Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/f34c33b8-9d42-4208-8ac4-f172a144d868/0/3130332e3138322e37382e302f32342d3234203d3e20313439363635.roa
File:                     3130332e3138322e37382e302f32342d3234203d3e20313439363635.roa (raw, json)
Hash identifier:          LAATNsnHcnoJWKciQROoRwDYWcBiokYiUiwzyLuS2UY=
Subject key identifier:   7B:15:81:9F:48:5B:2D:00:F9:FC:4B:30:C5:69:BD:B2:23:7A:ED:DB
Certificate issuer:       /CN=D1F72E67DA9CCE09044FA4204EA993AE93D196D6
Certificate serial:       1ED08542770362AD1892878415057A533B18FFA3
Authority key identifier: D1:F7:2E:67:DA:9C:CE:09:04:4F:A4:20:4E:A9:93:AE:93:D1:96:D6
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1F72E67DA9CCE09044FA4204EA993AE93D196D6.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f34c33b8-9d42-4208-8ac4-f172a144d868/0/3130332e3138322e37382e302f32342d3234203d3e20313439363635.roa
Signing time:             Tue 01 Apr 2025 14:52:41 +0000
ROA not before:           Tue 01 Apr 2025 14:47:41 +0000
ROA not after:            Tue 31 Mar 2026 14:52:41 +0000
asID:                     149665
IP address blocks:        103.182.78.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/f34c33b8-9d42-4208-8ac4-f172a144d868/0/D1F72E67DA9CCE09044FA4204EA993AE93D196D6.crl
                          rsync://repo-rpki.idnic.net/repo/f34c33b8-9d42-4208-8ac4-f172a144d868/0/D1F72E67DA9CCE09044FA4204EA993AE93D196D6.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1F72E67DA9CCE09044FA4204EA993AE93D196D6.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Apr 2025 09:52:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:d0:85:42:77:03:62:ad:18:92:87:84:15:05:7a:53:3b:18:ff:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1F72E67DA9CCE09044FA4204EA993AE93D196D6
        Validity
            Not Before: Apr  1 14:47:41 2025 GMT
            Not After : Mar 31 14:52:41 2026 GMT
        Subject: CN=7B15819F485B2D00F9FC4B30C569BDB2237AEDDB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:0e:f5:4b:61:61:7a:1a:ac:fc:6a:e3:fe:07:
                    29:ae:a2:70:e8:34:03:ca:7d:37:de:31:09:c6:57:
                    ee:5a:49:5e:3e:49:87:0f:3d:f2:1d:78:3f:59:ea:
                    6f:14:44:b7:5a:75:f6:28:84:9c:a5:b5:5c:f2:46:
                    26:3a:59:8a:4d:ac:4a:0b:4e:d9:92:96:7d:4f:ad:
                    89:b3:d4:09:44:29:fc:f5:e7:4f:60:85:3d:be:d1:
                    39:66:b5:b3:46:8a:35:de:8e:ef:2e:f2:d7:ca:a9:
                    76:b4:fa:0f:09:0e:ca:03:ba:d0:3a:d4:4b:ec:d7:
                    2f:01:4b:c1:eb:55:9b:85:b1:38:fd:50:7b:23:e5:
                    18:01:83:3c:b3:2f:ea:a8:bf:b4:03:52:c2:f7:b7:
                    f9:ad:a4:e9:74:bc:9d:d7:a3:bd:c7:7e:11:85:76:
                    13:6d:6e:c5:a2:ae:2d:33:7c:80:27:3c:f4:57:04:
                    e3:e9:e3:74:46:c1:a6:1f:99:bc:3c:10:0e:20:35:
                    c2:e5:07:b6:fc:84:06:74:0b:ea:2c:c2:78:e0:05:
                    c1:a2:e3:eb:27:d2:6c:a6:bc:fa:58:28:65:50:05:
                    d3:87:6f:af:5e:5e:c6:c6:28:dd:67:bb:0b:b4:f3:
                    8a:4c:57:3a:99:53:4e:b6:da:09:74:dc:3c:1f:9f:
                    25:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:15:81:9F:48:5B:2D:00:F9:FC:4B:30:C5:69:BD:B2:23:7A:ED:DB
            X509v3 Authority Key Identifier:
                keyid:D1:F7:2E:67:DA:9C:CE:09:04:4F:A4:20:4E:A9:93:AE:93:D1:96:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f34c33b8-9d42-4208-8ac4-f172a144d868/0/D1F72E67DA9CCE09044FA4204EA993AE93D196D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1F72E67DA9CCE09044FA4204EA993AE93D196D6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f34c33b8-9d42-4208-8ac4-f172a144d868/0/3130332e3138322e37382e302f32342d3234203d3e20313439363635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.182.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:c2:46:af:c9:67:80:65:1d:a1:ef:83:ea:3e:63:74:30:5c:
         81:60:86:86:f0:15:b0:e4:50:cf:78:a6:85:8f:31:6b:dc:8c:
         be:61:d6:33:62:60:71:14:9f:db:55:4f:ca:80:30:ff:58:29:
         e0:47:a7:3a:ae:a5:9d:de:58:ba:40:5c:6c:4e:ff:ed:03:d5:
         3d:d0:e0:7c:03:75:99:72:0c:62:aa:90:02:f3:26:02:6a:bd:
         dd:a6:fc:60:9d:d7:eb:ff:0b:ac:a4:23:a1:9d:ea:c6:de:61:
         5b:4d:81:a7:19:96:3d:cc:1b:46:aa:10:4f:db:98:35:ac:48:
         c2:8b:8b:0d:1f:e5:65:cb:e5:75:e3:46:d7:8a:59:24:61:7b:
         c9:18:d8:70:e7:2e:66:fa:47:42:d0:aa:14:69:df:4b:cc:b8:
         3c:00:e2:83:11:ad:65:f6:10:e8:17:91:06:f2:78:60:8e:6a:
         c2:3d:e5:73:51:67:9e:56:35:04:a9:73:f6:10:e7:aa:be:8b:
         cc:57:e3:60:09:9e:a7:4f:64:fb:68:39:48:0a:fe:7d:67:9a:
         cb:ff:55:06:f7:c4:cd:05:13:19:d2:9d:2d:60:7d:53:c2:cf:
         cd:69:3d:6f:fd:2b:1a:f2:15:a2:86:fe:49:e8:c0:b2:26:5a:
         1e:a0:9c:c6
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUHtCFQncDYq0YkoeEFQV6UzsY/6MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDFGNzJFNjdEQTlDQ0UwOTA0NEZBNDIwNEVBOTkzQUU5
M0QxOTZENjAeFw0yNTA0MDExNDQ3NDFaFw0yNjAzMzExNDUyNDFaMDMxMTAvBgNV
BAMTKDdCMTU4MTlGNDg1QjJEMDBGOUZDNEIzMEM1NjlCREIyMjM3QUVEREIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEDvVLYWF6Gqz8auP+BymuonDo
NAPKfTfeMQnGV+5aSV4+SYcPPfIdeD9Z6m8URLdadfYohJyltVzyRiY6WYpNrEoL
TtmSln1PrYmz1AlEKfz1509ghT2+0TlmtbNGijXeju8u8tfKqXa0+g8JDsoDutA6
1Evs1y8BS8HrVZuFsTj9UHsj5RgBgzyzL+qov7QDUsL3t/mtpOl0vJ3Xo73HfhGF
dhNtbsWiri0zfIAnPPRXBOPp43RGwaYfmbw8EA4gNcLlB7b8hAZ0C+oswnjgBcGi
4+sn0mymvPpYKGVQBdOHb69eXsbGKN1nuwu084pMVzqZU0622gl03DwfnyX3AgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUexWBn0hbLQD5/EswxWm9siN67dswHwYDVR0j
BBgwFoAU0fcuZ9qczgkET6QgTqmTrpPRltYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m
MzRjMzNiOC05ZDQyLTQyMDgtOGFjNC1mMTcyYTE0NGQ4NjgvMC9EMUY3MkU2N0RB
OUNDRTA5MDQ0RkE0MjA0RUE5OTNBRTkzRDE5NkQ2LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRDFGNzJFNjdEQTlDQ0UwOTA0NEZBNDIwNEVBOTkzQUU5M0Qx
OTZENi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2YzNGMzM2I4LTlkNDItNDIwOC04
YWM0LWYxNzJhMTQ0ZDg2OC8wLzMxMzAzMzJlMzEzODMyMmUzNzM4MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzNDM5MzYzNjM1LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ7ZOMA0GCSqG
SIb3DQEBCwUAA4IBAQAvwkavyWeAZR2h74PqPmN0MFyBYIaG8BWw5FDPeKaFjzFr
3Iy+YdYzYmBxFJ/bVU/KgDD/WCngR6c6rqWd3li6QFxsTv/tA9U90OB8A3WZcgxi
qpAC8yYCar3dpvxgndfr/wuspCOhnerG3mFbTYGnGZY9zBtGqhBP25g1rEjCi4sN
H+Vly+V140bXilkkYXvJGNhw5y5m+kdC0KoUad9LzLg8AOKDEa1l9hDoF5EG8nhg
jmrCPeVzUWeeVjUEqXP2EOeqvovMV+NgCZ6nT2T7aDlICv59Z5rL/1UG98TNBRMZ
0p0tYH1Tws/NaT1v/Ssa8hWihv5J6MCyJloeoJzG
-----END CERTIFICATE-----
Generated at Sat Apr 26 08:46:13 2025 by rpki-client on console.sobornost.net