Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/15bf718d-911e-43d6-8e3c-0d1b3646e276/0/3130332e3134342e3235302e302f32332d3234203d3e20313339343335.roa
File:                     3130332e3134342e3235302e302f32332d3234203d3e20313339343335.roa (raw, json)
Hash identifier:          JjtMSSCssV5HqQAouXYm4WHr16DMfc7UE3Z2A9weGck=
Subject key identifier:   06:3D:E3:D5:F4:12:67:AB:AB:C8:D0:52:3D:7B:00:45:60:1A:8D:ED
Certificate issuer:       /CN=94EDA4B2360B47DC65386E3E7EBAE35B997F2A42
Certificate serial:       48D3E897F8CF61A8F9480CBFBCDFAFC12F387650
Authority key identifier: 94:ED:A4:B2:36:0B:47:DC:65:38:6E:3E:7E:BA:E3:5B:99:7F:2A:42
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94EDA4B2360B47DC65386E3E7EBAE35B997F2A42.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/15bf718d-911e-43d6-8e3c-0d1b3646e276/0/3130332e3134342e3235302e302f32332d3234203d3e20313339343335.roa
Signing time:             Mon 02 Jun 2025 02:03:42 +0000
ROA not before:           Mon 02 Jun 2025 01:58:42 +0000
ROA not after:            Mon 01 Jun 2026 02:03:42 +0000
asID:                     139435
IP address blocks:        103.144.250.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/15bf718d-911e-43d6-8e3c-0d1b3646e276/0/94EDA4B2360B47DC65386E3E7EBAE35B997F2A42.crl
                          rsync://repo-rpki.idnic.net/repo/15bf718d-911e-43d6-8e3c-0d1b3646e276/0/94EDA4B2360B47DC65386E3E7EBAE35B997F2A42.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94EDA4B2360B47DC65386E3E7EBAE35B997F2A42.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Jun 2025 01:43:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:d3:e8:97:f8:cf:61:a8:f9:48:0c:bf:bc:df:af:c1:2f:38:76:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94EDA4B2360B47DC65386E3E7EBAE35B997F2A42
        Validity
            Not Before: Jun  2 01:58:42 2025 GMT
            Not After : Jun  1 02:03:42 2026 GMT
        Subject: CN=063DE3D5F41267ABABC8D0523D7B0045601A8DED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:c2:9e:ea:12:85:75:5a:95:73:78:24:46:18:
                    39:1f:10:9b:63:45:b2:ed:22:c5:94:6f:6b:8c:10:
                    fb:a2:9f:9a:2d:b3:75:0e:a9:4c:69:92:c8:bc:3a:
                    5f:d4:d4:95:b0:d5:42:c8:26:8c:01:a5:7b:41:d7:
                    73:b6:e9:eb:93:96:63:ca:4d:f5:d3:f0:5f:2f:d3:
                    eb:b7:8d:5b:de:56:2f:30:ee:53:1f:a6:af:9b:91:
                    34:c6:a0:a4:44:cc:6c:d9:30:dd:a9:67:c2:2b:10:
                    23:df:4c:d6:e2:a2:ca:e5:30:f9:d1:1b:77:92:8c:
                    ac:26:8c:c2:4d:67:68:67:fb:62:2e:8f:78:46:05:
                    f9:a9:ee:b9:dc:61:af:9d:97:36:78:de:9b:39:64:
                    11:89:14:39:36:57:45:45:c9:f6:4c:2a:01:4f:93:
                    f1:dc:04:45:5f:08:b7:82:1c:b6:cb:57:59:a3:ae:
                    79:37:e5:5a:79:90:e8:e1:7f:32:9a:45:7d:d8:42:
                    3b:a3:db:3e:5a:b9:3c:71:35:8d:45:38:68:49:04:
                    97:0c:6c:e5:69:64:a1:0e:0c:1c:3e:ce:cd:04:59:
                    75:d0:18:23:36:38:20:31:6a:f2:40:81:6a:01:fa:
                    78:b6:61:31:a0:c8:b8:03:02:9b:74:27:f3:08:e1:
                    43:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:3D:E3:D5:F4:12:67:AB:AB:C8:D0:52:3D:7B:00:45:60:1A:8D:ED
            X509v3 Authority Key Identifier:
