Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/14885525-cb0f-46a0-8253-042d7d7aff38/0/3130332e33352e3135322e302f32342d3234203d3e2039333431.roa
File:                     3130332e33352e3135322e302f32342d3234203d3e2039333431.roa (raw, json)
Hash identifier:          ywb3a8C62BA/PMdGKSYbEqNH95chMJkQIqcJmusbD0s=
Subject key identifier:   36:9F:21:8E:EA:20:1B:40:4D:80:38:9C:6A:2F:2A:84:6E:F2:5F:9E
Certificate issuer:       /CN=0100A7F6C4D58C3867F9CED7E7D46DCED0A57804
Certificate serial:       5E1DD0EB969A924CA25C55D066D61D76BD969E05
Authority key identifier: 01:00:A7:F6:C4:D5:8C:38:67:F9:CE:D7:E7:D4:6D:CE:D0:A5:78:04
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0100A7F6C4D58C3867F9CED7E7D46DCED0A57804.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/14885525-cb0f-46a0-8253-042d7d7aff38/0/3130332e33352e3135322e302f32342d3234203d3e2039333431.roa
Signing time:             Fri 04 Oct 2024 08:00:00 +0000
ROA not before:           Fri 04 Oct 2024 07:55:00 +0000
ROA not after:            Fri 03 Oct 2025 08:00:00 +0000
asID:                     9341
IP address blocks:        103.35.152.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/14885525-cb0f-46a0-8253-042d7d7aff38/0/0100A7F6C4D58C3867F9CED7E7D46DCED0A57804.crl
                          rsync://repo-rpki.idnic.net/repo/14885525-cb0f-46a0-8253-042d7d7aff38/0/0100A7F6C4D58C3867F9CED7E7D46DCED0A57804.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0100A7F6C4D58C3867F9CED7E7D46DCED0A57804.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 12 Mar 2025 20:53:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:1d:d0:eb:96:9a:92:4c:a2:5c:55:d0:66:d6:1d:76:bd:96:9e:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0100A7F6C4D58C3867F9CED7E7D46DCED0A57804
        Validity
            Not Before: Oct  4 07:55:00 2024 GMT
            Not After : Oct  3 08:00:00 2025 GMT
        Subject: CN=369F218EEA201B404D80389C6A2F2A846EF25F9E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:3d:84:22:38:45:ee:df:bc:24:a1:b6:e0:2f:
                    39:77:c2:90:0d:9b:12:34:3c:a1:8a:59:36:2c:41:
                    d4:78:d4:54:88:83:89:db:4b:41:ca:56:17:fa:7a:
                    a8:cf:4f:46:af:94:f8:1e:2f:e7:2f:b7:2d:c9:e3:
                    56:6a:ae:c3:33:65:a2:e2:d9:5a:90:e4:c2:7f:16:
                    0d:4d:09:c5:8a:89:4f:e5:84:24:af:0f:df:5f:a1:
                    ac:09:98:3f:f4:53:52:86:92:49:9b:ae:df:21:1b:
                    7b:07:6b:fe:1e:be:ec:67:d4:d4:81:07:28:cc:69:
                    f4:e6:ad:c8:53:90:71:d2:da:51:ce:95:28:43:d8:
                    0d:16:03:2c:2b:6b:7e:b5:c7:8f:13:e9:5c:5e:99:
                    c3:7c:a0:07:ef:31:90:8c:ac:ff:35:c3:3e:d4:47:
                    60:39:bf:24:d1:75:02:58:e6:99:04:fa:7f:d9:59:
                    1c:01:de:93:18:0e:75:cd:4f:c1:7f:1d:ce:62:a7:
                    6d:d3:8e:4d:58:59:45:b1:0e:f3:74:34:80:00:8f:
                    d5:b4:5b:af:0b:6e:e3:0c:6e:1c:f2:27:9a:43:f5:
                    37:b6:73:e7:3b:db:f6:1b:7d:e5:a1:71:42:8d:f9:
                    bd:5d:2b:c0:00:f1:69:d1:c1:16:cd:18:54:43:bb:
                    58:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:9F:21:8E:EA:20:1B:40:4D:80:38:9C:6A:2F:2A:84:6E:F2:5F:9E
            X509v3 Authority Key Identifier:
                keyid:01:00:A7:F6:C4:D5:8C:38:67:F9:CE:D7:E7:D4:6D:CE:D0:A5:78:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/14885525-cb0f-46a0-8253-042d7d7aff38/0/0100A7F6C4D58C3867F9CED7E7D46DCED0A57804.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0100A7F6C4D58C3867F9CED7E7D46DCED0A57804.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/14885525-cb0f-46a0-8253-042d7d7aff38/0/3130332e33352e3135322e302f32342d3234203d3e2039333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.35.152.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:3b:67:ca:9b:21:6c:70:63:8c:89:62:4e:6b:82:d3:a7:68:
         9d:73:f7:44:df:0c:32:a3:d2:17:48:ec:89:40:e8:a6:19:75:
         e2:e0:53:ac:2c:a8:82:ef:1f:f7:90:0e:ae:96:42:46:df:d7:
         2e:b4:b8:96:72:62:5a:03:87:c4:56:9f:bf:3d:83:c3:37:e4:
         34:3d:66:71:81:a4:6a:72:a3:6a:e4:1c:db:86:91:67:7f:c0:
         8b:df:e3:86:14:50:2e:c8:f1:8d:83:9f:20:34:d4:14:bb:ab:
         42:a4:77:5e:b2:71:eb:8d:f6:2e:90:a7:aa:df:ce:5d:e9:bd:
         63:0c:d6:7e:d1:0e:18:6b:07:a5:60:f5:9a:54:e8:fa:5e:d7:
         9a:50:0e:e0:5b:38:ca:c9:70:f9:38:8a:91:92:75:2b:e8:c4:
         3f:38:c6:9c:07:73:7f:10:e7:fb:90:35:3d:f3:99:1c:4d:60:
         86:b4:09:3e:57:83:9f:e7:01:b5:72:27:90:53:bd:2e:37:ca:
         11:59:b2:b9:c0:b8:61:02:ed:a2:b3:1b:c0:dc:33:76:6a:84:
         5d:6a:2c:e9:56:18:d9:e7:ad:6e:85:d3:ea:0f:a4:64:19:e7:
         06:80:6b:ba:ee:77:d5:93:34:82:8c:7b:f4:43:1e:4f:f1:22:
         8b:09:6a:c7
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUXh3Q65aakkyiXFXQZtYddr2WngUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDEwMEE3RjZDNEQ1OEMzODY3RjlDRUQ3RTdENDZEQ0VE
MEE1NzgwNDAeFw0yNDEwMDQwNzU1MDBaFw0yNTEwMDMwODAwMDBaMDMxMTAvBgNV
BAMTKDM2OUYyMThFRUEyMDFCNDA0RDgwMzg5QzZBMkYyQTg0NkVGMjVGOUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnPYQiOEXu37wkobbgLzl3wpAN
mxI0PKGKWTYsQdR41FSIg4nbS0HKVhf6eqjPT0avlPgeL+cvty3J41ZqrsMzZaLi
2VqQ5MJ/Fg1NCcWKiU/lhCSvD99foawJmD/0U1KGkkmbrt8hG3sHa/4evuxn1NSB
ByjMafTmrchTkHHS2lHOlShD2A0WAywra361x48T6VxemcN8oAfvMZCMrP81wz7U
R2A5vyTRdQJY5pkE+n/ZWRwB3pMYDnXNT8F/Hc5ip23Tjk1YWUWxDvN0NIAAj9W0
W68LbuMMbhzyJ5pD9Te2c+c72/YbfeWhcUKN+b1dK8AA8WnRwRbNGFRDu1i9AgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQUNp8hjuogG0BNgDicai8qhG7yX54wHwYDVR0j
BBgwFoAUAQCn9sTVjDhn+c7X59RtztCleAQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x
NDg4NTUyNS1jYjBmLTQ2YTAtODI1My0wNDJkN2Q3YWZmMzgvMC8wMTAwQTdGNkM0
RDU4QzM4NjdGOUNFRDdFN0Q0NkRDRUQwQTU3ODA0LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMDEwMEE3RjZDNEQ1OEMzODY3RjlDRUQ3RTdENDZEQ0VEMEE1
NzgwNC5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzE0ODg1NTI1LWNiMGYtNDZhMC04
MjUzLTA0MmQ3ZDdhZmYzOC8wLzMxMzAzMzJlMzMzNTJlMzEzNTMyMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzkzMzM0MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnI5gwDQYJKoZIhvcN
AQELBQADggEBACk7Z8qbIWxwY4yJYk5rgtOnaJ1z90TfDDKj0hdI7IlA6KYZdeLg
U6wsqILvH/eQDq6WQkbf1y60uJZyYloDh8RWn789g8M35DQ9ZnGBpGpyo2rkHNuG
kWd/wIvf44YUUC7I8Y2DnyA01BS7q0Kkd16yceuN9i6Qp6rfzl3pvWMM1n7RDhhr
B6Vg9ZpU6Ppe15pQDuBbOMrJcPk4ipGSdSvoxD84xpwHc38Q5/uQNT3zmRxNYIa0
CT5Xg5/nAbVyJ5BTvS43yhFZsrnAuGEC7aKzG8DcM3ZqhF1qLOlWGNnnrW6F0+oP
pGQZ5waAa7rud9WTNIKMe/RDHk/xIosJasc=
-----END CERTIFICATE-----
Generated at Tue Mar 11 05:05:48 2025 by rpki-client