Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/dfee82b7-c182-4e83-897c-e00f3ce1b0d2/0/3130332e3232392e3138352e302f32342d3234203d3e2039333431.roa
File:                     3130332e3232392e3138352e302f32342d3234203d3e2039333431.roa (raw, json)
Hash identifier:          bYUXew86UoI4/31WSjYGIt5ZDZ5ojqbj3fo7ufpNm20=
Subject key identifier:   E1:45:BF:03:E2:58:30:A2:6D:64:9F:65:AD:C3:DD:4B:28:24:82:9C
Certificate issuer:       /CN=08E555759AA0C18576364C83261B6CEA4BCF0CCB
Certificate serial:       06F040B6F7C29239F4FB993F7EFEC60985710DDE
Authority key identifier: 08:E5:55:75:9A:A0:C1:85:76:36:4C:83:26:1B:6C:EA:4B:CF:0C:CB
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08E555759AA0C18576364C83261B6CEA4BCF0CCB.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/dfee82b7-c182-4e83-897c-e00f3ce1b0d2/0/3130332e3232392e3138352e302f32342d3234203d3e2039333431.roa
Signing time:             Thu 03 Jul 2025 17:00:02 +0000
ROA not before:           Thu 03 Jul 2025 16:55:02 +0000
ROA not after:            Thu 02 Jul 2026 17:00:02 +0000
asID:                     9341
IP address blocks:        103.229.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/dfee82b7-c182-4e83-897c-e00f3ce1b0d2/0/08E555759AA0C18576364C83261B6CEA4BCF0CCB.crl
                          rsync://repo-rpki.idnic.net/repo/dfee82b7-c182-4e83-897c-e00f3ce1b0d2/0/08E555759AA0C18576364C83261B6CEA4BCF0CCB.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08E555759AA0C18576364C83261B6CEA4BCF0CCB.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Jul 2025 19:52:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:f0:40:b6:f7:c2:92:39:f4:fb:99:3f:7e:fe:c6:09:85:71:0d:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08E555759AA0C18576364C83261B6CEA4BCF0CCB
        Validity
            Not Before: Jul  3 16:55:02 2025 GMT
            Not After : Jul  2 17:00:02 2026 GMT
        Subject: CN=E145BF03E25830A26D649F65ADC3DD4B2824829C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:02:2d:bd:0c:5f:1b:ee:0c:8c:c1:fb:e4:bd:
                    5c:1f:65:a4:17:35:9d:a1:07:76:4c:ab:f1:6d:07:
                    e1:a8:83:95:a7:5f:0b:0a:ab:fa:aa:3c:e5:4b:ee:
                    4a:39:4a:89:ae:e5:ca:0c:40:8a:2c:1d:6d:d5:61:
                    37:9e:1b:0c:a9:cf:54:d7:c6:6d:7e:47:67:80:c2:
                    ec:a6:40:e8:34:d2:7c:1a:b8:f1:71:1a:5f:ac:7b:
                    a7:7d:26:e9:d4:1d:ab:5d:41:dc:4d:c5:81:b7:58:
                    06:48:94:ac:ef:5c:c9:33:1f:50:52:ae:02:89:1d:
                    82:7c:b1:44:00:b1:9f:6a:0f:46:74:5e:29:af:11:
                    ac:25:be:d0:98:b0:00:55:15:37:4b:b0:00:e9:c5:
                    42:34:82:47:cc:88:c5:1f:46:1a:26:76:1d:79:c0:
                    9f:b7:be:88:0c:80:b4:50:0c:a2:94:cb:9e:64:6d:
                    5f:ce:00:e6:64:ad:5f:02:67:fa:96:3e:b9:7c:35:
                    26:08:6b:ef:e2:1b:0a:95:0b:72:f2:22:22:2e:5f:
                    4c:7a:db:97:74:63:af:e6:b5:f1:cd:78:db:b9:64:
                    14:66:7e:d9:c7:d1:e8:c5:19:c3:54:81:aa:51:80:
                    8e:ba:aa:2f:c9:7c:72:35:8d:1f:ae:95:1e:fa:99:
                    6a:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:45:BF:03:E2:58:30:A2:6D:64:9F:65:AD:C3:DD:4B:28:24:82:9C
            X509v3 Authority Key Identifier:
                keyid:08:E5:55:75:9A:A0:C1:85:76:36:4C:83:26:1B:6C:EA:4B:CF:0C:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/dfee82b7-c182-4e83-897c-e00f3ce1b0d2/0/08E555759AA0C18576364C83261B6CEA4BCF0CCB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08E555759AA0C18576364C83261B6CEA4BCF0CCB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dfee82b7-c182-4e83-897c-e00f3ce1b0d2/0/3130332e3232392e3138352e302f32342d3234203d3e2039333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.229.185.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:e4:e1:5c:3e:b2:7c:94:19:f5:8c:9b:ff:39:01:3e:33:d5:
         48:46:57:fa:4c:ce:4f:d7:bc:28:0d:0a:7f:8f:c1:03:87:8f:
         9b:c8:ee:65:89:a2:a6:3b:a6:31:a1:ee:30:d8:9f:1d:28:88:
         a5:34:9d:61:fb:ef:bf:11:90:8e:27:48:c9:6f:cc:04:f1:75:
         7d:b8:20:52:c9:b7:ba:c8:4b:7b:0f:4b:fd:a4:37:a8:1f:17:
         18:f6:3c:e6:6d:7e:64:84:fa:55:4f:b4:9f:4a:a7:e1:be:0c:
         17:8c:12:98:c0:b2:92:3a:43:6c:3c:8b:0c:79:2f:80:53:83:
         a7:34:cf:6d:46:6d:d7:7e:82:e6:39:a2:70:93:a3:b7:47:65:
         cb:65:45:3e:08:f8:73:6e:2c:56:3e:19:d1:e1:63:49:f6:40:
         ba:e6:e0:10:27:0f:13:7a:bf:49:94:3f:f9:16:48:65:19:9c:
         60:b0:6f:b7:8e:39:e4:76:88:af:45:ab:cd:07:04:c4:00:81:
         25:df:bf:53:5e:47:4d:8d:6d:23:43:72:2c:d4:c1:ad:41:cd:
         ab:49:b9:00:fc:1c:5b:50:59:ed:3e:36:9b:0a:c7:15:0d:80:
         1f:d3:13:30:e8:b5:4c:36:04:c2:a4:6f:67:c7:c4:ed:68:a8:
         3a:94:c3:72
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUBvBAtvfCkjn0+5k/fv7GCYVxDd4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDhFNTU1NzU5QUEwQzE4NTc2MzY0QzgzMjYxQjZDRUE0
QkNGMENDQjAeFw0yNTA3MDMxNjU1MDJaFw0yNjA3MDIxNzAwMDJaMDMxMTAvBgNV
BAMTKEUxNDVCRjAzRTI1ODMwQTI2RDY0OUY2NUFEQzNERDRCMjgyNDgyOUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5Ai29DF8b7gyMwfvkvVwfZaQX
NZ2hB3ZMq/FtB+Gog5WnXwsKq/qqPOVL7ko5Somu5coMQIosHW3VYTeeGwypz1TX
xm1+R2eAwuymQOg00nwauPFxGl+se6d9JunUHatdQdxNxYG3WAZIlKzvXMkzH1BS
rgKJHYJ8sUQAsZ9qD0Z0XimvEawlvtCYsABVFTdLsADpxUI0gkfMiMUfRhomdh15
wJ+3vogMgLRQDKKUy55kbV/OAOZkrV8CZ/qWPrl8NSYIa+/iGwqVC3LyIiIuX0x6
25d0Y6/mtfHNeNu5ZBRmftnH0ejFGcNUgapRgI66qi/JfHI1jR+ulR76mWpDAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQU4UW/A+JYMKJtZJ9lrcPdSygkgpwwHwYDVR0j
BBgwFoAUCOVVdZqgwYV2NkyDJhts6kvPDMswDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k
ZmVlODJiNy1jMTgyLTRlODMtODk3Yy1lMDBmM2NlMWIwZDIvMC8wOEU1NTU3NTlB
QTBDMTg1NzYzNjRDODMyNjFCNkNFQTRCQ0YwQ0NCLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMDhFNTU1NzU5QUEwQzE4NTc2MzY0QzgzMjYxQjZDRUE0QkNG
MENDQi5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2RmZWU4MmI3LWMxODItNGU4My04
OTdjLWUwMGYzY2UxYjBkMi8wLzMxMzAzMzJlMzIzMjM5MmUzMTM4MzUyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzOTMzMzQzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGfluTANBgkqhkiG
9w0BAQsFAAOCAQEAP+ThXD6yfJQZ9Yyb/zkBPjPVSEZX+kzOT9e8KA0Kf4/BA4eP
m8juZYmipjumMaHuMNifHSiIpTSdYfvvvxGQjidIyW/MBPF1fbggUsm3ushLew9L
/aQ3qB8XGPY85m1+ZIT6VU+0n0qn4b4MF4wSmMCykjpDbDyLDHkvgFODpzTPbUZt
136C5jmicJOjt0dly2VFPgj4c24sVj4Z0eFjSfZAuubgECcPE3q/SZQ/+RZIZRmc
YLBvt4455HaIr0WrzQcExACBJd+/U15HTY1tI0NyLNTBrUHNq0m5APwcW1BZ7T42
mwrHFQ2AH9MTMOi1TDYEwqRvZ8fE7WioOpTDcg==
-----END CERTIFICATE-----
Generated at Mon Jul 21 23:17:23 2025 by rpki-client