Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/3130332e352e35312e302f32342d3234203d3e203538333831.roa
File:                     3130332e352e35312e302f32342d3234203d3e203538333831.roa (raw, json)
Hash identifier:          8JW2i4QARgl0zJX/bSzH4du3GV59x2527JCrnJKQbAc=
Subject key identifier:   08:50:32:0F:72:72:5A:4D:14:28:1A:7F:26:95:FD:3B:EA:70:81:EC
Certificate issuer:       /CN=E5A907C4EC6DA6D9342613280CCAF26E98DBEB98
Certificate serial:       136501601CC9DD65F1960056BC15B3FDD3CA4260
Authority key identifier: E5:A9:07:C4:EC:6D:A6:D9:34:26:13:28:0C:CA:F2:6E:98:DB:EB:98
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/3130332e352e35312e302f32342d3234203d3e203538333831.roa
Signing time:             Wed 02 Apr 2025 16:00:06 +0000
ROA not before:           Wed 02 Apr 2025 15:55:06 +0000
ROA not after:            Wed 01 Apr 2026 16:00:06 +0000
asID:                     58381
IP address blocks:        103.5.51.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.crl
                          rsync://repo-rpki.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Apr 2025 20:52:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:65:01:60:1c:c9:dd:65:f1:96:00:56:bc:15:b3:fd:d3:ca:42:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5A907C4EC6DA6D9342613280CCAF26E98DBEB98
        Validity
            Not Before: Apr  2 15:55:06 2025 GMT
            Not After : Apr  1 16:00:06 2026 GMT
        Subject: CN=0850320F72725A4D14281A7F2695FD3BEA7081EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:af:cf:59:59:7b:b9:b8:aa:4f:f7:c1:ab:d1:
                    1c:2d:52:b6:79:fa:41:e5:52:8d:cc:35:d5:21:3c:
                    1b:be:96:07:a9:bb:99:63:35:37:78:7d:06:4f:8b:
                    24:b9:c2:17:74:e3:80:c9:a4:f7:0c:cd:24:c9:3c:
                    fe:1c:55:19:d0:a2:8d:20:19:2b:cb:dc:00:71:ce:
                    88:79:97:a3:53:fe:9b:97:19:09:82:9c:a5:ad:25:
                    a3:87:73:52:67:2f:cd:ff:5f:d0:ad:6f:a3:50:be:
                    51:65:23:b1:29:1c:a9:6c:9a:5f:7e:7c:4f:d7:2f:
                    20:85:01:52:04:01:76:b7:20:c6:e8:ff:dc:bb:e8:
                    bf:39:f2:5d:37:de:ef:64:22:85:66:fe:49:87:96:
                    32:4c:50:87:e5:33:18:45:a9:0f:79:92:c1:9c:19:
                    80:86:84:80:02:a7:88:3c:97:11:46:31:98:46:8c:
                    43:58:25:31:9c:3a:24:b9:a4:f2:9a:81:8f:98:99:
                    67:86:41:f9:37:09:0b:8b:55:62:57:d6:57:86:12:
                    f5:95:4f:25:16:aa:86:16:79:84:a5:ec:be:88:ca:
                    af:f5:76:35:7e:35:96:22:1c:cc:8f:63:6d:44:cd:
                    4c:b5:32:b1:3b:aa:4e:95:c9:95:ef:98:91:79:08:
                    c9:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:50:32:0F:72:72:5A:4D:14:28:1A:7F:26:95:FD:3B:EA:70:81:EC
            X509v3 Authority Key Identifier:
