Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e8f3b37d-fe4d-436d-a93b-e1f6fcc9fc4d/0/3130332e3138372e39302e302f32342d3234203d3e20313439383839.roa
File:                     3130332e3138372e39302e302f32342d3234203d3e20313439383839.roa (raw, json)
Hash identifier:          38VctucVjPuOnSloXC5TfoiL9rHRKzx9uk3RVJIrnlg=
Subject key identifier:   BA:96:70:69:59:0B:36:50:AD:81:0B:9C:CA:F8:09:E0:59:DE:BE:DA
Certificate issuer:       /CN=439D16E03D05D5CECA2B7F135D2BBB1B30105057
Certificate serial:       4A643A06CD33E56DDCB89F3A2AF6091C4AED1327
Authority key identifier: 43:9D:16:E0:3D:05:D5:CE:CA:2B:7F:13:5D:2B:BB:1B:30:10:50:57
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/439D16E03D05D5CECA2B7F135D2BBB1B30105057.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e8f3b37d-fe4d-436d-a93b-e1f6fcc9fc4d/0/3130332e3138372e39302e302f32342d3234203d3e20313439383839.roa
Signing time:             Wed 02 Apr 2025 08:02:25 +0000
ROA not before:           Wed 02 Apr 2025 07:57:25 +0000
ROA not after:            Wed 01 Apr 2026 08:02:25 +0000
asID:                     149889
IP address blocks:        103.187.90.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e8f3b37d-fe4d-436d-a93b-e1f6fcc9fc4d/0/439D16E03D05D5CECA2B7F135D2BBB1B30105057.crl
                          rsync://repo-rpki.idnic.net/repo/e8f3b37d-fe4d-436d-a93b-e1f6fcc9fc4d/0/439D16E03D05D5CECA2B7F135D2BBB1B30105057.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/439D16E03D05D5CECA2B7F135D2BBB1B30105057.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Apr 2025 20:11:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:64:3a:06:cd:33:e5:6d:dc:b8:9f:3a:2a:f6:09:1c:4a:ed:13:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=439D16E03D05D5CECA2B7F135D2BBB1B30105057
        Validity
            Not Before: Apr  2 07:57:25 2025 GMT
            Not After : Apr  1 08:02:25 2026 GMT
        Subject: CN=BA967069590B3650AD810B9CCAF809E059DEBEDA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f2:9c:e8:05:26:20:e9:82:8a:8a:44:2e:91:
                    5c:e8:e1:1b:c6:47:30:64:11:58:96:66:80:2f:08:
                    18:c6:7a:53:7f:c8:ea:30:91:4d:64:55:4e:80:4f:
                    b3:7a:52:1e:40:ef:ff:e3:4f:ab:0b:86:c2:4c:0f:
                    60:1a:9c:00:34:56:a4:69:7c:c5:48:d1:ca:b6:9c:
                    82:03:dc:99:46:75:0a:4a:56:d7:58:6c:7e:73:9d:
                    fb:3e:cb:b6:48:05:38:80:b3:24:6b:e2:c7:45:f4:
                    f7:ed:7e:21:6b:c2:8e:f5:d6:a9:b1:fa:37:6a:b8:
                    37:a0:4e:0b:01:66:56:25:cd:24:33:57:4c:7f:22:
                    9f:d6:20:11:9f:1b:8d:bf:f7:ae:a0:50:91:11:ba:
                    ac:3b:cc:9c:ab:a5:98:1b:46:df:fc:4a:9c:24:6b:
                    d1:1d:c8:9a:17:19:47:c4:9d:f6:31:dc:9c:e9:ed:
                    86:35:15:97:3f:86:b9:2a:24:c1:2a:16:ab:be:4e:
                    36:cf:cd:c8:8b:b0:67:88:6e:8a:2e:97:d1:e0:90:
                    3b:a6:a7:21:14:d7:48:cb:4f:b6:0b:82:83:e2:12:
                    e3:57:d5:a8:6f:73:44:bd:bc:59:12:b8:98:4b:6c:
                    0f:cc:68:b6:bb:cd:fe:5d:39:76:56:2b:6e:97:54:
                    eb:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:96:70:69:59:0B:36:50:AD:81:0B:9C:CA:F8:09:E0:59:DE:BE:DA
            X509v3 Authority Key Identifier:
                keyid:43:9D:16:E0:3D:05:D5:CE:CA:2B:7F:13:5D:2B:BB:1B:30:10:50:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e8f3b37d-fe4d-436d-a93b-e1f6fcc9fc4d/0/439D16E03D05D5CECA2B7F135D2BBB1B30105057.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/439D16E03D05D5CECA2B7F135D2BBB1B30105057.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e8f3b37d-fe4d-436d-a93b-e1f6fcc9fc4d/0/3130332e3138372e39302e302f32342d3234203d3e20313439383839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.187.90.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:1e:f7:d8:ce:89:8c:f7:f0:ab:42:f1:68:0f:73:23:19:85:
         be:82:61:0e:c6:b7:c2:d8:b3:fa:e4:96:3a:7f:8d:a6:2c:3f:
         47:b7:7d:96:5c:03:72:7f:9b:26:28:86:cd:b8:f7:7f:41:30:
         ee:a8:a2:ca:25:3d:a7:d5:4c:a7:54:32:0e:72:17:05:7a:86:
         08:cd:28:3c:82:2f:aa:b5:67:d6:f4:3b:d2:bc:37:6c:6f:b3:
         a4:4c:28:2a:47:7b:d3:eb:d0:15:86:49:d8:5f:d8:5d:db:29:
         9d:c3:0b:31:3f:9b:be:27:05:5a:8c:b4:04:cc:4f:c7:f2:64:
         cf:7d:a9:cc:d9:20:0c:01:e2:c5:8e:c9:80:77:5b:2d:32:99:
         41:3b:ae:c3:2c:2a:5a:e9:aa:07:9e:35:2a:65:60:aa:80:4e:
         41:d3:02:e9:23:eb:69:d8:ad:2b:f3:4e:4e:90:13:a9:60:89:
         2c:16:8c:f9:4f:28:8b:4e:2e:12:7d:77:6c:87:26:2a:78:62:
         0b:5d:37:55:d2:74:7f:5c:38:ce:c7:88:0b:27:9f:87:aa:67:
         fe:2f:83:0f:aa:75:54:4a:ab:70:fa:1d:69:f6:f8:16:ba:98:
         da:ce:e5:d9:4d:83:8a:91:79:05:da:d6:0a:53:6a:d2:81:13:
         38:1b:86:75
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUSmQ6Bs0z5W3cuJ86KvYJHErtEycwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDM5RDE2RTAzRDA1RDVDRUNBMkI3RjEzNUQyQkJCMUIz
MDEwNTA1NzAeFw0yNTA0MDIwNzU3MjVaFw0yNjA0MDEwODAyMjVaMDMxMTAvBgNV
BAMTKEJBOTY3MDY5NTkwQjM2NTBBRDgxMEI5Q0NBRjgwOUUwNTlERUJFREEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC78pzoBSYg6YKKikQukVzo4RvG
RzBkEViWZoAvCBjGelN/yOowkU1kVU6AT7N6Uh5A7//jT6sLhsJMD2AanAA0VqRp
fMVI0cq2nIID3JlGdQpKVtdYbH5znfs+y7ZIBTiAsyRr4sdF9PftfiFrwo711qmx
+jdquDegTgsBZlYlzSQzV0x/Ip/WIBGfG42/966gUJERuqw7zJyrpZgbRt/8Spwk
a9EdyJoXGUfEnfYx3Jzp7YY1FZc/hrkqJMEqFqu+TjbPzciLsGeIbooul9HgkDum
pyEU10jLT7YLgoPiEuNX1ahvc0S9vFkSuJhLbA/MaLa7zf5dOXZWK26XVOvVAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUupZwaVkLNlCtgQucyvgJ4FnevtowHwYDVR0j
BBgwFoAUQ50W4D0F1c7KK38TXSu7GzAQUFcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l
OGYzYjM3ZC1mZTRkLTQzNmQtYTkzYi1lMWY2ZmNjOWZjNGQvMC80MzlEMTZFMDNE
MDVENUNFQ0EyQjdGMTM1RDJCQkIxQjMwMTA1MDU3LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNDM5RDE2RTAzRDA1RDVDRUNBMkI3RjEzNUQyQkJCMUIzMDEw
NTA1Ny5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2U4ZjNiMzdkLWZlNGQtNDM2ZC1h
OTNiLWUxZjZmY2M5ZmM0ZC8wLzMxMzAzMzJlMzEzODM3MmUzOTMwMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzNDM5MzgzODM5LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ7taMA0GCSqG
SIb3DQEBCwUAA4IBAQCYHvfYzomM9/CrQvFoD3MjGYW+gmEOxrfC2LP65JY6f42m
LD9Ht32WXANyf5smKIbNuPd/QTDuqKLKJT2n1UynVDIOchcFeoYIzSg8gi+qtWfW
9DvSvDdsb7OkTCgqR3vT69AVhknYX9hd2ymdwwsxP5u+JwVajLQEzE/H8mTPfanM
2SAMAeLFjsmAd1stMplBO67DLCpa6aoHnjUqZWCqgE5B0wLpI+tp2K0r805OkBOp
YIksFoz5TyiLTi4SfXdshyYqeGILXTdV0nR/XDjOx4gLJ5+Hqmf+L4MPqnVUSqtw
+h1p9vgWupjazuXZTYOKkXkF2tYKU2rSgRM4G4Z1
-----END CERTIFICATE-----
Generated at Sat Apr 26 18:18:00 2025 by rpki-client on console.sobornost.net