Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/3130332e3131382e3137342e302f32342d3234203d3e20313532333638.roa
File:                     3130332e3131382e3137342e302f32342d3234203d3e20313532333638.roa (raw, json)
Hash identifier:          rTgQmdFwVK4QH13LPVhNkKRBGW9YevRVeOcoVmRvwXw=
Subject key identifier:   C5:3C:60:D8:87:B1:58:88:AF:2A:05:35:0A:4C:A4:8A:16:45:AC:4A
Certificate issuer:       /CN=DBB18CCF58914524AFB113FE13359CC6B08EFBF3
Certificate serial:       766CE64524338C288DFC1304570379956385643E
Authority key identifier: DB:B1:8C:CF:58:91:45:24:AF:B1:13:FE:13:35:9C:C6:B0:8E:FB:F3
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/3130332e3131382e3137342e302f32342d3234203d3e20313532333638.roa
Signing time:             Thu 20 Feb 2025 12:12:30 +0000
ROA not before:           Thu 20 Feb 2025 12:07:30 +0000
ROA not after:            Thu 19 Feb 2026 12:12:30 +0000
asID:                     152368
IP address blocks:        103.118.174.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.crl
                          rsync://repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Apr 2025 07:43:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:6c:e6:45:24:33:8c:28:8d:fc:13:04:57:03:79:95:63:85:64:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DBB18CCF58914524AFB113FE13359CC6B08EFBF3
        Validity
            Not Before: Feb 20 12:07:30 2025 GMT
            Not After : Feb 19 12:12:30 2026 GMT
        Subject: CN=C53C60D887B15888AF2A05350A4CA48A1645AC4A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:2d:d2:12:2d:8d:92:07:44:fa:1a:ac:a7:29:
                    73:88:84:53:fc:8a:25:22:8e:21:15:3b:70:5f:25:
                    ee:bc:76:36:b4:70:79:73:b2:4c:17:ec:ea:3b:9d:
                    76:53:0c:ef:17:fb:88:40:ae:45:51:2e:53:6b:21:
                    b0:e5:d1:09:f1:93:81:bc:d6:c0:26:15:00:18:fd:
                    0f:69:ba:c2:cf:ae:db:f0:30:55:3b:cf:3c:36:7d:
                    83:26:2c:9c:03:01:e8:e2:6c:2a:36:e8:b5:08:bf:
                    9b:d7:cc:1b:82:76:06:01:dd:cd:81:7e:1f:80:df:
                    c0:18:4d:72:c6:fb:cd:6e:49:da:92:18:9f:4a:5c:
                    8d:c0:4d:8a:93:b9:7e:22:99:4e:93:8a:32:58:66:
                    fa:b1:fe:1a:85:76:ed:84:fb:33:bd:02:47:f2:94:
                    8d:ed:6b:f6:2e:05:4d:9a:4b:63:7a:b2:f5:2f:70:
                    11:16:83:82:a6:d7:d6:ab:9c:99:ea:9d:88:2d:ef:
                    07:68:e7:d3:0e:8e:38:0e:ee:26:bf:35:56:d8:34:
                    8e:1f:e2:33:ec:c1:69:ce:33:67:e5:b2:1d:34:67:
                    35:63:8a:c7:2f:56:dc:e0:7d:5c:20:d4:35:39:0f:
                    df:7c:f0:63:75:a4:27:fd:6c:4e:0c:7e:9b:97:b6:
                    ce:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:3C:60:D8:87:B1:58:88:AF:2A:05:35:0A:4C:A4:8A:16:45:AC:4A
            X509v3 Authority Key Identifier:
