Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a6dad8cb-a537-4c50-af6a-aaba5f1e7644/0/3130332e3139302e312e302f32342d3234203d3e20313439383930.roa
File:                     3130332e3139302e312e302f32342d3234203d3e20313439383930.roa (raw, json)
Hash identifier:          /4y0i2UIqC94Q9jjKOVg3BHE03KUaQHXxOynS0oUshc=
Subject key identifier:   8B:8F:B3:19:7A:51:65:E6:B3:00:07:45:E1:CD:82:4F:C0:61:E0:53
Certificate issuer:       /CN=38A92419EE1289455FCB1B71F9420F05CA334C15
Certificate serial:       5667B0DA4BAD0300DBE9078217A04BFBFB073142
Authority key identifier: 38:A9:24:19:EE:12:89:45:5F:CB:1B:71:F9:42:0F:05:CA:33:4C:15
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38A92419EE1289455FCB1B71F9420F05CA334C15.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a6dad8cb-a537-4c50-af6a-aaba5f1e7644/0/3130332e3139302e312e302f32342d3234203d3e20313439383930.roa
Signing time:             Fri 11 Apr 2025 08:00:00 +0000
ROA not before:           Fri 11 Apr 2025 07:55:00 +0000
ROA not after:            Fri 10 Apr 2026 08:00:00 +0000
asID:                     149890
IP address blocks:        103.190.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a6dad8cb-a537-4c50-af6a-aaba5f1e7644/0/38A92419EE1289455FCB1B71F9420F05CA334C15.crl
                          rsync://repo-rpki.idnic.net/repo/a6dad8cb-a537-4c50-af6a-aaba5f1e7644/0/38A92419EE1289455FCB1B71F9420F05CA334C15.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38A92419EE1289455FCB1B71F9420F05CA334C15.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 May 2025 10:21:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:67:b0:da:4b:ad:03:00:db:e9:07:82:17:a0:4b:fb:fb:07:31:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38A92419EE1289455FCB1B71F9420F05CA334C15
        Validity
            Not Before: Apr 11 07:55:00 2025 GMT
            Not After : Apr 10 08:00:00 2026 GMT
        Subject: CN=8B8FB3197A5165E6B3000745E1CD824FC061E053
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:d9:db:94:61:72:a6:91:1e:2a:a0:8e:d2:7c:
                    4b:64:de:40:cb:cf:38:4e:b5:b5:85:f8:6b:be:c1:
                    b1:02:69:68:eb:0f:ba:b6:5e:8b:a9:c2:eb:7a:ad:
                    6d:2c:cd:dd:c6:b4:50:57:f8:16:f1:ae:10:6e:3a:
                    c6:06:a7:5a:cd:8c:f0:9a:fa:02:57:db:f0:16:31:
                    95:6f:f1:76:ee:f7:73:49:f6:f8:6e:f4:fa:4c:35:
                    4f:c1:62:f8:bf:fc:28:09:09:66:c8:af:96:45:c6:
                    35:0d:3c:85:e4:49:0f:7f:f4:39:70:f7:e0:ab:13:
                    d5:d0:b7:c6:fa:32:8f:ed:d0:1a:b3:7c:3b:3c:fa:
                    06:7f:1d:1e:97:89:f1:e4:a2:01:fd:ae:d6:a0:6d:
                    74:68:79:8a:18:80:00:7e:aa:55:1d:0c:bc:ce:4e:
                    b0:bb:57:f5:37:e7:ed:03:6d:08:94:b3:4c:89:ee:
                    0d:85:98:8d:20:12:98:f2:96:a4:f0:49:bf:1c:83:
                    a3:c7:0c:b0:8e:6e:54:47:ff:fd:a5:ca:a6:3f:9f:
                    ee:1e:5a:b6:a9:af:15:6c:56:f5:f1:ed:f1:21:68:
                    4a:22:43:a3:19:f6:1c:e7:29:f7:fe:4a:0a:01:56:
                    c9:b0:b9:65:d5:ac:56:33:86:15:a3:24:00:71:6f:
                    89:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:8F:B3:19:7A:51:65:E6:B3:00:07:45:E1:CD:82:4F:C0:61:E0:53
            X509v3 Authority Key Identifier:
                keyid:38:A9:24:19:EE:12:89:45:5F:CB:1B:71:F9:42:0F:05:CA:33:4C:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a6dad8cb-a537-4c50-af6a-aaba5f1e7644/0/38A92419EE1289455FCB1B71F9420F05CA334C15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38A92419EE1289455FCB1B71F9420F05CA334C15.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a6dad8cb-a537-4c50-af6a-aaba5f1e7644/0/3130332e3139302e312e302f32342d3234203d3e20313439383930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.190.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:76:15:f6:2e:49:f7:e3:1c:df:e0:61:79:ae:cb:16:b8:9e:
         1d:ac:28:a8:1d:59:54:ac:5b:5a:54:06:57:85:e7:a8:5e:4f:
         f5:29:7b:5c:64:dd:53:8d:ad:13:ad:dd:a0:c7:c4:bc:7a:c9:
         cc:80:ad:d7:89:6b:be:ea:2e:c1:d0:66:fc:42:19:12:a8:c5:
         c7:52:55:ef:b5:79:4d:c1:d8:49:4d:3c:4f:0f:46:e2:b6:ea:
         c1:ce:0c:79:51:31:e9:cd:35:89:4c:6e:2f:f6:4d:43:e2:7c:
         96:03:5e:53:55:fc:b2:4d:54:33:fe:cc:7b:18:c2:1a:c6:aa:
         e6:91:34:1f:80:65:4f:ed:02:33:bc:21:db:29:15:da:00:f5:
         20:b4:cd:fc:6a:0f:82:ee:a3:81:3c:58:56:ce:dd:cf:11:54:
         1b:dc:ee:dd:fb:36:9f:22:c2:48:82:8c:2b:ff:1a:d0:8a:17:
         19:1e:1f:51:61:9d:3f:36:85:e4:71:98:3f:7f:62:ae:16:f6:
         6f:01:af:65:d7:42:97:c9:5f:f8:9e:fd:09:bf:41:c5:78:f7:
         6c:2f:f3:92:5b:70:8a:99:10:6e:bf:55:20:46:45:1c:59:24:
         b2:77:73:2e:72:ee:ee:a7:91:74:54:63:f6:81:f6:72:49:9a:
         0d:ef:fb:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:44:05 2025 by rpki-client