Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/f9003d6c-95f1-47a4-9d5d-f7b48caaa7f4/0/3130332e3136392e3133342e302f32332d3233203d3e20313432333338.roa
File:                     3130332e3136392e3133342e302f32332d3233203d3e20313432333338.roa (raw, json)
Hash identifier:          PLelRX92KnqBZTiq93z7FJFIC0ok4NpLF8ErJ3rGKfw=
Subject key identifier:   CA:01:66:68:94:80:5A:D5:C8:05:A1:F0:91:48:E0:C0:4F:3C:7F:41
Certificate issuer:       /CN=42CB30013F9704EFBDCF784FCD60289C7620A373
Certificate serial:       14E0AA0DAFCAB69FB9FE32832CCA750A4E929578
Authority key identifier: 42:CB:30:01:3F:97:04:EF:BD:CF:78:4F:CD:60:28:9C:76:20:A3:73
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42CB30013F9704EFBDCF784FCD60289C7620A373.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f9003d6c-95f1-47a4-9d5d-f7b48caaa7f4/0/3130332e3136392e3133342e302f32332d3233203d3e20313432333338.roa
Signing time:             Thu 03 Apr 2025 10:00:02 +0000
ROA not before:           Thu 03 Apr 2025 09:55:02 +0000
ROA not after:            Thu 02 Apr 2026 10:00:02 +0000
asID:                     142338
IP address blocks:        103.169.134.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/f9003d6c-95f1-47a4-9d5d-f7b48caaa7f4/0/42CB30013F9704EFBDCF784FCD60289C7620A373.crl
                          rsync://repo-rpki.idnic.net/repo/f9003d6c-95f1-47a4-9d5d-f7b48caaa7f4/0/42CB30013F9704EFBDCF784FCD60289C7620A373.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42CB30013F9704EFBDCF784FCD60289C7620A373.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Apr 2025 05:41:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:e0:aa:0d:af:ca:b6:9f:b9:fe:32:83:2c:ca:75:0a:4e:92:95:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42CB30013F9704EFBDCF784FCD60289C7620A373
        Validity
            Not Before: Apr  3 09:55:02 2025 GMT
            Not After : Apr  2 10:00:02 2026 GMT
        Subject: CN=CA01666894805AD5C805A1F09148E0C04F3C7F41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:1e:8e:6c:d1:ef:68:ee:49:08:d4:58:17:33:
                    31:5a:83:90:69:75:97:d7:ef:c0:34:ac:20:af:a5:
                    d8:d6:d0:fb:1b:0b:c6:9c:9f:d1:7d:1b:a0:a4:c9:
                    5f:44:05:2b:7c:9e:84:72:ee:ed:4c:3b:80:c2:39:
                    5c:49:10:6f:b7:cc:91:f1:54:67:a9:11:95:cf:11:
                    0c:53:0d:c1:1c:ee:1c:6e:58:ce:33:22:24:6c:cc:
                    88:27:63:bf:c7:21:d7:e3:89:fa:bc:65:93:8b:06:
                    33:a4:9c:1f:2c:bd:1d:44:67:d3:2d:39:09:f5:b6:
                    24:92:88:d7:38:a5:fe:48:a3:ce:13:09:aa:08:a0:
                    96:c3:f1:b3:6d:34:17:84:b2:89:a5:4e:93:35:55:
                    28:61:29:68:87:76:6a:88:87:55:6b:d3:24:ce:98:
                    df:c8:46:4f:f5:5f:b2:ff:3f:9b:d2:ea:a8:27:24:
                    65:39:75:8e:7b:28:3a:7e:ef:50:eb:69:64:1e:f8:
                    88:8c:f3:af:01:12:ab:6f:41:90:49:2b:20:32:c0:
                    44:b1:9f:bb:56:3b:42:3f:5a:2e:7f:f5:da:7a:ad:
                    fa:1c:5a:3e:e1:d9:08:3c:db:e7:f1:d2:4c:a3:17:
                    6a:0b:ad:0d:73:2d:fb:42:12:7c:0b:b6:9d:e8:58:
                    1e:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:01:66:68:94:80:5A:D5:C8:05:A1:F0:91:48:E0:C0:4F:3C:7F:41
            X509v3 Authority Key Identifier:
                keyid:42:CB:30:01:3F:97:04:EF:BD:CF:78:4F:CD:60:28:9C:76:20:A3:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f9003d6c-95f1-47a4-9d5d-f7b48caaa7f4/0/42CB30013F9704EFBDCF784FCD60289C7620A373.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42CB30013F9704EFBDCF784FCD60289C7620A373.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f9003d6c-95f1-47a4-9d5d-f7b48caaa7f4/0/3130332e3136392e3133342e302f32332d3233203d3e20313432333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.169.134.0/23

    Signature Algorithm: sha256WithRSAEncryption
         00:42:b2:85:78:8a:72:97:97:9c:d5:40:66:b6:c8:25:00:d9:
         52:95:8e:34:78:f4:f2:e5:81:9e:74:85:a0:b8:c9:bf:6b:6b:
         66:63:14:a9:c2:14:a0:bd:79:21:2b:c9:5b:5c:5e:f2:d0:5c:
         5f:b4:a7:fe:e4:88:21:53:2c:5b:d9:10:3f:a3:25:10:79:de:
         39:4c:a5:56:50:19:6d:4d:1b:c3:17:7c:53:a3:34:87:cf:e5:
         ee:35:47:9a:f2:c8:6b:44:e0:4b:cf:94:58:18:90:a8:19:16:
         5b:82:c9:c0:15:10:83:65:e7:76:33:5f:f5:be:7e:27:8d:fd:
         28:02:90:51:c4:10:a8:28:29:ed:9a:9a:03:3f:8c:f9:ae:b2:
         88:56:19:c6:e6:d3:c4:f4:6d:7f:8f:1b:52:81:81:cc:02:16:
         db:a5:34:19:a3:7c:3f:1a:59:0a:8e:1d:34:19:35:7c:f2:f7:
         5c:b3:68:ab:37:ad:6d:95:3d:43:f6:6f:30:26:34:b1:f1:4e:
         ac:fa:ed:81:7d:e8:a8:2c:9b:3b:79:93:18:4d:35:8b:0a:d4:
         eb:6b:ae:a1:f7:6d:6f:02:2e:55:e9:3d:1b:2f:23:f3:ab:55:
         0e:f5:73:dd:45:21:a4:0f:79:9f:30:d1:bf:49:55:63:7a:f6:
         33:74:60:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:13:46 2025 by rpki-client on console.sobornost.net