Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/3130332e342e3136362e302f32342d3234203d3e203538333639.roa
File:                     3130332e342e3136362e302f32342d3234203d3e203538333639.roa (raw, json)
Hash identifier:          U7P/EKhdM1Bbme0Rz8DRQNTdtBXV7ngaokYEtxi0gds=
Subject key identifier:   41:36:AA:52:28:CD:3E:46:96:05:94:39:5A:14:01:CB:41:4B:D2:53
Certificate issuer:       /CN=A095A9A71806956C905D5CF7CB797843D22D04B8
Certificate serial:       1B77AD712A95D49E614543B6758855DD317F33D1
Authority key identifier: A0:95:A9:A7:18:06:95:6C:90:5D:5C:F7:CB:79:78:43:D2:2D:04:B8
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A095A9A71806956C905D5CF7CB797843D22D04B8.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/3130332e342e3136362e302f32342d3234203d3e203538333639.roa
Signing time:             Mon 02 Jun 2025 02:03:39 +0000
ROA not before:           Mon 02 Jun 2025 01:58:39 +0000
ROA not after:            Mon 01 Jun 2026 02:03:39 +0000
asID:                     58369
IP address blocks:        103.4.166.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/A095A9A71806956C905D5CF7CB797843D22D04B8.crl
                          rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/A095A9A71806956C905D5CF7CB797843D22D04B8.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A095A9A71806956C905D5CF7CB797843D22D04B8.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Jun 2025 13:15:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:77:ad:71:2a:95:d4:9e:61:45:43:b6:75:88:55:dd:31:7f:33:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A095A9A71806956C905D5CF7CB797843D22D04B8
        Validity
            Not Before: Jun  2 01:58:39 2025 GMT
            Not After : Jun  1 02:03:39 2026 GMT
        Subject: CN=4136AA5228CD3E46960594395A1401CB414BD253
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:b7:2f:c1:98:44:a4:8f:b8:89:66:9e:78:67:
                    f0:63:96:b6:5f:e1:c1:d0:df:b3:c5:8b:f0:3f:d4:
                    ab:b1:83:65:4a:fa:12:b4:97:01:f6:b7:c0:6d:d8:
                    da:4c:a3:05:43:b3:1c:c4:aa:43:40:9d:6b:c1:b7:
                    76:f5:e5:bc:c0:60:8c:62:f0:4e:ba:27:30:01:55:
                    e2:16:17:ce:c4:14:7a:5e:03:e1:b1:92:73:11:e3:
                    ab:5f:ce:0e:10:c4:8a:f0:24:d3:2b:ee:8b:91:57:
                    f8:6b:d6:b5:6e:9c:7c:32:0d:49:91:0e:bf:ea:31:
                    88:53:00:6a:a4:74:9c:c9:32:5d:b2:ee:51:0a:62:
                    0f:9b:9f:f5:c2:67:8a:25:fe:b9:c3:f9:35:10:19:
                    fb:d8:e5:87:98:00:de:36:f6:a2:6f:ed:40:25:a9:
                    5e:da:27:91:50:dc:e0:c2:8f:61:f5:62:fb:84:cc:
                    8d:40:03:af:e4:22:ac:84:cb:7a:e4:7f:5e:ef:52:
                    2f:4c:d9:65:e3:73:6a:a6:f4:de:1f:79:1e:45:c8:
                    55:54:15:79:96:b2:e6:e2:41:27:3b:4b:48:b6:4b:
                    0d:a0:96:1e:62:76:8c:04:bf:91:23:1c:44:3a:7a:
                    0f:9c:fa:2f:a0:cd:f3:b7:d9:bf:ba:10:03:d3:9a:
                    65:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:36:AA:52:28:CD:3E:46:96:05:94:39:5A:14:01:CB:41:4B:D2:53
            X509v3 Authority Key Identifier:
                keyid:A0:95:A9:A7:18:06:95:6C:90:5D:5C:F7:CB:79:78:43:D2:2D:04:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/A095A9A71806956C905D5CF7CB797843D22D04B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A095A9A71806956C905D5CF7CB797843D22D04B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/3130332e342e3136362e302f32342d3234203d3e203538333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.4.166.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:c9:d0:45:55:0a:56:31:b8:f1:38:ba:9d:ae:02:56:03:af:
         14:c5:cc:86:a7:39:9d:05:84:bb:cd:e5:23:f4:8d:a6:e5:41:
         f2:99:01:62:af:e0:73:95:f7:0f:d1:d7:02:42:07:30:2a:3d:
         56:67:34:c1:b3:29:fb:d1:8a:41:38:ec:0f:71:ce:14:2a:73:
         57:bb:27:86:20:30:28:ad:e5:4d:3e:05:69:bc:05:70:60:c9:
         1d:e5:ed:18:7a:55:1e:c1:c7:ee:bc:4a:c0:bc:88:4d:ae:32:
         67:a7:21:8f:02:84:74:f9:1f:91:de:f6:2a:03:a9:48:de:2a:
         65:a8:6a:c1:24:3d:7f:53:49:db:fe:1e:fc:71:ca:ab:c4:38:
         43:b1:d8:65:43:25:1c:b5:d9:5b:86:44:a8:20:cd:ac:d0:37:
         82:85:84:fa:62:11:de:a2:fa:de:7d:17:63:fc:8e:44:97:cc:
         45:72:ad:8f:18:34:a6:fd:b0:e8:4d:bc:53:c2:ee:c4:b8:e0:
         a7:45:2e:ea:6d:c3:20:d8:17:09:5d:9f:73:bd:83:61:ee:93:
         e4:be:a8:09:34:24:e5:5c:2a:9b:b4:91:a1:e7:50:1c:b0:b5:
         90:8d:74:f3:bc:39:66:3b:be:54:73:fa:9b:5c:1c:26:43:a7:
         51:84:23:8c
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUG3etcSqV1J5hRUO2dYhV3TF/M9EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTA5NUE5QTcxODA2OTU2QzkwNUQ1Q0Y3Q0I3OTc4NDNE
MjJEMDRCODAeFw0yNTA2MDIwMTU4MzlaFw0yNjA2MDEwMjAzMzlaMDMxMTAvBgNV
BAMTKDQxMzZBQTUyMjhDRDNFNDY5NjA1OTQzOTVBMTQwMUNCNDE0QkQyNTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJty/BmESkj7iJZp54Z/BjlrZf
4cHQ37PFi/A/1Kuxg2VK+hK0lwH2t8Bt2NpMowVDsxzEqkNAnWvBt3b15bzAYIxi
8E66JzABVeIWF87EFHpeA+GxknMR46tfzg4QxIrwJNMr7ouRV/hr1rVunHwyDUmR
Dr/qMYhTAGqkdJzJMl2y7lEKYg+bn/XCZ4ol/rnD+TUQGfvY5YeYAN429qJv7UAl
qV7aJ5FQ3ODCj2H1YvuEzI1AA6/kIqyEy3rkf17vUi9M2WXjc2qm9N4feR5FyFVU
FXmWsubiQSc7S0i2Sw2glh5idowEv5EjHEQ6eg+c+i+gzfO32b+6EAPTmmU9AgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQUQTaqUijNPkaWBZQ5WhQBy0FL0lMwHwYDVR0j
BBgwFoAUoJWppxgGlWyQXVz3y3l4Q9ItBLgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x
NmE4MTE4Mi03Y2ViLTQ2NWMtYTViNS1hMTRlYzczOWJmOTkvMC9BMDk1QTlBNzE4
MDY5NTZDOTA1RDVDRjdDQjc5Nzg0M0QyMkQwNEI4LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQTA5NUE5QTcxODA2OTU2QzkwNUQ1Q0Y3Q0I3OTc4NDNEMjJE
MDRCOC5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzE2YTgxMTgyLTdjZWItNDY1Yy1h
NWI1LWExNGVjNzM5YmY5OS8wLzMxMzAzMzJlMzQyZTMxMzYzNjJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDM1MzgzMzM2Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnBKYwDQYJKoZIhvcN
AQELBQADggEBABHJ0EVVClYxuPE4up2uAlYDrxTFzIanOZ0FhLvN5SP0jablQfKZ
AWKv4HOV9w/R1wJCBzAqPVZnNMGzKfvRikE47A9xzhQqc1e7J4YgMCit5U0+BWm8
BXBgyR3l7Rh6VR7Bx+68SsC8iE2uMmenIY8ChHT5H5He9ioDqUjeKmWoasEkPX9T
Sdv+HvxxyqvEOEOx2GVDJRy12VuGRKggzazQN4KFhPpiEd6i+t59F2P8jkSXzEVy
rY8YNKb9sOhNvFPC7sS44KdFLuptwyDYFwldn3O9g2Huk+S+qAk0JOVcKpu0kaHn
UBywtZCNdPO8OWY7vlRz+ptcHCZDp1GEI4w=
-----END CERTIFICATE-----
Generated at Thu Jun 5 18:12:52 2025 by rpki-client