Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3130332e38302e39352e302f32342d3234203d3e20313439393138.roa
File:                     3130332e38302e39352e302f32342d3234203d3e20313439393138.roa (raw, json)
Hash identifier:          tJwFwjSKjZkZLIFRa2uj1zRoOKcKPoHHlkdrMOJ9TNI=
Subject key identifier:   BD:DB:33:C4:60:BE:CA:82:69:7A:43:8E:08:82:61:D7:81:4E:7B:EB
Certificate issuer:       /CN=F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511
Certificate serial:       4CC970FCB24551F15A3EBA1A5759A272A58F345F
Authority key identifier: F3:99:A1:A0:C1:8F:E8:DB:DA:23:CE:21:75:E0:CB:23:D6:7D:65:11
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3130332e38302e39352e302f32342d3234203d3e20313439393138.roa
Signing time:             Wed 21 May 2025 04:00:00 +0000
ROA not before:           Wed 21 May 2025 03:55:00 +0000
ROA not after:            Wed 20 May 2026 04:00:00 +0000
asID:                     149918
IP address blocks:        103.80.95.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.crl
                          rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Jun 2025 01:12:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:c9:70:fc:b2:45:51:f1:5a:3e:ba:1a:57:59:a2:72:a5:8f:34:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511
        Validity
            Not Before: May 21 03:55:00 2025 GMT
            Not After : May 20 04:00:00 2026 GMT
        Subject: CN=BDDB33C460BECA82697A438E088261D7814E7BEB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:04:ee:fb:0a:91:73:2f:47:7a:d6:cc:f9:38:
                    95:f0:2e:01:a1:3e:ff:bb:d8:12:fd:85:d5:59:07:
                    b4:d6:dd:6d:44:dc:fc:d0:31:6a:87:4e:23:ee:08:
                    2e:f5:b6:da:a2:a7:96:e7:30:46:7d:99:37:a5:4a:
                    f2:50:ac:7f:47:31:36:bb:09:97:8c:0e:47:b3:79:
                    ae:b9:24:d3:ba:47:1e:90:a8:9f:a8:17:15:8b:c9:
                    2f:37:ba:a4:ff:3b:c0:e1:23:71:c1:23:a9:67:e0:
                    d3:b1:77:0b:18:b9:45:99:f0:23:f1:ab:c4:3d:da:
                    7e:4b:89:37:ef:84:eb:c6:25:35:23:7f:3a:f9:c9:
                    08:4f:74:ff:5b:de:eb:0f:20:b0:1e:b9:5b:80:9b:
                    4a:d8:51:db:52:9b:74:05:74:8c:5b:fd:74:5a:85:
                    60:70:79:b3:03:b0:79:08:be:ad:07:6b:c8:a1:40:
                    a0:11:f7:c0:52:22:28:f8:c9:0e:42:18:58:10:91:
                    4f:16:5c:90:77:62:41:5a:74:7b:8e:09:df:97:c4:
                    b4:85:58:1c:61:f2:f4:3a:7c:f4:3e:51:4d:6f:2b:
                    06:29:94:32:66:b4:37:f9:3d:eb:5a:cf:1d:83:9b:
                    ca:c2:2b:49:36:2e:93:04:1c:b6:8e:6d:a6:a2:aa:
                    b1:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:DB:33:C4:60:BE:CA:82:69:7A:43:8E:08:82:61:D7:81:4E:7B:EB
            X509v3 Authority Key Identifier:
                keyid:F3:99:A1:A0:C1:8F:E8:DB:DA:23:CE:21:75:E0:CB:23:D6:7D:65:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3130332e38302e39352e302f32342d3234203d3e20313439393138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.80.95.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:93:b2:e5:74:cc:fd:e3:e3:45:f9:73:38:14:bd:6e:45:de:
         5b:7c:5d:87:d0:eb:46:ec:b0:16:7e:bf:ef:d0:e8:94:08:c7:
         e1:a3:72:c6:25:87:f7:bc:58:0c:5c:fc:09:03:3f:eb:46:f2:
         97:db:3b:94:cb:e0:1f:22:35:33:c9:be:09:1f:62:0c:20:f7:
         e5:e7:67:e2:4f:fb:59:01:7b:e8:40:7e:ab:55:aa:63:49:7d:
         3e:d4:ea:7d:c8:2c:4e:23:45:f5:f6:c7:cf:a9:a2:22:7c:96:
         d5:bf:23:cc:be:c3:9e:5d:26:e5:6f:f1:91:39:91:41:62:32:
         88:19:86:9a:ba:dd:0b:60:2c:a5:c0:ff:5a:cd:e1:e8:ba:a7:
         aa:74:b8:c6:72:d7:36:8a:8f:0e:df:12:ee:84:2b:5a:e4:aa:
         d9:36:21:74:7e:5d:46:a3:97:8c:3b:63:a6:a5:32:eb:a4:db:
         57:28:b3:ff:bd:d0:d3:80:8b:81:d0:3d:f9:02:d2:d8:df:98:
         20:6b:18:5f:14:c1:6b:e4:40:44:cc:28:01:7b:ca:9b:80:e5:
         74:c7:6c:9b:e5:b9:d9:fb:0d:16:da:e8:9b:91:6a:94:4c:c4:
         78:12:7f:f5:dc:c3:5e:d3:cb:da:b8:49:9e:69:e8:4a:d1:48:
         58:55:55:86
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUTMlw/LJFUfFaProaV1micqWPNF8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjM5OUExQTBDMThGRThEQkRBMjNDRTIxNzVFMENCMjNE
NjdENjUxMTAeFw0yNTA1MjEwMzU1MDBaFw0yNjA1MjAwNDAwMDBaMDMxMTAvBgNV
BAMTKEJEREIzM0M0NjBCRUNBODI2OTdBNDM4RTA4ODI2MUQ3ODE0RTdCRUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCBO77CpFzL0d61sz5OJXwLgGh
Pv+72BL9hdVZB7TW3W1E3PzQMWqHTiPuCC71ttqip5bnMEZ9mTelSvJQrH9HMTa7
CZeMDkezea65JNO6Rx6QqJ+oFxWLyS83uqT/O8DhI3HBI6ln4NOxdwsYuUWZ8CPx
q8Q92n5LiTfvhOvGJTUjfzr5yQhPdP9b3usPILAeuVuAm0rYUdtSm3QFdIxb/XRa
hWBwebMDsHkIvq0Ha8ihQKAR98BSIij4yQ5CGFgQkU8WXJB3YkFadHuOCd+XxLSF
WBxh8vQ6fPQ+UU1vKwYplDJmtDf5Petazx2Dm8rCK0k2LpMEHLaObaaiqrHPAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUvdszxGC+yoJpekOOCIJh14FOe+swHwYDVR0j
BBgwFoAU85mhoMGP6NvaI84hdeDLI9Z9ZREwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82
MzVmN2EyZi03MjVlLTQzOTktODY5YS00YjFmY2YyYzZhMGMvMC9GMzk5QTFBMEMx
OEZFOERCREEyM0NFMjE3NUUwQ0IyM0Q2N0Q2NTExLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRjM5OUExQTBDMThGRThEQkRBMjNDRTIxNzVFMENCMjNENjdE
NjUxMS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzYzNWY3YTJmLTcyNWUtNDM5OS04
NjlhLTRiMWZjZjJjNmEwYy8wLzMxMzAzMzJlMzgzMDJlMzkzNTJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDMxMzQzOTM5MzEzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGdQXzANBgkqhkiG
9w0BAQsFAAOCAQEAHZOy5XTM/ePjRflzOBS9bkXeW3xdh9DrRuywFn6/79DolAjH
4aNyxiWH97xYDFz8CQM/60byl9s7lMvgHyI1M8m+CR9iDCD35edn4k/7WQF76EB+
q1WqY0l9PtTqfcgsTiNF9fbHz6miInyW1b8jzL7Dnl0m5W/xkTmRQWIyiBmGmrrd
C2AspcD/Ws3h6LqnqnS4xnLXNoqPDt8S7oQrWuSq2TYhdH5dRqOXjDtjpqUy66Tb
Vyiz/73Q04CLgdA9+QLS2N+YIGsYXxTBa+RARMwoAXvKm4DldMdsm+W52fsNFtro
m5FqlEzEeBJ/9dzDXtPL2rhJnmnoStFIWFVVhg==
-----END CERTIFICATE-----
Generated at Thu Jun 5 18:34:16 2025 by rpki-client