Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/152226ea-5e26-4ea5-a689-4757ad05f952/0/3130332e3134302e33342e302f32342d3234203d3e203538333639.roa
File:                     3130332e3134302e33342e302f32342d3234203d3e203538333639.roa (raw, json)
Hash identifier:          IMuBoeIaFtTPbrQjkn4LdiYuzZclYappfMIzTQ540Q4=
Subject key identifier:   F0:F8:14:E1:28:CC:CA:8D:40:2B:8D:6C:9C:B2:35:32:B1:50:60:D0
Certificate issuer:       /CN=9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312
Certificate serial:       7BC5AD0C717DF2B5E10A2C534B783C0725021206
Authority key identifier: 9F:5E:7C:D1:CF:2E:52:B2:82:C4:03:FC:C0:AF:8B:02:D0:E8:93:12
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/152226ea-5e26-4ea5-a689-4757ad05f952/0/3130332e3134302e33342e302f32342d3234203d3e203538333639.roa
Signing time:             Mon 02 Jun 2025 02:03:33 +0000
ROA not before:           Mon 02 Jun 2025 01:58:33 +0000
ROA not after:            Mon 01 Jun 2026 02:03:33 +0000
asID:                     58369
IP address blocks:        103.140.34.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/152226ea-5e26-4ea5-a689-4757ad05f952/0/9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.crl
                          rsync://repo-rpki.idnic.net/repo/152226ea-5e26-4ea5-a689-4757ad05f952/0/9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Jun 2025 13:02:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:c5:ad:0c:71:7d:f2:b5:e1:0a:2c:53:4b:78:3c:07:25:02:12:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312
        Validity
            Not Before: Jun  2 01:58:33 2025 GMT
            Not After : Jun  1 02:03:33 2026 GMT
        Subject: CN=F0F814E128CCCA8D402B8D6C9CB23532B15060D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:0e:f4:2a:28:da:e0:4b:35:69:c9:de:cf:cf:
                    61:27:b8:78:cc:42:be:81:cd:c4:c0:e9:8f:e6:ce:
                    34:43:c2:8d:46:a3:51:df:63:c4:2b:e1:e5:32:a4:
                    c9:74:9c:a2:f9:ed:2e:8c:f2:86:7d:5b:35:10:bf:
                    26:60:42:0f:b1:0f:14:6c:ad:46:c3:33:e3:3a:b4:
                    96:d2:34:94:dd:eb:40:c4:00:9b:91:fd:7e:74:61:
                    86:8e:47:f2:61:b2:51:47:8f:87:61:bb:e2:b4:7a:
                    2d:32:9e:8c:6d:31:51:2c:ca:b0:7b:d5:79:93:8a:
                    4a:aa:a4:74:33:bc:aa:e0:a7:de:6c:17:dc:02:3a:
                    e9:31:09:89:5b:c7:8b:1f:cd:dc:4a:63:a4:e6:cb:
                    29:51:06:ac:ad:62:c7:2d:f7:cc:67:48:30:81:10:
                    00:48:2a:41:84:7b:86:c6:b5:43:c5:5c:ef:c5:c7:
                    32:12:58:94:6e:23:a8:8e:b3:ac:6e:6d:33:ba:75:
                    2b:25:48:ee:3c:80:fc:3b:aa:c8:07:d2:17:06:30:
                    61:65:26:80:85:d8:90:9d:4a:ec:82:65:c5:96:7c:
                    e1:b0:79:f3:5b:56:13:94:f7:01:19:c3:5e:3f:e8:
                    64:77:53:db:46:9d:76:9a:45:dd:a3:01:ba:5a:fd:
                    af:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:F8:14:E1:28:CC:CA:8D:40:2B:8D:6C:9C:B2:35:32:B1:50:60:D0
            X509v3 Authority Key Identifier:
                keyid:9F:5E:7C:D1:CF:2E:52:B2:82:C4:03:FC:C0:AF:8B:02:D0:E8:93:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/152226ea-5e26-4ea5-a689-4757ad05f952/0/9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/152226ea-5e26-4ea5-a689-4757ad05f952/0/3130332e3134302e33342e302f32342d3234203d3e203538333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.140.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d6:9d:da:b1:52:74:04:ef:68:ae:e0:a8:f6:e7:fd:d9:f4:4e:
         80:1c:0f:57:40:4d:d4:05:7e:21:88:4e:65:39:20:1f:ef:62:
         ec:6e:4c:df:b0:a6:ed:a5:e2:b4:85:87:1b:cb:b9:17:29:2d:
         50:ac:ed:9d:05:88:3e:7b:77:7a:0d:52:5a:92:8e:71:64:02:
         31:eb:12:39:56:2e:6e:f9:a7:85:d7:29:93:40:5c:65:d7:0b:
         69:02:64:00:7e:12:60:bc:73:f2:d8:36:77:c2:04:64:be:e1:
         ed:03:ae:ea:5b:1b:84:ce:79:82:98:0e:7e:c1:31:86:d8:4f:
         2b:11:2c:b9:c8:25:56:3e:90:74:50:71:bf:78:58:13:ef:89:
         a0:cc:9d:a1:32:f7:c9:c6:f1:9a:54:94:30:45:8f:e9:df:dd:
         90:a4:e5:54:0a:d9:5d:23:a6:5a:88:fc:9a:e3:99:63:ec:21:
         32:17:9e:07:7b:f5:41:d3:e5:31:7b:78:02:0e:cd:28:f4:09:
         c3:ad:ee:cf:00:9b:65:5d:b8:33:e6:da:83:a6:c8:8d:a9:84:
         86:a9:22:73:49:4f:ae:f1:82:fd:b0:cf:70:eb:bb:e1:1b:36:
         91:2b:41:13:8d:4f:b6:9d:4e:9f:2f:5d:7a:18:34:72:ed:d5:
         08:e0:92:9b
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUe8WtDHF98rXhCixTS3g8ByUCEgYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUY1RTdDRDFDRjJFNTJCMjgyQzQwM0ZDQzBBRjhCMDJE
MEU4OTMxMjAeFw0yNTA2MDIwMTU4MzNaFw0yNjA2MDEwMjAzMzNaMDMxMTAvBgNV
BAMTKEYwRjgxNEUxMjhDQ0NBOEQ0MDJCOEQ2QzlDQjIzNTMyQjE1MDYwRDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQDvQqKNrgSzVpyd7Pz2EnuHjM
Qr6BzcTA6Y/mzjRDwo1Go1HfY8Qr4eUypMl0nKL57S6M8oZ9WzUQvyZgQg+xDxRs
rUbDM+M6tJbSNJTd60DEAJuR/X50YYaOR/JhslFHj4dhu+K0ei0ynoxtMVEsyrB7
1XmTikqqpHQzvKrgp95sF9wCOukxCYlbx4sfzdxKY6TmyylRBqytYsct98xnSDCB
EABIKkGEe4bGtUPFXO/FxzISWJRuI6iOs6xubTO6dSslSO48gPw7qsgH0hcGMGFl
JoCF2JCdSuyCZcWWfOGwefNbVhOU9wEZw14/6GR3U9tGnXaaRd2jAbpa/a/dAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQU8PgU4SjMyo1AK41snLI1MrFQYNAwHwYDVR0j
BBgwFoAUn1580c8uUrKCxAP8wK+LAtDokxIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x
NTIyMjZlYS01ZTI2LTRlYTUtYTY4OS00NzU3YWQwNWY5NTIvMC85RjVFN0NEMUNG
MkU1MkIyODJDNDAzRkNDMEFGOEIwMkQwRTg5MzEyLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvOUY1RTdDRDFDRjJFNTJCMjgyQzQwM0ZDQzBBRjhCMDJEMEU4
OTMxMi5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzE1MjIyNmVhLTVlMjYtNGVhNS1h
Njg5LTQ3NTdhZDA1Zjk1Mi8wLzMxMzAzMzJlMzEzNDMwMmUzMzM0MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzUzODMzMzYzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGeMIjANBgkqhkiG
9w0BAQsFAAOCAQEA1p3asVJ0BO9oruCo9uf92fROgBwPV0BN1AV+IYhOZTkgH+9i
7G5M37Cm7aXitIWHG8u5FyktUKztnQWIPnt3eg1SWpKOcWQCMesSOVYubvmnhdcp
k0BcZdcLaQJkAH4SYLxz8tg2d8IEZL7h7QOu6lsbhM55gpgOfsExhthPKxEsucgl
Vj6QdFBxv3hYE++JoMydoTL3ycbxmlSUMEWP6d/dkKTlVArZXSOmWoj8muOZY+wh
MheeB3v1QdPlMXt4Ag7NKPQJw63uzwCbZV24M+bag6bIjamEhqkic0lPrvGC/bDP
cOu74Rs2kStBE41Ptp1Ony9dehg0cu3VCOCSmw==
-----END CERTIFICATE-----
Generated at Sat Jun 7 12:26:10 2025 by rpki-client