Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a6dad8cb-a537-4c50-af6a-aaba5f1e7644/0/3130332e3139302e302e302f32342d3234203d3e20313439383930.roa
File:                     3130332e3139302e302e302f32342d3234203d3e20313439383930.roa (raw, json)
Hash identifier:          FHb4F7lq3vcwTbWDvi1X4f5+wy1PMf7axFDD1qokmPs=
Subject key identifier:   4E:89:4A:19:88:45:61:C7:08:DA:0C:B7:2C:C7:66:7D:7C:B7:62:23
Certificate issuer:       /CN=38A92419EE1289455FCB1B71F9420F05CA334C15
Certificate serial:       7AE1E626E54F3C79A294D9AF1A9B4F4159FD78AD
Authority key identifier: 38:A9:24:19:EE:12:89:45:5F:CB:1B:71:F9:42:0F:05:CA:33:4C:15
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38A92419EE1289455FCB1B71F9420F05CA334C15.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a6dad8cb-a537-4c50-af6a-aaba5f1e7644/0/3130332e3139302e302e302f32342d3234203d3e20313439383930.roa
Signing time:             Fri 11 Apr 2025 08:00:00 +0000
ROA not before:           Fri 11 Apr 2025 07:55:00 +0000
ROA not after:            Fri 10 Apr 2026 08:00:00 +0000
asID:                     149890
IP address blocks:        103.190.0.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a6dad8cb-a537-4c50-af6a-aaba5f1e7644/0/38A92419EE1289455FCB1B71F9420F05CA334C15.crl
                          rsync://repo-rpki.idnic.net/repo/a6dad8cb-a537-4c50-af6a-aaba5f1e7644/0/38A92419EE1289455FCB1B71F9420F05CA334C15.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38A92419EE1289455FCB1B71F9420F05CA334C15.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Apr 2025 05:27:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:e1:e6:26:e5:4f:3c:79:a2:94:d9:af:1a:9b:4f:41:59:fd:78:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38A92419EE1289455FCB1B71F9420F05CA334C15
        Validity
            Not Before: Apr 11 07:55:00 2025 GMT
            Not After : Apr 10 08:00:00 2026 GMT
        Subject: CN=4E894A19884561C708DA0CB72CC7667D7CB76223
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:f8:4f:5d:18:a4:50:d4:f7:52:19:b4:0c:e7:
                    32:60:67:d3:d7:e7:5a:87:39:73:4d:3d:e6:e4:9e:
                    e3:2c:8e:e5:45:6b:c9:6b:15:79:c3:c6:8e:fc:10:
                    c8:11:fa:ef:25:33:1d:91:2e:98:1c:38:42:69:a5:
                    6f:99:8a:1c:a8:2a:e6:e2:98:b5:b9:bc:5e:61:f6:
                    c5:38:f0:0c:c7:70:5d:4f:44:b9:f8:76:fb:cc:98:
                    85:b5:7a:92:e7:dc:a6:cb:59:82:25:4d:77:8f:78:
                    db:63:7d:34:a3:f0:e9:89:0d:70:33:22:1b:e0:e9:
                    13:46:51:62:24:52:a4:b2:74:30:ff:1a:bf:be:d6:
                    5e:50:12:8e:05:60:d9:99:75:3c:9e:74:79:ba:27:
                    21:9f:a2:65:e5:40:f9:ed:aa:b0:9a:06:3c:ac:af:
                    89:9c:97:47:10:55:cb:62:7e:f8:85:58:70:58:6e:
                    d6:a9:31:48:6b:66:86:73:e0:1d:9a:d3:ef:12:bc:
                    60:3d:cd:50:77:cc:b9:d4:53:da:54:3a:df:c8:76:
                    21:72:88:04:3c:e8:06:89:7a:50:c5:30:cb:df:d2:
                    20:d0:9f:c3:0b:83:fa:e3:d6:25:89:8b:3c:34:d8:
                    92:77:4f:49:02:34:0f:ed:d7:09:60:ff:5e:6c:e0:
                    9c:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:89:4A:19:88:45:61:C7:08:DA:0C:B7:2C:C7:66:7D:7C:B7:62:23
            X509v3 Authority Key Identifier:
                keyid:38:A9:24:19:EE:12:89:45:5F:CB:1B:71:F9:42:0F:05:CA:33:4C:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a6dad8cb-a537-4c50-af6a-aaba5f1e7644/0/38A92419EE1289455FCB1B71F9420F05CA334C15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38A92419EE1289455FCB1B71F9420F05CA334C15.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a6dad8cb-a537-4c50-af6a-aaba5f1e7644/0/3130332e3139302e302e302f32342d3234203d3e20313439383930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.190.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:f6:46:6a:60:7f:f6:25:09:24:9b:a2:e5:db:cb:fa:a2:23:
         c5:e9:00:13:1d:d5:92:ae:99:94:59:de:88:e9:a2:34:0b:f0:
         b6:28:4b:b1:92:a0:57:00:9e:c8:96:11:49:1c:a4:f1:48:ce:
         b5:9e:81:e4:bf:1d:a5:68:6c:27:06:f9:f2:54:db:5c:43:d7:
         5a:4b:f1:43:bb:f1:09:02:90:0b:f8:f3:ea:94:c2:6e:11:2a:
         6e:e9:ec:06:25:e7:34:6c:b6:bd:71:82:7b:b9:ab:e0:d4:bf:
         8b:39:13:94:4c:b8:43:39:82:54:e2:04:a6:6b:af:c8:79:20:
         ac:fa:d7:23:7b:08:ff:8c:0f:9e:22:1c:f5:69:51:b7:b4:de:
         4d:a3:85:da:6c:62:e5:d1:90:57:69:4c:e2:8a:53:64:0f:7c:
         6b:fd:e4:f1:27:33:dc:42:d8:74:0f:61:d7:42:cb:70:fe:ff:
         1d:90:c6:45:79:3e:01:fa:fd:93:18:d8:f1:eb:3e:ea:24:0f:
         36:11:34:db:78:08:a1:ba:e4:2c:52:4a:7b:42:42:d0:5a:f4:
         9a:7b:7d:bb:03:f5:7c:2d:c6:64:f9:95:9b:e8:4a:0b:36:37:
         78:1c:3a:c5:49:f7:21:8d:d6:c7:3f:20:3e:4d:9b:bd:37:a8:
         1d:db:4a:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:33:08 2025 by rpki-client on console.sobornost.net