Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/3130332e3234372e34332e302f32342d3234203d3e203535363835.roa
File:                     3130332e3234372e34332e302f32342d3234203d3e203535363835.roa (raw, json)
Hash identifier:          pU683GKaElbx02fGnAze4HxdiyKXbycozWmgiE+EA3I=
Subject key identifier:   C2:6C:B9:94:E7:64:47:5A:4E:91:26:F1:A8:F1:2A:0D:47:42:A7:25
Certificate issuer:       /CN=38FCEA2A1C8443E590CF5220E7BDA05D722C294D
Certificate serial:       7D4B94AD8CF3B3B6890BF7D4DEA87BF0C02691A4
Authority key identifier: 38:FC:EA:2A:1C:84:43:E5:90:CF:52:20:E7:BD:A0:5D:72:2C:29:4D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/3130332e3234372e34332e302f32342d3234203d3e203535363835.roa
Signing time:             Wed 02 Apr 2025 04:00:55 +0000
ROA not before:           Wed 02 Apr 2025 03:55:55 +0000
ROA not after:            Wed 01 Apr 2026 04:00:55 +0000
asID:                     55685
IP address blocks:        103.247.43.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.crl
                          rsync://repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Apr 2025 02:40:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:4b:94:ad:8c:f3:b3:b6:89:0b:f7:d4:de:a8:7b:f0:c0:26:91:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38FCEA2A1C8443E590CF5220E7BDA05D722C294D
        Validity
            Not Before: Apr  2 03:55:55 2025 GMT
            Not After : Apr  1 04:00:55 2026 GMT
        Subject: CN=C26CB994E764475A4E9126F1A8F12A0D4742A725
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:42:a1:b6:5d:24:35:44:a4:68:59:7d:2f:8a:
                    38:45:2e:06:e8:94:d6:cc:18:a1:ce:68:ff:b9:ca:
                    21:26:2a:89:e8:35:b7:6c:74:3d:76:30:5f:76:9a:
                    2c:22:ae:02:1c:51:7b:1f:fe:72:71:c2:23:10:c5:
                    80:67:5a:e9:d2:03:74:70:e1:68:2f:35:e4:06:8d:
                    39:4c:e3:63:9b:30:a3:03:61:9d:ce:63:3c:d6:93:
                    0e:83:fc:e7:3c:a1:91:25:4f:7e:71:b6:5d:2c:0d:
                    d4:c4:19:33:fa:f8:39:59:c5:c1:1f:03:73:0c:c9:
                    7e:e3:3f:7c:fa:c9:be:86:fc:f4:c8:5f:84:35:ca:
                    07:3d:72:b1:f0:7b:fe:54:54:03:b3:18:5c:64:3f:
                    c8:19:74:06:7d:54:48:09:aa:1d:98:ee:f8:a6:b1:
                    d0:f0:74:18:b0:b6:07:42:49:fa:50:9c:f2:69:a6:
                    c3:ea:5a:ae:d4:5c:ad:ce:67:55:ba:2f:9c:d8:87:
                    41:c4:91:9b:ed:5e:6c:43:32:e1:04:cd:1e:4d:e5:
                    40:13:fe:98:22:86:24:f9:9e:61:b9:c5:dc:07:55:
                    b6:24:41:0c:7c:41:1e:88:af:31:bf:71:a5:9b:d3:
                    50:28:ab:a5:2b:59:d7:c1:65:24:ec:a6:7f:e0:98:
                    53:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:6C:B9:94:E7:64:47:5A:4E:91:26:F1:A8:F1:2A:0D:47:42:A7:25
            X509v3 Authority Key Identifier:
                keyid:38:FC:EA:2A:1C:84:43:E5:90:CF:52:20:E7:BD:A0:5D:72:2C:29:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/3130332e3234372e34332e302f32342d3234203d3e203535363835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.247.43.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:9a:fe:93:28:62:8b:6c:29:8f:cc:8f:10:94:77:96:c1:88:
         d5:8a:6e:c9:86:24:3d:37:e5:6c:00:c1:47:a1:f3:e7:2a:ee:
         f7:a4:a5:a5:71:d8:8d:57:96:9a:22:89:d1:62:96:fa:12:e0:
         42:aa:2c:23:cf:02:cd:2c:40:1d:03:6d:13:8d:71:4f:01:0a:
         29:6f:07:b6:b9:17:2b:63:7b:ab:b5:ec:2a:58:88:aa:cf:aa:
         95:84:93:78:b0:72:65:2f:74:c7:97:64:29:5f:76:79:74:96:
         e4:40:c5:35:dc:a8:83:b5:14:da:bd:fd:73:bf:e6:25:40:9b:
         71:85:91:fd:ec:9a:69:e2:2b:06:12:33:6e:27:fc:a6:d9:4f:
         b3:41:69:0a:d1:08:8a:5d:ba:ef:b4:ca:03:ef:eb:7d:0f:bc:
         81:50:3b:14:6b:38:c2:15:5a:fd:ee:8a:a0:b1:ab:ae:ce:02:
         10:c1:29:0e:95:c7:15:f6:6f:c5:3b:21:52:2a:f2:e6:2c:ec:
         b6:1d:ef:54:5d:06:e1:e3:68:08:ab:a2:d7:00:ed:3e:6b:23:
         32:6a:d2:b8:2d:6e:96:0c:0a:31:36:e0:c6:66:af:3d:27:38:
         1a:fa:be:be:67:cc:da:aa:7b:08:67:ec:1e:53:49:92:ef:35:
         46:90:f7:d2
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUfUuUrYzzs7aJC/fU3qh78MAmkaQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzhGQ0VBMkExQzg0NDNFNTkwQ0Y1MjIwRTdCREEwNUQ3
MjJDMjk0RDAeFw0yNTA0MDIwMzU1NTVaFw0yNjA0MDEwNDAwNTVaMDMxMTAvBgNV
BAMTKEMyNkNCOTk0RTc2NDQ3NUE0RTkxMjZGMUE4RjEyQTBENDc0MkE3MjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeQqG2XSQ1RKRoWX0vijhFLgbo
lNbMGKHOaP+5yiEmKonoNbdsdD12MF92miwirgIcUXsf/nJxwiMQxYBnWunSA3Rw
4WgvNeQGjTlM42ObMKMDYZ3OYzzWkw6D/Oc8oZElT35xtl0sDdTEGTP6+DlZxcEf
A3MMyX7jP3z6yb6G/PTIX4Q1ygc9crHwe/5UVAOzGFxkP8gZdAZ9VEgJqh2Y7vim
sdDwdBiwtgdCSfpQnPJppsPqWq7UXK3OZ1W6L5zYh0HEkZvtXmxDMuEEzR5N5UAT
/pgihiT5nmG5xdwHVbYkQQx8QR6IrzG/caWb01Aoq6UrWdfBZSTspn/gmFPHAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUwmy5lOdkR1pOkSbxqPEqDUdCpyUwHwYDVR0j
BBgwFoAUOPzqKhyEQ+WQz1Ig572gXXIsKU0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85
MjgwODlhNy0wYTY4LTRkNjctYWRhYi03NmQ3ZDkyNzFmZGUvMC8zOEZDRUEyQTFD
ODQ0M0U1OTBDRjUyMjBFN0JEQTA1RDcyMkMyOTRELmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMzhGQ0VBMkExQzg0NDNFNTkwQ0Y1MjIwRTdCREEwNUQ3MjJD
Mjk0RC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzkyODA4OWE3LTBhNjgtNGQ2Ny1h
ZGFiLTc2ZDdkOTI3MWZkZS8wLzMxMzAzMzJlMzIzNDM3MmUzNDMzMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzUzNTM2MzgzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGf3KzANBgkqhkiG
9w0BAQsFAAOCAQEAH5r+kyhii2wpj8yPEJR3lsGI1YpuyYYkPTflbADBR6Hz5yru
96SlpXHYjVeWmiKJ0WKW+hLgQqosI88CzSxAHQNtE41xTwEKKW8HtrkXK2N7q7Xs
KliIqs+qlYSTeLByZS90x5dkKV92eXSW5EDFNdyog7UU2r39c7/mJUCbcYWR/eya
aeIrBhIzbif8ptlPs0FpCtEIil2677TKA+/rfQ+8gVA7FGs4whVa/e6KoLGrrs4C
EMEpDpXHFfZvxTshUiry5izsth3vVF0G4eNoCKui1wDtPmsjMmrSuC1ulgwKMTbg
xmavPSc4Gvq+vmfM2qp7CGfsHlNJku81RpD30g==
-----END CERTIFICATE-----
Generated at Thu Apr 24 01:45:16 2025 by rpki-client on console.sobornost.net