                keyid:DB:B1:8C:CF:58:91:45:24:AF:B1:13:FE:13:35:9C:C6:B0:8E:FB:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/3130332e3131382e3137342e302f32342d3234203d3e20313532333638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.118.174.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:49:f9:08:0e:30:bd:e1:f4:fa:d3:2e:35:1a:7e:76:17:24:
         aa:1b:b0:d3:36:45:ee:6d:b4:80:92:62:3a:95:ef:65:7b:05:
         04:6d:d1:31:45:97:ff:c8:b9:1d:02:5c:60:49:f5:c3:46:c3:
         d8:96:d9:a7:7b:23:23:a9:8b:0f:19:bf:bf:5f:e1:b2:3b:91:
         28:5f:5e:57:f5:d8:fc:0c:f2:8c:dd:85:d3:bc:8a:06:fb:53:
         6e:80:59:5d:c9:28:e0:70:c7:ee:3f:fb:d4:fe:bf:99:3f:a2:
         97:3e:fa:c8:98:9b:09:7d:53:38:89:2a:f7:27:fd:4d:3b:79:
         8d:a9:16:ae:fe:f5:d1:a9:80:11:af:1e:25:cf:19:7f:91:73:
         a2:c9:c7:94:a5:06:79:fe:e5:94:49:e5:7c:b3:69:ff:46:82:
         4c:47:ec:ab:76:e0:11:61:d6:af:82:0f:22:e0:77:8a:29:1c:
         d0:74:c6:e1:b3:29:4b:1c:21:70:1d:c4:94:36:41:7e:7b:e3:
         e6:8f:74:d4:25:12:97:d8:ef:92:40:ad:4c:aa:fb:c5:4a:b2:
         7c:64:83:e5:0e:ba:35:2b:fa:be:85:2f:11:86:c4:f5:9a:c3:
         26:1f:e7:86:9b:5f:0f:41:34:6c:33:55:5f:6e:5f:92:6a:c6:
         a9:6b:47:b7
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUdmzmRSQzjCiN/BMEVwN5lWOFZD4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREJCMThDQ0Y1ODkxNDUyNEFGQjExM0ZFMTMzNTlDQzZC
MDhFRkJGMzAeFw0yNTAyMjAxMjA3MzBaFw0yNjAyMTkxMjEyMzBaMDMxMTAvBgNV
BAMTKEM1M0M2MEQ4ODdCMTU4ODhBRjJBMDUzNTBBNENBNDhBMTY0NUFDNEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQLdISLY2SB0T6GqynKXOIhFP8
iiUijiEVO3BfJe68dja0cHlzskwX7Oo7nXZTDO8X+4hArkVRLlNrIbDl0Qnxk4G8
1sAmFQAY/Q9pusLPrtvwMFU7zzw2fYMmLJwDAejibCo26LUIv5vXzBuCdgYB3c2B
fh+A38AYTXLG+81uSdqSGJ9KXI3ATYqTuX4imU6TijJYZvqx/hqFdu2E+zO9Akfy
lI3ta/YuBU2aS2N6svUvcBEWg4Km19arnJnqnYgt7wdo59MOjjgO7ia/NVbYNI4f
4jPswWnOM2flsh00ZzVjiscvVtzgfVwg1DU5D9988GN1pCf9bE4MfpuXts6hAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUxTxg2IexWIivKgU1CkykihZFrEowHwYDVR0j
BBgwFoAU27GMz1iRRSSvsRP+EzWcxrCO+/MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y
N2Q5ZDdjYi02Y2ZiLTRkZTAtOWRhYS1kMjIyYjdhODkwNzIvMC9EQkIxOENDRjU4
OTE0NTI0QUZCMTEzRkUxMzM1OUNDNkIwOEVGQkYzLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvREJCMThDQ0Y1ODkxNDUyNEFGQjExM0ZFMTMzNTlDQzZCMDhF
RkJGMy5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzI3ZDlkN2NiLTZjZmItNGRlMC05
ZGFhLWQyMjJiN2E4OTA3Mi8wLzMxMzAzMzJlMzEzMTM4MmUzMTM3MzQyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTM1MzIzMzM2Mzgucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABndq4wDQYJ
KoZIhvcNAQELBQADggEBADlJ+QgOML3h9PrTLjUafnYXJKobsNM2Re5ttICSYjqV
72V7BQRt0TFFl//IuR0CXGBJ9cNGw9iW2ad7IyOpiw8Zv79f4bI7kShfXlf12PwM
8ozdhdO8igb7U26AWV3JKOBwx+4/+9T+v5k/opc++siYmwl9UziJKvcn/U07eY2p
Fq7+9dGpgBGvHiXPGX+Rc6LJx5SlBnn+5ZRJ5Xyzaf9GgkxH7Kt24BFh1q+CDyLg
d4opHNB0xuGzKUscIXAdxJQ2QX574+aPdNQlEpfY75JArUyq+8VKsnxkg+UOujUr
+r6FLxGGxPWawyYf54abXw9BNGwzVV9uX5JqxqlrR7c=
-----END CERTIFICATE-----
Generated at Sun Apr 6 11:46:56 2025 by rpki-client