                keyid:94:ED:A4:B2:36:0B:47:DC:65:38:6E:3E:7E:BA:E3:5B:99:7F:2A:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/15bf718d-911e-43d6-8e3c-0d1b3646e276/0/94EDA4B2360B47DC65386E3E7EBAE35B997F2A42.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94EDA4B2360B47DC65386E3E7EBAE35B997F2A42.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/15bf718d-911e-43d6-8e3c-0d1b3646e276/0/3130332e3134342e3235302e302f32332d3234203d3e20313339343335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.144.250.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7d:e5:bb:e3:e1:f4:55:84:c7:27:d5:2f:af:99:fc:f6:b1:7b:
         69:74:66:be:92:a8:b5:b2:7b:a3:48:f4:d7:dd:d4:b6:92:b9:
         e5:69:d2:35:f2:0d:58:b6:39:1e:1d:2b:bc:72:39:18:d5:f7:
         19:c4:c8:a9:8d:b6:0b:2c:81:93:b9:3c:9e:27:53:e1:92:88:
         ee:a5:21:bf:dd:1a:64:99:30:ed:6e:91:e7:f0:57:a2:68:be:
         cf:5f:db:f3:66:11:63:ad:93:c0:cd:b9:4e:9c:16:ad:3d:94:
         d9:16:de:55:1e:3c:3d:c2:18:43:e8:e1:87:93:c4:a2:2a:52:
         2e:4d:7d:1f:41:d7:09:8b:20:ec:40:17:de:ce:60:92:cf:31:
         61:7e:22:bc:13:f6:11:28:c0:ff:fb:7e:a3:cc:db:8d:2b:0a:
         6d:bb:9d:94:6b:4f:28:6f:8d:41:50:d0:30:d8:a2:dc:64:31:
         49:e8:e5:a0:87:a0:5f:16:4b:dd:0e:5d:7f:05:f4:23:31:b9:
         97:13:7a:c4:30:24:6c:69:d1:4a:ba:75:23:31:86:e1:31:de:
         b9:20:66:fa:36:74:48:61:ad:22:3e:e1:a4:9e:b5:53:11:68:
         94:3b:fe:da:e9:89:8a:ce:c8:d3:62:83:6c:da:e6:ac:01:b0:
         b2:d5:9f:be
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUSNPol/jPYaj5SAy/vN+vwS84dlAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTRFREE0QjIzNjBCNDdEQzY1Mzg2RTNFN0VCQUUzNUI5
OTdGMkE0MjAeFw0yNTA2MDIwMTU4NDJaFw0yNjA2MDEwMjAzNDJaMDMxMTAvBgNV
BAMTKDA2M0RFM0Q1RjQxMjY3QUJBQkM4RDA1MjNEN0IwMDQ1NjAxQThERUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD1wp7qEoV1WpVzeCRGGDkfEJtj
RbLtIsWUb2uMEPuin5ots3UOqUxpksi8Ol/U1JWw1ULIJowBpXtB13O26euTlmPK
TfXT8F8v0+u3jVveVi8w7lMfpq+bkTTGoKREzGzZMN2pZ8IrECPfTNbiosrlMPnR
G3eSjKwmjMJNZ2hn+2Iuj3hGBfmp7rncYa+dlzZ43ps5ZBGJFDk2V0VFyfZMKgFP
k/HcBEVfCLeCHLbLV1mjrnk35Vp5kOjhfzKaRX3YQjuj2z5auTxxNY1FOGhJBJcM
bOVpZKEODBw+zs0EWXXQGCM2OCAxavJAgWoB+ni2YTGgyLgDApt0J/MI4UPrAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUBj3j1fQSZ6uryNBSPXsARWAaje0wHwYDVR0j
BBgwFoAUlO2ksjYLR9xlOG4+frrjW5l/KkIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x
NWJmNzE4ZC05MTFlLTQzZDYtOGUzYy0wZDFiMzY0NmUyNzYvMC85NEVEQTRCMjM2
MEI0N0RDNjUzODZFM0U3RUJBRTM1Qjk5N0YyQTQyLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvOTRFREE0QjIzNjBCNDdEQzY1Mzg2RTNFN0VCQUUzNUI5OTdG
MkE0Mi5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzE1YmY3MThkLTkxMWUtNDNkNi04
ZTNjLTBkMWIzNjQ2ZTI3Ni8wLzMxMzAzMzJlMzEzNDM0MmUzMjM1MzAyZTMwMmYz
MjMzMmQzMjM0MjAzZDNlMjAzMTMzMzkzNDMzMzUucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnkPowDQYJ
KoZIhvcNAQELBQADggEBAH3lu+Ph9FWExyfVL6+Z/Paxe2l0Zr6SqLWye6NI9Nfd
1LaSueVp0jXyDVi2OR4dK7xyORjV9xnEyKmNtgssgZO5PJ4nU+GSiO6lIb/dGmSZ
MO1ukefwV6Jovs9f2/NmEWOtk8DNuU6cFq09lNkW3lUePD3CGEPo4YeTxKIqUi5N
fR9B1wmLIOxAF97OYJLPMWF+IrwT9hEowP/7fqPM240rCm27nZRrTyhvjUFQ0DDY
otxkMUno5aCHoF8WS90OXX8F9CMxuZcTesQwJGxp0Uq6dSMxhuEx3rkgZvo2dEhh
rSI+4aSetVMRaJQ7/trpiYrOyNNig2za5qwBsLLVn74=
-----END CERTIFICATE-----
Generated at Sat Jun 7 06:08:00 2025 by rpki-client