:7f:cb:d0:43:9b:b9:eb:57:78:a6:2e:
         99:b7:6d:dd:b2:06:c5:aa:31:0f:ec:74:22:f2:fc:57:2b:de:
         35:14:d0:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 17:12:03 2025 by rpki-client on console.sobornost.net