Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/fbe15e6f-0689-4713-b0fc-943062ac592e/0/3130332e3137342e3137362e302f32332d3234203d3e203338333230.roa
File:                     3130332e3137342e3137362e302f32332d3234203d3e203338333230.roa (raw, json)
Hash identifier:          BAcGuMLsPgJV3u2WPi981toHkg4Nsmz+4IDaHY/xX1M=
Subject key identifier:   10:E1:29:32:2C:25:A7:0D:C7:F9:4E:A1:30:7D:DE:82:74:3F:1B:1C
Certificate issuer:       /CN=1FF652DE540015052EA06BCE3644C9C1C9B83B32
Certificate serial:       78818DD7E63F158813BFADFDB0C03236A01807CB
Authority key identifier: 1F:F6:52:DE:54:00:15:05:2E:A0:6B:CE:36:44:C9:C1:C9:B8:3B:32
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FF652DE540015052EA06BCE3644C9C1C9B83B32.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/fbe15e6f-0689-4713-b0fc-943062ac592e/0/3130332e3137342e3137362e302f32332d3234203d3e203338333230.roa
Signing time:             Thu 17 Apr 2025 04:02:19 +0000
ROA not before:           Thu 17 Apr 2025 03:57:19 +0000
ROA not after:            Thu 16 Apr 2026 04:02:19 +0000
asID:                     38320
IP address blocks:        103.174.176.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/fbe15e6f-0689-4713-b0fc-943062ac592e/0/1FF652DE540015052EA06BCE3644C9C1C9B83B32.crl
                          rsync://repo-rpki.idnic.net/repo/fbe15e6f-0689-4713-b0fc-943062ac592e/0/1FF652DE540015052EA06BCE3644C9C1C9B83B32.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FF652DE540015052EA06BCE3644C9C1C9B83B32.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Apr 2025 09:52:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:81:8d:d7:e6:3f:15:88:13:bf:ad:fd:b0:c0:32:36:a0:18:07:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1FF652DE540015052EA06BCE3644C9C1C9B83B32
        Validity
            Not Before: Apr 17 03:57:19 2025 GMT
            Not After : Apr 16 04:02:19 2026 GMT
        Subject: CN=10E129322C25A70DC7F94EA1307DDE82743F1B1C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:64:16:54:5b:60:bc:1e:68:44:d6:08:75:3c:
                    1d:b8:0d:3c:77:8c:69:c5:f5:10:57:d9:90:69:43:
                    c8:40:c1:32:f8:81:34:e6:7b:90:60:59:2c:b3:e2:
                    d4:3e:46:32:b5:b5:38:0b:d6:0b:3a:32:b8:ab:e4:
                    bd:74:13:2e:47:5c:f1:cf:51:94:94:3c:a6:06:16:
                    00:3b:2a:46:07:ce:af:fb:90:ff:f4:cb:7e:02:92:
                    22:34:25:ff:4b:b2:2b:41:ee:45:f4:d8:86:d7:f7:
                    1e:51:28:c0:60:39:9d:8d:d3:dc:14:a3:1c:8a:1f:
                    35:ac:41:a9:9b:f6:34:bc:3e:10:59:1f:a9:65:26:
                    eb:9b:a0:f7:9f:c5:58:67:6b:0f:0a:ab:22:79:b2:
                    51:8b:9c:4e:20:37:0d:26:bf:25:dc:88:26:df:03:
                    c8:2c:a7:00:9a:ea:6a:74:68:f4:df:f4:0a:2a:fb:
                    51:2a:6f:51:ce:f3:9b:65:e6:c1:d7:75:b7:2c:fb:
                    19:63:c3:a6:19:d3:77:ca:7f:e0:01:2d:43:4d:6f:
                    6b:c2:cd:ce:c6:80:f7:37:dd:0e:60:93:79:ce:36:
                    6e:61:fb:c5:47:d4:e1:fc:e5:f6:72:9e:64:dc:f3:
                    18:d6:80:e9:a3:2d:e6:f8:60:eb:61:48:53:d7:bb:
                    73:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:E1:29:32:2C:25:A7:0D:C7:F9:4E:A1:30:7D:DE:82:74:3F:1B:1C
            X509v3 Authority Key Identifier:
