Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/0e96ed89-2a16-4151-bf83-59dce561460c/0/3130332e3133322e35352e302f32342d3234203d3e20313338313233.roa
File:                     3130332e3133322e35352e302f32342d3234203d3e20313338313233.roa (raw, json)
Hash identifier:          CIgXNrGi+SDH5ijMaMYNAYeOpi7DzjTKmeB4Y5/uAfQ=
Subject key identifier:   5E:B4:A9:17:9A:E8:16:DE:75:E1:6D:13:66:A9:28:24:4E:83:7D:3A
Certificate issuer:       /CN=B88116E180F32C03362804A81CB0CF2EB0C261B6
Certificate serial:       7441A627B627388540711EEE78ADE3DC69AE1A96
Authority key identifier: B8:81:16:E1:80:F3:2C:03:36:28:04:A8:1C:B0:CF:2E:B0:C2:61:B6
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B88116E180F32C03362804A81CB0CF2EB0C261B6.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/0e96ed89-2a16-4151-bf83-59dce561460c/0/3130332e3133322e35352e302f32342d3234203d3e20313338313233.roa
Signing time:             Mon 12 May 2025 08:01:05 +0000
ROA not before:           Mon 12 May 2025 07:56:05 +0000
ROA not after:            Mon 11 May 2026 08:01:05 +0000
asID:                     138123
IP address blocks:        103.132.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/0e96ed89-2a16-4151-bf83-59dce561460c/0/B88116E180F32C03362804A81CB0CF2EB0C261B6.crl
                          rsync://repo-rpki.idnic.net/repo/0e96ed89-2a16-4151-bf83-59dce561460c/0/B88116E180F32C03362804A81CB0CF2EB0C261B6.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B88116E180F32C03362804A81CB0CF2EB0C261B6.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 06 Jun 2025 22:37:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:41:a6:27:b6:27:38:85:40:71:1e:ee:78:ad:e3:dc:69:ae:1a:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B88116E180F32C03362804A81CB0CF2EB0C261B6
        Validity
            Not Before: May 12 07:56:05 2025 GMT
            Not After : May 11 08:01:05 2026 GMT
        Subject: CN=5EB4A9179AE816DE75E16D1366A928244E837D3A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:24:71:b4:7f:13:a9:c1:6b:89:52:cd:63:07:
                    a1:43:1d:a5:a7:16:2c:aa:09:e1:d8:9d:85:4f:f0:
                    37:d2:4f:58:37:e9:e8:21:b5:d5:77:fd:ec:28:69:
                    ce:79:fb:0d:b5:ce:17:ba:9f:21:6a:4a:3a:d4:42:
                    56:9c:b5:8c:4a:87:61:9d:01:21:ca:2b:81:8d:1c:
                    29:e1:90:26:9f:cc:55:f9:79:15:0e:83:f3:96:65:
                    f7:a4:bc:1b:d9:dc:a0:1d:c5:c8:58:58:11:ab:67:
                    d2:0d:bc:24:c6:ae:22:41:f5:26:ea:a4:1e:c5:c4:
                    e4:6a:62:73:c4:5e:a5:ec:21:14:a9:6d:9c:7c:64:
                    00:fe:9d:79:98:da:c2:78:9f:e6:30:ca:c6:31:47:
                    12:8f:2e:9c:df:54:8a:03:06:a5:85:bb:0a:a4:ca:
                    0a:cc:99:a0:d3:99:3c:d9:7f:68:2d:ec:2d:d7:63:
                    9a:0f:11:64:97:86:37:b1:01:ce:13:18:85:02:a3:
                    33:f9:68:31:3c:02:6d:20:0b:3f:cc:2c:3e:67:af:
                    a1:5d:8d:7d:f3:3c:99:46:f7:ad:cf:dd:ac:d2:d6:
                    6e:07:e0:9f:b5:f0:c0:b8:0a:e9:05:0c:3d:62:45:
                    af:8f:01:fc:67:02:6a:ce:47:82:cf:23:16:a7:26:
                    19:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:B4:A9:17:9A:E8:16:DE:75:E1:6D:13:66:A9:28:24:4E:83:7D:3A
            X509v3 Authority Key Identifier:
                keyid:B8:81:16:E1:80:F3:2C:03:36:28:04:A8:1C:B0:CF:2E:B0:C2:61:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/0e96ed89-2a16-4151-bf83-59dce561460c/0/B88116E180F32C03362804A81CB0CF2EB0C261B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B88116E180F32C03362804A81CB0CF2EB0C261B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0e96ed89-2a16-4151-bf83-59dce561460c/0/3130332e3133322e35352e302f32342d3234203d3e20313338313233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.132.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:8b:b9:4d:26:88:f7:d2:2a:4e:e7:68:5e:f1:11:b6:74:0d:
         9f:54:ff:27:68:71:20:cd:3f:7e:28:53:41:7f:d9:b0:cc:a9:
         29:b6:79:9a:3a:57:bd:99:3c:50:a5:b0:2e:69:17:a3:41:fc:
         c3:dd:58:73:ae:3c:0b:0c:5f:12:0d:4a:bd:ba:a4:4c:4f:fd:
         25:1a:36:ef:12:d8:3b:a5:cc:e8:e2:0c:e4:63:fa:d5:46:e8:
         bb:23:ef:10:d7:6b:b4:3f:a1:fb:02:b8:df:60:7f:bd:2a:0d:
         98:f9:9d:e7:99:93:0a:9a:f2:aa:b6:e5:94:83:80:73:35:19:
         e1:9a:88:cf:34:81:e8:2c:48:fb:a9:9b:88:d2:29:2f:bb:40:
         39:45:a4:58:03:39:91:f8:5c:88:8d:05:6f:90:07:19:d4:cb:
         50:62:62:dc:9f:cb:77:32:77:18:e6:9e:bf:d7:99:48:2a:c9:
         27:53:3b:a9:bb:53:b5:fc:aa:09:df:c4:10:56:1d:e8:93:66:
         bc:eb:03:76:09:49:3d:2d:1c:2e:4a:00:0d:1d:24:40:ce:71:
         23:cd:bb:60:03:e1:81:79:a0:94:09:1b:6e:a7:0b:eb:4c:98:
         4c:92:2a:3c:7a:28:bd:ac:5d:01:d0:a8:ea:1d:7c:2b:46:db:
         8d:0f:e7:22
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUdEGmJ7YnOIVAcR7ueK3j3GmuGpYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjg4MTE2RTE4MEYzMkMwMzM2MjgwNEE4MUNCMENGMkVC
MEMyNjFCNjAeFw0yNTA1MTIwNzU2MDVaFw0yNjA1MTEwODAxMDVaMDMxMTAvBgNV
BAMTKDVFQjRBOTE3OUFFODE2REU3NUUxNkQxMzY2QTkyODI0NEU4MzdEM0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQJHG0fxOpwWuJUs1jB6FDHaWn
FiyqCeHYnYVP8DfST1g36eghtdV3/ewoac55+w21zhe6nyFqSjrUQlactYxKh2Gd
ASHKK4GNHCnhkCafzFX5eRUOg/OWZfekvBvZ3KAdxchYWBGrZ9INvCTGriJB9Sbq
pB7FxORqYnPEXqXsIRSpbZx8ZAD+nXmY2sJ4n+YwysYxRxKPLpzfVIoDBqWFuwqk
ygrMmaDTmTzZf2gt7C3XY5oPEWSXhjexAc4TGIUCozP5aDE8Am0gCz/MLD5nr6Fd
jX3zPJlG963P3azS1m4H4J+18MC4CukFDD1iRa+PAfxnAmrOR4LPIxanJhmlAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUXrSpF5roFt514W0TZqkoJE6DfTowHwYDVR0j
BBgwFoAUuIEW4YDzLAM2KASoHLDPLrDCYbYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w
ZTk2ZWQ4OS0yYTE2LTQxNTEtYmY4My01OWRjZTU2MTQ2MGMvMC9CODgxMTZFMTgw
RjMyQzAzMzYyODA0QTgxQ0IwQ0YyRUIwQzI2MUI2LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQjg4MTE2RTE4MEYzMkMwMzM2MjgwNEE4MUNCMENGMkVCMEMy
NjFCNi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzBlOTZlZDg5LTJhMTYtNDE1MS1i
ZjgzLTU5ZGNlNTYxNDYwYy8wLzMxMzAzMzJlMzEzMzMyMmUzNTM1MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzMzM4MzEzMjMzLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ4Q3MA0GCSqG
SIb3DQEBCwUAA4IBAQAHi7lNJoj30ipO52he8RG2dA2fVP8naHEgzT9+KFNBf9mw
zKkptnmaOle9mTxQpbAuaRejQfzD3VhzrjwLDF8SDUq9uqRMT/0lGjbvEtg7pczo
4gzkY/rVRui7I+8Q12u0P6H7ArjfYH+9Kg2Y+Z3nmZMKmvKqtuWUg4BzNRnhmojP
NIHoLEj7qZuI0ikvu0A5RaRYAzmR+FyIjQVvkAcZ1MtQYmLcn8t3MncY5p6/15lI
KsknUzupu1O1/KoJ38QQVh3ok2a86wN2CUk9LRwuSgANHSRAznEjzbtgA+GBeaCU
CRtupwvrTJhMkio8eii9rF0B0KjqHXwrRtuND+ci
-----END CERTIFICATE-----
Generated at Thu Jun 5 18:28:15 2025 by rpki-client