Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/64833074-330e-4aaa-8c00-040890a71a11/0/3130332e31392e3230382e302f32322d3234203d3e203435323934.roa
File:                     3130332e31392e3230382e302f32322d3234203d3e203435323934.roa (raw, json)
Hash identifier:          71g17R0P09F8qrxe26WyVipN7k+nUXzMu0u7MqFMMYI=
Subject key identifier:   F2:D2:68:8A:06:F4:6D:7B:7B:A0:80:24:91:36:C4:D8:C0:51:41:20
Certificate issuer:       /CN=662AD5930EC54A484925409FC2E9C8D5C6E618E2
Certificate serial:       579CD4A3A90F4EEDAFF3AF1B6A3E42D931645FB3
Authority key identifier: 66:2A:D5:93:0E:C5:4A:48:49:25:40:9F:C2:E9:C8:D5:C6:E6:18:E2
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/662AD5930EC54A484925409FC2E9C8D5C6E618E2.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/64833074-330e-4aaa-8c00-040890a71a11/0/3130332e31392e3230382e302f32322d3234203d3e203435323934.roa
Signing time:             Mon 02 Jun 2025 02:05:11 +0000
ROA not before:           Mon 02 Jun 2025 02:00:11 +0000
ROA not after:            Mon 01 Jun 2026 02:05:11 +0000
asID:                     45294
IP address blocks:        103.19.208.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/64833074-330e-4aaa-8c00-040890a71a11/0/662AD5930EC54A484925409FC2E9C8D5C6E618E2.crl
                          rsync://repo-rpki.idnic.net/repo/64833074-330e-4aaa-8c00-040890a71a11/0/662AD5930EC54A484925409FC2E9C8D5C6E618E2.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/662AD5930EC54A484925409FC2E9C8D5C6E618E2.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Jun 2025 01:37:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:9c:d4:a3:a9:0f:4e:ed:af:f3:af:1b:6a:3e:42:d9:31:64:5f:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=662AD5930EC54A484925409FC2E9C8D5C6E618E2
        Validity
            Not Before: Jun  2 02:00:11 2025 GMT
            Not After : Jun  1 02:05:11 2026 GMT
        Subject: CN=F2D2688A06F46D7B7BA080249136C4D8C0514120
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ec:7d:f3:d2:6f:7c:ea:e4:0a:e6:36:62:35:
                    06:cf:38:38:1e:3e:88:14:b3:84:14:f4:37:0f:90:
                    8c:f3:78:db:de:88:1e:95:73:27:0a:61:79:ac:a4:
                    bb:b4:60:1a:81:3d:75:12:bc:c8:61:1d:b8:8a:68:
                    06:00:e6:6d:62:67:96:db:67:ec:84:14:8b:30:c3:
                    67:ba:80:7e:55:5a:72:de:ae:60:8d:37:57:25:ac:
                    a5:b2:f4:0f:0a:02:8a:ca:3a:2f:2d:d3:06:25:06:
                    91:c7:87:cf:d5:70:c5:f2:ee:a4:2b:1a:b5:b5:85:
                    1a:7b:a9:21:dd:5f:5e:76:c9:1d:9d:1f:06:09:d3:
                    bc:00:eb:84:3a:e1:56:b1:55:07:76:60:6e:24:a1:
                    a4:73:62:a6:1b:60:13:6d:70:bc:da:00:b2:45:ef:
                    75:d9:ef:b8:3a:fa:ea:ee:e3:38:42:d7:4c:91:e2:
                    6d:40:ad:96:d6:90:b0:fa:ea:37:ee:a7:b3:e6:d1:
                    36:d3:bc:36:94:b6:55:51:c2:e2:7f:d8:68:75:8a:
                    69:20:11:36:45:4b:d1:df:ea:28:dd:5e:e4:6f:66:
                    fb:2d:37:1d:ca:20:6b:9e:51:42:f5:41:a5:74:42:
                    41:02:45:f4:d7:47:7c:60:94:ad:f4:2e:d5:92:a8:
                    06:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:D2:68:8A:06:F4:6D:7B:7B:A0:80:24:91:36:C4:D8:C0:51:41:20
            X509v3 Authority Key Identifier:
                keyid:66:2A:D5:93:0E:C5:4A:48:49:25:40:9F:C2:E9:C8:D5:C6:E6:18:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/64833074-330e-4aaa-8c00-040890a71a11/0/662AD5930EC54A484925409FC2E9C8D5C6E618E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/662AD5930EC54A484925409FC2E9C8D5C6E618E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/64833074-330e-4aaa-8c00-040890a71a11/0/3130332e31392e3230382e302f32322d3234203d3e203435323934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.19.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         73:c3:f6:be:b7:24:a6:e6:ce:b6:36:67:2e:2f:46:bb:3e:51:
         6c:d0:e3:94:f2:03:89:0c:6e:f2:0d:54:f3:2c:61:33:2d:0e:
         70:3e:24:7e:0d:97:f1:f7:03:c2:25:c9:e6:19:5c:9e:eb:35:
         3c:0d:7c:f2:b3:3d:3a:27:0c:7d:c3:7c:11:b6:a5:df:c6:26:
         5d:88:b6:51:45:e7:bc:a4:43:c7:67:b4:41:56:08:77:38:59:
         c8:f9:9a:7e:6b:8d:86:02:83:8c:e5:ab:6b:e8:c1:85:bc:9a:
         04:80:48:37:ce:f9:d9:61:08:53:ec:3d:52:e9:58:ec:6a:7d:
         ed:91:fb:95:92:21:da:71:7e:34:2c:85:b6:cc:6e:b1:49:9b:
         2e:14:2a:77:48:e4:1f:ed:ee:e1:7a:c6:c6:c5:75:17:94:90:
         de:61:ee:e2:69:b7:9d:ff:05:85:fb:d1:3c:b9:6c:25:0d:f8:
         68:91:05:91:2a:8c:cd:70:62:aa:39:aa:05:e2:49:63:53:9c:
         77:6d:7a:c9:d5:ad:ff:23:05:1c:a7:3f:50:ec:e0:ea:c9:e0:
         0e:9b:c9:86:ae:53:df:39:ed:83:96:0d:25:3e:9e:36:18:6e:
         a1:06:05:f8:2f:70:2f:a3:a7:2a:f4:4f:bd:32:07:ac:f8:52:
         b0:91:1b:9b
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUV5zUo6kPTu2v868baj5C2TFkX7MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjYyQUQ1OTMwRUM1NEE0ODQ5MjU0MDlGQzJFOUM4RDVD
NkU2MThFMjAeFw0yNTA2MDIwMjAwMTFaFw0yNjA2MDEwMjA1MTFaMDMxMTAvBgNV
BAMTKEYyRDI2ODhBMDZGNDZEN0I3QkEwODAyNDkxMzZDNEQ4QzA1MTQxMjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC87H3z0m986uQK5jZiNQbPODge
PogUs4QU9DcPkIzzeNveiB6VcycKYXmspLu0YBqBPXUSvMhhHbiKaAYA5m1iZ5bb
Z+yEFIsww2e6gH5VWnLermCNN1clrKWy9A8KAorKOi8t0wYlBpHHh8/VcMXy7qQr
GrW1hRp7qSHdX152yR2dHwYJ07wA64Q64VaxVQd2YG4koaRzYqYbYBNtcLzaALJF
73XZ77g6+uru4zhC10yR4m1ArZbWkLD66jfup7Pm0TbTvDaUtlVRwuJ/2Gh1imkg
ETZFS9Hf6ijdXuRvZvstNx3KIGueUUL1QaV0QkECRfTXR3xglK30LtWSqAYZAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQU8tJoigb0bXt7oIAkkTbE2MBRQSAwHwYDVR0j
BBgwFoAUZirVkw7FSkhJJUCfwunI1cbmGOIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82
NDgzMzA3NC0zMzBlLTRhYWEtOGMwMC0wNDA4OTBhNzFhMTEvMC82NjJBRDU5MzBF
QzU0QTQ4NDkyNTQwOUZDMkU5QzhENUM2RTYxOEUyLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNjYyQUQ1OTMwRUM1NEE0ODQ5MjU0MDlGQzJFOUM4RDVDNkU2
MThFMi5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzY0ODMzMDc0LTMzMGUtNGFhYS04
YzAwLTA0MDg5MGE3MWExMS8wLzMxMzAzMzJlMzEzOTJlMzIzMDM4MmUzMDJmMzIz
MjJkMzIzNDIwM2QzZTIwMzQzNTMyMzkzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAmcT0DANBgkqhkiG
9w0BAQsFAAOCAQEAc8P2vrckpubOtjZnLi9Guz5RbNDjlPIDiQxu8g1U8yxhMy0O
cD4kfg2X8fcDwiXJ5hlcnus1PA188rM9OicMfcN8Ebal38YmXYi2UUXnvKRDx2e0
QVYIdzhZyPmafmuNhgKDjOWra+jBhbyaBIBIN8752WEIU+w9UulY7Gp97ZH7lZIh
2nF+NCyFtsxusUmbLhQqd0jkH+3u4XrGxsV1F5SQ3mHu4mm3nf8FhfvRPLlsJQ34
aJEFkSqMzXBiqjmqBeJJY1Ocd216ydWt/yMFHKc/UOzg6sngDpvJhq5T3zntg5YN
JT6eNhhuoQYF+C9wL6OnKvRPvTIHrPhSsJEbmw==
-----END CERTIFICATE-----
Generated at Sat Jun 7 12:46:26 2025 by rpki-client