Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/3130332e3130382e3133302e302f32342d3234203d3e203535363835.roa
File:                     3130332e3130382e3133302e302f32342d3234203d3e203535363835.roa (raw, json)
Hash identifier:          /15wV8i/i7B6FG9n08XOQypn1bQfdzKavjdkmpF3lT8=
Subject key identifier:   AE:12:F6:68:2B:87:47:CE:45:FE:92:AD:FE:BF:16:52:60:E8:00:24
Certificate issuer:       /CN=38FCEA2A1C8443E590CF5220E7BDA05D722C294D
Certificate serial:       3118DA1EC5FE4315AFA1C867EE6A48E61703C3B1
Authority key identifier: 38:FC:EA:2A:1C:84:43:E5:90:CF:52:20:E7:BD:A0:5D:72:2C:29:4D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/3130332e3130382e3133302e302f32342d3234203d3e203535363835.roa
Signing time:             Wed 02 Apr 2025 03:00:01 +0000
ROA not before:           Wed 02 Apr 2025 02:55:01 +0000
ROA not after:            Wed 01 Apr 2026 03:00:01 +0000
asID:                     55685
IP address blocks:        103.108.130.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.crl
                          rsync://repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Apr 2025 02:40:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:18:da:1e:c5:fe:43:15:af:a1:c8:67:ee:6a:48:e6:17:03:c3:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38FCEA2A1C8443E590CF5220E7BDA05D722C294D
        Validity
            Not Before: Apr  2 02:55:01 2025 GMT
            Not After : Apr  1 03:00:01 2026 GMT
        Subject: CN=AE12F6682B8747CE45FE92ADFEBF165260E80024
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:95:bc:9d:08:a8:e8:d3:09:53:39:b3:ae:d3:
                    86:4c:a0:10:04:1d:84:5e:10:73:c9:d6:7b:db:27:
                    a9:4f:86:06:d3:1f:79:c5:b0:ef:6c:8f:06:f8:96:
                    84:7b:90:95:f6:a5:3c:06:89:d5:e9:7d:91:b1:d3:
                    9f:8b:dc:14:6e:f2:55:9e:c6:a8:f9:b0:2c:d6:6a:
                    29:0f:ad:b1:93:b6:b3:c5:0b:7f:07:e2:1f:e1:c2:
                    e9:eb:08:1a:58:97:12:76:e9:d5:cb:2e:68:3f:b0:
                    b9:b4:d4:51:23:dc:7f:aa:1a:bc:5d:96:41:8c:2a:
                    f1:f2:c2:31:5c:b7:74:8c:0b:b0:25:9b:fa:6d:9b:
                    21:63:47:3b:5d:98:fb:09:be:3b:84:0a:eb:19:54:
                    82:ae:72:90:53:15:c5:2e:c8:ec:03:33:10:3a:f8:
                    89:b3:aa:6c:60:b1:1e:64:8f:eb:e2:6d:47:02:ed:
                    6c:5c:48:7f:f7:57:f5:fb:2f:9e:e4:ad:69:53:8f:
                    f8:5f:75:fc:59:0c:63:42:4a:cd:e1:b9:92:91:4a:
                    c9:37:ad:4e:66:0f:a8:2e:fb:c4:78:93:de:67:07:
                    11:70:77:e6:57:49:4f:c4:17:19:d6:da:05:a0:e8:
                    54:26:25:08:18:82:22:0b:1c:08:da:2d:0a:cb:e3:
                    e6:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:12:F6:68:2B:87:47:CE:45:FE:92:AD:FE:BF:16:52:60:E8:00:24
            X509v3 Authority Key Identifier:
