Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/3130332e3234372e34302e302f32342d3234203d3e203535363835.roa
File:                     3130332e3234372e34302e302f32342d3234203d3e203535363835.roa (raw, json)
Hash identifier:          syH1wAS1MJE37vuCgOfSHfZ8nbZq+QzwV/xWmgvAdI0=
Subject key identifier:   E8:0F:AF:74:3A:00:6F:81:C7:AC:1E:63:41:D4:98:B8:04:81:97:22
Certificate issuer:       /CN=38FCEA2A1C8443E590CF5220E7BDA05D722C294D
Certificate serial:       243A7E956D17D0684E242AE453528FC65D0B8517
Authority key identifier: 38:FC:EA:2A:1C:84:43:E5:90:CF:52:20:E7:BD:A0:5D:72:2C:29:4D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/3130332e3234372e34302e302f32342d3234203d3e203535363835.roa
Signing time:             Wed 02 Apr 2025 04:00:55 +0000
ROA not before:           Wed 02 Apr 2025 03:55:55 +0000
ROA not after:            Wed 01 Apr 2026 04:00:55 +0000
asID:                     55685
IP address blocks:        103.247.40.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.crl
                          rsync://repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Apr 2025 02:40:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:3a:7e:95:6d:17:d0:68:4e:24:2a:e4:53:52:8f:c6:5d:0b:85:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38FCEA2A1C8443E590CF5220E7BDA05D722C294D
        Validity
            Not Before: Apr  2 03:55:55 2025 GMT
            Not After : Apr  1 04:00:55 2026 GMT
        Subject: CN=E80FAF743A006F81C7AC1E6341D498B804819722
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:79:46:64:43:d9:0e:43:ec:f4:76:b4:cf:0c:
                    8f:85:04:f1:cf:a9:00:54:74:97:0e:5c:38:4a:f3:
                    ed:db:7d:b0:ef:22:92:f9:30:f8:f3:ce:17:06:fb:
                    a5:0e:ea:98:67:8f:5f:ed:4a:a7:da:8d:6b:3b:56:
                    59:45:43:e0:cb:f4:c6:ec:3e:e2:2f:c0:02:10:69:
                    09:9e:82:5d:26:db:9c:6a:8a:ed:68:46:84:d5:29:
                    06:dd:c3:51:d1:6f:d3:a7:55:4d:af:0c:71:ba:9e:
                    2f:2c:4c:81:88:5e:8e:78:34:49:56:6b:3a:8d:31:
                    63:21:7a:a0:34:60:cd:42:9e:f5:fe:e2:79:79:4e:
                    c4:b3:2a:92:98:05:d5:82:f9:a5:ae:14:62:80:da:
                    37:f4:9f:74:8f:a0:9c:a3:07:21:57:29:18:80:36:
                    9c:a9:95:f6:51:62:3d:a4:3b:d3:60:7b:da:c1:93:
                    e6:6c:30:8f:68:b1:f3:9c:a8:e1:f3:73:84:17:3c:
                    1f:29:25:53:bf:d9:af:f7:b3:c8:53:2a:5d:bb:cd:
                    44:02:15:a4:1c:fa:57:aa:a9:5e:8e:10:b8:55:1f:
                    5b:84:57:0e:ee:8b:07:e8:92:9f:13:46:84:f6:c5:
                    33:9e:48:48:d8:c8:c2:48:eb:e8:e0:b2:cd:17:50:
                    8d:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:0F:AF:74:3A:00:6F:81:C7:AC:1E:63:41:D4:98:B8:04:81:97:22
            X509v3 Authority Key Identifier:
                keyid:38:FC:EA:2A:1C:84:43:E5:90:CF:52:20:E7:BD:A0:5D:72:2C:29:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/3130332e3234372e34302e302f32342d3234203d3e203535363835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.247.40.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:46:6c:1a:60:21:9d:fd:36:78:14:cb:53:77:3b:f3:32:95:
         99:38:8b:52:c4:1a:63:91:7b:3d:de:85:1c:77:d3:97:36:0b:
         11:6f:3b:b0:0c:7d:22:55:a7:6e:25:1b:60:7e:79:fd:54:0a:
         96:54:0f:48:7d:9d:83:93:92:a3:7d:20:ec:64:09:37:0c:bc:
         b8:a5:d0:29:e5:6d:6e:b7:24:fa:4c:d8:10:84:20:57:d7:9e:
         24:a1:29:e1:00:75:c0:f4:1c:82:56:21:cb:51:12:ef:6e:f7:
         5b:1d:68:79:0b:70:e0:b2:82:ef:40:d4:20:0a:ba:e5:9c:a8:
         66:82:53:bc:e1:b2:fe:79:f6:7b:af:88:d0:8a:6e:d0:36:10:
         57:62:bf:46:65:d8:25:52:96:1e:9f:74:83:13:dd:6c:c9:f8:
         ca:64:3c:d8:32:63:32:03:60:bf:12:bc:a0:7f:70:2c:fc:ed:
         3b:70:3e:a7:21:c3:de:01:56:ef:14:e6:83:2e:b8:a0:3a:00:
         65:2f:fc:8c:c3:90:2c:2d:21:21:96:c3:4e:a4:4d:dc:f5:36:
         37:8d:88:b1:82:66:5a:30:87:09:9d:d0:29:1b:d7:30:02:14:
         17:79:37:7e:fc:d4:f0:46:97:1f:9e:77:f7:4b:14:99:ee:81:
         9d:82:90:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 01:45:16 2025 by rpki-client on console.sobornost.net