Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/3130332e3234372e34312e302f32342d3234203d3e203535363835.roa
File:                     3130332e3234372e34312e302f32342d3234203d3e203535363835.roa (raw, json)
Hash identifier:          kBNBu6yeQhVM/8eFQmRNaz5z+ct6Yh5CCwCxI69k5F4=
Subject key identifier:   37:AC:4D:4B:00:E3:92:E7:F1:24:FD:95:74:AB:AC:83:17:6A:B5:99
Certificate issuer:       /CN=38FCEA2A1C8443E590CF5220E7BDA05D722C294D
Certificate serial:       38AC384EF6C0E7322423C040F994BC78EDDC2802
Authority key identifier: 38:FC:EA:2A:1C:84:43:E5:90:CF:52:20:E7:BD:A0:5D:72:2C:29:4D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/3130332e3234372e34312e302f32342d3234203d3e203535363835.roa
Signing time:             Wed 02 Apr 2025 04:00:55 +0000
ROA not before:           Wed 02 Apr 2025 03:55:55 +0000
ROA not after:            Wed 01 Apr 2026 04:00:55 +0000
asID:                     55685
IP address blocks:        103.247.41.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.crl
                          rsync://repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Apr 2025 02:40:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:ac:38:4e:f6:c0:e7:32:24:23:c0:40:f9:94:bc:78:ed:dc:28:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38FCEA2A1C8443E590CF5220E7BDA05D722C294D
        Validity
            Not Before: Apr  2 03:55:55 2025 GMT
            Not After : Apr  1 04:00:55 2026 GMT
        Subject: CN=37AC4D4B00E392E7F124FD9574ABAC83176AB599
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:00:56:10:84:41:46:ca:0e:1e:80:03:24:73:
                    41:41:9a:88:2d:a6:0f:8f:44:b0:b1:c3:7d:57:2b:
                    ce:02:c5:4f:3d:0a:76:0a:36:61:2f:7b:78:f1:32:
                    70:8d:96:24:64:12:71:cd:6e:95:0b:d5:f5:b3:4a:
                    57:11:0c:ce:79:3a:a3:46:f2:5a:10:7d:ef:78:85:
                    07:d0:f3:7b:e8:30:c1:80:0d:54:9b:43:8e:2e:5c:
                    b9:e8:c1:af:c8:e5:d8:5c:cd:6f:37:f5:ee:61:11:
                    db:6f:38:21:3e:8d:8b:27:28:63:c5:f1:de:52:28:
                    4b:a3:7c:a1:16:f9:ca:ae:2a:37:02:bc:5d:18:ad:
                    bd:16:2a:30:fe:d2:4a:f3:17:11:24:90:df:76:c1:
                    e9:30:c5:ba:43:8f:12:6f:22:f8:f1:ff:b4:c4:94:
                    71:5e:bc:17:0d:9f:9d:36:04:b2:ce:61:6f:3c:e1:
                    cb:1c:74:1c:8c:da:b8:26:b2:47:6a:b7:7a:d2:81:
                    1b:6d:30:55:5b:d7:81:fe:52:0c:d5:af:91:c4:0b:
                    3f:82:d0:81:69:cd:3f:0c:2b:70:c0:1f:4a:17:16:
                    76:c7:1a:a5:d4:d2:47:78:90:e4:f3:11:10:7a:03:
                    fd:d6:eb:42:c4:44:b7:4e:cb:d4:f7:0b:ab:26:e6:
                    e5:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:AC:4D:4B:00:E3:92:E7:F1:24:FD:95:74:AB:AC:83:17:6A:B5:99
            X509v3 Authority Key Identifier:
                keyid:38:FC:EA:2A:1C:84:43:E5:90:CF:52:20:E7:BD:A0:5D:72:2C:29:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/3130332e3234372e34312e302f32342d3234203d3e203535363835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.247.41.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:ea:9d:8a:40:9e:a6:9b:a7:08:d7:9b:8d:f1:3c:2a:34:8f:
         65:6d:06:07:d5:7b:39:5f:13:de:6e:15:b0:7b:32:72:67:14:
         46:1f:2d:c9:b3:3a:c2:0b:9f:74:11:2b:35:d3:35:e3:f0:2a:
         5a:65:c0:f1:69:a0:32:7e:ba:ef:fd:bb:0c:98:3d:9a:7d:a1:
         fe:c0:51:6c:4b:5e:33:57:b1:5e:5d:8f:fa:4e:e5:c5:ca:4e:
         10:ce:81:28:f4:f4:12:c5:46:c4:91:62:ec:d9:90:8f:77:87:
         f5:e9:62:f6:ed:87:57:ce:7a:4b:e7:3d:34:4e:51:de:6e:7a:
         0b:4c:53:bb:0d:7c:b8:56:da:72:56:10:92:c2:8f:5b:a7:d6:
         c7:55:da:ee:27:56:f2:73:87:93:f9:0d:38:4a:07:15:f0:29:
         6d:61:7f:e8:d7:19:0e:b6:03:ee:72:c1:a1:5c:2d:ca:15:e0:
         04:60:2d:bd:c8:10:b5:64:3b:ee:0e:b9:24:76:70:b7:de:ec:
         32:1b:7d:ca:78:30:cd:03:b6:57:71:f0:57:26:4e:b3:71:e6:
         8b:7b:a8:b1:ea:5f:ae:02:41:46:28:ba:42:99:9d:b4:5e:d9:
         ab:24:78:86:0b:bd:0d:3f:b0:92:3f:60:65:49:a5:7e:e0:66:
         e1:be:7e:ff
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUOKw4TvbA5zIkI8BA+ZS8eO3cKAIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzhGQ0VBMkExQzg0NDNFNTkwQ0Y1MjIwRTdCREEwNUQ3
MjJDMjk0RDAeFw0yNTA0MDIwMzU1NTVaFw0yNjA0MDEwNDAwNTVaMDMxMTAvBgNV
BAMTKDM3QUM0RDRCMDBFMzkyRTdGMTI0RkQ5NTc0QUJBQzgzMTc2QUI1OTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4AFYQhEFGyg4egAMkc0FBmogt
pg+PRLCxw31XK84CxU89CnYKNmEve3jxMnCNliRkEnHNbpUL1fWzSlcRDM55OqNG
8loQfe94hQfQ83voMMGADVSbQ44uXLnowa/I5dhczW839e5hEdtvOCE+jYsnKGPF
8d5SKEujfKEW+cquKjcCvF0Yrb0WKjD+0krzFxEkkN92wekwxbpDjxJvIvjx/7TE
lHFevBcNn502BLLOYW884cscdByM2rgmskdqt3rSgRttMFVb14H+UgzVr5HECz+C
0IFpzT8MK3DAH0oXFnbHGqXU0kd4kOTzERB6A/3W60LERLdOy9T3C6sm5uUdAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUN6xNSwDjkufxJP2VdKusgxdqtZkwHwYDVR0j
BBgwFoAUOPzqKhyEQ+WQz1Ig572gXXIsKU0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85
MjgwODlhNy0wYTY4LTRkNjctYWRhYi03NmQ3ZDkyNzFmZGUvMC8zOEZDRUEyQTFD
ODQ0M0U1OTBDRjUyMjBFN0JEQTA1RDcyMkMyOTRELmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMzhGQ0VBMkExQzg0NDNFNTkwQ0Y1MjIwRTdCREEwNUQ3MjJD
Mjk0RC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzkyODA4OWE3LTBhNjgtNGQ2Ny1h
ZGFiLTc2ZDdkOTI3MWZkZS8wLzMxMzAzMzJlMzIzNDM3MmUzNDMxMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzUzNTM2MzgzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGf3KTANBgkqhkiG
9w0BAQsFAAOCAQEAjOqdikCeppunCNebjfE8KjSPZW0GB9V7OV8T3m4VsHsycmcU
Rh8tybM6wgufdBErNdM14/AqWmXA8WmgMn667/27DJg9mn2h/sBRbEteM1exXl2P
+k7lxcpOEM6BKPT0EsVGxJFi7NmQj3eH9eli9u2HV856S+c9NE5R3m56C0xTuw18
uFbaclYQksKPW6fWx1Xa7idW8nOHk/kNOEoHFfApbWF/6NcZDrYD7nLBoVwtyhXg
BGAtvcgQtWQ77g65JHZwt97sMht9yngwzQO2V3HwVyZOs3Hmi3uosepfrgJBRii6
QpmdtF7ZqyR4hgu9DT+wkj9gZUmlfuBm4b5+/w==
-----END CERTIFICATE-----
Generated at Thu Apr 24 01:45:16 2025 by rpki-client on console.sobornost.net