Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/d774b18c-f263-4fe1-8df8-1e7c68bfbefc/0/3130332e39302e3235332e302f32342d3234203d3e203338343936.roa
File:                     3130332e39302e3235332e302f32342d3234203d3e203338343936.roa (raw, json)
Hash identifier:          VfuZSouZTsq571ghIBuDI0RvCeUniEkqt+AyLLYswCI=
Subject key identifier:   49:D2:D2:05:36:D2:12:32:57:F1:E7:78:8C:AE:A1:B7:C4:D1:6E:FD
Certificate issuer:       /CN=57D075B2873A1E1F844485DAAC774C656EB9A611
Certificate serial:       7545BBE7DB0002EB974C058BF2918B2F2F3FEF21
Authority key identifier: 57:D0:75:B2:87:3A:1E:1F:84:44:85:DA:AC:77:4C:65:6E:B9:A6:11
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/57D075B2873A1E1F844485DAAC774C656EB9A611.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d774b18c-f263-4fe1-8df8-1e7c68bfbefc/0/3130332e39302e3235332e302f32342d3234203d3e203338343936.roa
Signing time:             Tue 04 Mar 2025 06:00:00 +0000
ROA not before:           Tue 04 Mar 2025 05:55:00 +0000
ROA not after:            Tue 03 Mar 2026 06:00:00 +0000
asID:                     38496
IP address blocks:        103.90.253.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d774b18c-f263-4fe1-8df8-1e7c68bfbefc/0/57D075B2873A1E1F844485DAAC774C656EB9A611.crl
                          rsync://repo-rpki.idnic.net/repo/d774b18c-f263-4fe1-8df8-1e7c68bfbefc/0/57D075B2873A1E1F844485DAAC774C656EB9A611.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/57D075B2873A1E1F844485DAAC774C656EB9A611.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Apr 2025 16:35:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:45:bb:e7:db:00:02:eb:97:4c:05:8b:f2:91:8b:2f:2f:3f:ef:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57D075B2873A1E1F844485DAAC774C656EB9A611
        Validity
            Not Before: Mar  4 05:55:00 2025 GMT
            Not After : Mar  3 06:00:00 2026 GMT
        Subject: CN=49D2D20536D2123257F1E7788CAEA1B7C4D16EFD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:1b:2b:e1:b1:62:13:51:0e:aa:2f:17:ec:ec:
                    11:55:eb:2c:c1:73:b7:64:60:81:c4:16:09:d1:df:
                    4a:ec:a8:1d:08:43:fc:7f:5b:95:14:e2:9d:98:33:
                    18:d2:ea:fc:7c:77:d6:36:f0:3f:78:0d:80:1d:f0:
                    62:af:88:ea:04:11:3e:c4:72:df:06:00:53:5b:cd:
                    67:05:cf:a6:22:7e:66:d2:c7:73:b3:ac:12:7f:bc:
                    7f:52:38:ed:59:db:d9:26:0b:80:59:48:56:ef:d8:
                    e3:53:e6:d7:df:9d:f4:a4:5e:3d:1f:98:24:b2:79:
                    40:37:28:e2:60:23:92:91:7a:4a:7f:79:17:02:79:
                    0f:61:ab:14:78:e5:25:f6:d8:6b:3c:8f:b8:50:43:
                    73:f5:06:1a:f7:7d:28:f5:58:a7:7f:29:4f:13:bc:
                    5f:b9:23:3b:89:25:e5:98:5c:37:b9:cf:df:61:1f:
                    a7:4e:0d:dc:b7:25:c2:33:fe:41:fd:e5:d5:61:2b:
                    60:0b:92:03:f8:5c:a7:90:85:57:e7:d2:b8:ee:0a:
                    3c:89:dc:06:57:2a:b4:af:9c:1d:d1:c5:3b:8c:28:
                    6f:21:38:ea:76:86:ef:f9:1f:f7:89:b9:5b:4b:26:
                    f7:c1:62:fa:10:72:4b:dd:89:81:0b:46:2b:33:37:
                    46:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:D2:D2:05:36:D2:12:32:57:F1:E7:78:8C:AE:A1:B7:C4:D1:6E:FD
            X509v3 Authority Key Identifier:
                keyid:57:D0:75:B2:87:3A:1E:1F:84:44:85:DA:AC:77:4C:65:6E:B9:A6:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d774b18c-f263-4fe1-8df8-1e7c68bfbefc/0/57D075B2873A1E1F844485DAAC774C656EB9A611.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/57D075B2873A1E1F844485DAAC774C656EB9A611.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d774b18c-f263-4fe1-8df8-1e7c68bfbefc/0/3130332e39302e3235332e302f32342d3234203d3e203338343936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.90.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:69:f4:3e:82:8f:d0:8d:a0:41:5e:51:9a:a2:71:a8:d7:8f:
         47:d4:d9:12:eb:ab:ad:af:27:2b:7c:ed:bf:6a:aa:48:f9:14:
         46:5a:bb:44:76:74:d4:87:d8:3b:a1:f5:e5:be:12:f6:5f:84:
         a9:c1:88:bf:7f:57:13:c4:d7:78:c3:f1:df:2d:3d:22:16:77:
         84:c1:aa:3e:f9:79:0f:d4:be:97:19:ee:34:5d:c0:91:a4:17:
         e1:2f:d6:1a:23:21:b7:80:f2:d1:7d:d1:53:0e:bc:57:80:7a:
         3f:db:aa:a7:8f:29:66:15:81:ca:be:83:2a:a7:75:b0:9e:5a:
         c8:6d:9e:6f:f7:ed:89:09:0c:47:32:a3:44:85:62:60:c5:fb:
         6a:13:8f:d3:55:f7:3f:89:80:55:26:9c:15:9e:a5:8a:17:da:
         2f:53:9b:1c:34:86:ea:05:01:f6:f8:10:4b:c1:10:7b:8d:db:
         31:3d:33:b2:0c:88:8b:a0:19:8e:4a:a0:21:d7:c5:c3:dc:be:
         61:ed:31:ee:f0:a9:be:2e:d1:8a:1c:68:86:b9:88:cd:47:26:
         dc:c0:94:aa:f9:af:d3:51:4a:b3:c4:ab:86:6f:f7:68:1a:dd:
         58:14:c2:11:50:1a:3a:bd:96:02:02:56:a7:69:81:2e:10:3e:
         c5:e3:bb:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 17:12:02 2025 by rpki-client on console.sobornost.net