Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/f40e1f20-b0cd-469b-9106-1ea000795f9f/0/3130332e3139312e37302e302f32342d3234203d3e20313439393134.roa
File:                     3130332e3139312e37302e302f32342d3234203d3e20313439393134.roa (raw, json)
Hash identifier:          hleoAMHe2cczpQCUlwcCp5dkh1NUBMSITk8BlACCKEA=
Subject key identifier:   79:6E:1F:A2:69:24:54:CE:C9:5B:6A:65:0B:BE:D6:16:7A:73:A2:E2
Certificate issuer:       /CN=E51A77F5DBFB16B1606DE1A4FF6DFD0573420E38
Certificate serial:       4B93668B097B7F738E934AAF97619B0BC850F0E9
Authority key identifier: E5:1A:77:F5:DB:FB:16:B1:60:6D:E1:A4:FF:6D:FD:05:73:42:0E:38
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E51A77F5DBFB16B1606DE1A4FF6DFD0573420E38.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f40e1f20-b0cd-469b-9106-1ea000795f9f/0/3130332e3139312e37302e302f32342d3234203d3e20313439393134.roa
Signing time:             Wed 23 Apr 2025 02:26:29 +0000
ROA not before:           Wed 23 Apr 2025 02:21:29 +0000
ROA not after:            Wed 22 Apr 2026 02:26:29 +0000
asID:                     149914
IP address blocks:        103.191.70.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/f40e1f20-b0cd-469b-9106-1ea000795f9f/0/E51A77F5DBFB16B1606DE1A4FF6DFD0573420E38.crl
                          rsync://repo-rpki.idnic.net/repo/f40e1f20-b0cd-469b-9106-1ea000795f9f/0/E51A77F5DBFB16B1606DE1A4FF6DFD0573420E38.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E51A77F5DBFB16B1606DE1A4FF6DFD0573420E38.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Apr 2025 20:52:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:93:66:8b:09:7b:7f:73:8e:93:4a:af:97:61:9b:0b:c8:50:f0:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E51A77F5DBFB16B1606DE1A4FF6DFD0573420E38
        Validity
            Not Before: Apr 23 02:21:29 2025 GMT
            Not After : Apr 22 02:26:29 2026 GMT
        Subject: CN=796E1FA2692454CEC95B6A650BBED6167A73A2E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:53:be:a0:f9:e3:67:0c:e9:87:a1:bb:7d:03:
                    fe:10:e5:2b:09:b3:71:d6:81:8b:6b:5d:5c:af:11:
                    d3:eb:2f:42:d2:4c:ba:a3:cc:80:ad:46:b0:c6:00:
                    47:f0:dd:2c:ff:5a:71:14:9d:83:48:5e:d9:96:ee:
                    51:39:34:49:64:2c:6a:5a:b5:4b:a4:9a:43:04:3e:
                    90:b8:07:47:bd:4e:a4:93:d4:8e:33:04:66:5a:ef:
                    39:0c:d9:7e:bb:5d:e4:b0:20:fb:4e:54:22:8b:fd:
                    40:4c:11:f0:78:99:10:35:89:93:98:65:0e:0f:63:
                    1e:17:19:ec:6e:e5:1b:0f:f6:bd:ab:0c:85:fd:19:
                    99:9e:70:a9:18:19:6b:9d:bf:d8:4a:fa:ce:50:e3:
                    88:5e:c0:cd:b8:11:18:ca:3d:60:1b:06:b2:5f:b6:
                    48:4d:eb:02:cf:25:d8:2e:90:88:9b:df:65:44:4b:
                    97:4e:4e:18:46:c7:0d:8a:b6:b8:69:ae:3c:bc:8d:
                    a0:d0:32:4d:f9:73:31:5f:7c:1b:b3:37:0d:f8:e4:
                    43:03:55:77:dd:fd:4a:6f:e9:7c:0d:08:a2:a4:cb:
                    47:2c:a4:c4:18:3b:bd:90:b4:96:ee:f9:8f:06:30:
                    9f:97:c5:97:9d:61:61:1f:d8:48:ff:ce:31:49:a9:
                    42:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:6E:1F:A2:69:24:54:CE:C9:5B:6A:65:0B:BE:D6:16:7A:73:A2:E2
            X509v3 Authority Key Identifier:
                keyid:E5:1A:77:F5:DB:FB:16:B1:60:6D:E1:A4:FF:6D:FD:05:73:42:0E:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f40e1f20-b0cd-469b-9106-1ea000795f9f/0/E51A77F5DBFB16B1606DE1A4FF6DFD0573420E38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E51A77F5DBFB16B1606DE1A4FF6DFD0573420E38.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f40e1f20-b0cd-469b-9106-1ea000795f9f/0/3130332e3139312e37302e302f32342d3234203d3e20313439393134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.191.70.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:d5:f3:3d:0f:30:0a:65:6c:d8:f2:27:f8:7a:ba:d2:ec:56:
         cc:9c:72:a5:24:95:1e:c3:05:bb:6a:79:42:8b:ed:c6:43:6a:
         ad:4a:ef:4d:a7:20:bc:0f:c8:68:b7:f0:18:21:df:e7:8e:4a:
         94:00:f0:6e:3f:6d:ea:f1:6a:d2:75:50:79:2c:fa:99:81:a2:
         10:d1:4b:04:a4:7c:61:af:1b:b8:88:ba:85:a4:c9:5e:05:3c:
         19:f5:aa:e3:23:0d:c7:fe:1a:ea:f3:fb:cf:58:f2:1c:1f:09:
         bb:2c:70:db:82:6d:c0:64:4f:22:5b:a1:0a:1d:a7:91:d1:b5:
         53:ff:48:74:20:02:dc:c2:a7:ee:9f:3c:1d:71:56:a7:b4:03:
         01:66:12:37:99:3c:3f:91:25:1e:a9:e8:c5:a8:7b:a9:35:6d:
         64:36:c8:83:5b:57:c8:80:f0:d3:e0:f3:d5:6e:4d:f5:57:2f:
         2f:fc:4c:a5:b9:70:fc:3b:29:a3:51:3a:10:3a:fb:1e:93:d7:
         2c:77:e3:88:6c:ce:47:a7:49:29:28:9a:37:1e:57:55:3c:bb:
         2c:82:25:a1:dd:ae:7d:2d:f8:48:7d:b4:f9:21:a6:25:a9:7d:
         5a:8b:d9:93:78:81:66:a1:27:f1:8e:d4:b3:1a:59:fe:a8:99:
         6a:4b:65:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:02:24 2025 by rpki-client on console.sobornost.net