Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/f0dc1283-1ce2-41a5-afe6-f0be31e9b10d/0/3130332e3139312e39342e302f32342d3234203d3e20313439343132.roa
File:                     3130332e3139312e39342e302f32342d3234203d3e20313439343132.roa (raw, json)
Hash identifier:          5BGjTlG6kn0xa+zG7WIOf2FPOI4RcyC7jSjDUVIBLp8=
Subject key identifier:   E8:93:B6:73:7F:A6:D5:2D:BD:D5:B1:0D:D1:DA:6D:80:95:AE:1A:EF
Certificate issuer:       /CN=A74966240B64274B90EBE06CE0EE222C3EE9C60E
Certificate serial:       4E453350EE8CE3CAAA667763CDB92FF95235F7BF
Authority key identifier: A7:49:66:24:0B:64:27:4B:90:EB:E0:6C:E0:EE:22:2C:3E:E9:C6:0E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A74966240B64274B90EBE06CE0EE222C3EE9C60E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f0dc1283-1ce2-41a5-afe6-f0be31e9b10d/0/3130332e3139312e39342e302f32342d3234203d3e20313439343132.roa
Signing time:             Mon 21 Apr 2025 07:02:21 +0000
ROA not before:           Mon 21 Apr 2025 06:57:21 +0000
ROA not after:            Mon 20 Apr 2026 07:02:21 +0000
asID:                     149412
IP address blocks:        103.191.94.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/f0dc1283-1ce2-41a5-afe6-f0be31e9b10d/0/A74966240B64274B90EBE06CE0EE222C3EE9C60E.crl
                          rsync://repo-rpki.idnic.net/repo/f0dc1283-1ce2-41a5-afe6-f0be31e9b10d/0/A74966240B64274B90EBE06CE0EE222C3EE9C60E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A74966240B64274B90EBE06CE0EE222C3EE9C60E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Apr 2025 00:35:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:45:33:50:ee:8c:e3:ca:aa:66:77:63:cd:b9:2f:f9:52:35:f7:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A74966240B64274B90EBE06CE0EE222C3EE9C60E
        Validity
            Not Before: Apr 21 06:57:21 2025 GMT
            Not After : Apr 20 07:02:21 2026 GMT
        Subject: CN=E893B6737FA6D52DBDD5B10DD1DA6D8095AE1AEF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:41:71:d5:d3:17:70:10:1d:09:af:ad:9c:fd:
                    48:01:50:b7:06:b2:96:9c:b1:d3:f6:d9:d3:78:cd:
                    2c:31:e6:8a:f7:c2:54:5d:f6:61:c3:a2:07:b2:7c:
                    64:f7:46:a2:b4:96:d2:2f:8c:70:91:e7:4b:2d:eb:
                    c8:a7:da:a6:41:5e:41:4d:b6:32:d2:d5:f8:fa:d5:
                    a3:31:01:a7:ba:18:90:be:c1:57:ed:1d:e2:74:e5:
                    63:b3:39:77:cb:5b:50:3d:fe:6f:7a:97:7c:9c:14:
                    52:80:48:e5:3c:27:52:08:22:71:d4:19:cd:21:ee:
                    43:9f:f3:73:e9:7b:ad:31:43:d9:9c:0e:4c:e3:30:
                    40:f4:76:3b:7b:a9:6c:99:1c:b7:85:83:8e:f3:dd:
                    80:83:8a:f9:4f:5b:9d:7c:23:2c:3c:6f:22:c5:2e:
                    45:27:2b:61:58:5d:da:cf:e3:d9:ad:b2:c5:0d:2b:
                    96:1b:0b:d2:db:59:c7:c9:17:e3:50:93:fd:18:d4:
                    46:de:bf:94:02:4b:7f:b4:93:b1:a9:14:70:51:84:
                    4e:1d:72:27:bf:28:b4:ff:db:8d:99:43:42:4a:61:
                    b3:be:d6:4f:0c:9c:2c:80:bf:c9:2d:0f:e7:5e:93:
                    8a:97:cd:be:d5:22:a6:c6:44:ab:9a:74:cd:54:c9:
                    40:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:93:B6:73:7F:A6:D5:2D:BD:D5:B1:0D:D1:DA:6D:80:95:AE:1A:EF
            X509v3 Authority Key Identifier:
                keyid:A7:49:66:24:0B:64:27:4B:90:EB:E0:6C:E0:EE:22:2C:3E:E9:C6:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f0dc1283-1ce2-41a5-afe6-f0be31e9b10d/0/A74966240B64274B90EBE06CE0EE222C3EE9C60E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A74966240B64274B90EBE06CE0EE222C3EE9C60E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f0dc1283-1ce2-41a5-afe6-f0be31e9b10d/0/3130332e3139312e39342e302f32342d3234203d3e20313439343132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.191.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:38:62:03:b2:89:50:30:ff:e4:5d:7e:33:a9:c3:d8:e8:c8:
         f7:64:ea:40:08:f9:ad:43:d1:52:aa:c4:85:12:6a:4d:81:e4:
         8b:7d:97:b2:65:c0:42:5f:35:a1:d5:50:41:e8:6b:ec:d8:14:
         49:76:c4:bc:87:2e:87:1a:18:2f:ec:99:63:8f:13:57:59:32:
         79:f3:08:d6:78:8b:ef:74:a8:00:1f:6a:cd:b0:27:e5:88:47:
         88:a4:3d:72:61:71:21:1b:b1:b0:55:f2:9f:cc:e3:2d:06:6c:
         f6:64:c2:89:08:3a:cb:7d:46:2b:dd:2e:14:fa:6a:20:a2:ac:
         82:fb:a6:3e:40:c5:26:52:26:11:4d:04:01:b5:85:c2:12:49:
         20:c2:1e:1b:07:aa:53:0a:2a:f8:9f:71:0a:69:ef:0f:eb:be:
         72:c4:e2:a0:9d:4d:81:ef:2d:d5:ae:cd:76:c6:59:f0:80:65:
         63:cb:d9:98:51:e9:b4:92:58:42:b8:49:ff:91:a9:ee:b4:12:
         ca:c3:3a:46:40:98:1d:1f:e7:d7:9c:ac:e3:e9:fa:49:2c:d7:
         f9:4d:e0:6a:c5:4f:89:2b:31:17:9d:8a:78:c8:89:5e:2c:9d:
         44:56:45:9a:80:db:f7:b2:d4:41:9e:d5:9e:c2:3c:e8:3f:62:
         15:3a:93:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:07:26 2025 by rpki-client on console.sobornost.net