Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/dbc6da19-84be-4a50-b466-1e86ddbcc35f/0/3130332e3137342e37382e302f32332d3234203d3e203338333230.roa
File:                     3130332e3137342e37382e302f32332d3234203d3e203338333230.roa (raw, json)
Hash identifier:          JLvwrDCSe45qQUH0nf/lghekanOyIElCFqxu5ayU5Q0=
Subject key identifier:   0E:EA:84:8E:61:8B:A2:E3:B9:87:86:3D:43:A4:21:F5:35:6D:23:56
Certificate issuer:       /CN=85EA86756371BA89BB1AE846B5C30DDB816ACDB9
Certificate serial:       1C3857543EEF026404F1FB543BCEC5DA37A42EC9
Authority key identifier: 85:EA:86:75:63:71:BA:89:BB:1A:E8:46:B5:C3:0D:DB:81:6A:CD:B9
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/85EA86756371BA89BB1AE846B5C30DDB816ACDB9.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/dbc6da19-84be-4a50-b466-1e86ddbcc35f/0/3130332e3137342e37382e302f32332d3234203d3e203338333230.roa
Signing time:             Thu 17 Apr 2025 04:02:21 +0000
ROA not before:           Thu 17 Apr 2025 03:57:21 +0000
ROA not after:            Thu 16 Apr 2026 04:02:21 +0000
asID:                     38320
IP address blocks:        103.174.78.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/dbc6da19-84be-4a50-b466-1e86ddbcc35f/0/85EA86756371BA89BB1AE846B5C30DDB816ACDB9.crl
                          rsync://repo-rpki.idnic.net/repo/dbc6da19-84be-4a50-b466-1e86ddbcc35f/0/85EA86756371BA89BB1AE846B5C30DDB816ACDB9.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/85EA86756371BA89BB1AE846B5C30DDB816ACDB9.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Apr 2025 22:35:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:38:57:54:3e:ef:02:64:04:f1:fb:54:3b:ce:c5:da:37:a4:2e:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85EA86756371BA89BB1AE846B5C30DDB816ACDB9
        Validity
            Not Before: Apr 17 03:57:21 2025 GMT
            Not After : Apr 16 04:02:21 2026 GMT
        Subject: CN=0EEA848E618BA2E3B987863D43A421F5356D2356
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:eb:5e:d8:96:68:cc:d7:a7:e7:c4:13:35:4f:
                    67:8f:33:ab:1a:38:46:07:f6:87:6a:d3:e2:80:42:
                    5c:1d:17:34:f5:f9:ed:f3:74:be:82:12:e9:34:68:
                    1e:d6:05:0e:0c:05:35:c0:3d:87:61:87:1c:df:a7:
                    fc:0a:21:e0:a7:6c:06:51:af:4a:36:22:d2:73:9f:
                    80:d9:4d:04:84:d4:1f:de:42:3f:cb:4e:ae:20:23:
                    27:cf:d7:b6:cc:3b:19:d6:64:10:e1:03:af:09:51:
                    bf:51:81:27:d6:63:91:71:76:5c:25:72:3f:54:94:
                    7c:e5:6d:0f:d9:2a:f3:07:ea:d8:e6:70:d8:8c:88:
                    d2:83:cc:98:9e:3d:b9:b8:15:ab:2a:25:0a:3c:7f:
                    b6:8b:4b:31:83:40:a5:51:72:de:23:4e:29:56:11:
                    bd:0e:9a:6a:53:4a:25:b4:80:51:97:fa:4a:95:ac:
                    31:fa:fa:ad:54:94:fb:7a:e8:65:bd:c5:85:7e:09:
                    39:82:57:2c:13:f0:e6:1a:39:95:c3:60:e7:50:67:
                    39:fe:90:67:64:37:4d:4c:25:25:8d:d9:4d:18:4d:
                    88:fb:eb:87:fe:5d:03:34:bb:ed:40:28:2b:52:2f:
                    1b:a7:1c:db:59:65:16:b4:88:ff:a4:de:c3:5e:7f:
                    23:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:EA:84:8E:61:8B:A2:E3:B9:87:86:3D:43:A4:21:F5:35:6D:23:56
            X509v3 Authority Key Identifier:
                keyid:85:EA:86:75:63:71:BA:89:BB:1A:E8:46:B5:C3:0D:DB:81:6A:CD:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/dbc6da19-84be-4a50-b466-1e86ddbcc35f/0/85EA86756371BA89BB1AE846B5C30DDB816ACDB9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/85EA86756371BA89BB1AE846B5C30DDB816ACDB9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dbc6da19-84be-4a50-b466-1e86ddbcc35f/0/3130332e3137342e37382e302f32332d3234203d3e203338333230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.174.78.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6d:d8:0c:db:12:19:a5:ad:99:1c:18:44:ee:16:07:71:97:22:
         c6:f2:7a:b3:52:c0:98:d4:eb:6b:a4:7d:4e:a9:dd:a1:5c:44:
         2a:24:73:f1:34:47:20:69:6c:95:e9:47:5a:c6:79:01:e4:b5:
         47:99:d5:99:74:b5:44:d7:40:8a:21:b4:37:fd:05:b4:a1:24:
         49:96:f5:c4:18:5d:00:b9:b1:e2:55:99:b1:91:46:57:15:55:
         14:6f:a8:0a:78:ac:ad:fe:39:5a:1a:e5:bf:bf:be:3c:6a:f7:
         79:6e:d7:38:59:07:f2:1f:a9:32:4a:40:19:38:90:76:dd:83:
         03:2c:d4:82:87:02:7d:55:69:a8:82:af:49:0b:09:78:30:a3:
         8d:39:1a:c5:de:15:00:8d:b2:92:5f:1e:02:68:59:41:42:3b:
         64:07:27:bb:d3:5b:55:29:d7:62:8d:b7:4a:b0:9e:b6:6d:ee:
         7a:37:9d:db:9f:90:1c:cf:00:d8:4f:49:02:ab:59:04:a2:13:
         05:34:6a:7e:e4:f9:82:ec:3c:4c:61:6e:c3:7d:5f:39:7a:94:
         d6:56:98:20:6a:9b:01:6a:86:fd:21:d9:b5:45:13:ab:e2:d6:
         0d:14:49:84:80:dd:47:dc:b5:a3:64:e8:58:8b:4b:f9:de:b6:
         ad:ff:89:1b
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUHDhXVD7vAmQE8ftUO87F2jekLskwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODVFQTg2NzU2MzcxQkE4OUJCMUFFODQ2QjVDMzBEREI4
MTZBQ0RCOTAeFw0yNTA0MTcwMzU3MjFaFw0yNjA0MTYwNDAyMjFaMDMxMTAvBgNV
BAMTKDBFRUE4NDhFNjE4QkEyRTNCOTg3ODYzRDQzQTQyMUY1MzU2RDIzNTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDY617YlmjM16fnxBM1T2ePM6sa
OEYH9odq0+KAQlwdFzT1+e3zdL6CEuk0aB7WBQ4MBTXAPYdhhxzfp/wKIeCnbAZR
r0o2ItJzn4DZTQSE1B/eQj/LTq4gIyfP17bMOxnWZBDhA68JUb9RgSfWY5Fxdlwl
cj9UlHzlbQ/ZKvMH6tjmcNiMiNKDzJiePbm4FasqJQo8f7aLSzGDQKVRct4jTilW
Eb0OmmpTSiW0gFGX+kqVrDH6+q1UlPt66GW9xYV+CTmCVywT8OYaOZXDYOdQZzn+
kGdkN01MJSWN2U0YTYj764f+XQM0u+1AKCtSLxunHNtZZRa0iP+k3sNefyOXAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUDuqEjmGLouO5h4Y9Q6Qh9TVtI1YwHwYDVR0j
BBgwFoAUheqGdWNxuom7GuhGtcMN24FqzbkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k
YmM2ZGExOS04NGJlLTRhNTAtYjQ2Ni0xZTg2ZGRiY2MzNWYvMC84NUVBODY3NTYz
NzFCQTg5QkIxQUU4NDZCNUMzMEREQjgxNkFDREI5LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvODVFQTg2NzU2MzcxQkE4OUJCMUFFODQ2QjVDMzBEREI4MTZB
Q0RCOS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2RiYzZkYTE5LTg0YmUtNGE1MC1i
NDY2LTFlODZkZGJjYzM1Zi8wLzMxMzAzMzJlMzEzNzM0MmUzNzM4MmUzMDJmMzIz
MzJkMzIzNDIwM2QzZTIwMzMzODMzMzIzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAWeuTjANBgkqhkiG
9w0BAQsFAAOCAQEAbdgM2xIZpa2ZHBhE7hYHcZcixvJ6s1LAmNTra6R9TqndoVxE
KiRz8TRHIGlslelHWsZ5AeS1R5nVmXS1RNdAiiG0N/0FtKEkSZb1xBhdALmx4lWZ
sZFGVxVVFG+oCnisrf45Whrlv7++PGr3eW7XOFkH8h+pMkpAGTiQdt2DAyzUgocC
fVVpqIKvSQsJeDCjjTkaxd4VAI2ykl8eAmhZQUI7ZAcnu9NbVSnXYo23SrCetm3u
ejed25+QHM8A2E9JAqtZBKITBTRqfuT5guw8TGFuw31fOXqU1laYIGqbAWqG/SHZ
tUUTq+LWDRRJhIDdR9y1o2ToWItL+d62rf+JGw==
-----END CERTIFICATE-----
Generated at Wed Apr 23 22:12:04 2025 by rpki-client on console.sobornost.net