Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/ebefbf04-41be-48d7-ac00-8a3c498ca9ae/0/3130332e3135342e32342e302f32342d3234203d3e20313430343738.roa
File:                     3130332e3135342e32342e302f32342d3234203d3e20313430343738.roa (raw, json)
Hash identifier:          otls6UBoTEqi4ZjFKb5HX8qIQkPDL/Sf9x+smQVWKwA=
Subject key identifier:   2D:0B:C5:6E:C7:24:06:52:58:ED:97:23:A1:69:53:8B:B0:E3:CD:CF
Certificate issuer:       /CN=B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D
Certificate serial:       468E0E1C5DABC631163711ACBBF8DC9D671886AF
Authority key identifier: B8:43:6A:CB:7C:E8:F8:C2:F5:72:45:FF:E4:E6:BA:2F:52:39:3F:4D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ebefbf04-41be-48d7-ac00-8a3c498ca9ae/0/3130332e3135342e32342e302f32342d3234203d3e20313430343738.roa
Signing time:             Wed 16 Apr 2025 11:01:25 +0000
ROA not before:           Wed 16 Apr 2025 10:56:25 +0000
ROA not after:            Wed 15 Apr 2026 11:01:25 +0000
asID:                     140478
IP address blocks:        103.154.24.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ebefbf04-41be-48d7-ac00-8a3c498ca9ae/0/B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D.crl
                          rsync://repo-rpki.idnic.net/repo/ebefbf04-41be-48d7-ac00-8a3c498ca9ae/0/B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Apr 2025 20:52:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:8e:0e:1c:5d:ab:c6:31:16:37:11:ac:bb:f8:dc:9d:67:18:86:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D
        Validity
            Not Before: Apr 16 10:56:25 2025 GMT
            Not After : Apr 15 11:01:25 2026 GMT
        Subject: CN=2D0BC56EC724065258ED9723A169538BB0E3CDCF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:9b:c5:5b:8b:67:62:0d:35:a4:be:6c:bb:cf:
                    55:47:c6:2a:56:f3:92:dc:26:8c:02:46:5a:af:7a:
                    ed:e8:ee:4c:a1:b2:54:b6:91:8f:51:eb:fc:d2:46:
                    98:7d:e3:34:f8:71:18:23:65:01:ec:ee:e3:70:c8:
                    40:12:aa:68:70:f1:7f:38:ee:a2:ea:f8:6a:36:43:
                    79:68:b5:5a:d6:01:2c:f4:ac:fb:fc:6c:00:09:73:
                    b4:1c:06:5b:e8:d7:9e:8b:1d:22:72:fd:2e:8f:0d:
                    25:2f:52:83:6a:3b:81:5d:2f:55:2a:5a:ca:75:24:
                    43:4d:53:9c:20:9c:c9:2f:f0:96:aa:d7:5f:b3:8a:
                    2c:69:9d:e0:d9:3e:12:4e:6d:b4:fb:7f:ce:de:de:
                    9b:9d:e3:7e:8e:90:f3:14:a5:c8:c9:88:5d:58:be:
                    72:2e:24:f8:1f:2e:9a:31:0b:55:5b:22:ed:33:b5:
                    20:59:3b:e3:6d:85:bd:42:e0:96:d5:36:13:96:3d:
                    0c:a6:06:51:9f:9c:86:e9:be:c1:4e:3e:04:ea:f3:
                    80:fd:0c:4d:60:55:ee:55:68:62:f5:52:96:a8:13:
                    42:bc:ee:24:55:91:d7:9c:50:28:10:76:2b:47:0c:
                    2c:e5:e3:b2:42:87:33:c5:7e:1e:f9:ba:c9:d6:a3:
                    9d:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:0B:C5:6E:C7:24:06:52:58:ED:97:23:A1:69:53:8B:B0:E3:CD:CF
            X509v3 Authority Key Identifier:
                keyid:B8:43:6A:CB:7C:E8:F8:C2:F5:72:45:FF:E4:E6:BA:2F:52:39:3F:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ebefbf04-41be-48d7-ac00-8a3c498ca9ae/0/B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ebefbf04-41be-48d7-ac00-8a3c498ca9ae/0/3130332e3135342e32342e302f32342d3234203d3e20313430343738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.154.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:f0:dd:67:cd:8f:55:7d:cc:83:f8:a8:2d:52:84:8e:d5:33:
         67:9a:b1:eb:9b:51:d7:10:86:ae:23:0c:1e:35:e0:91:c8:d8:
         d1:6d:f3:d5:d8:53:b7:6c:7f:20:cb:ab:df:d6:bd:bf:6b:52:
         31:23:a8:0c:e4:aa:cb:6f:e3:a4:bf:1f:32:75:2e:d3:1a:5d:
         16:10:4f:0c:20:82:3d:28:7b:c7:e2:1e:f1:42:00:1c:dc:84:
         02:f7:09:7a:87:9b:f6:0f:54:18:c3:04:4e:91:18:02:0b:4e:
         2f:d7:1a:a3:9b:f2:a7:9d:2b:3e:88:98:9e:08:0b:0a:7f:d3:
         37:cc:4e:cc:1f:99:a2:1a:3b:8d:d2:fc:d4:80:98:30:04:a2:
         26:cb:1c:d3:53:8b:1e:39:81:1e:76:3a:3a:13:f1:f6:14:9f:
         99:fe:33:6f:72:8a:ea:a9:09:6c:53:f6:3c:d6:1d:fd:fd:28:
         84:20:27:88:74:44:04:47:bd:48:fb:3a:37:24:9a:76:39:53:
         80:2c:94:0e:8f:db:a7:2d:b4:1c:9f:ae:f5:69:02:37:cf:20:
         55:4f:67:17:3d:05:b8:3e:55:23:2a:24:e1:48:6e:28:3e:12:
         a1:d0:1c:ac:d3:3a:69:81:64:0c:49:07:6a:98:74:3c:64:a1:
         ff:9a:0e:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:02:24 2025 by rpki-client on console.sobornost.net