Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/05669807-050e-43ae-8708-b46b8817842c/0/3130332e3133302e3138322e302f32332d3233203d3e20313338303833.roa
File:                     3130332e3133302e3138322e302f32332d3233203d3e20313338303833.roa (raw, json)
Hash identifier:          /xZYFYyOB1e+pblVdjFbZfEDRpifvi0rioH8bq15tlY=
Subject key identifier:   11:A0:9B:29:8C:5E:5E:FB:A1:DB:99:5C:32:5E:10:63:BD:B4:B8:8A
Certificate issuer:       /CN=0912BC2A8D2E8BF2553D7106FF6E62228E03C1E4
Certificate serial:       384524364B79FFCDFA7149152FCCD436C22C5FCA
Authority key identifier: 09:12:BC:2A:8D:2E:8B:F2:55:3D:71:06:FF:6E:62:22:8E:03:C1:E4
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0912BC2A8D2E8BF2553D7106FF6E62228E03C1E4.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/05669807-050e-43ae-8708-b46b8817842c/0/3130332e3133302e3138322e302f32332d3233203d3e20313338303833.roa
Signing time:             Mon 02 Jun 2025 02:04:28 +0000
ROA not before:           Mon 02 Jun 2025 01:59:28 +0000
ROA not after:            Mon 01 Jun 2026 02:04:28 +0000
asID:                     138083
IP address blocks:        103.130.182.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/05669807-050e-43ae-8708-b46b8817842c/0/0912BC2A8D2E8BF2553D7106FF6E62228E03C1E4.crl
                          rsync://repo-rpki.idnic.net/repo/05669807-050e-43ae-8708-b46b8817842c/0/0912BC2A8D2E8BF2553D7106FF6E62228E03C1E4.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0912BC2A8D2E8BF2553D7106FF6E62228E03C1E4.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Jun 2025 14:59:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:45:24:36:4b:79:ff:cd:fa:71:49:15:2f:cc:d4:36:c2:2c:5f:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0912BC2A8D2E8BF2553D7106FF6E62228E03C1E4
        Validity
            Not Before: Jun  2 01:59:28 2025 GMT
            Not After : Jun  1 02:04:28 2026 GMT
        Subject: CN=11A09B298C5E5EFBA1DB995C325E1063BDB4B88A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:84:8b:20:4e:0b:0a:92:2d:f0:1f:d3:c6:cc:
                    c5:23:11:32:ea:85:2b:d2:e6:95:da:e2:0c:96:f5:
                    78:c5:3d:ea:ee:d5:b9:64:db:c8:eb:30:38:7a:f3:
                    88:d6:fb:6d:4c:03:a8:04:b2:81:cd:2c:0e:2c:97:
                    c7:a8:40:dc:00:83:37:af:0f:3a:24:24:da:b5:3d:
                    f0:b5:91:07:a7:da:f5:fb:d7:df:f3:84:ce:bf:ba:
                    9e:2f:81:3b:d8:d9:01:62:20:87:e5:84:8b:2d:9a:
                    9a:a5:12:f7:4d:bb:f4:3e:b7:96:a5:dd:4f:2a:03:
                    0d:c1:22:04:71:f9:b0:f3:1b:b1:b6:3c:99:26:a7:
                    21:38:21:8a:25:db:3c:81:53:cc:56:f4:b3:57:f0:
                    42:05:56:d2:36:39:3f:d0:15:8b:a0:6f:f7:56:e4:
                    3b:e1:a9:3f:eb:63:a5:27:fe:67:e3:10:cc:f1:be:
                    10:25:b4:d4:65:cb:b8:75:e5:2b:55:b8:c4:81:74:
                    74:a2:98:66:47:79:b5:24:16:da:b1:84:7c:04:22:
                    5c:2f:d6:c9:ce:e7:1a:43:45:45:6c:d8:37:12:b7:
                    8b:49:94:f1:b5:5b:ca:5a:33:88:e7:d0:2e:8c:c4:
                    7f:64:96:70:01:e4:92:68:ee:52:8a:ab:15:00:ab:
                    86:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:A0:9B:29:8C:5E:5E:FB:A1:DB:99:5C:32:5E:10:63:BD:B4:B8:8A
            X509v3 Authority Key Identifier:
                keyid:09:12:BC:2A:8D:2E:8B:F2:55:3D:71:06:FF:6E:62:22:8E:03:C1:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/05669807-050e-43ae-8708-b46b8817842c/0/0912BC2A8D2E8BF2553D7106FF6E62228E03C1E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0912BC2A8D2E8BF2553D7106FF6E62228E03C1E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/05669807-050e-43ae-8708-b46b8817842c/0/3130332e3133302e3138322e302f32332d3233203d3e20313338303833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.130.182.0/23

    Signature Algorithm: sha256WithRSAEncryption
         62:c8:11:88:2a:61:c3:c3:16:e8:f0:d0:de:0b:98:cf:e3:42:
         04:74:37:0d:37:5f:ac:37:09:68:ca:af:a1:9a:64:73:2a:61:
         79:79:99:17:c1:e3:a3:ad:ab:27:46:2f:30:61:e4:51:35:13:
         a3:09:8e:94:03:db:fa:c0:f0:04:f0:b8:54:7d:6d:3a:94:14:
         3d:f6:1d:86:d4:22:a7:d8:eb:7f:78:b3:d4:9a:8c:b6:b6:6b:
         1f:c5:f4:d0:71:0d:44:f2:17:91:73:c0:a1:8d:c3:7a:ca:89:
         98:5c:ce:9e:0a:e1:81:48:e7:40:69:fb:a1:02:84:b9:9b:f7:
         a7:4e:e4:5f:9f:06:3c:8b:6a:f7:08:d9:1f:78:c9:c0:e0:b0:
         71:69:57:9f:91:4c:6d:1e:69:36:31:79:5d:90:ff:8b:e9:fb:
         99:d4:c8:1f:b1:42:a2:e7:23:5d:bb:ad:de:53:07:0b:bf:4f:
         0f:2c:32:3a:55:1e:41:36:da:d5:be:69:b3:b4:eb:74:b5:71:
         cd:fe:6a:a7:66:bd:ba:24:6b:de:f2:6d:26:bf:c0:c4:90:82:
         9f:0c:50:b6:7e:46:d6:7e:de:a7:95:c3:b6:6c:8e:a4:19:63:
         71:2e:90:58:a0:d0:61:2e:23:f2:44:17:11:ce:6e:ec:6f:57:
         e7:c7:67:f6
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUOEUkNkt5/836cUkVL8zUNsIsX8owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDkxMkJDMkE4RDJFOEJGMjU1M0Q3MTA2RkY2RTYyMjI4
RTAzQzFFNDAeFw0yNTA2MDIwMTU5MjhaFw0yNjA2MDEwMjA0MjhaMDMxMTAvBgNV
BAMTKDExQTA5QjI5OEM1RTVFRkJBMURCOTk1QzMyNUUxMDYzQkRCNEI4OEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCphIsgTgsKki3wH9PGzMUjETLq
hSvS5pXa4gyW9XjFPeru1blk28jrMDh684jW+21MA6gEsoHNLA4sl8eoQNwAgzev
DzokJNq1PfC1kQen2vX719/zhM6/up4vgTvY2QFiIIflhIstmpqlEvdNu/Q+t5al
3U8qAw3BIgRx+bDzG7G2PJkmpyE4IYol2zyBU8xW9LNX8EIFVtI2OT/QFYugb/dW
5DvhqT/rY6Un/mfjEMzxvhAltNRly7h15StVuMSBdHSimGZHebUkFtqxhHwEIlwv
1snO5xpDRUVs2DcSt4tJlPG1W8paM4jn0C6MxH9klnAB5JJo7lKKqxUAq4Y3AgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUEaCbKYxeXvuh25lcMl4QY720uIowHwYDVR0j
BBgwFoAUCRK8Ko0ui/JVPXEG/25iIo4DweQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w
NTY2OTgwNy0wNTBlLTQzYWUtODcwOC1iNDZiODgxNzg0MmMvMC8wOTEyQkMyQThE
MkU4QkYyNTUzRDcxMDZGRjZFNjIyMjhFMDNDMUU0LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMDkxMkJDMkE4RDJFOEJGMjU1M0Q3MTA2RkY2RTYyMjI4RTAz
QzFFNC5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzA1NjY5ODA3LTA1MGUtNDNhZS04
NzA4LWI0NmI4ODE3ODQyYy8wLzMxMzAzMzJlMzEzMzMwMmUzMTM4MzIyZTMwMmYz
MjMzMmQzMjMzMjAzZDNlMjAzMTMzMzgzMDM4MzMucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFngrYwDQYJ
KoZIhvcNAQELBQADggEBAGLIEYgqYcPDFujw0N4LmM/jQgR0Nw03X6w3CWjKr6Ga
ZHMqYXl5mRfB46OtqydGLzBh5FE1E6MJjpQD2/rA8ATwuFR9bTqUFD32HYbUIqfY
6394s9SajLa2ax/F9NBxDUTyF5FzwKGNw3rKiZhczp4K4YFI50Bp+6EChLmb96dO
5F+fBjyLavcI2R94ycDgsHFpV5+RTG0eaTYxeV2Q/4vp+5nUyB+xQqLnI127rd5T
Bwu/Tw8sMjpVHkE22tW+abO063S1cc3+aqdmvboka97ybSa/wMSQgp8MULZ+RtZ+
3qeVw7ZsjqQZY3EukFig0GEuI/JEFxHObuxvV+fHZ/Y=
-----END CERTIFICATE-----
Generated at Fri Jun 6 16:47:20 2025 by rpki-client