Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/eeb78f68-c7cb-452f-96b5-c41d65372021/0/3130332e3136392e31332e302f32342d3234203d3e20313432333238.roa
File:                     3130332e3136392e31332e302f32342d3234203d3e20313432333238.roa (raw, json)
Hash identifier:          cdZasTprwOiUnQ3Kt4SzWv3w0vffz5PI1Qb7PEDhc6A=
Subject key identifier:   A9:CE:1A:03:8C:3A:C2:60:65:1E:8E:EF:53:B9:F7:A3:1B:84:C7:ED
Certificate issuer:       /CN=50A2EED432F4BC38B22EB315635CF701DA108F7E
Certificate serial:       314E3AB90C52BF0D7A3FD0820704CBBAC8E54E75
Authority key identifier: 50:A2:EE:D4:32:F4:BC:38:B2:2E:B3:15:63:5C:F7:01:DA:10:8F:7E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/50A2EED432F4BC38B22EB315635CF701DA108F7E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/eeb78f68-c7cb-452f-96b5-c41d65372021/0/3130332e3136392e31332e302f32342d3234203d3e20313432333238.roa
Signing time:             Fri 21 Mar 2025 05:02:51 +0000
ROA not before:           Fri 21 Mar 2025 04:57:51 +0000
ROA not after:            Fri 20 Mar 2026 05:02:51 +0000
asID:                     142328
IP address blocks:        103.169.13.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/eeb78f68-c7cb-452f-96b5-c41d65372021/0/50A2EED432F4BC38B22EB315635CF701DA108F7E.crl
                          rsync://repo-rpki.idnic.net/repo/eeb78f68-c7cb-452f-96b5-c41d65372021/0/50A2EED432F4BC38B22EB315635CF701DA108F7E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/50A2EED432F4BC38B22EB315635CF701DA108F7E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Apr 2025 08:10:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:4e:3a:b9:0c:52:bf:0d:7a:3f:d0:82:07:04:cb:ba:c8:e5:4e:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50A2EED432F4BC38B22EB315635CF701DA108F7E
        Validity
            Not Before: Mar 21 04:57:51 2025 GMT
            Not After : Mar 20 05:02:51 2026 GMT
        Subject: CN=A9CE1A038C3AC260651E8EEF53B9F7A31B84C7ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:ea:ed:39:5f:03:6e:cb:e7:a5:9b:63:d5:6c:
                    25:94:89:2e:cd:5f:42:a0:ba:4f:8f:08:1a:57:6b:
                    67:24:3e:66:57:85:33:f0:15:fd:7a:fa:5d:94:9e:
                    7b:0f:7e:b9:8b:0b:00:80:aa:f6:b8:ee:2f:7b:7d:
                    da:c1:c5:c8:35:c0:79:7a:0c:bd:f1:44:de:4d:3c:
                    cf:ff:98:09:34:78:29:bd:bc:1b:d3:ee:4a:2f:77:
                    c7:59:0c:5b:9b:f6:9d:2e:5d:a3:52:c1:a8:e9:2b:
                    eb:e1:8e:99:24:ff:2e:82:b9:b9:78:b7:07:ce:11:
                    51:ae:b2:bb:90:1a:5f:67:e5:57:ad:46:85:de:ef:
                    ee:14:55:e7:e5:7b:e8:5b:6c:78:30:88:7c:3f:a1:
                    cf:0f:ca:1a:da:a5:b6:65:b5:17:b6:a5:d9:4e:eb:
                    7d:cd:b4:d5:b1:dc:64:8c:03:06:86:20:f3:28:2e:
                    83:6e:d5:81:c3:59:6a:9a:fd:53:ed:5b:b7:b8:e4:
                    1b:2a:2d:5f:89:e4:3c:fc:8b:60:38:24:ac:8b:e1:
                    bc:15:2f:d4:6f:36:0f:ef:06:57:7d:54:42:7e:89:
                    7d:13:0b:4a:88:34:f6:a7:1c:42:c9:0c:ea:c7:64:
                    24:f1:05:f6:9d:81:3f:08:2a:e3:62:31:0e:23:e4:
                    6c:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:CE:1A:03:8C:3A:C2:60:65:1E:8E:EF:53:B9:F7:A3:1B:84:C7:ED
            X509v3 Authority Key Identifier:
                keyid:50:A2:EE:D4:32:F4:BC:38:B2:2E:B3:15:63:5C:F7:01:DA:10:8F:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/eeb78f68-c7cb-452f-96b5-c41d65372021/0/50A2EED432F4BC38B22EB315635CF701DA108F7E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/50A2EED432F4BC38B22EB315635CF701DA108F7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/eeb78f68-c7cb-452f-96b5-c41d65372021/0/3130332e3136392e31332e302f32342d3234203d3e20313432333238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.169.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:d8:ba:55:fe:d4:0f:f2:23:ef:b1:a3:b1:7b:f7:1d:f5:a1:
         2d:8b:a3:18:93:cc:66:2c:fd:c4:4a:c9:8d:d3:db:15:d1:a7:
         b8:1b:8f:99:e5:14:e1:ed:29:62:bd:09:52:e1:a1:d6:f2:35:
         0b:9f:36:a7:13:1f:ee:3a:38:4b:7e:d7:d8:08:65:96:b8:3d:
         49:7c:fd:84:db:29:51:20:30:bc:66:39:2b:3c:49:3b:09:18:
         aa:a6:2b:0e:00:5b:07:41:33:cb:74:a4:34:a6:04:86:29:73:
         3d:b9:b2:2e:5a:59:2a:49:61:74:f3:e9:f7:25:1b:0a:e8:fd:
         39:8f:79:62:f7:e7:dc:e6:6a:25:69:85:a2:4a:e6:23:e5:c2:
         03:e6:dc:84:10:ad:e7:95:a9:7a:a1:b2:33:6c:75:72:83:a9:
         2a:3b:c5:07:d6:44:c7:f2:61:ee:85:09:62:e3:57:9b:ec:b7:
         54:63:b3:6a:69:9b:3e:a6:de:65:7b:ac:8f:b3:e1:29:95:3b:
         ac:e4:6c:61:24:76:3a:90:72:66:f2:87:be:8e:63:51:8d:7c:
         43:e4:0d:31:6d:c2:92:53:18:84:73:2b:24:7d:37:55:e9:d6:
         f5:3a:b3:87:f1:59:18:80:3e:d2:09:c5:bb:78:90:c9:02:37:
         8e:af:f1:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 04:31:50 2025 by rpki-client on console.sobornost.net