Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/02cb0b3a-692d-442e-9308-903c02d5718f/0/3130332e3134302e3138382e302f32342d3234203d3e20313338383831.roa
File:                     3130332e3134302e3138382e302f32342d3234203d3e20313338383831.roa (raw, json)
Hash identifier:          d7I2swOfny5ecV9M83MtKittywnggYfHKo91PVbmn6Q=
Subject key identifier:   AF:F9:78:E7:57:6E:F1:6D:29:ED:0C:74:FF:1A:21:AD:1F:4D:38:EC
Certificate issuer:       /CN=02AC8DC3B003059A7040EDCFC881D9C93B064C18
Certificate serial:       0FB21191EE3069F0EA590B5A31A3D7556098FD4A
Authority key identifier: 02:AC:8D:C3:B0:03:05:9A:70:40:ED:CF:C8:81:D9:C9:3B:06:4C:18
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/02AC8DC3B003059A7040EDCFC881D9C93B064C18.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/02cb0b3a-692d-442e-9308-903c02d5718f/0/3130332e3134302e3138382e302f32342d3234203d3e20313338383831.roa
Signing time:             Sun 08 Jun 2025 05:00:01 +0000
ROA not before:           Sun 08 Jun 2025 04:55:01 +0000
ROA not after:            Sun 07 Jun 2026 05:00:01 +0000
asID:                     138881
IP address blocks:        103.140.188.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/02cb0b3a-692d-442e-9308-903c02d5718f/0/02AC8DC3B003059A7040EDCFC881D9C93B064C18.crl
                          rsync://repo-rpki.idnic.net/repo/02cb0b3a-692d-442e-9308-903c02d5718f/0/02AC8DC3B003059A7040EDCFC881D9C93B064C18.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/02AC8DC3B003059A7040EDCFC881D9C93B064C18.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 11 Jun 2025 02:27:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:b2:11:91:ee:30:69:f0:ea:59:0b:5a:31:a3:d7:55:60:98:fd:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02AC8DC3B003059A7040EDCFC881D9C93B064C18
        Validity
            Not Before: Jun  8 04:55:01 2025 GMT
            Not After : Jun  7 05:00:01 2026 GMT
        Subject: CN=AFF978E7576EF16D29ED0C74FF1A21AD1F4D38EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:4b:1b:3c:58:9a:1d:7c:60:15:1b:cf:26:15:
                    be:0a:79:a3:fa:66:8e:2f:2b:ec:30:5c:82:ab:e9:
                    c7:ff:ef:b8:f3:7c:00:5f:90:1c:c8:3e:08:31:08:
                    a2:9a:75:d0:5d:e5:4b:50:3f:98:d9:25:43:1b:6f:
                    32:58:b9:92:94:25:3a:e6:33:07:87:61:9a:eb:9a:
                    cd:e1:99:bb:9e:5e:04:3c:fc:f8:ca:e7:8f:fa:81:
                    1b:06:a1:77:74:29:26:18:48:fa:9a:88:17:dd:59:
                    24:e7:66:87:19:6b:88:29:ec:a2:25:2f:01:77:fd:
                    fc:b0:9c:31:b4:95:27:eb:f6:9b:ee:90:5f:ad:eb:
                    c0:43:39:1f:cb:78:f5:d6:b3:db:f4:14:d6:38:51:
                    74:f5:f3:6d:4c:67:cd:56:32:2d:72:16:4a:e3:9d:
                    4f:2e:42:c7:38:96:6e:fb:3e:6b:84:44:a6:b8:6c:
                    d7:4e:c1:e3:e6:c9:b4:95:f8:5f:0e:0c:53:37:9a:
                    91:32:19:88:be:73:35:85:b4:73:15:e1:20:03:de:
                    1d:56:f2:35:48:01:8b:75:c5:0b:2a:61:87:54:2d:
                    fb:09:a7:75:7b:57:05:88:44:d5:ac:db:f4:e5:10:
                    3d:b8:5f:54:52:0a:de:e3:ff:19:5f:26:ca:e1:71:
                    32:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:F9:78:E7:57:6E:F1:6D:29:ED:0C:74:FF:1A:21:AD:1F:4D:38:EC
            X509v3 Authority Key Identifier:
                keyid:02:AC:8D:C3:B0:03:05:9A:70:40:ED:CF:C8:81:D9:C9:3B:06:4C:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/02cb0b3a-692d-442e-9308-903c02d5718f/0/02AC8DC3B003059A7040EDCFC881D9C93B064C18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/02AC8DC3B003059A7040EDCFC881D9C93B064C18.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/02cb0b3a-692d-442e-9308-903c02d5718f/0/3130332e3134302e3138382e302f32342d3234203d3e20313338383831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.140.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:54:ea:25:72:71:77:2f:ef:57:43:a1:11:ac:4b:7d:fc:c7:
         e7:1e:44:79:2d:68:00:43:06:ca:71:b9:9e:bf:ac:c5:b0:7d:
         96:c9:e8:a4:c7:c0:a8:98:58:07:e6:fc:ed:64:ef:ea:42:0a:
         ba:d1:be:1b:cc:d8:70:db:8e:68:d9:9d:39:c8:d8:23:56:57:
         61:8e:e6:cb:ef:1a:f9:b6:29:19:cc:85:99:5d:06:7c:8a:b5:
         09:4c:5b:19:f3:b4:21:34:22:5d:e5:41:eb:93:a1:13:79:37:
         27:55:1c:7f:7c:56:dc:37:f2:02:8b:87:25:2f:f4:e2:7d:31:
         6f:e1:e1:00:a1:3e:b6:f1:67:78:c1:cc:c7:02:66:b4:1b:30:
         98:18:a8:0b:25:6f:27:04:c4:6b:a3:ce:af:d6:c5:ea:0f:a1:
         32:d0:89:68:02:be:ab:79:a3:90:13:98:a6:ab:0d:2c:c8:31:
         b9:e3:7e:8b:9d:ff:a1:65:82:15:7d:95:ed:2a:85:b8:91:28:
         42:2a:97:c0:aa:70:43:f6:35:87:6b:4a:88:5e:22:6f:bc:60:
         b5:ad:be:e7:7d:ef:72:45:e2:9b:e5:c4:c3:86:10:d3:80:03:
         aa:5d:18:ce:e4:85:42:62:41:a7:c5:08:ba:bb:9f:b0:2f:fa:
         44:00:1e:fd
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUD7IRke4wafDqWQtaMaPXVWCY/UowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDJBQzhEQzNCMDAzMDU5QTcwNDBFRENGQzg4MUQ5Qzkz
QjA2NEMxODAeFw0yNTA2MDgwNDU1MDFaFw0yNjA2MDcwNTAwMDFaMDMxMTAvBgNV
BAMTKEFGRjk3OEU3NTc2RUYxNkQyOUVEMEM3NEZGMUEyMUFEMUY0RDM4RUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfSxs8WJodfGAVG88mFb4KeaP6
Zo4vK+wwXIKr6cf/77jzfABfkBzIPggxCKKaddBd5UtQP5jZJUMbbzJYuZKUJTrm
MweHYZrrms3hmbueXgQ8/PjK54/6gRsGoXd0KSYYSPqaiBfdWSTnZocZa4gp7KIl
LwF3/fywnDG0lSfr9pvukF+t68BDOR/LePXWs9v0FNY4UXT1821MZ81WMi1yFkrj
nU8uQsc4lm77PmuERKa4bNdOwePmybSV+F8ODFM3mpEyGYi+czWFtHMV4SAD3h1W
8jVIAYt1xQsqYYdULfsJp3V7VwWIRNWs2/TlED24X1RSCt7j/xlfJsrhcTIJAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUr/l451du8W0p7Qx0/xohrR9NOOwwHwYDVR0j
BBgwFoAUAqyNw7ADBZpwQO3PyIHZyTsGTBgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w
MmNiMGIzYS02OTJkLTQ0MmUtOTMwOC05MDNjMDJkNTcxOGYvMC8wMkFDOERDM0Iw
MDMwNTlBNzA0MEVEQ0ZDODgxRDlDOTNCMDY0QzE4LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMDJBQzhEQzNCMDAzMDU5QTcwNDBFRENGQzg4MUQ5QzkzQjA2
NEMxOC5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzAyY2IwYjNhLTY5MmQtNDQyZS05
MzA4LTkwM2MwMmQ1NzE4Zi8wLzMxMzAzMzJlMzEzNDMwMmUzMTM4MzgyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzgzODM4MzEucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnjLwwDQYJ
KoZIhvcNAQELBQADggEBAHVU6iVycXcv71dDoRGsS338x+ceRHktaABDBspxuZ6/
rMWwfZbJ6KTHwKiYWAfm/O1k7+pCCrrRvhvM2HDbjmjZnTnI2CNWV2GO5svvGvm2
KRnMhZldBnyKtQlMWxnztCE0Il3lQeuToRN5NydVHH98Vtw38gKLhyUv9OJ9MW/h
4QChPrbxZ3jBzMcCZrQbMJgYqAslbycExGujzq/WxeoPoTLQiWgCvqt5o5ATmKar
DSzIMbnjfoud/6FlghV9le0qhbiRKEIql8CqcEP2NYdrSoheIm+8YLWtvud973JF
4pvlxMOGENOAA6pdGM7khUJiQafFCLq7n7Av+kQAHv0=
-----END CERTIFICATE-----
Generated at Sun Jun 8 14:48:43 2025 by rpki-client