Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/57cd511f-afff-4fec-8724-d4119f891df2/0/3130332e3136342e35362e302f32332d3233203d3e20313431393033.roa
File:                     3130332e3136342e35362e302f32332d3233203d3e20313431393033.roa (raw, json)
Hash identifier:          lmDaoh03D9rTDqDSAuHtSlsBls3g0dB3bSo5aCMqbVU=
Subject key identifier:   95:B3:43:58:37:29:24:B9:74:09:6E:1C:5B:AC:24:A7:29:95:07:91
Certificate issuer:       /CN=B0B4D0A5FD4E58D80534977B027C8BC68222070F
Certificate serial:       16BD18DFF0CEBF7BDB4CE8953FAEC867D4C423D9
Authority key identifier: B0:B4:D0:A5:FD:4E:58:D8:05:34:97:7B:02:7C:8B:C6:82:22:07:0F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0B4D0A5FD4E58D80534977B027C8BC68222070F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/57cd511f-afff-4fec-8724-d4119f891df2/0/3130332e3136342e35362e302f32332d3233203d3e20313431393033.roa
Signing time:             Fri 28 Mar 2025 10:02:24 +0000
ROA not before:           Fri 28 Mar 2025 09:57:24 +0000
ROA not after:            Fri 27 Mar 2026 10:02:24 +0000
asID:                     141903
IP address blocks:        103.164.56.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/57cd511f-afff-4fec-8724-d4119f891df2/0/B0B4D0A5FD4E58D80534977B027C8BC68222070F.crl
                          rsync://repo-rpki.idnic.net/repo/57cd511f-afff-4fec-8724-d4119f891df2/0/B0B4D0A5FD4E58D80534977B027C8BC68222070F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0B4D0A5FD4E58D80534977B027C8BC68222070F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Apr 2025 17:09:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:bd:18:df:f0:ce:bf:7b:db:4c:e8:95:3f:ae:c8:67:d4:c4:23:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0B4D0A5FD4E58D80534977B027C8BC68222070F
        Validity
            Not Before: Mar 28 09:57:24 2025 GMT
            Not After : Mar 27 10:02:24 2026 GMT
        Subject: CN=95B34358372924B974096E1C5BAC24A729950791
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:72:7a:d4:e3:93:7f:d1:3c:d2:ec:1e:40:dc:
                    0d:a4:37:77:e7:a4:39:27:8b:7e:ee:42:3f:28:84:
                    95:74:05:0c:be:8b:b0:8f:4b:fc:6c:b5:1b:db:6f:
                    de:b1:23:8f:f7:77:d8:c5:68:9f:f0:9e:af:5e:4c:
                    41:e7:7d:c4:a7:e5:e8:05:f7:b0:be:18:98:d7:e6:
                    1c:16:a5:04:db:c3:9b:38:e2:8c:a7:97:0f:4c:64:
                    40:c8:b4:b4:6b:77:a8:24:d6:2c:e7:f4:3c:7f:97:
                    59:52:db:12:85:62:51:86:49:df:3e:7f:7c:74:80:
                    88:aa:76:fc:7b:e0:e5:81:ae:da:00:f5:42:e5:16:
                    58:93:13:99:8c:62:99:68:e2:6f:68:c2:f6:ea:a4:
                    78:93:d8:24:87:7e:76:73:f0:d5:d7:c5:57:65:e1:
                    63:1d:3e:6f:db:c5:b0:e7:cc:14:14:38:83:38:5b:
                    c9:ef:de:85:8f:43:72:17:47:77:f1:f5:ea:5b:b9:
                    7f:1c:c6:a1:8b:2f:5c:5b:d6:1c:a6:cf:64:bc:3c:
                    07:4d:a6:b8:de:b4:bb:d5:55:4e:c1:90:95:c8:b0:
                    bf:2a:4f:c4:d6:ba:cc:46:f2:a5:96:c2:a6:05:50:
                    88:9f:f8:b5:a1:4d:2e:11:04:82:fd:1d:2e:7d:9c:
                    76:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:B3:43:58:37:29:24:B9:74:09:6E:1C:5B:AC:24:A7:29:95:07:91
            X509v3 Authority Key Identifier:
                keyid:B0:B4:D0:A5:FD:4E:58:D8:05:34:97:7B:02:7C:8B:C6:82:22:07:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/57cd511f-afff-4fec-8724-d4119f891df2/0/B0B4D0A5FD4E58D80534977B027C8BC68222070F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0B4D0A5FD4E58D80534977B027C8BC68222070F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/57cd511f-afff-4fec-8724-d4119f891df2/0/3130332e3136342e35362e302f32332d3233203d3e20313431393033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.164.56.0/23

    Signature Algorithm: sha256WithRSAEncryption
         34:d0:84:d2:2f:dc:35:3b:89:d1:21:6e:fa:96:bd:a3:ee:8a:
         c0:4b:4b:0a:37:20:7e:6a:d1:33:4b:f4:a8:91:4f:12:cf:10:
         e7:73:79:ea:c0:ff:83:b2:59:71:5b:af:c4:bd:d4:f2:11:48:
         72:44:62:73:9f:2e:de:54:fe:81:66:e1:e3:87:72:0a:50:c8:
         f7:c0:5b:26:40:5a:48:91:e2:ce:0b:7e:23:d8:59:ca:d4:fe:
         03:f9:05:d6:fb:58:18:a0:89:2f:58:98:83:5d:bb:eb:4c:4f:
         ee:da:df:88:7e:0b:8e:3f:4b:75:80:47:81:50:31:ad:47:33:
         99:c2:ce:4c:3d:e6:87:71:33:e8:4f:05:62:fc:17:4c:5f:16:
         0b:02:76:41:9a:cc:ad:51:d7:97:02:d6:ec:e8:26:93:51:9c:
         0b:99:c0:bf:f0:78:c6:ad:48:45:24:07:33:dd:14:de:7a:a4:
         6c:c3:54:d7:bd:04:ed:48:e5:61:da:47:8f:0e:94:05:ca:36:
         ea:37:5e:67:f1:04:be:56:01:91:f3:ab:e3:61:52:b6:e9:fd:
         52:9e:54:7f:9c:91:82:b1:34:2b:50:0f:4f:25:15:b1:f9:de:
         18:67:21:6f:17:d1:1f:af:68:b4:75:67:81:7d:75:c9:8f:9a:
         81:ff:38:a7
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUFr0Y3/DOv3vbTOiVP67IZ9TEI9kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjBCNEQwQTVGRDRFNThEODA1MzQ5NzdCMDI3QzhCQzY4
MjIyMDcwRjAeFw0yNTAzMjgwOTU3MjRaFw0yNjAzMjcxMDAyMjRaMDMxMTAvBgNV
BAMTKDk1QjM0MzU4MzcyOTI0Qjk3NDA5NkUxQzVCQUMyNEE3Mjk5NTA3OTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUcnrU45N/0TzS7B5A3A2kN3fn
pDkni37uQj8ohJV0BQy+i7CPS/xstRvbb96xI4/3d9jFaJ/wnq9eTEHnfcSn5egF
97C+GJjX5hwWpQTbw5s44oynlw9MZEDItLRrd6gk1izn9Dx/l1lS2xKFYlGGSd8+
f3x0gIiqdvx74OWBrtoA9ULlFliTE5mMYplo4m9owvbqpHiT2CSHfnZz8NXXxVdl
4WMdPm/bxbDnzBQUOIM4W8nv3oWPQ3IXR3fx9epbuX8cxqGLL1xb1hymz2S8PAdN
prjetLvVVU7BkJXIsL8qT8TWusxG8qWWwqYFUIif+LWhTS4RBIL9HS59nHaVAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUlbNDWDcpJLl0CW4cW6wkpymVB5EwHwYDVR0j
BBgwFoAUsLTQpf1OWNgFNJd7AnyLxoIiBw8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81
N2NkNTExZi1hZmZmLTRmZWMtODcyNC1kNDExOWY4OTFkZjIvMC9CMEI0RDBBNUZE
NEU1OEQ4MDUzNDk3N0IwMjdDOEJDNjgyMjIwNzBGLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQjBCNEQwQTVGRDRFNThEODA1MzQ5NzdCMDI3QzhCQzY4MjIy
MDcwRi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzU3Y2Q1MTFmLWFmZmYtNGZlYy04
NzI0LWQ0MTE5Zjg5MWRmMi8wLzMxMzAzMzJlMzEzNjM0MmUzNTM2MmUzMDJmMzIz
MzJkMzIzMzIwM2QzZTIwMzEzNDMxMzkzMDMzLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ6Q4MA0GCSqG
SIb3DQEBCwUAA4IBAQA00ITSL9w1O4nRIW76lr2j7orAS0sKNyB+atEzS/SokU8S
zxDnc3nqwP+DsllxW6/EvdTyEUhyRGJzny7eVP6BZuHjh3IKUMj3wFsmQFpIkeLO
C34j2FnK1P4D+QXW+1gYoIkvWJiDXbvrTE/u2t+IfguOP0t1gEeBUDGtRzOZws5M
PeaHcTPoTwVi/BdMXxYLAnZBmsytUdeXAtbs6CaTUZwLmcC/8HjGrUhFJAcz3RTe
eqRsw1TXvQTtSOVh2kePDpQFyjbqN15n8QS+VgGR86vjYVK26f1SnlR/nJGCsTQr
UA9PJRWx+d4YZyFvF9Efr2i0dWeBfXXJj5qB/zin
-----END CERTIFICATE-----
Generated at Mon Apr 7 09:25:44 2025 by rpki-client