                keyid:38:FC:EA:2A:1C:84:43:E5:90:CF:52:20:E7:BD:A0:5D:72:2C:29:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/3130332e3130382e3133302e302f32342d3234203d3e203535363835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.108.130.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:d4:91:ac:bc:5f:e6:2a:6d:30:15:7d:a7:dd:48:8f:cc:cf:
         05:42:f9:91:79:20:82:f0:46:9a:b8:c4:55:0a:4b:4e:6a:6a:
         3c:df:f5:7f:28:63:af:d1:e7:36:70:b5:70:39:5a:59:eb:f5:
         32:4d:83:1a:bf:5b:41:28:b4:da:7a:30:84:e9:7c:7a:24:71:
         85:15:e7:80:2a:09:46:2e:a3:48:b4:b1:cb:3a:7e:fd:c4:d4:
         9e:56:b4:7a:75:97:e1:44:f2:cb:81:28:cd:5f:06:c9:e2:5d:
         96:36:96:6f:23:a4:3c:09:83:3a:4b:8c:55:d8:a8:f1:d8:f6:
         ab:18:ff:c8:68:85:f8:4f:93:45:02:b2:22:b3:bc:6e:47:b1:
         ff:88:eb:4d:db:f5:56:00:c6:f1:e3:93:11:cd:35:b4:69:6c:
         50:f8:e2:c5:68:84:cf:53:5a:48:17:68:6a:f8:38:37:4d:ee:
         d9:51:bb:e5:c3:2d:13:27:e9:cf:43:46:02:4c:b5:55:6a:38:
         f6:e0:5b:f0:53:9e:bb:74:af:2e:6d:48:56:45:7d:ad:c9:85:
         42:7b:28:8e:4b:f5:c8:a1:ae:ac:f0:21:b1:24:51:86:97:58:
         0f:50:dc:01:e2:72:6c:00:31:10:50:bd:13:cd:cb:b7:23:9d:
         b4:5e:49:4c
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUMRjaHsX+QxWvochn7mpI5hcDw7EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzhGQ0VBMkExQzg0NDNFNTkwQ0Y1MjIwRTdCREEwNUQ3
MjJDMjk0RDAeFw0yNTA0MDIwMjU1MDFaFw0yNjA0MDEwMzAwMDFaMDMxMTAvBgNV
BAMTKEFFMTJGNjY4MkI4NzQ3Q0U0NUZFOTJBREZFQkYxNjUyNjBFODAwMjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhlbydCKjo0wlTObOu04ZMoBAE
HYReEHPJ1nvbJ6lPhgbTH3nFsO9sjwb4loR7kJX2pTwGidXpfZGx05+L3BRu8lWe
xqj5sCzWaikPrbGTtrPFC38H4h/hwunrCBpYlxJ26dXLLmg/sLm01FEj3H+qGrxd
lkGMKvHywjFct3SMC7Alm/ptmyFjRztdmPsJvjuECusZVIKucpBTFcUuyOwDMxA6
+ImzqmxgsR5kj+vibUcC7WxcSH/3V/X7L57krWlTj/hfdfxZDGNCSs3huZKRSsk3
rU5mD6gu+8R4k95nBxFwd+ZXSU/EFxnW2gWg6FQmJQgYgiILHAjaLQrL4+Y3AgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUrhL2aCuHR85F/pKt/r8WUmDoACQwHwYDVR0j
BBgwFoAUOPzqKhyEQ+WQz1Ig572gXXIsKU0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85
MjgwODlhNy0wYTY4LTRkNjctYWRhYi03NmQ3ZDkyNzFmZGUvMC8zOEZDRUEyQTFD
ODQ0M0U1OTBDRjUyMjBFN0JEQTA1RDcyMkMyOTRELmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMzhGQ0VBMkExQzg0NDNFNTkwQ0Y1MjIwRTdCREEwNUQ3MjJD
Mjk0RC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzkyODA4OWE3LTBhNjgtNGQ2Ny1h
ZGFiLTc2ZDdkOTI3MWZkZS8wLzMxMzAzMzJlMzEzMDM4MmUzMTMzMzAyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzNTM1MzYzODM1LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ2yCMA0GCSqG
SIb3DQEBCwUAA4IBAQCZ1JGsvF/mKm0wFX2n3UiPzM8FQvmReSCC8EaauMRVCktO
amo83/V/KGOv0ec2cLVwOVpZ6/UyTYMav1tBKLTaejCE6Xx6JHGFFeeAKglGLqNI
tLHLOn79xNSeVrR6dZfhRPLLgSjNXwbJ4l2WNpZvI6Q8CYM6S4xV2Kjx2ParGP/I
aIX4T5NFArIis7xuR7H/iOtN2/VWAMbx45MRzTW0aWxQ+OLFaITPU1pIF2hq+Dg3
Te7ZUbvlwy0TJ+nPQ0YCTLVVajj24FvwU567dK8ubUhWRX2tyYVCeyiOS/XIoa6s
8CGxJFGGl1gPUNwB4nJsADEQUL0Tzcu3I520XklM
-----END CERTIFICATE-----
Generated at Thu Apr 24 01:45:15 2025 by rpki-client on console.sobornost.net