Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/388329ca-e8f7-4d3d-ace4-807f8aa58ae0/0/3130332e3233342e31382e302f32332d3233203d3e20313531353036.roa
File:                     3130332e3233342e31382e302f32332d3233203d3e20313531353036.roa (raw, json)
Hash identifier:          WfEJ9vF4jc0Zx7Acd4sKIoyTrc+nMSAchl082ejeiOg=
Subject key identifier:   5E:88:42:BE:7D:4C:34:C2:68:83:90:5E:44:D7:84:A1:8C:91:8A:56
Certificate issuer:       /CN=7365D5B1AE30C5B6450AFDDE98BA231F962A6C26
Certificate serial:       5BE0A3E0695C57FE1F2F2367D8A6864E0C08D498
Authority key identifier: 73:65:D5:B1:AE:30:C5:B6:45:0A:FD:DE:98:BA:23:1F:96:2A:6C:26
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7365D5B1AE30C5B6450AFDDE98BA231F962A6C26.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/388329ca-e8f7-4d3d-ace4-807f8aa58ae0/0/3130332e3233342e31382e302f32332d3233203d3e20313531353036.roa
Signing time:             Fri 06 Jun 2025 07:00:37 +0000
ROA not before:           Fri 06 Jun 2025 06:55:37 +0000
ROA not after:            Fri 05 Jun 2026 07:00:37 +0000
asID:                     151506
IP address blocks:        103.234.18.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/388329ca-e8f7-4d3d-ace4-807f8aa58ae0/0/7365D5B1AE30C5B6450AFDDE98BA231F962A6C26.crl
                          rsync://repo-rpki.idnic.net/repo/388329ca-e8f7-4d3d-ace4-807f8aa58ae0/0/7365D5B1AE30C5B6450AFDDE98BA231F962A6C26.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7365D5B1AE30C5B6450AFDDE98BA231F962A6C26.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Jun 2025 15:58:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:e0:a3:e0:69:5c:57:fe:1f:2f:23:67:d8:a6:86:4e:0c:08:d4:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7365D5B1AE30C5B6450AFDDE98BA231F962A6C26
        Validity
            Not Before: Jun  6 06:55:37 2025 GMT
            Not After : Jun  5 07:00:37 2026 GMT
        Subject: CN=5E8842BE7D4C34C26883905E44D784A18C918A56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:c0:69:64:29:c8:18:23:73:f9:81:7d:a7:25:
                    d2:50:97:79:2f:d5:35:c6:1e:ef:70:27:44:58:92:
                    b1:37:dc:e7:c5:2b:65:6e:60:eb:0c:a8:45:52:34:
                    61:01:0e:b5:ba:92:05:ed:94:20:6c:19:ad:7a:e3:
                    21:6d:8c:fc:a8:61:71:a2:0d:0d:7c:2b:ce:31:79:
                    9f:47:0b:29:be:58:d1:64:9a:44:a9:4f:25:86:6b:
                    a7:82:cf:09:30:a9:d9:8c:dc:b8:5c:c7:e2:f3:77:
                    97:3b:e6:4e:e3:21:1e:e7:00:e6:2d:5c:9a:d2:4b:
                    d4:78:4a:22:6e:05:c2:da:9f:77:df:95:2f:78:93:
                    df:59:d4:9f:9e:7c:5c:24:1d:76:69:3b:1d:20:f4:
                    56:b4:79:37:2b:6c:a5:20:4b:47:08:98:05:e9:50:
                    90:98:96:05:42:ba:fa:a2:b2:3b:0f:a5:6e:a3:a9:
                    f0:aa:0a:52:7f:71:45:80:ac:b1:80:f2:0c:ac:67:
                    03:d5:f5:61:c6:8e:4d:8f:15:f8:97:e8:d9:38:79:
                    c2:a3:6b:54:d2:04:32:f3:52:95:a9:6a:ef:49:5a:
                    c2:ce:30:ea:3d:6e:ae:e5:2c:b2:61:75:fb:f3:9c:
                    87:d0:7d:f0:67:80:f6:d2:ff:2c:e6:77:0e:45:7f:
                    b2:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:88:42:BE:7D:4C:34:C2:68:83:90:5E:44:D7:84:A1:8C:91:8A:56
            X509v3 Authority Key Identifier:
                keyid:73:65:D5:B1:AE:30:C5:B6:45:0A:FD:DE:98:BA:23:1F:96:2A:6C:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/388329ca-e8f7-4d3d-ace4-807f8aa58ae0/0/7365D5B1AE30C5B6450AFDDE98BA231F962A6C26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7365D5B1AE30C5B6450AFDDE98BA231F962A6C26.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/388329ca-e8f7-4d3d-ace4-807f8aa58ae0/0/3130332e3233342e31382e302f32332d3233203d3e20313531353036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.234.18.0/23

    Signature Algorithm: sha256WithRSAEncryption
         35:35:4f:5a:dd:93:36:7c:5e:ef:f7:72:c6:a3:b4:89:6d:37:
         09:8f:f5:e7:33:45:e8:a1:b1:c1:1c:b8:02:c4:bc:7f:3a:54:
         d6:55:9b:ea:1f:2e:46:0a:62:f8:c7:b0:1d:e2:f9:12:f7:11:
         9b:17:ec:48:2a:8b:c0:45:e0:5b:4e:90:d3:ea:09:32:1d:7f:
         e5:90:03:6e:20:4e:6f:fd:16:cb:b4:9c:9c:25:ab:1f:81:cf:
         15:85:78:cf:c8:a5:62:38:27:a2:22:84:80:aa:7d:31:86:3d:
         8b:ee:b6:3c:44:fd:95:41:e4:e3:15:79:2f:66:b3:37:06:04:
         89:06:f1:58:dd:45:de:47:da:73:e9:6a:2c:20:a4:dd:87:c0:
         1b:1e:b7:76:b2:00:13:1e:4e:11:e3:24:c8:8c:e8:84:9d:d4:
         90:c3:52:9c:6d:63:85:32:91:8e:44:47:a4:07:74:50:43:56:
         fd:b3:af:ea:14:14:bb:23:e5:1d:3b:03:0b:d7:9b:3a:59:fa:
         bb:c3:e5:e6:16:84:f8:ae:f9:60:d7:2e:d1:ad:10:54:a1:2e:
         ed:4e:60:2d:00:29:21:e1:12:19:f7:1f:ce:33:9d:54:e2:79:
         b6:a3:dd:58:12:db:28:31:31:9d:c7:69:6d:ba:1b:d2:57:c9:
         03:18:b6:d0
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUW+Cj4GlcV/4fLyNn2KaGTgwI1JgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzM2NUQ1QjFBRTMwQzVCNjQ1MEFGRERFOThCQTIzMUY5
NjJBNkMyNjAeFw0yNTA2MDYwNjU1MzdaFw0yNjA2MDUwNzAwMzdaMDMxMTAvBgNV
BAMTKDVFODg0MkJFN0Q0QzM0QzI2ODgzOTA1RTQ0RDc4NEExOEM5MThBNTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGwGlkKcgYI3P5gX2nJdJQl3kv
1TXGHu9wJ0RYkrE33OfFK2VuYOsMqEVSNGEBDrW6kgXtlCBsGa164yFtjPyoYXGi
DQ18K84xeZ9HCym+WNFkmkSpTyWGa6eCzwkwqdmM3Lhcx+Lzd5c75k7jIR7nAOYt
XJrSS9R4SiJuBcLan3fflS94k99Z1J+efFwkHXZpOx0g9Fa0eTcrbKUgS0cImAXp
UJCYlgVCuvqisjsPpW6jqfCqClJ/cUWArLGA8gysZwPV9WHGjk2PFfiX6Nk4ecKj
a1TSBDLzUpWpau9JWsLOMOo9bq7lLLJhdfvznIfQffBngPbS/yzmdw5Ff7IzAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUXohCvn1MNMJog5BeRNeEoYyRilYwHwYDVR0j
BBgwFoAUc2XVsa4wxbZFCv3emLojH5YqbCYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z
ODgzMjljYS1lOGY3LTRkM2QtYWNlNC04MDdmOGFhNThhZTAvMC83MzY1RDVCMUFF
MzBDNUI2NDUwQUZEREU5OEJBMjMxRjk2MkE2QzI2LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNzM2NUQ1QjFBRTMwQzVCNjQ1MEFGRERFOThCQTIzMUY5NjJB
NkMyNi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzM4ODMyOWNhLWU4ZjctNGQzZC1h
Y2U0LTgwN2Y4YWE1OGFlMC8wLzMxMzAzMzJlMzIzMzM0MmUzMTM4MmUzMDJmMzIz
MzJkMzIzMzIwM2QzZTIwMzEzNTMxMzUzMDM2LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ+oSMA0GCSqG
SIb3DQEBCwUAA4IBAQA1NU9a3ZM2fF7v93LGo7SJbTcJj/XnM0XoobHBHLgCxLx/
OlTWVZvqHy5GCmL4x7Ad4vkS9xGbF+xIKovAReBbTpDT6gkyHX/lkANuIE5v/RbL
tJycJasfgc8VhXjPyKViOCeiIoSAqn0xhj2L7rY8RP2VQeTjFXkvZrM3BgSJBvFY
3UXeR9pz6WosIKTdh8AbHrd2sgATHk4R4yTIjOiEndSQw1KcbWOFMpGOREekB3RQ
Q1b9s6/qFBS7I+UdOwML15s6Wfq7w+XmFoT4rvlg1y7RrRBUoS7tTmAtACkh4RIZ
9x/OM51U4nm2o91YEtsoMTGdx2ltuhvSV8kDGLbQ
-----END CERTIFICATE-----
Generated at Sat Jun 7 19:35:30 2025 by rpki-client