                keyid:E5:A9:07:C4:EC:6D:A6:D9:34:26:13:28:0C:CA:F2:6E:98:DB:EB:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/3130332e352e35312e302f32342d3234203d3e203538333831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.5.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:da:5d:34:c5:a0:41:67:9b:d9:66:2b:c9:67:0f:0c:c1:5e:
         86:ac:ca:e2:ca:d6:c1:04:10:79:89:8c:06:87:3e:1c:c6:27:
         00:16:a5:58:40:81:66:4c:52:4f:24:35:0a:c3:ad:02:ee:03:
         69:27:63:0b:50:25:75:9e:0f:b1:1b:c3:44:62:4c:39:bc:d2:
         68:58:a3:a4:44:c8:1a:13:cd:4a:19:44:c4:c2:dc:1e:4e:3f:
         f1:34:44:e1:76:90:62:a0:e3:d1:29:07:b2:55:4a:71:29:3a:
         3e:21:3f:44:c7:e6:72:24:c0:0f:ba:7a:7b:0a:7f:db:0e:2c:
         07:06:09:9b:fd:37:1c:c0:ec:6f:2b:66:9d:35:7c:14:ed:16:
         6f:f3:8c:36:bf:17:5f:22:d0:02:7f:db:3f:e4:29:02:48:c6:
         92:9c:6d:21:9a:15:67:6f:ed:55:53:68:ea:c7:08:e5:b8:d5:
         23:9f:12:66:e3:d0:ff:c0:9c:a4:0b:3e:ae:56:09:11:4c:c4:
         69:a2:c3:95:4b:af:51:41:8a:72:46:45:9c:42:d9:e1:29:bd:
         97:24:d8:7a:c0:c6:59:8d:7e:fe:ed:2f:14:d9:a6:e2:77:82:
         aa:26:79:cf:1a:2a:d3:96:55:73:5f:10:ee:86:15:25:59:82:
         86:b9:56:68
-----BEGIN CERTIFICATE-----
MIIFIzCCBAugAwIBAgIUE2UBYBzJ3WXxlgBWvBWz/dPKQmAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTVBOTA3QzRFQzZEQTZEOTM0MjYxMzI4MENDQUYyNkU5
OERCRUI5ODAeFw0yNTA0MDIxNTU1MDZaFw0yNjA0MDExNjAwMDZaMDMxMTAvBgNV
BAMTKDA4NTAzMjBGNzI3MjVBNEQxNDI4MUE3RjI2OTVGRDNCRUE3MDgxRUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDer89ZWXu5uKpP98Gr0RwtUrZ5
+kHlUo3MNdUhPBu+lgepu5ljNTd4fQZPiyS5whd044DJpPcMzSTJPP4cVRnQoo0g
GSvL3ABxzoh5l6NT/puXGQmCnKWtJaOHc1JnL83/X9Ctb6NQvlFlI7EpHKlsml9+
fE/XLyCFAVIEAXa3IMbo/9y76L858l033u9kIoVm/kmHljJMUIflMxhFqQ95ksGc
GYCGhIACp4g8lxFGMZhGjENYJTGcOiS5pPKagY+YmWeGQfk3CQuLVWJX1leGEvWV
TyUWqoYWeYSl7L6Iyq/1djV+NZYiHMyPY21EzUy1MrE7qk6VyZXvmJF5CMmZAgMB
AAGjggItMIICKTAdBgNVHQ4EFgQUCFAyD3JyWk0UKBp/JpX9O+pwgewwHwYDVR0j
BBgwFoAU5akHxOxtptk0JhMoDMrybpjb65gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z
MzhkMjc1NS0zODBkLTQ3N2UtYmYyNS0wYWYyOTAyNmJkNzAvMC9FNUE5MDdDNEVD
NkRBNkQ5MzQyNjEzMjgwQ0NBRjI2RTk4REJFQjk4LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRTVBOTA3QzRFQzZEQTZEOTM0MjYxMzI4MENDQUYyNkU5OERC
RUI5OC5jZXIwgZ0GCCsGAQUFBwELBIGQMIGNMIGKBggrBgEFBQcwC4Z+cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzM4ZDI3NTUtMzgwZC00NzdlLWJm
MjUtMGFmMjkwMjZiZDcwLzAvMzEzMDMzMmUzNTJlMzUzMTJlMzAyZjMyMzQyZDMy
MzQyMDNkM2UyMDM1MzgzMzM4MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH
DgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnBTMwDQYJKoZIhvcNAQEL
BQADggEBAALaXTTFoEFnm9lmK8lnDwzBXoasyuLK1sEEEHmJjAaHPhzGJwAWpVhA
gWZMUk8kNQrDrQLuA2knYwtQJXWeD7Ebw0RiTDm80mhYo6REyBoTzUoZRMTC3B5O
P/E0ROF2kGKg49EpB7JVSnEpOj4hP0TH5nIkwA+6ensKf9sOLAcGCZv9NxzA7G8r
Zp01fBTtFm/zjDa/F18i0AJ/2z/kKQJIxpKcbSGaFWdv7VVTaOrHCOW41SOfEmbj
0P/AnKQLPq5WCRFMxGmiw5VLr1FBinJGRZxC2eEpvZck2HrAxlmNfv7tLxTZpuJ3
gqomec8aKtOWVXNfEO6GFSVZgoa5Vmg=
-----END CERTIFICATE-----
Generated at Fri Apr 25 08:21:08 2025 by rpki-client on console.sobornost.net