Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/ac941fbd-ad40-4327-93d6-8e79723fdb44/0/3130332e3133352e32342e302f32322d3234203d3e203338333230.roa
File:                     3130332e3133352e32342e302f32322d3234203d3e203338333230.roa (raw, json)
Hash identifier:          pqB1ruj1y50kMLTY1QixFSzofv1aBEosqK4RDKcdCxA=
Subject key identifier:   46:D4:9F:08:99:83:A6:D5:92:66:A2:78:00:B1:E5:AA:7F:CD:3E:1C
Certificate issuer:       /CN=BAB9DF6E6156CB968E7115D7D429758297DF7401
Certificate serial:       5886156E98D8B6B9E263BD68ABFF97AF75630847
Authority key identifier: BA:B9:DF:6E:61:56:CB:96:8E:71:15:D7:D4:29:75:82:97:DF:74:01
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BAB9DF6E6156CB968E7115D7D429758297DF7401.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ac941fbd-ad40-4327-93d6-8e79723fdb44/0/3130332e3133352e32342e302f32322d3234203d3e203338333230.roa
Signing time:             Wed 16 Apr 2025 06:02:23 +0000
ROA not before:           Wed 16 Apr 2025 05:57:23 +0000
ROA not after:            Wed 15 Apr 2026 06:02:23 +0000
asID:                     38320
IP address blocks:        103.135.24.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ac941fbd-ad40-4327-93d6-8e79723fdb44/0/BAB9DF6E6156CB968E7115D7D429758297DF7401.crl
                          rsync://repo-rpki.idnic.net/repo/ac941fbd-ad40-4327-93d6-8e79723fdb44/0/BAB9DF6E6156CB968E7115D7D429758297DF7401.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BAB9DF6E6156CB968E7115D7D429758297DF7401.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Apr 2025 14:02:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:86:15:6e:98:d8:b6:b9:e2:63:bd:68:ab:ff:97:af:75:63:08:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BAB9DF6E6156CB968E7115D7D429758297DF7401
        Validity
            Not Before: Apr 16 05:57:23 2025 GMT
            Not After : Apr 15 06:02:23 2026 GMT
        Subject: CN=46D49F089983A6D59266A27800B1E5AA7FCD3E1C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:ce:e9:0f:6f:44:34:01:f9:76:58:1b:4c:8e:
                    79:57:44:f4:45:c4:c4:bc:65:ac:17:57:e9:a3:ec:
                    68:30:c0:f3:75:c4:ed:8d:1b:5e:99:3a:51:37:4f:
                    25:60:52:61:d9:53:f6:4f:8a:5a:71:b6:4d:99:09:
                    08:51:76:83:39:bf:20:9f:b9:82:14:ff:d2:98:a3:
                    3a:64:03:dd:86:8d:b2:bd:fe:6b:db:24:f8:73:f1:
                    7a:0f:51:8a:fb:53:b9:cd:cf:f7:fa:d8:04:da:34:
                    b4:06:02:aa:cd:d5:01:67:27:72:0d:07:f0:ce:1f:
                    a1:92:51:eb:b5:04:c8:56:41:91:49:9e:88:2c:37:
                    5a:1b:69:13:da:95:6a:77:42:65:f1:20:14:85:1a:
                    a5:55:4c:6c:d6:b9:ec:67:8f:aa:e5:31:55:0d:41:
                    92:75:cd:d8:27:0b:cc:29:e6:38:c5:e2:9a:6c:18:
                    29:b9:13:bf:94:c6:fb:25:1d:db:14:53:42:33:b2:
                    52:ce:63:6d:d5:d1:f4:0a:ce:a4:c1:e7:4b:0b:0b:
                    2f:f4:1c:9e:2d:5f:72:de:6f:46:c1:22:be:8a:82:
                    10:93:c7:fb:dd:7c:fa:b8:81:a9:03:76:20:31:3b:
                    97:23:15:a5:5f:18:95:04:87:70:14:af:fe:8f:0a:
                    04:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:D4:9F:08:99:83:A6:D5:92:66:A2:78:00:B1:E5:AA:7F:CD:3E:1C
            X509v3 Authority Key Identifier:
                keyid:BA:B9:DF:6E:61:56:CB:96:8E:71:15:D7:D4:29:75:82:97:DF:74:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ac941fbd-ad40-4327-93d6-8e79723fdb44/0/BAB9DF6E6156CB968E7115D7D429758297DF7401.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BAB9DF6E6156CB968E7115D7D429758297DF7401.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ac941fbd-ad40-4327-93d6-8e79723fdb44/0/3130332e3133352e32342e302f32322d3234203d3e203338333230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.135.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         31:82:60:c7:45:04:f7:b2:7b:32:5a:d5:f6:03:17:67:7b:e6:
         79:c1:9a:1d:6f:67:81:73:b3:ae:84:61:ec:de:58:2e:4e:72:
         f0:bf:96:05:cc:b0:f2:ea:7f:1c:68:b8:4e:83:dd:66:e4:2f:
         a1:61:09:25:35:40:45:3c:02:91:4f:f2:5c:0e:e1:15:af:0e:
         32:d1:55:2a:00:dd:62:38:84:8d:b1:ee:5a:d9:63:9c:56:59:
         c9:9d:80:1f:84:78:04:45:2d:b4:d5:79:6f:1b:5b:96:2b:17:
         c5:8a:83:84:e5:d2:8d:a2:f7:9a:2b:d1:b7:d1:8d:2e:b6:b5:
         17:d1:93:4e:75:77:0a:6f:cf:a3:65:db:91:5b:fa:62:0b:90:
         10:eb:11:7e:58:7d:13:aa:a0:29:8c:c9:6d:a0:28:c0:77:8b:
         e5:38:50:5e:33:1e:5d:26:37:aa:ea:fc:21:b9:ae:32:3b:91:
         6e:9f:b6:e2:ac:2b:bf:25:e6:61:90:28:7b:fc:e5:93:10:1c:
         07:64:f1:67:85:a6:df:89:95:f4:b2:2c:4a:80:31:2c:9d:e0:
         6d:22:5f:e3:ff:dd:5d:d6:32:e7:2b:52:66:60:74:74:e2:f0:
         5e:54:a2:94:7e:84:09:67:61:ae:a6:d8:a8:15:89:bb:2c:5e:
         dc:19:b4:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:54:06 2025 by rpki-client on console.sobornost.net