Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/400ec43b-433d-407d-bdee-eea6216a6ff4/0/3130332e3234332e3234362e302f32342d3234203d3e203539313333.roa
File:                     3130332e3234332e3234362e302f32342d3234203d3e203539313333.roa (raw, json)
Hash identifier:          StNWQakFfq+xNmXH8bq9LSFQ0fxal73j8fqHU2pjLfE=
Subject key identifier:   F3:E4:F0:E0:23:9D:9D:1C:79:08:12:E5:F2:ED:31:B3:95:42:A7:DA
Certificate issuer:       /CN=34C47ECC8EDFAA05EFFF41FBFF0F6A466FA31869
Certificate serial:       2C478A9D1A6BC02CF77DAE621C145289EEA5FA73
Authority key identifier: 34:C4:7E:CC:8E:DF:AA:05:EF:FF:41:FB:FF:0F:6A:46:6F:A3:18:69
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34C47ECC8EDFAA05EFFF41FBFF0F6A466FA31869.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/400ec43b-433d-407d-bdee-eea6216a6ff4/0/3130332e3234332e3234362e302f32342d3234203d3e203539313333.roa
Signing time:             Fri 18 Apr 2025 10:02:20 +0000
ROA not before:           Fri 18 Apr 2025 09:57:20 +0000
ROA not after:            Fri 17 Apr 2026 10:02:20 +0000
asID:                     59133
IP address blocks:        103.243.246.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/400ec43b-433d-407d-bdee-eea6216a6ff4/0/34C47ECC8EDFAA05EFFF41FBFF0F6A466FA31869.crl
                          rsync://repo-rpki.idnic.net/repo/400ec43b-433d-407d-bdee-eea6216a6ff4/0/34C47ECC8EDFAA05EFFF41FBFF0F6A466FA31869.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34C47ECC8EDFAA05EFFF41FBFF0F6A466FA31869.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 May 2025 00:57:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:47:8a:9d:1a:6b:c0:2c:f7:7d:ae:62:1c:14:52:89:ee:a5:fa:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34C47ECC8EDFAA05EFFF41FBFF0F6A466FA31869
        Validity
            Not Before: Apr 18 09:57:20 2025 GMT
            Not After : Apr 17 10:02:20 2026 GMT
        Subject: CN=F3E4F0E0239D9D1C790812E5F2ED31B39542A7DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:fb:5f:ad:9e:84:19:8a:88:70:38:5f:25:98:
                    f7:5d:ad:74:89:81:44:cb:ee:56:79:32:94:aa:29:
                    89:77:8e:77:82:d9:92:86:01:84:c2:74:ad:3d:47:
                    bf:62:9e:8a:89:c0:1b:ad:0c:fc:17:06:a9:a1:15:
                    ae:c8:18:6d:d2:99:6b:59:e6:5c:3b:31:1c:da:bf:
                    77:cb:3b:f9:49:f3:43:41:c3:f2:5b:ea:05:b5:ce:
                    76:c4:08:dd:80:01:10:12:75:36:57:de:c8:5c:70:
                    8c:39:80:2e:d6:d0:16:e8:fd:38:1d:04:f0:1f:7a:
                    f2:0b:8a:e8:07:8b:fb:dd:e6:6b:95:45:14:e0:06:
                    8c:69:41:24:41:26:48:21:95:59:72:57:ee:85:c7:
                    7f:d8:98:d7:9f:4c:d5:ec:61:48:b7:53:15:15:82:
                    f7:14:24:f6:fe:47:b9:8d:40:db:52:da:6e:9b:49:
                    e3:20:ec:d8:15:db:4f:d4:18:ff:81:7c:95:06:ba:
                    57:e0:fa:12:ca:c2:41:ad:b9:86:aa:5b:87:58:74:
                    18:05:c8:3a:f1:37:2e:06:a6:3f:1f:5c:c0:df:d9:
                    f6:67:95:5d:bf:f4:35:cd:64:d0:e7:86:ed:4b:48:
                    12:cf:a8:f6:34:da:6a:f4:6e:18:79:54:b9:ed:f2:
                    84:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:E4:F0:E0:23:9D:9D:1C:79:08:12:E5:F2:ED:31:B3:95:42:A7:DA
            X509v3 Authority Key Identifier:
                keyid:34:C4:7E:CC:8E:DF:AA:05:EF:FF:41:FB:FF:0F:6A:46:6F:A3:18:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/400ec43b-433d-407d-bdee-eea6216a6ff4/0/34C47ECC8EDFAA05EFFF41FBFF0F6A466FA31869.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34C47ECC8EDFAA05EFFF41FBFF0F6A466FA31869.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/400ec43b-433d-407d-bdee-eea6216a6ff4/0/3130332e3234332e3234362e302f32342d3234203d3e203539313333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.243.246.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c6:d3:3a:a3:c2:f3:cc:4d:aa:05:4f:d3:f5:46:84:b8:c9:a1:
         3d:dc:92:63:a0:f9:88:1d:4c:e1:de:13:ff:a7:f3:3e:a1:4e:
         86:90:1f:33:45:80:47:f2:47:e5:0f:15:ba:7d:fd:c9:46:ca:
         b4:bd:55:9f:c8:8d:9e:44:c1:47:12:e3:84:2a:b6:5c:8c:92:
         ae:df:ad:5a:57:52:20:2a:3a:7f:3b:04:9f:8a:e5:80:b5:f0:
         2a:74:4d:5c:64:52:64:25:c8:a3:e9:0c:28:3c:ca:9f:a5:1f:
         8e:ae:55:da:5d:c3:98:1b:5e:5d:a4:2e:ac:33:3d:f3:f7:7e:
         7e:4c:a8:09:cf:6f:00:53:f6:3a:ba:72:b5:55:42:f4:73:eb:
         21:10:ae:f1:b4:6c:a1:fb:0d:a8:b2:50:fc:5e:aa:01:e2:70:
         5b:12:16:86:e5:1e:97:c9:13:0d:30:6d:f3:96:4f:16:62:c0:
         3f:2d:da:e7:79:ee:27:75:c0:85:97:60:19:f5:ff:ba:e6:ff:
         ee:02:54:39:7f:8e:30:71:87:e2:f3:35:f5:21:a5:b9:3a:a3:
         f0:4c:80:6d:e1:86:6b:97:20:96:d8:7c:7b:86:c0:ef:2e:db:
         f1:95:c5:8a:26:30:bc:ed:18:bb:d4:47:8c:14:ca:61:c0:cd:
         ab:7b:03:95
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIULEeKnRprwCz3fa5iHBRSie6l+nMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzRDNDdFQ0M4RURGQUEwNUVGRkY0MUZCRkYwRjZBNDY2
RkEzMTg2OTAeFw0yNTA0MTgwOTU3MjBaFw0yNjA0MTcxMDAyMjBaMDMxMTAvBgNV
BAMTKEYzRTRGMEUwMjM5RDlEMUM3OTA4MTJFNUYyRUQzMUIzOTU0MkE3REEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDU+1+tnoQZiohwOF8lmPddrXSJ
gUTL7lZ5MpSqKYl3jneC2ZKGAYTCdK09R79inoqJwButDPwXBqmhFa7IGG3SmWtZ
5lw7MRzav3fLO/lJ80NBw/Jb6gW1znbECN2AARASdTZX3shccIw5gC7W0Bbo/Tgd
BPAfevILiugHi/vd5muVRRTgBoxpQSRBJkghlVlyV+6Fx3/YmNefTNXsYUi3UxUV
gvcUJPb+R7mNQNtS2m6bSeMg7NgV20/UGP+BfJUGulfg+hLKwkGtuYaqW4dYdBgF
yDrxNy4Gpj8fXMDf2fZnlV2/9DXNZNDnhu1LSBLPqPY02mr0bhh5VLnt8oQjAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQU8+Tw4COdnRx5CBLl8u0xs5VCp9owHwYDVR0j
BBgwFoAUNMR+zI7fqgXv/0H7/w9qRm+jGGkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80
MDBlYzQzYi00MzNkLTQwN2QtYmRlZS1lZWE2MjE2YTZmZjQvMC8zNEM0N0VDQzhF
REZBQTA1RUZGRjQxRkJGRjBGNkE0NjZGQTMxODY5LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMzRDNDdFQ0M4RURGQUEwNUVGRkY0MUZCRkYwRjZBNDY2RkEz
MTg2OS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzQwMGVjNDNiLTQzM2QtNDA3ZC1i
ZGVlLWVlYTYyMTZhNmZmNC8wLzMxMzAzMzJlMzIzNDMzMmUzMjM0MzYyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzNTM5MzEzMzMzLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ/P2MA0GCSqG
SIb3DQEBCwUAA4IBAQDG0zqjwvPMTaoFT9P1RoS4yaE93JJjoPmIHUzh3hP/p/M+
oU6GkB8zRYBH8kflDxW6ff3JRsq0vVWfyI2eRMFHEuOEKrZcjJKu361aV1IgKjp/
OwSfiuWAtfAqdE1cZFJkJcij6QwoPMqfpR+OrlXaXcOYG15dpC6sMz3z935+TKgJ
z28AU/Y6unK1VUL0c+shEK7xtGyh+w2oslD8XqoB4nBbEhaG5R6XyRMNMG3zlk8W
YsA/Ldrnee4ndcCFl2AZ9f+65v/uAlQ5f44wcYfi8zX1IaW5OqPwTIBt4YZrlyCW
2Hx7hsDvLtvxlcWKJjC87Ri71EeMFMphwM2rewOV
-----END CERTIFICATE-----
Generated at Sun Apr 27 19:11:47 2025 by rpki-client on console.sobornost.net