Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/3130332e3234372e34302e302f32322d3234203d3e203535363835.roa
File:                     3130332e3234372e34302e302f32322d3234203d3e203535363835.roa (raw, json)
Hash identifier:          ANeXRudYRQj4brheIa8AOL0aZoGg1PXmE4qO0owNUkM=
Subject key identifier:   E5:38:CE:A0:E4:85:60:D7:94:67:7B:3C:55:91:CB:24:AB:86:57:49
Certificate issuer:       /CN=38FCEA2A1C8443E590CF5220E7BDA05D722C294D
Certificate serial:       6F46DA1B6B72BC9F0B253371C72164E7FDC7B076
Authority key identifier: 38:FC:EA:2A:1C:84:43:E5:90:CF:52:20:E7:BD:A0:5D:72:2C:29:4D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/3130332e3234372e34302e302f32322d3234203d3e203535363835.roa
Signing time:             Wed 02 Apr 2025 02:00:00 +0000
ROA not before:           Wed 02 Apr 2025 01:55:00 +0000
ROA not after:            Wed 01 Apr 2026 02:00:00 +0000
asID:                     55685
IP address blocks:        103.247.40.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.crl
                          rsync://repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Apr 2025 02:40:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:46:da:1b:6b:72:bc:9f:0b:25:33:71:c7:21:64:e7:fd:c7:b0:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38FCEA2A1C8443E590CF5220E7BDA05D722C294D
        Validity
            Not Before: Apr  2 01:55:00 2025 GMT
            Not After : Apr  1 02:00:00 2026 GMT
        Subject: CN=E538CEA0E48560D794677B3C5591CB24AB865749
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:2e:b3:4a:f5:8c:2f:05:cf:db:3a:40:b7:f4:
                    67:8b:1d:4f:44:21:fc:8e:27:41:80:d6:9f:36:49:
                    b3:c4:ad:71:9c:dd:d2:2a:56:64:31:96:a1:56:42:
                    9f:08:d2:ea:1f:54:7b:23:79:9f:41:c4:a7:e0:24:
                    1f:06:a8:fb:ca:62:58:66:99:da:73:28:fe:a4:fa:
                    33:2a:5b:26:9e:47:20:8e:b7:77:fa:03:d0:9f:42:
                    5f:49:21:fc:0f:7b:0b:a7:db:a6:ef:ce:64:61:ff:
                    21:6c:ab:14:51:8d:c2:99:86:91:f6:fb:bf:0e:e1:
                    e7:4b:f8:5d:76:36:b2:be:4b:99:b5:45:ac:97:37:
                    4d:4e:f8:97:43:59:28:cf:63:b0:71:dc:aa:b9:5a:
                    87:50:a0:d9:2c:97:5e:9e:cb:7f:4e:f6:94:da:49:
                    7c:62:17:72:19:1d:56:35:27:7f:23:79:a7:60:3e:
                    e5:2b:56:3a:58:52:4c:ab:69:96:f7:24:aa:61:63:
                    51:35:47:ab:ae:50:31:9f:fd:57:78:82:82:f1:48:
                    82:32:f1:c5:32:3c:75:59:c7:e5:b1:27:91:9c:31:
                    63:9c:4b:e8:6a:f8:78:4f:99:c9:90:c1:71:14:00:
                    9c:58:62:b2:05:9c:37:a9:ae:f9:65:8e:5f:b2:28:
                    4f:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:38:CE:A0:E4:85:60:D7:94:67:7B:3C:55:91:CB:24:AB:86:57:49
            X509v3 Authority Key Identifier:
                keyid:38:FC:EA:2A:1C:84:43:E5:90:CF:52:20:E7:BD:A0:5D:72:2C:29:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/3130332e3234372e34302e302f32322d3234203d3e203535363835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.247.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2c:5c:59:81:fa:7b:55:e1:63:1b:32:f2:6b:43:ce:dc:39:bd:
         de:66:c9:ef:99:98:13:11:90:00:94:8c:d0:fb:e0:fb:87:3c:
         d1:08:f1:02:b1:01:bd:9d:3b:73:ed:a8:3c:3c:b4:82:f6:88:
         00:4b:f8:23:31:6d:53:b3:3d:7d:59:6e:a0:0e:f9:4b:4c:39:
         69:d9:4a:d3:e4:b6:7a:75:6d:13:95:58:a9:06:51:3d:81:86:
         9c:97:25:08:36:47:b1:d6:bb:f7:51:95:4f:75:4b:46:f8:8d:
         31:d8:f0:8a:86:a0:78:4a:8e:66:9c:30:e8:9a:75:83:ca:f0:
         89:35:de:c9:23:f7:bf:23:d4:8d:89:52:10:34:6f:20:c7:2f:
         98:de:39:ec:3a:ca:65:4f:77:1b:02:f7:fb:ba:09:42:68:b5:
         dd:15:bf:39:bc:8d:88:b1:be:fe:c7:ee:af:81:33:08:34:22:
         09:5c:80:33:b1:47:87:8f:b1:24:68:b9:ca:fe:ac:42:96:51:
         3c:50:67:b9:77:1a:24:03:a8:92:47:5f:23:79:a8:c6:de:a2:
         cf:4f:d1:c7:61:54:32:2c:c6:cd:8f:35:a0:ea:01:88:c8:68:
         16:1a:2c:39:da:26:41:38:70:16:f5:60:d3:1f:fb:4c:8b:39:
         b0:33:9f:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 01:45:16 2025 by rpki-client on console.sobornost.net