                keyid:1F:F6:52:DE:54:00:15:05:2E:A0:6B:CE:36:44:C9:C1:C9:B8:3B:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/fbe15e6f-0689-4713-b0fc-943062ac592e/0/1FF652DE540015052EA06BCE3644C9C1C9B83B32.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FF652DE540015052EA06BCE3644C9C1C9B83B32.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fbe15e6f-0689-4713-b0fc-943062ac592e/0/3130332e3137342e3137362e302f32332d3234203d3e203338333230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.174.176.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b1:b9:93:70:8d:af:cc:cd:10:9e:08:3a:6e:6c:66:06:8c:bc:
         3c:47:61:3d:51:f8:00:87:88:07:ce:f6:4e:24:9e:6e:c8:b0:
         51:3d:40:9f:44:63:c0:67:6e:cb:c7:d3:05:f0:52:94:42:1d:
         42:e2:7e:a7:3c:34:f8:ee:d0:0f:25:9c:c7:46:25:aa:94:b1:
         46:e6:ab:e8:50:9e:43:49:df:5f:e4:48:35:02:a0:3f:bd:c9:
         87:d1:32:e9:35:ce:b2:66:93:f7:63:97:7f:37:05:a9:46:c1:
         4b:06:1d:ef:9b:11:e2:79:4d:ac:0d:72:f8:c4:d6:ef:c0:f6:
         c6:51:aa:f0:e3:e8:83:15:c3:ce:e3:5a:80:46:10:ec:aa:84:
         6c:b1:ff:ca:2d:01:0f:b5:18:0f:df:15:77:1f:3e:f4:5c:56:
         28:1d:64:eb:05:54:bc:71:51:9a:90:da:b8:d8:c0:c1:9d:d9:
         a6:2b:d4:27:66:e8:a1:b6:60:16:a1:66:b9:c1:a8:8b:a3:fb:
         5c:8e:62:1d:cc:37:1e:fe:bf:49:5b:be:46:68:02:a4:39:af:
         d9:70:5c:0e:61:d7:74:98:e4:36:aa:67:3c:34:cc:bf:61:d8:
         1b:b7:7a:9e:96:ee:c3:91:5b:13:8a:48:11:3d:3c:58:f0:d1:
         12:04:05:d6
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUeIGN1+Y/FYgTv639sMAyNqAYB8swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUZGNjUyREU1NDAwMTUwNTJFQTA2QkNFMzY0NEM5QzFD
OUI4M0IzMjAeFw0yNTA0MTcwMzU3MTlaFw0yNjA0MTYwNDAyMTlaMDMxMTAvBgNV
BAMTKDEwRTEyOTMyMkMyNUE3MERDN0Y5NEVBMTMwN0RERTgyNzQzRjFCMUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9ZBZUW2C8HmhE1gh1PB24DTx3
jGnF9RBX2ZBpQ8hAwTL4gTTme5BgWSyz4tQ+RjK1tTgL1gs6Mrir5L10Ey5HXPHP
UZSUPKYGFgA7KkYHzq/7kP/0y34CkiI0Jf9LsitB7kX02IbX9x5RKMBgOZ2N09wU
oxyKHzWsQamb9jS8PhBZH6llJuuboPefxVhnaw8KqyJ5slGLnE4gNw0mvyXciCbf
A8gspwCa6mp0aPTf9Aoq+1Eqb1HO85tl5sHXdbcs+xljw6YZ03fKf+ABLUNNb2vC
zc7GgPc33Q5gk3nONm5h+8VH1OH85fZynmTc8xjWgOmjLeb4YOthSFPXu3PbAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUEOEpMiwlpw3H+U6hMH3egnQ/GxwwHwYDVR0j
BBgwFoAUH/ZS3lQAFQUuoGvONkTJwcm4OzIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m
YmUxNWU2Zi0wNjg5LTQ3MTMtYjBmYy05NDMwNjJhYzU5MmUvMC8xRkY2NTJERTU0
MDAxNTA1MkVBMDZCQ0UzNjQ0QzlDMUM5QjgzQjMyLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMUZGNjUyREU1NDAwMTUwNTJFQTA2QkNFMzY0NEM5QzFDOUI4
M0IzMi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2ZiZTE1ZTZmLTA2ODktNDcxMy1i
MGZjLTk0MzA2MmFjNTkyZS8wLzMxMzAzMzJlMzEzNzM0MmUzMTM3MzYyZTMwMmYz
MjMzMmQzMjM0MjAzZDNlMjAzMzM4MzMzMjMwLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ66wMA0GCSqG
SIb3DQEBCwUAA4IBAQCxuZNwja/MzRCeCDpubGYGjLw8R2E9UfgAh4gHzvZOJJ5u
yLBRPUCfRGPAZ27Lx9MF8FKUQh1C4n6nPDT47tAPJZzHRiWqlLFG5qvoUJ5DSd9f
5Eg1AqA/vcmH0TLpNc6yZpP3Y5d/NwWpRsFLBh3vmxHieU2sDXL4xNbvwPbGUarw
4+iDFcPO41qARhDsqoRssf/KLQEPtRgP3xV3Hz70XFYoHWTrBVS8cVGakNq42MDB
ndmmK9QnZuihtmAWoWa5waiLo/tcjmIdzDce/r9JW75GaAKkOa/ZcFwOYdd0mOQ2
qmc8NMy/Ydgbt3qelu7DkVsTikgRPTxY8NESBAXW
-----END CERTIFICATE-----
Generated at Sat Apr 26 11:16:30 2025 by rpki-client on console.sobornost.net