Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/4b6e9b51-bd87-4905-9bf4-a848a44e5ba5/0/3130332e3135352e3139302e302f32342d3234203d3e20313431303637.roa
File:                     3130332e3135352e3139302e302f32342d3234203d3e20313431303637.roa (raw, json)
Hash identifier:          sz4VmdCTe+rtqXvjcCCv+oeArdLugQ/bUPNEnmt0I5U=
Subject key identifier:   EC:0F:9A:B0:58:CF:D1:DB:C9:76:AF:D1:95:FF:04:43:6A:74:89:45
Certificate issuer:       /CN=28B305C66336C433AB601BA6F0B352E6C57E9BEC
Certificate serial:       5DBA19DA6D0D325D5B407279C244AB03603D04D9
Authority key identifier: 28:B3:05:C6:63:36:C4:33:AB:60:1B:A6:F0:B3:52:E6:C5:7E:9B:EC
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28B305C66336C433AB601BA6F0B352E6C57E9BEC.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/4b6e9b51-bd87-4905-9bf4-a848a44e5ba5/0/3130332e3135352e3139302e302f32342d3234203d3e20313431303637.roa
Signing time:             Fri 13 Dec 2024 14:25:27 +0000
ROA not before:           Fri 13 Dec 2024 14:20:27 +0000
ROA not after:            Fri 12 Dec 2025 14:25:27 +0000
asID:                     141067
IP address blocks:        103.155.190.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/4b6e9b51-bd87-4905-9bf4-a848a44e5ba5/0/28B305C66336C433AB601BA6F0B352E6C57E9BEC.crl
                          rsync://repo-rpki.idnic.net/repo/4b6e9b51-bd87-4905-9bf4-a848a44e5ba5/0/28B305C66336C433AB601BA6F0B352E6C57E9BEC.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28B305C66336C433AB601BA6F0B352E6C57E9BEC.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Apr 2025 20:52:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:ba:19:da:6d:0d:32:5d:5b:40:72:79:c2:44:ab:03:60:3d:04:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28B305C66336C433AB601BA6F0B352E6C57E9BEC
        Validity
            Not Before: Dec 13 14:20:27 2024 GMT
            Not After : Dec 12 14:25:27 2025 GMT
        Subject: CN=EC0F9AB058CFD1DBC976AFD195FF04436A748945
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:2f:85:8e:71:2a:73:c4:a5:2a:09:bf:5b:b8:
                    0e:8a:a6:1e:34:4c:63:30:e3:e9:5d:d7:2d:f2:5c:
                    9c:b3:2f:c2:a3:40:da:1d:38:46:5f:77:4e:0d:f0:
                    99:8b:f3:e1:7f:61:8c:01:f6:45:8c:d6:7e:7e:9c:
                    21:4e:ee:84:b3:d8:ed:1d:23:fd:61:b8:57:78:20:
                    94:cc:cc:88:03:d0:3a:00:55:e4:fd:e0:45:f5:d3:
                    95:69:53:9a:b2:2b:a8:5e:2f:6c:2e:48:52:b2:3b:
                    1f:b6:c0:e3:0a:fe:ae:9b:99:12:42:a8:69:eb:b5:
                    1b:ee:38:34:8d:b2:8a:ba:67:93:08:62:25:bf:34:
                    fd:b8:2a:e9:82:9f:49:7e:af:fb:ab:f6:ad:fb:86:
                    c6:7d:25:5b:44:ec:7c:21:49:25:6e:dc:e7:b1:56:
                    5f:35:bb:37:c0:28:de:e8:2e:7f:d2:16:92:e1:4c:
                    98:5e:bc:52:25:c5:f0:27:79:ff:8d:4a:06:d3:96:
                    33:90:e5:ff:65:a3:fd:7b:08:cd:7a:66:bb:fd:5b:
                    b2:d9:15:fd:c4:45:94:59:d1:2b:fc:01:cc:97:40:
                    fe:c7:31:4d:ac:d4:12:de:45:7b:d8:27:82:38:43:
                    cf:a4:e2:dc:e8:2c:b5:f5:f2:e6:f9:95:99:27:40:
                    16:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:0F:9A:B0:58:CF:D1:DB:C9:76:AF:D1:95:FF:04:43:6A:74:89:45
            X509v3 Authority Key Identifier:
                keyid:28:B3:05:C6:63:36:C4:33:AB:60:1B:A6:F0:B3:52:E6:C5:7E:9B:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/4b6e9b51-bd87-4905-9bf4-a848a44e5ba5/0/28B305C66336C433AB601BA6F0B352E6C57E9BEC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28B305C66336C433AB601BA6F0B352E6C57E9BEC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4b6e9b51-bd87-4905-9bf4-a848a44e5ba5/0/3130332e3135352e3139302e302f32342d3234203d3e20313431303637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.155.190.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:6c:75:49:db:60:c3:ff:a6:60:c0:a2:c8:0d:2d:90:3a:5f:
         54:98:52:57:a1:b1:eb:8f:88:c8:ec:29:77:02:08:d4:31:18:
         6e:bd:fd:26:b0:29:fc:2e:e1:1c:4c:a9:2f:af:bd:e7:84:4d:
         57:e5:d7:5b:a7:8c:b7:af:66:a3:20:29:0c:10:10:e9:38:81:
         24:34:26:05:0a:47:be:5b:ab:74:1b:5c:4d:fd:01:39:4c:6e:
         28:da:3b:19:5d:70:37:71:42:ca:8d:cf:c5:43:97:e5:0c:63:
         e9:94:53:12:2a:f9:ad:2a:b4:cb:6a:99:a2:04:2e:6e:23:39:
         d7:4b:bc:91:f2:0d:1e:2d:10:ae:c3:3e:58:99:11:78:86:ea:
         fb:79:74:0c:27:b3:c1:e6:a9:bf:ce:46:74:d1:f9:a7:8c:a4:
         b0:7f:30:d2:13:50:5f:8a:e7:c3:ae:99:98:ba:03:be:72:3d:
         de:76:2f:1d:32:9b:45:8f:53:99:cc:af:9e:ef:9c:ac:e1:15:
         ab:54:f0:60:8e:58:b7:df:b5:bb:3c:26:41:0a:2d:2b:ac:31:
         35:5d:d8:fc:f6:a7:70:db:7d:39:0a:6d:50:88:fc:5f:b3:6b:
         cd:cf:db:c5:d8:e4:d5:4f:ae:f9:b4:25:75:63:dc:19:35:11:
         8d:bf:7e:ae
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUXboZ2m0NMl1bQHJ5wkSrA2A9BNkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjhCMzA1QzY2MzM2QzQzM0FCNjAxQkE2RjBCMzUyRTZD
NTdFOUJFQzAeFw0yNDEyMTMxNDIwMjdaFw0yNTEyMTIxNDI1MjdaMDMxMTAvBgNV
BAMTKEVDMEY5QUIwNThDRkQxREJDOTc2QUZEMTk1RkYwNDQzNkE3NDg5NDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFL4WOcSpzxKUqCb9buA6Kph40
TGMw4+ld1y3yXJyzL8KjQNodOEZfd04N8JmL8+F/YYwB9kWM1n5+nCFO7oSz2O0d
I/1huFd4IJTMzIgD0DoAVeT94EX105VpU5qyK6heL2wuSFKyOx+2wOMK/q6bmRJC
qGnrtRvuODSNsoq6Z5MIYiW/NP24KumCn0l+r/ur9q37hsZ9JVtE7HwhSSVu3Oex
Vl81uzfAKN7oLn/SFpLhTJhevFIlxfAnef+NSgbTljOQ5f9lo/17CM16Zrv9W7LZ
Ff3ERZRZ0Sv8AcyXQP7HMU2s1BLeRXvYJ4I4Q8+k4tzoLLX18ub5lZknQBZJAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQU7A+asFjP0dvJdq/Rlf8EQ2p0iUUwHwYDVR0j
BBgwFoAUKLMFxmM2xDOrYBum8LNS5sV+m+wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80
YjZlOWI1MS1iZDg3LTQ5MDUtOWJmNC1hODQ4YTQ0ZTViYTUvMC8yOEIzMDVDNjYz
MzZDNDMzQUI2MDFCQTZGMEIzNTJFNkM1N0U5QkVDLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMjhCMzA1QzY2MzM2QzQzM0FCNjAxQkE2RjBCMzUyRTZDNTdF
OUJFQy5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzRiNmU5YjUxLWJkODctNDkwNS05
YmY0LWE4NDhhNDRlNWJhNS8wLzMxMzAzMzJlMzEzNTM1MmUzMTM5MzAyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzEzMDM2Mzcucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnm74wDQYJ
KoZIhvcNAQELBQADggEBADJsdUnbYMP/pmDAosgNLZA6X1SYUlehseuPiMjsKXcC
CNQxGG69/SawKfwu4RxMqS+vveeETVfl11unjLevZqMgKQwQEOk4gSQ0JgUKR75b
q3QbXE39ATlMbijaOxldcDdxQsqNz8VDl+UMY+mUUxIq+a0qtMtqmaIELm4jOddL
vJHyDR4tEK7DPliZEXiG6vt5dAwns8Hmqb/ORnTR+aeMpLB/MNITUF+K58OumZi6
A75yPd52Lx0ym0WPU5nMr57vnKzhFatU8GCOWLfftbs8JkEKLSusMTVd2Pz2p3Db
fTkKbVCI/F+za83P28XY5NVPrvm0JXVj3Bk1EY2/fq4=
-----END CERTIFICATE-----
Generated at Fri Apr 25 03:46:16 2025 by rpki-client on console.sobornost.net