Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/d774b18c-f263-4fe1-8df8-1e7c68bfbefc/0/3130332e39302e3235322e302f32342d3234203d3e203338343936.roa
File:                     3130332e39302e3235322e302f32342d3234203d3e203338343936.roa (raw, json)
Hash identifier:          N91VkEyIONXI8YjWF6UzPMS2HMBAziqn1kBl9mmK1M4=
Subject key identifier:   E3:B8:45:B3:BF:C3:DF:48:42:D0:1A:01:97:D4:DD:FA:6F:F0:40:57
Certificate issuer:       /CN=57D075B2873A1E1F844485DAAC774C656EB9A611
Certificate serial:       4E71CD487E1D52CB6779BE97C5C93D2D33EAB3FB
Authority key identifier: 57:D0:75:B2:87:3A:1E:1F:84:44:85:DA:AC:77:4C:65:6E:B9:A6:11
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/57D075B2873A1E1F844485DAAC774C656EB9A611.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d774b18c-f263-4fe1-8df8-1e7c68bfbefc/0/3130332e39302e3235322e302f32342d3234203d3e203338343936.roa
Signing time:             Tue 04 Mar 2025 06:00:00 +0000
ROA not before:           Tue 04 Mar 2025 05:55:00 +0000
ROA not after:            Tue 03 Mar 2026 06:00:00 +0000
asID:                     38496
IP address blocks:        103.90.252.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d774b18c-f263-4fe1-8df8-1e7c68bfbefc/0/57D075B2873A1E1F844485DAAC774C656EB9A611.crl
                          rsync://repo-rpki.idnic.net/repo/d774b18c-f263-4fe1-8df8-1e7c68bfbefc/0/57D075B2873A1E1F844485DAAC774C656EB9A611.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/57D075B2873A1E1F844485DAAC774C656EB9A611.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Apr 2025 16:35:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:71:cd:48:7e:1d:52:cb:67:79:be:97:c5:c9:3d:2d:33:ea:b3:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57D075B2873A1E1F844485DAAC774C656EB9A611
        Validity
            Not Before: Mar  4 05:55:00 2025 GMT
            Not After : Mar  3 06:00:00 2026 GMT
        Subject: CN=E3B845B3BFC3DF4842D01A0197D4DDFA6FF04057
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:45:98:9d:d5:81:4f:a3:c0:e3:95:d8:75:22:
                    8a:21:af:2e:7e:02:35:7e:bf:ab:ec:ea:93:38:22:
                    b8:09:25:bb:54:b2:d5:6e:25:55:7d:87:d4:58:59:
                    12:e9:01:a0:39:1c:a4:35:2f:c2:f4:9d:a5:44:3a:
                    7e:61:87:ef:00:d4:61:18:64:21:88:30:fd:30:95:
                    5c:91:f2:01:b5:9e:e2:92:4d:49:92:ff:f9:d2:68:
                    2c:f0:48:8f:84:40:ed:01:cd:3f:63:4c:7a:30:b5:
                    d3:0d:b7:8b:ee:ac:64:f8:c9:59:7d:35:09:6a:b6:
                    0c:e3:8a:67:cd:1f:42:40:89:8c:a0:92:bc:46:30:
                    fd:a4:c7:98:b2:ff:90:76:39:29:1a:e7:9f:0e:0c:
                    09:cd:c7:c3:3c:d1:3e:cf:8f:46:d4:c3:87:27:0e:
                    8f:57:e4:e8:bc:3c:2b:e3:ab:b0:f9:ab:c8:02:7e:
                    11:d2:e8:26:c9:e5:1f:1b:16:45:c2:b8:d2:0c:53:
                    f1:8d:fc:c2:46:7b:ca:ea:14:e6:96:b2:42:16:97:
                    dc:e2:c1:3e:0a:6e:db:42:b2:48:75:3a:8a:a7:6a:
                    5b:2e:f9:1b:6a:83:48:3b:97:86:1d:04:5a:90:9c:
                    21:0f:b5:06:8a:25:6a:13:4d:9f:18:8e:b2:be:3d:
                    4b:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:B8:45:B3:BF:C3:DF:48:42:D0:1A:01:97:D4:DD:FA:6F:F0:40:57
            X509v3 Authority Key Identifier:
                keyid:57:D0:75:B2:87:3A:1E:1F:84:44:85:DA:AC:77:4C:65:6E:B9:A6:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d774b18c-f263-4fe1-8df8-1e7c68bfbefc/0/57D075B2873A1E1F844485DAAC774C656EB9A611.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/57D075B2873A1E1F844485DAAC774C656EB9A611.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d774b18c-f263-4fe1-8df8-1e7c68bfbefc/0/3130332e39302e3235322e302f32342d3234203d3e203338343936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.90.252.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:6e:1b:5b:bf:9b:99:bd:6a:17:6b:46:fc:5f:73:f9:2a:e0:
         2b:a8:e3:f6:8d:54:95:16:c9:3a:83:e8:4b:f1:94:26:6d:70:
         70:ff:e1:bf:80:2b:f5:1b:d7:cf:b5:1f:1b:e4:de:c9:0a:de:
         cd:9d:50:ef:a3:13:6a:8c:91:b5:bf:72:71:a7:d1:b7:38:0f:
         04:6b:83:f1:ca:80:e0:c9:c8:0f:fa:25:84:fc:ec:5e:52:9a:
         96:d6:66:96:b0:cd:9a:40:c8:06:ae:83:e1:86:86:b2:0a:1a:
         b9:50:da:3b:e0:5b:8c:5f:af:da:47:44:70:9b:d7:cb:2f:1c:
         81:2a:4f:03:e2:aa:ad:90:b5:3e:48:ce:cc:1e:d7:eb:c3:4a:
         9e:5b:e9:06:16:de:26:ef:22:6a:ab:11:d3:87:14:6a:51:81:
         e4:fc:6f:1f:92:c8:bb:89:de:e2:f0:e9:f4:c0:86:50:ed:5e:
         17:a7:92:16:bb:0b:11:f3:d8:8b:50:ac:db:0d:14:be:f1:04:
         0f:1a:25:91:bc:a1:ad:8c:1c:3f:90:4c:99:eb:44:b6:f4:26:
         11:e0:f4:ac:eb:a0:30:e0:6f:79:4b:1e:f0:fd:0a:d4:ca:ec:
         79:37:c4:4c:d7:e8:04:90:05:40:e2:9f:4d:ce:42:54:0b:83:
         bf:8a:ec:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 17:12:02 2025 by rpki-client on console.sobornost.net