Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/3130332e33312e3133322e302f32332d3233203d3e20313331373439.roa
File:                     3130332e33312e3133322e302f32332d3233203d3e20313331373439.roa (raw, json)
Hash identifier:          Hah38SlTgCkIbLHq1q3uLH0RNUqGa3DsQKagbnlKgEg=
Subject key identifier:   ED:A1:6F:D8:6A:90:0C:C6:D3:97:59:AE:FC:F9:70:09:04:20:3E:20
Certificate issuer:       /CN=10FE35B040E8A3D05E5BE9BEE4F0A636952246FF
Certificate serial:       555E96FA09F759DDB3F02A4B3E21E778061B0971
Authority key identifier: 10:FE:35:B0:40:E8:A3:D0:5E:5B:E9:BE:E4:F0:A6:36:95:22:46:FF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/3130332e33312e3133322e302f32332d3233203d3e20313331373439.roa
Signing time:             Mon 02 Jun 2025 01:02:42 +0000
ROA not before:           Mon 02 Jun 2025 00:57:42 +0000
ROA not after:            Mon 01 Jun 2026 01:02:42 +0000
asID:                     131749
IP address blocks:        103.31.132.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.crl
                          rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Jun 2025 10:05:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:5e:96:fa:09:f7:59:dd:b3:f0:2a:4b:3e:21:e7:78:06:1b:09:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10FE35B040E8A3D05E5BE9BEE4F0A636952246FF
        Validity
            Not Before: Jun  2 00:57:42 2025 GMT
            Not After : Jun  1 01:02:42 2026 GMT
        Subject: CN=EDA16FD86A900CC6D39759AEFCF9700904203E20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:9b:2a:a9:69:60:7f:cf:85:db:72:ff:c8:ef:
                    a0:a9:89:5c:41:15:6d:66:6a:40:ea:41:f5:a3:2c:
                    90:90:35:01:5a:5e:42:d6:28:d8:65:e9:7b:ff:8b:
                    2f:5a:a3:ab:6e:5b:5e:a5:94:d1:a5:6e:8f:47:a6:
                    8a:30:38:4d:03:9d:ec:47:89:4d:89:a9:45:fc:00:
                    21:22:99:6f:a5:d4:5e:78:75:9c:e6:1a:95:70:f5:
                    5d:07:f6:2c:d1:99:26:c8:d0:bd:39:a1:be:2b:e7:
                    10:19:27:d6:ab:c4:2b:a9:10:81:8a:fc:a0:2d:34:
                    6f:73:2e:42:ea:2a:eb:8f:55:60:98:85:2c:33:4a:
                    fb:6b:a0:fc:9f:dc:ec:f9:1a:60:cd:58:e7:f0:99:
                    d9:c2:76:27:c7:46:9a:80:24:35:93:24:a7:8f:28:
                    0d:b0:af:78:b9:0a:44:3e:2e:c1:ba:f6:58:d5:f7:
                    07:37:46:76:1b:3f:a7:78:8b:75:5f:83:28:97:f5:
                    cd:8a:ae:5f:fc:72:52:bb:1a:b6:d5:1d:3c:b2:35:
                    01:c8:af:67:1a:1e:06:e9:61:c9:bb:fb:2c:7c:60:
                    a5:6c:4b:bf:ec:a3:9a:1d:6e:de:00:3c:33:8c:3b:
                    c6:f9:3f:51:d2:b2:23:f6:d8:54:a8:9f:8f:97:0d:
                    6c:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:A1:6F:D8:6A:90:0C:C6:D3:97:59:AE:FC:F9:70:09:04:20:3E:20
            X509v3 Authority Key Identifier:
                keyid:10:FE:35:B0:40:E8:A3:D0:5E:5B:E9:BE:E4:F0:A6:36:95:22:46:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/3130332e33312e3133322e302f32332d3233203d3e20313331373439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.31.132.0/23

    Signature Algorithm: sha256WithRSAEncryption
         78:13:00:c5:fd:a6:c3:76:fe:d2:9b:d8:4a:ee:da:b3:78:34:
         5c:86:3c:17:6d:74:fd:7e:a7:52:3a:74:ab:6e:77:80:c8:b9:
         53:83:99:b2:80:85:02:da:76:3e:5a:dc:12:33:c3:32:32:7a:
         f7:9a:dc:a3:54:4f:29:c0:d7:f5:7b:ef:48:dd:4a:e6:a0:a2:
         66:6b:84:58:0d:f6:df:3c:fb:50:37:f3:c4:cd:cd:4a:f8:38:
         c7:5a:23:29:d3:19:ef:83:f1:25:64:29:73:f6:65:09:59:4c:
         c6:4c:c8:68:bf:f2:38:ec:19:a1:51:ec:00:71:88:e6:51:e3:
         d9:e9:06:26:93:71:62:9f:a5:04:89:31:8c:c3:6a:90:6b:c8:
         10:31:f8:de:01:35:b3:cd:68:58:98:56:bc:d5:fc:f5:b6:10:
         85:29:20:ca:32:a4:e8:09:33:80:9d:6a:50:76:85:27:53:34:
         fd:d7:48:15:38:07:a6:21:28:6b:c0:93:f3:dc:71:13:8e:8a:
         3c:6f:1b:7f:66:5a:f0:01:b0:e9:3f:c0:04:32:0b:15:9f:7b:
         99:d5:1d:3f:de:98:09:b1:61:b3:90:01:07:b7:bf:2e:7d:5a:
         11:70:f1:5d:fa:f2:88:3d:7a:6d:2b:e4:c5:39:6c:c6:ae:c4:
         67:0d:94:21
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUVV6W+gn3Wd2z8CpLPiHneAYbCXEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTBGRTM1QjA0MEU4QTNEMDVFNUJFOUJFRTRGMEE2MzY5
NTIyNDZGRjAeFw0yNTA2MDIwMDU3NDJaFw0yNjA2MDEwMTAyNDJaMDMxMTAvBgNV
BAMTKEVEQTE2RkQ4NkE5MDBDQzZEMzk3NTlBRUZDRjk3MDA5MDQyMDNFMjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClmyqpaWB/z4Xbcv/I76CpiVxB
FW1makDqQfWjLJCQNQFaXkLWKNhl6Xv/iy9ao6tuW16llNGlbo9HpoowOE0DnexH
iU2JqUX8ACEimW+l1F54dZzmGpVw9V0H9izRmSbI0L05ob4r5xAZJ9arxCupEIGK
/KAtNG9zLkLqKuuPVWCYhSwzSvtroPyf3Oz5GmDNWOfwmdnCdifHRpqAJDWTJKeP
KA2wr3i5CkQ+LsG69ljV9wc3RnYbP6d4i3VfgyiX9c2Krl/8clK7GrbVHTyyNQHI
r2caHgbpYcm7+yx8YKVsS7/so5odbt4APDOMO8b5P1HSsiP22FSon4+XDWzbAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQU7aFv2GqQDMbTl1mu/PlwCQQgPiAwHwYDVR0j
BBgwFoAUEP41sEDoo9BeW+m+5PCmNpUiRv8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z
MDBmNGYzNy1jN2ZiLTQ3ZDAtOGE4NS1lY2ZkMTJiOTE1ZjUvMC8xMEZFMzVCMDQw
RThBM0QwNUU1QkU5QkVFNEYwQTYzNjk1MjI0NkZGLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMTBGRTM1QjA0MEU4QTNEMDVFNUJFOUJFRTRGMEE2MzY5NTIy
NDZGRi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzMwMGY0ZjM3LWM3ZmItNDdkMC04
YTg1LWVjZmQxMmI5MTVmNS8wLzMxMzAzMzJlMzMzMTJlMzEzMzMyMmUzMDJmMzIz
MzJkMzIzMzIwM2QzZTIwMzEzMzMxMzczNDM5LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZx+EMA0GCSqG
SIb3DQEBCwUAA4IBAQB4EwDF/abDdv7Sm9hK7tqzeDRchjwXbXT9fqdSOnSrbneA
yLlTg5mygIUC2nY+WtwSM8MyMnr3mtyjVE8pwNf1e+9I3UrmoKJma4RYDfbfPPtQ
N/PEzc1K+DjHWiMp0xnvg/ElZClz9mUJWUzGTMhov/I47BmhUewAcYjmUePZ6QYm
k3Fin6UEiTGMw2qQa8gQMfjeATWzzWhYmFa81fz1thCFKSDKMqToCTOAnWpQdoUn
UzT910gVOAemIShrwJPz3HETjoo8bxt/ZlrwAbDpP8AEMgsVn3uZ1R0/3pgJsWGz
kAEHt78ufVoRcPFd+vKIPXptK+TFOWzGrsRnDZQh
-----END CERTIFICATE-----
Generated at Thu Jun 5 18:16:09 2025 by rpki-client