Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/171a847d-2531-4d7f-9241-9777850605d6/0/3130332e3138302e35382e302f32342d3234203d3e2039333431.roa
File:                     3130332e3138302e35382e302f32342d3234203d3e2039333431.roa (raw, json)
Hash identifier:          FdloWvzwT5E7bV0h2MrBbwdyadkn1oI1JIyg7UwS1zQ=
Subject key identifier:   74:6C:3C:EC:73:3C:72:7F:4C:FA:A5:4E:D3:90:7C:FD:55:F9:30:F1
Certificate issuer:       /CN=7EF89B45692D93E9CA15DA4CF9D439300632EFD4
Certificate serial:       3BA5C53683A42AA1B7267A84F97E53C063D5A6DA
Authority key identifier: 7E:F8:9B:45:69:2D:93:E9:CA:15:DA:4C:F9:D4:39:30:06:32:EF:D4
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7EF89B45692D93E9CA15DA4CF9D439300632EFD4.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/171a847d-2531-4d7f-9241-9777850605d6/0/3130332e3138302e35382e302f32342d3234203d3e2039333431.roa
Signing time:             Tue 28 Jan 2025 10:01:08 +0000
ROA not before:           Tue 28 Jan 2025 09:56:08 +0000
ROA not after:            Tue 27 Jan 2026 10:01:08 +0000
asID:                     9341
IP address blocks:        103.180.58.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/171a847d-2531-4d7f-9241-9777850605d6/0/7EF89B45692D93E9CA15DA4CF9D439300632EFD4.crl
                          rsync://repo-rpki.idnic.net/repo/171a847d-2531-4d7f-9241-9777850605d6/0/7EF89B45692D93E9CA15DA4CF9D439300632EFD4.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7EF89B45692D93E9CA15DA4CF9D439300632EFD4.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 06 Apr 2025 16:37:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:a5:c5:36:83:a4:2a:a1:b7:26:7a:84:f9:7e:53:c0:63:d5:a6:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7EF89B45692D93E9CA15DA4CF9D439300632EFD4
        Validity
            Not Before: Jan 28 09:56:08 2025 GMT
            Not After : Jan 27 10:01:08 2026 GMT
        Subject: CN=746C3CEC733C727F4CFAA54ED3907CFD55F930F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:8a:09:47:ba:f3:cc:13:8a:c2:66:ce:5e:2c:
                    4d:93:de:1c:2c:d3:fc:6e:aa:c3:2c:24:b0:74:3c:
                    aa:67:29:cf:21:e6:e4:67:15:40:1c:e9:88:7b:68:
                    b2:98:39:19:23:f4:02:c4:d1:b9:b9:6f:6f:c9:86:
                    16:26:d9:d7:19:a2:6f:9b:41:80:20:50:f7:33:5d:
                    20:c9:9a:d8:2a:d2:eb:d9:2b:5e:1c:26:8e:7b:64:
                    2d:b1:5e:84:04:bc:32:9a:7a:68:25:9a:2f:7c:2f:
                    1c:94:f0:17:d0:d5:b1:72:d5:4e:68:9b:fd:77:35:
                    85:ca:b5:4e:e4:33:93:80:65:db:6b:fb:ea:43:4f:
                    38:9b:8c:30:0f:aa:96:fb:55:38:29:4b:a5:c6:19:
                    a4:1f:27:ca:af:d6:bb:bb:3a:66:5f:17:35:a3:0e:
                    8b:3a:41:c6:c1:e6:6d:59:5f:ee:6b:92:96:dc:c7:
                    99:8f:5c:c7:a3:06:87:6b:ec:47:ed:db:53:79:6f:
                    f6:b8:00:0f:00:0b:8a:a0:14:91:80:c7:81:7f:39:
                    6c:3d:02:9c:2a:4a:a3:16:9d:d2:60:cf:ab:b0:5b:
                    93:0e:5b:19:b7:2d:e0:5e:20:95:93:3e:72:39:69:
                    c0:be:e4:d0:8c:30:54:86:e5:51:de:17:b7:2f:1e:
                    ef:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:6C:3C:EC:73:3C:72:7F:4C:FA:A5:4E:D3:90:7C:FD:55:F9:30:F1
            X509v3 Authority Key Identifier:
                keyid:7E:F8:9B:45:69:2D:93:E9:CA:15:DA:4C:F9:D4:39:30:06:32:EF:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/171a847d-2531-4d7f-9241-9777850605d6/0/7EF89B45692D93E9CA15DA4CF9D439300632EFD4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7EF89B45692D93E9CA15DA4CF9D439300632EFD4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/171a847d-2531-4d7f-9241-9777850605d6/0/3130332e3138302e35382e302f32342d3234203d3e2039333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.180.58.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:70:d9:7b:4e:0e:ee:15:ce:ff:25:b3:66:b0:5b:bb:f7:d0:
         32:97:ab:7d:ac:a3:2a:cd:ab:8b:29:c0:4f:7b:a5:18:f7:aa:
         0e:5d:36:51:47:17:9d:65:f0:db:0c:4f:d1:88:e3:0d:13:8a:
         fd:40:33:ed:2f:24:17:c8:17:c7:50:2f:9e:23:88:40:6a:10:
         1a:ba:61:34:1f:b8:10:7b:11:08:60:f6:8d:0e:b4:43:25:b8:
         8b:f9:a7:d3:5b:1d:2f:1d:77:db:63:48:a3:bb:d4:c0:eb:df:
         37:a1:a1:d1:79:4b:df:66:bf:f3:f1:3d:ee:af:d6:42:64:10:
         41:9e:ac:0c:2d:d0:2b:f8:80:f6:b0:6c:15:9b:48:34:3a:0e:
         71:fe:b5:cf:26:e1:45:ac:9e:1a:e8:97:be:d8:8b:e1:0a:8b:
         3f:7c:4e:e2:ab:8d:70:38:38:d5:1a:80:81:da:64:f1:c6:28:
         cb:6b:b9:97:3d:43:6d:06:d6:7c:3f:ce:64:d9:93:bf:70:b8:
         5a:ea:43:8d:c9:4a:6a:e7:d5:38:70:8f:a6:d6:01:74:9a:c0:
         42:0c:f2:f3:f8:f1:e0:c5:90:a2:2e:af:85:3a:ce:8c:1f:8d:
         25:e3:be:cc:c2:b9:9a:e7:e0:e8:b3:35:58:13:fa:cf:cc:28:
         30:c4:5f:4d
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUO6XFNoOkKqG3JnqE+X5TwGPVptowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0VGODlCNDU2OTJEOTNFOUNBMTVEQTRDRjlENDM5MzAw
NjMyRUZENDAeFw0yNTAxMjgwOTU2MDhaFw0yNjAxMjcxMDAxMDhaMDMxMTAvBgNV
BAMTKDc0NkMzQ0VDNzMzQzcyN0Y0Q0ZBQTU0RUQzOTA3Q0ZENTVGOTMwRjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4iglHuvPME4rCZs5eLE2T3hws
0/xuqsMsJLB0PKpnKc8h5uRnFUAc6Yh7aLKYORkj9ALE0bm5b2/JhhYm2dcZom+b
QYAgUPczXSDJmtgq0uvZK14cJo57ZC2xXoQEvDKaemglmi98LxyU8BfQ1bFy1U5o
m/13NYXKtU7kM5OAZdtr++pDTzibjDAPqpb7VTgpS6XGGaQfJ8qv1ru7OmZfFzWj
Dos6QcbB5m1ZX+5rkpbcx5mPXMejBodr7Eft21N5b/a4AA8AC4qgFJGAx4F/OWw9
ApwqSqMWndJgz6uwW5MOWxm3LeBeIJWTPnI5acC+5NCMMFSG5VHeF7cvHu9lAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQUdGw87HM8cn9M+qVO05B8/VX5MPEwHwYDVR0j
BBgwFoAUfvibRWktk+nKFdpM+dQ5MAYy79QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x
NzFhODQ3ZC0yNTMxLTRkN2YtOTI0MS05Nzc3ODUwNjA1ZDYvMC83RUY4OUI0NTY5
MkQ5M0U5Q0ExNURBNENGOUQ0MzkzMDA2MzJFRkQ0LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvN0VGODlCNDU2OTJEOTNFOUNBMTVEQTRDRjlENDM5MzAwNjMy
RUZENC5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzE3MWE4NDdkLTI1MzEtNGQ3Zi05
MjQxLTk3Nzc4NTA2MDVkNi8wLzMxMzAzMzJlMzEzODMwMmUzNTM4MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzkzMzM0MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABntDowDQYJKoZIhvcN
AQELBQADggEBABdw2XtODu4Vzv8ls2awW7v30DKXq32soyrNq4spwE97pRj3qg5d
NlFHF51l8NsMT9GI4w0Tiv1AM+0vJBfIF8dQL54jiEBqEBq6YTQfuBB7EQhg9o0O
tEMluIv5p9NbHS8dd9tjSKO71MDr3zehodF5S99mv/PxPe6v1kJkEEGerAwt0Cv4
gPawbBWbSDQ6DnH+tc8m4UWsnhrol77Yi+EKiz98TuKrjXA4ONUagIHaZPHGKMtr
uZc9Q20G1nw/zmTZk79wuFrqQ43JSmrn1Thwj6bWAXSawEIM8vP48eDFkKIur4U6
zowfjSXjvszCuZrn4OizNVgT+s/MKDDEX00=
-----END CERTIFICATE-----
Generated at Sat Apr 5 16:44:38 2025 by rpki-client