Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/3130332e33312e3235302e302f32342d3234203d3e203538343737.roa
File:                     3130332e33312e3235302e302f32342d3234203d3e203538343737.roa (raw, json)
Hash identifier:          dHAXVvHNWN3lX3SmokQ/UCj86xJ8/z2lq2nv43vYPc0=
Subject key identifier:   42:CE:E3:BD:D6:C4:48:4E:F8:14:46:1F:29:7F:76:82:16:52:71:CB
Certificate issuer:       /CN=10CA1776EFA8AF35292E76AE2B09C23427C191A6
Certificate serial:       56DB4BE9BE0864D435F79F61D23D11816BF506F9
Authority key identifier: 10:CA:17:76:EF:A8:AF:35:29:2E:76:AE:2B:09:C2:34:27:C1:91:A6
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10CA1776EFA8AF35292E76AE2B09C23427C191A6.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/3130332e33312e3235302e302f32342d3234203d3e203538343737.roa
Signing time:             Mon 02 Jun 2025 02:04:29 +0000
ROA not before:           Mon 02 Jun 2025 01:59:29 +0000
ROA not after:            Mon 01 Jun 2026 02:04:29 +0000
asID:                     58477
IP address blocks:        103.31.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/10CA1776EFA8AF35292E76AE2B09C23427C191A6.crl
                          rsync://repo-rpki.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/10CA1776EFA8AF35292E76AE2B09C23427C191A6.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10CA1776EFA8AF35292E76AE2B09C23427C191A6.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Jun 2025 20:25:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:db:4b:e9:be:08:64:d4:35:f7:9f:61:d2:3d:11:81:6b:f5:06:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10CA1776EFA8AF35292E76AE2B09C23427C191A6
        Validity
            Not Before: Jun  2 01:59:29 2025 GMT
            Not After : Jun  1 02:04:29 2026 GMT
        Subject: CN=42CEE3BDD6C4484EF814461F297F7682165271CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:f4:c7:93:61:7f:43:24:9f:9e:4e:bc:8c:aa:
                    df:83:48:a4:7a:1b:5e:7b:14:92:55:b8:11:a5:33:
                    e5:9c:8e:a7:71:33:a7:cc:3b:11:66:6d:b0:26:d8:
                    75:9c:0c:a7:e0:3f:bb:8c:b6:22:91:ad:6a:f7:c5:
                    0a:60:76:aa:2a:1d:d5:e8:60:97:ac:5f:94:71:e9:
                    2c:9d:d3:a5:52:1e:4d:6b:95:ca:8f:f8:f0:8e:4d:
                    4a:30:b9:29:6c:1c:b0:28:07:3d:ee:57:7e:c6:b1:
                    02:fc:17:c4:2c:0e:d9:e1:95:53:bb:93:c5:80:77:
                    1e:d1:37:9a:45:ea:bf:83:fb:fe:c5:59:e1:68:95:
                    5f:71:e6:6e:59:70:ab:68:dc:d4:31:b1:5d:c3:ff:
                    03:7b:b0:db:fe:ea:a4:45:f9:da:79:e2:b5:0c:a9:
                    33:ad:7b:fc:46:bd:b1:5c:35:d8:e3:1b:58:01:3d:
                    03:8b:e6:eb:c4:11:52:fe:5e:6b:a8:b4:8b:8c:39:
                    d1:a4:f5:b7:e1:a5:d8:c8:79:bd:84:7f:7f:92:2f:
                    ff:f7:71:f6:fb:8b:70:97:0d:54:1d:1c:a2:8f:8e:
                    f1:50:75:b8:0a:25:bf:c9:7d:d1:3d:d6:73:24:4e:
                    a9:31:e6:be:c7:34:17:50:20:5c:9d:d3:66:57:b0:
                    3c:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:CE:E3:BD:D6:C4:48:4E:F8:14:46:1F:29:7F:76:82:16:52:71:CB
            X509v3 Authority Key Identifier:
                keyid:10:CA:17:76:EF:A8:AF:35:29:2E:76:AE:2B:09:C2:34:27:C1:91:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/10CA1776EFA8AF35292E76AE2B09C23427C191A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10CA1776EFA8AF35292E76AE2B09C23427C191A6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/3130332e33312e3235302e302f32342d3234203d3e203538343737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.31.250.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:7a:d0:08:aa:15:bc:3a:0f:e0:ed:90:71:b5:73:3f:8e:57:
         b0:a4:4a:e4:e3:c7:32:32:9c:f8:15:1c:43:db:d7:9f:b8:6f:
         13:1f:81:87:83:ed:c3:04:62:25:b7:47:40:cb:40:6c:1d:50:
         df:af:63:45:e7:70:18:a6:06:f6:f5:e5:cc:0b:7f:01:d1:2a:
         eb:a0:9a:03:b4:9d:d8:e7:16:b4:42:f2:cb:4a:d2:1c:c5:89:
         ca:99:c0:3c:ca:fe:ba:68:ef:72:ae:f2:96:b9:d9:88:dd:e2:
         d3:41:f4:58:f5:11:30:b1:55:14:d3:d8:fb:db:d2:b3:4e:47:
         f8:a9:76:96:c8:02:fd:6a:84:5d:13:85:b6:76:5e:45:56:2b:
         d5:98:46:6b:9c:77:df:4b:47:b1:3b:89:75:ac:1c:7d:67:e8:
         0f:f2:44:b6:38:6f:3c:9a:7f:11:f5:e7:4e:80:4c:fc:fa:a7:
         29:3c:43:6a:23:c0:ce:91:d5:d2:3b:53:f6:87:e7:11:03:17:
         c3:46:05:8b:0a:ed:79:99:d0:a2:15:35:5a:55:0e:e4:8c:a3:
         08:2e:5d:5d:9f:34:df:b8:7a:6c:28:1b:f4:30:2e:b4:16:c1:
         6b:62:71:a9:fe:f1:c6:3c:26:a2:2b:20:07:dd:81:57:9c:64:
         ae:53:55:7a
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUVttL6b4IZNQ1959h0j0RgWv1BvkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTBDQTE3NzZFRkE4QUYzNTI5MkU3NkFFMkIwOUMyMzQy
N0MxOTFBNjAeFw0yNTA2MDIwMTU5MjlaFw0yNjA2MDEwMjA0MjlaMDMxMTAvBgNV
BAMTKDQyQ0VFM0JERDZDNDQ4NEVGODE0NDYxRjI5N0Y3NjgyMTY1MjcxQ0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDO9MeTYX9DJJ+eTryMqt+DSKR6
G157FJJVuBGlM+WcjqdxM6fMOxFmbbAm2HWcDKfgP7uMtiKRrWr3xQpgdqoqHdXo
YJesX5Rx6Syd06VSHk1rlcqP+PCOTUowuSlsHLAoBz3uV37GsQL8F8QsDtnhlVO7
k8WAdx7RN5pF6r+D+/7FWeFolV9x5m5ZcKto3NQxsV3D/wN7sNv+6qRF+dp54rUM
qTOte/xGvbFcNdjjG1gBPQOL5uvEEVL+XmuotIuMOdGk9bfhpdjIeb2Ef3+SL//3
cfb7i3CXDVQdHKKPjvFQdbgKJb/JfdE91nMkTqkx5r7HNBdQIFyd02ZXsDyDAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUQs7jvdbESE74FEYfKX92ghZSccswHwYDVR0j
BBgwFoAUEMoXdu+orzUpLnauKwnCNCfBkaYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80
YmM2YWEwMy0xYjRkLTQzOGUtYTlmMy1lZmVhYWU2YjA5MjEvMC8xMENBMTc3NkVG
QThBRjM1MjkyRTc2QUUyQjA5QzIzNDI3QzE5MUE2LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMTBDQTE3NzZFRkE4QUYzNTI5MkU3NkFFMkIwOUMyMzQyN0Mx
OTFBNi5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzRiYzZhYTAzLTFiNGQtNDM4ZS1h
OWYzLWVmZWFhZTZiMDkyMS8wLzMxMzAzMzJlMzMzMTJlMzIzNTMwMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzUzODM0MzczNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGcf+jANBgkqhkiG
9w0BAQsFAAOCAQEAfXrQCKoVvDoP4O2QcbVzP45XsKRK5OPHMjKc+BUcQ9vXn7hv
Ex+Bh4PtwwRiJbdHQMtAbB1Q369jRedwGKYG9vXlzAt/AdEq66CaA7Sd2OcWtELy
y0rSHMWJypnAPMr+umjvcq7ylrnZiN3i00H0WPURMLFVFNPY+9vSs05H+Kl2lsgC
/WqEXROFtnZeRVYr1ZhGa5x330tHsTuJdawcfWfoD/JEtjhvPJp/EfXnToBM/Pqn
KTxDaiPAzpHV0jtT9ofnEQMXw0YFiwrteZnQohU1WlUO5IyjCC5dXZ8037h6bCgb
9DAutBbBa2Jxqf7xxjwmoisgB92BV5xkrlNVeg==
-----END CERTIFICATE-----
Generated at Sat Jun 7 23:09:14 2025 by rpki-client