Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/5e6c2a91-6afc-4767-bbc1-750613264585/0/3130332e3133352e342e302f32322d3234203d3e203338333230.roa
File:                     3130332e3133352e342e302f32322d3234203d3e203338333230.roa (raw, json)
Hash identifier:          8BpU0pm5UxOt5Z/5pCKxKlre5ZOR7m9ogADS2QXiNkA=
Subject key identifier:   5A:3E:B6:5B:F6:B3:DA:6B:5B:B8:D0:32:44:F3:68:7B:23:F2:B1:D6
Certificate issuer:       /CN=8BF02D8172D4CA8A00A9EE2EB8CC099F0727F1CB
Certificate serial:       0FBC15BED33351BD7BBF9BD4D7A8108A0CC16AE1
Authority key identifier: 8B:F0:2D:81:72:D4:CA:8A:00:A9:EE:2E:B8:CC:09:9F:07:27:F1:CB
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BF02D8172D4CA8A00A9EE2EB8CC099F0727F1CB.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5e6c2a91-6afc-4767-bbc1-750613264585/0/3130332e3133352e342e302f32322d3234203d3e203338333230.roa
Signing time:             Wed 16 Apr 2025 06:00:00 +0000
ROA not before:           Wed 16 Apr 2025 05:55:00 +0000
ROA not after:            Wed 15 Apr 2026 06:00:00 +0000
asID:                     38320
IP address blocks:        103.135.4.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/5e6c2a91-6afc-4767-bbc1-750613264585/0/8BF02D8172D4CA8A00A9EE2EB8CC099F0727F1CB.crl
                          rsync://repo-rpki.idnic.net/repo/5e6c2a91-6afc-4767-bbc1-750613264585/0/8BF02D8172D4CA8A00A9EE2EB8CC099F0727F1CB.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BF02D8172D4CA8A00A9EE2EB8CC099F0727F1CB.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Apr 2025 20:52:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:bc:15:be:d3:33:51:bd:7b:bf:9b:d4:d7:a8:10:8a:0c:c1:6a:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8BF02D8172D4CA8A00A9EE2EB8CC099F0727F1CB
        Validity
            Not Before: Apr 16 05:55:00 2025 GMT
            Not After : Apr 15 06:00:00 2026 GMT
        Subject: CN=5A3EB65BF6B3DA6B5BB8D03244F3687B23F2B1D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:58:f9:5c:ca:0c:0b:4a:e0:27:b5:74:5d:d5:
                    1f:a1:ae:b9:6d:b7:85:87:16:4c:66:f0:5c:f6:32:
                    dc:0a:f7:2d:5e:a4:b1:a3:43:9c:67:af:b9:a8:c5:
                    2d:5f:42:ca:27:db:8c:45:87:87:f8:81:13:3f:31:
                    31:95:d7:ba:42:46:c9:05:84:97:c9:17:4b:9d:54:
                    cb:da:46:e0:e8:d3:47:21:9f:b2:a0:2b:84:fc:9c:
                    f7:95:25:b2:fc:77:f1:d0:60:49:bf:83:3e:9d:2b:
                    88:53:11:7d:cb:a3:fc:2e:68:16:0b:a7:a7:a5:52:
                    f3:c4:25:8c:a3:c7:f0:d6:de:57:f7:9d:3b:79:cb:
                    52:a7:9d:ae:23:b7:39:d3:7a:d3:66:34:a5:00:99:
                    66:35:74:0a:1a:23:d9:49:ae:9e:76:27:51:fe:0a:
                    60:99:2a:81:0a:1f:76:f8:50:1b:de:18:97:6e:ab:
                    5f:cf:7f:e8:1b:a1:78:ce:c3:a8:89:ec:ae:de:20:
                    a1:87:93:a2:e2:35:5a:8b:54:08:95:55:dd:85:55:
                    0c:f4:e8:b5:21:e3:dd:89:fa:f8:1d:24:44:24:b4:
                    09:4b:1c:10:15:d9:df:4d:4d:ee:ce:2a:ac:fe:d4:
                    d5:da:bf:ed:2f:a6:51:c0:aa:86:0f:68:3a:da:56:
                    2c:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:3E:B6:5B:F6:B3:DA:6B:5B:B8:D0:32:44:F3:68:7B:23:F2:B1:D6
            X509v3 Authority Key Identifier:
                keyid:8B:F0:2D:81:72:D4:CA:8A:00:A9:EE:2E:B8:CC:09:9F:07:27:F1:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5e6c2a91-6afc-4767-bbc1-750613264585/0/8BF02D8172D4CA8A00A9EE2EB8CC099F0727F1CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BF02D8172D4CA8A00A9EE2EB8CC099F0727F1CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5e6c2a91-6afc-4767-bbc1-750613264585/0/3130332e3133352e342e302f32322d3234203d3e203338333230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.135.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6a:23:22:47:17:1b:d4:ad:e6:d7:be:e7:bf:43:6f:be:5b:72:
         0a:00:3f:15:e6:fb:9d:a9:74:63:56:26:3b:34:a2:09:da:6b:
         6f:50:f2:25:61:31:3b:23:6c:60:64:b9:80:98:dd:9f:14:0a:
         aa:cb:bb:b2:90:82:0a:9f:b7:66:54:ea:72:56:d0:29:94:10:
         0d:04:ff:88:b3:d5:38:d5:46:6e:be:34:8c:8d:c3:98:f8:8c:
         c6:14:d4:a3:ab:30:77:c3:e1:6b:f2:cb:f9:fd:cd:5d:72:13:
         85:f3:e2:77:b8:d1:62:d4:63:2e:ed:bc:0a:30:50:0e:e6:ba:
         33:e2:bf:9e:ba:a9:e4:24:5b:78:93:cd:ff:11:7c:f3:11:4b:
         1e:c4:7f:4e:cb:00:78:33:02:6b:42:43:58:d5:40:9e:0d:06:
         5f:b8:b2:45:b4:26:15:34:10:f7:93:e0:9a:e6:ce:c5:86:63:
         54:3e:86:94:2e:e1:ee:08:c7:cc:b1:03:55:8b:a0:8c:f9:20:
         e2:99:f1:2b:7e:c0:b1:e7:ee:63:a7:d0:f5:bd:c4:de:67:1f:
         36:27:1b:a8:24:0e:12:be:5d:f5:99:c4:80:88:87:48:ca:55:
         3f:03:9c:c7:1b:13:a5:38:4d:6c:3a:f2:c6:6f:77:eb:37:d4:
         4f:de:cd:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:21:08 2025 by rpki-client on console.sobornost.net