Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/cb63f771-a95f-4b53-87bc-8bff504da1f4/0/3130332e34322e3235332e302f32342d3234203d3e20313333373939.roa
File:                     3130332e34322e3235332e302f32342d3234203d3e20313333373939.roa (raw, json)
Hash identifier:          ZpCaLj3IjbNE+GXo6EylCwD1IX57XlXTChG6yMIUs9k=
Subject key identifier:   75:1C:7E:19:2C:16:2E:03:86:41:37:57:D1:0F:C8:D0:4B:E0:5F:A5
Certificate issuer:       /CN=108261B2B5A1F3CC828EF2A532ED94DFC1202853
Certificate serial:       41485126FF8EF647C369B161A7A6F06795501EF1
Authority key identifier: 10:82:61:B2:B5:A1:F3:CC:82:8E:F2:A5:32:ED:94:DF:C1:20:28:53
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/108261B2B5A1F3CC828EF2A532ED94DFC1202853.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/cb63f771-a95f-4b53-87bc-8bff504da1f4/0/3130332e34322e3235332e302f32342d3234203d3e20313333373939.roa
Signing time:             Sat 05 Apr 2025 17:00:01 +0000
ROA not before:           Sat 05 Apr 2025 16:55:01 +0000
ROA not after:            Sat 04 Apr 2026 17:00:01 +0000
asID:                     133799
IP address blocks:        103.42.253.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/cb63f771-a95f-4b53-87bc-8bff504da1f4/0/108261B2B5A1F3CC828EF2A532ED94DFC1202853.crl
                          rsync://repo-rpki.idnic.net/repo/cb63f771-a95f-4b53-87bc-8bff504da1f4/0/108261B2B5A1F3CC828EF2A532ED94DFC1202853.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/108261B2B5A1F3CC828EF2A532ED94DFC1202853.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Apr 2025 09:52:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:48:51:26:ff:8e:f6:47:c3:69:b1:61:a7:a6:f0:67:95:50:1e:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=108261B2B5A1F3CC828EF2A532ED94DFC1202853
        Validity
            Not Before: Apr  5 16:55:01 2025 GMT
            Not After : Apr  4 17:00:01 2026 GMT
        Subject: CN=751C7E192C162E0386413757D10FC8D04BE05FA5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:9d:66:49:97:b4:94:f9:57:0e:a1:a5:56:1b:
                    f4:41:6c:d2:89:67:fc:60:88:12:32:29:2a:82:7f:
                    6d:4d:9e:14:28:d5:f3:01:91:d1:7f:e8:28:44:ba:
                    a4:e2:be:a2:2b:a1:2d:c0:2f:e0:51:08:16:b1:d2:
                    01:58:de:e3:be:1b:01:ee:9f:57:07:be:da:e1:2e:
                    73:26:06:b7:39:5c:46:5c:69:16:bf:83:86:ac:4f:
                    77:a2:7a:85:bd:65:f7:04:b8:af:40:e6:1e:ae:9c:
                    c4:32:93:c1:88:24:f6:c7:d6:08:50:61:97:03:54:
                    f5:73:98:03:56:20:5b:ae:29:a2:5c:a3:fb:a8:cd:
                    cd:87:94:b8:23:6b:aa:63:8f:8d:d6:02:5f:d6:00:
                    39:27:89:fd:dc:5a:8b:ef:25:b3:f9:db:c9:02:ce:
                    6f:9d:1c:ab:d1:ef:1f:1b:0d:dc:15:94:5a:6e:ef:
                    f9:f0:ca:ba:48:62:0e:82:45:95:6d:7a:d3:49:73:
                    ce:71:70:bd:23:e8:f4:30:ac:a8:77:85:ee:36:46:
                    52:b4:44:01:9e:86:5c:da:82:96:47:67:7c:2e:96:
                    6c:bb:cf:8e:8c:ba:f2:95:9b:b7:cf:9c:38:de:00:
                    01:ba:7b:e2:d6:5f:f3:12:ee:4f:47:0c:c6:e9:1a:
                    37:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:1C:7E:19:2C:16:2E:03:86:41:37:57:D1:0F:C8:D0:4B:E0:5F:A5
            X509v3 Authority Key Identifier:
                keyid:10:82:61:B2:B5:A1:F3:CC:82:8E:F2:A5:32:ED:94:DF:C1:20:28:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/cb63f771-a95f-4b53-87bc-8bff504da1f4/0/108261B2B5A1F3CC828EF2A532ED94DFC1202853.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/108261B2B5A1F3CC828EF2A532ED94DFC1202853.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cb63f771-a95f-4b53-87bc-8bff504da1f4/0/3130332e34322e3235332e302f32342d3234203d3e20313333373939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.42.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:2d:d5:07:d8:50:11:fc:ef:e9:60:87:85:00:69:98:88:cd:
         4d:b5:e5:a7:8c:6d:97:36:d7:d3:e3:31:c4:5c:b0:6a:9d:96:
         38:b0:24:8b:8f:e0:b1:c0:cc:fc:f4:ea:cd:d9:ab:c0:69:51:
         5b:54:dc:5c:0d:66:72:03:3f:92:d3:f8:0b:f4:b4:92:01:d7:
         a0:25:45:1c:70:c1:78:20:22:21:52:02:7d:d0:5e:6f:ce:ae:
         1d:a1:55:e4:4d:06:12:6b:25:2d:c1:c7:26:b3:8a:7c:72:a4:
         32:d8:dc:07:ed:2f:72:ab:2b:a3:cf:8d:3e:8f:a8:86:20:a7:
         30:32:c8:65:2c:cd:8a:21:f4:8c:a5:49:1b:8c:3a:cf:33:c8:
         ae:c8:52:54:69:cd:81:59:af:40:3b:8d:2a:61:8c:66:fc:38:
         dd:60:64:df:f8:be:e9:08:ae:a2:9d:bc:57:90:9a:79:bb:47:
         74:b9:fd:de:f0:53:be:d6:23:8a:21:4f:0b:19:52:75:8e:38:
         a2:72:04:00:59:13:dd:8e:85:4f:48:53:fc:3c:49:d3:6f:ff:
         aa:f3:95:ca:03:02:8e:ab:a4:5b:68:65:8e:ee:cf:1e:a4:06:
         a8:9b:90:54:b3:fb:b5:93:d7:c0:1f:3c:c7:8b:c3:e2:b0:1e:
         6f:9b:22:59
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUQUhRJv+O9kfDabFhp6bwZ5VQHvEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTA4MjYxQjJCNUExRjNDQzgyOEVGMkE1MzJFRDk0REZD
MTIwMjg1MzAeFw0yNTA0MDUxNjU1MDFaFw0yNjA0MDQxNzAwMDFaMDMxMTAvBgNV
BAMTKDc1MUM3RTE5MkMxNjJFMDM4NjQxMzc1N0QxMEZDOEQwNEJFMDVGQTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpnWZJl7SU+VcOoaVWG/RBbNKJ
Z/xgiBIyKSqCf21NnhQo1fMBkdF/6ChEuqTivqIroS3AL+BRCBax0gFY3uO+GwHu
n1cHvtrhLnMmBrc5XEZcaRa/g4asT3eieoW9ZfcEuK9A5h6unMQyk8GIJPbH1ghQ
YZcDVPVzmANWIFuuKaJco/uozc2HlLgja6pjj43WAl/WADknif3cWovvJbP528kC
zm+dHKvR7x8bDdwVlFpu7/nwyrpIYg6CRZVtetNJc85xcL0j6PQwrKh3he42RlK0
RAGehlzagpZHZ3wulmy7z46MuvKVm7fPnDjeAAG6e+LWX/MS7k9HDMbpGjdLAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUdRx+GSwWLgOGQTdX0Q/I0EvgX6UwHwYDVR0j
BBgwFoAUEIJhsrWh88yCjvKlMu2U38EgKFMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j
YjYzZjc3MS1hOTVmLTRiNTMtODdiYy04YmZmNTA0ZGExZjQvMC8xMDgyNjFCMkI1
QTFGM0NDODI4RUYyQTUzMkVEOTRERkMxMjAyODUzLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMTA4MjYxQjJCNUExRjNDQzgyOEVGMkE1MzJFRDk0REZDMTIw
Mjg1My5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2NiNjNmNzcxLWE5NWYtNGI1My04
N2JjLThiZmY1MDRkYTFmNC8wLzMxMzAzMzJlMzQzMjJlMzIzNTMzMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzMzMzMzczOTM5LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZyr9MA0GCSqG
SIb3DQEBCwUAA4IBAQBTLdUH2FAR/O/pYIeFAGmYiM1NteWnjG2XNtfT4zHEXLBq
nZY4sCSLj+CxwMz89OrN2avAaVFbVNxcDWZyAz+S0/gL9LSSAdegJUUccMF4ICIh
UgJ90F5vzq4doVXkTQYSayUtwccms4p8cqQy2NwH7S9yqyujz40+j6iGIKcwMshl
LM2KIfSMpUkbjDrPM8iuyFJUac2BWa9AO40qYYxm/DjdYGTf+L7pCK6inbxXkJp5
u0d0uf3e8FO+1iOKIU8LGVJ1jjiicgQAWRPdjoVPSFP8PEnTb/+q85XKAwKOq6Rb
aGWO7s8epAaom5BUs/u1k9fAHzzHi8PisB5vmyJZ
-----END CERTIFICATE-----
Generated at Sat Apr 26 08:46:12 2025 by rpki-client on console.sobornost.net