Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/3130332e32302e39312e302f32342d3234203d3e203538333831.roa
File:                     3130332e32302e39312e302f32342d3234203d3e203538333831.roa (raw, json)
Hash identifier:          euk9OJMoqKJ/PoRjzKpkFgAP821pupDkAT5Pdi0akjA=
Subject key identifier:   2E:45:08:53:67:69:53:C0:F8:66:1A:33:3E:66:8B:7B:C1:F5:36:BD
Certificate issuer:       /CN=E5A907C4EC6DA6D9342613280CCAF26E98DBEB98
Certificate serial:       4C068FBBC80D98EC7C7E66CCD33676B1CC57F249
Authority key identifier: E5:A9:07:C4:EC:6D:A6:D9:34:26:13:28:0C:CA:F2:6E:98:DB:EB:98
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/3130332e32302e39312e302f32342d3234203d3e203538333831.roa
Signing time:             Wed 02 Apr 2025 16:00:06 +0000
ROA not before:           Wed 02 Apr 2025 15:55:06 +0000
ROA not after:            Wed 01 Apr 2026 16:00:06 +0000
asID:                     58381
IP address blocks:        103.20.91.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.crl
                          rsync://repo-rpki.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Apr 2025 20:52:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:06:8f:bb:c8:0d:98:ec:7c:7e:66:cc:d3:36:76:b1:cc:57:f2:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5A907C4EC6DA6D9342613280CCAF26E98DBEB98
        Validity
            Not Before: Apr  2 15:55:06 2025 GMT
            Not After : Apr  1 16:00:06 2026 GMT
        Subject: CN=2E450853676953C0F8661A333E668B7BC1F536BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:25:4a:cf:0b:44:8e:4d:e3:22:d6:4f:ea:a8:
                    b4:46:12:61:db:cd:a0:2a:5a:87:27:6b:b5:80:e7:
                    13:f2:9c:cf:7d:57:64:8a:f9:d9:f3:f3:43:1c:21:
                    47:13:b6:48:a3:f0:fe:67:b9:25:b9:cb:7b:b3:00:
                    f7:42:7e:6e:39:f9:bc:5a:cb:43:85:4f:2f:be:8f:
                    97:08:12:11:c6:4c:57:cf:b3:b4:a3:78:e9:50:76:
                    8f:ca:90:e8:54:8e:d6:bd:e7:e3:e2:b9:95:cb:b9:
                    56:e0:e4:b4:c8:b4:97:bc:5d:5b:14:f5:ff:c4:c7:
                    b0:76:b3:e0:e4:98:af:cb:7c:3c:f3:ee:05:c4:9a:
                    42:07:1b:0a:c9:91:e0:da:19:af:07:04:3c:4d:9b:
                    18:4f:39:62:23:eb:b5:6e:c7:e8:f0:7c:12:67:bc:
                    08:90:50:7e:08:13:76:3f:42:59:5d:d5:9b:0c:31:
                    f5:d4:eb:01:db:ec:30:69:c0:9e:07:33:73:55:3e:
                    57:0f:2c:76:64:cb:d2:7f:18:0d:1d:a6:f3:36:e7:
                    32:0e:63:69:0c:e5:58:9a:0c:f3:9b:fd:4b:45:7b:
                    f3:f2:d9:90:3f:3b:ac:6b:ca:b0:01:ee:71:9a:2d:
                    3a:e3:1a:80:39:55:85:22:21:a9:79:43:d8:23:c0:
                    5f:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:45:08:53:67:69:53:C0:F8:66:1A:33:3E:66:8B:7B:C1:F5:36:BD
            X509v3 Authority Key Identifier:
                keyid:E5:A9:07:C4:EC:6D:A6:D9:34:26:13:28:0C:CA:F2:6E:98:DB:EB:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/3130332e32302e39312e302f32342d3234203d3e203538333831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.20.91.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:47:aa:5a:aa:df:df:5d:e6:73:20:dc:0b:a5:04:6f:81:f6:
         7e:7b:ff:f4:d1:f3:82:b2:bc:17:f3:f7:00:27:1c:b5:6e:e5:
         99:3f:c7:76:a1:54:36:81:b3:e4:af:a5:2e:3e:78:bb:74:28:
         d3:c6:ab:41:54:3e:48:b7:54:ed:ca:3a:82:ca:9e:86:87:93:
         13:59:0e:1c:1b:ce:9e:5c:a3:bb:d0:0b:6e:fb:18:c7:b8:b0:
         11:07:9c:5b:a2:e1:22:9c:ef:fe:97:9a:e3:5f:f0:75:e9:81:
         25:14:f4:d5:97:33:b6:e9:3d:6d:a1:de:b1:70:53:c6:9e:ab:
         9c:67:68:ee:80:a4:4c:20:9c:ab:ec:a1:00:02:3e:46:0f:14:
         b5:07:10:e1:50:9f:c6:b6:e8:8c:dd:9d:e5:8d:ac:9c:6f:b0:
         0d:2f:c8:3d:74:d8:c8:d0:10:0f:4f:04:10:04:62:54:96:ca:
         34:6f:d4:66:3d:8b:5d:3c:df:78:05:ce:a1:ba:d1:08:65:7a:
         85:48:5e:80:b0:c8:27:ff:4f:41:06:2d:44:e3:0d:e6:fd:4a:
         1b:51:2f:63:ae:25:92:de:1f:df:d9:18:1a:c4:f3:d9:b7:e2:
         c0:ee:4c:99:9c:f3:24:23:e5:60:50:3c:27:26:52:38:a1:fa:
         3b:43:e0:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:21:08 2025 by rpki-client on console.sobornost.net