Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/6a071514-e4de-4ace-a0df-f7c4ab8074a5/0/3130332e31372e37362e302f32332d3233203d3e20313331373831.roa
File:                     3130332e31372e37362e302f32332d3233203d3e20313331373831.roa (raw, json)
Hash identifier:          3jZR/32xfuAKeJQ/xf5TVwB85F6YIOYekaTwsoIa1SY=
Subject key identifier:   59:5A:E6:61:89:6A:35:61:38:58:30:48:60:14:BC:C1:18:95:A3:14
Certificate issuer:       /CN=5234A428BC63559E2511B3EFFB085B82B195A8ED
Certificate serial:       73C1A337E37087F77998D2E6C3C09995D90F37B6
Authority key identifier: 52:34:A4:28:BC:63:55:9E:25:11:B3:EF:FB:08:5B:82:B1:95:A8:ED
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5234A428BC63559E2511B3EFFB085B82B195A8ED.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6a071514-e4de-4ace-a0df-f7c4ab8074a5/0/3130332e31372e37362e302f32332d3233203d3e20313331373831.roa
Signing time:             Thu 27 Mar 2025 16:41:57 +0000
ROA not before:           Thu 27 Mar 2025 16:36:57 +0000
ROA not after:            Thu 26 Mar 2026 16:41:57 +0000
asID:                     131781
IP address blocks:        103.17.76.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/6a071514-e4de-4ace-a0df-f7c4ab8074a5/0/5234A428BC63559E2511B3EFFB085B82B195A8ED.crl
                          rsync://repo-rpki.idnic.net/repo/6a071514-e4de-4ace-a0df-f7c4ab8074a5/0/5234A428BC63559E2511B3EFFB085B82B195A8ED.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5234A428BC63559E2511B3EFFB085B82B195A8ED.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 08 Apr 2025 16:26:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:c1:a3:37:e3:70:87:f7:79:98:d2:e6:c3:c0:99:95:d9:0f:37:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5234A428BC63559E2511B3EFFB085B82B195A8ED
        Validity
            Not Before: Mar 27 16:36:57 2025 GMT
            Not After : Mar 26 16:41:57 2026 GMT
        Subject: CN=595AE661896A3561385830486014BCC11895A314
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:91:4c:88:21:d4:1c:6b:5c:e2:64:8a:29:8f:
                    b2:88:72:3a:77:29:11:24:50:df:89:4d:6c:8f:f7:
                    1e:35:5d:3b:eb:66:51:d1:24:02:22:9e:6e:47:d1:
                    ac:e6:5c:78:c3:75:5c:97:0b:f3:c0:c4:55:08:b8:
                    7c:5f:c1:f7:c9:ce:11:3b:75:0d:53:f7:8e:3e:32:
                    05:0c:46:68:ef:ab:a9:e6:14:03:2d:1d:7d:61:dd:
                    e8:80:d2:25:22:2c:4a:b9:2d:36:76:0a:00:e0:d4:
                    0a:03:a7:92:76:06:f0:c3:86:24:50:06:81:e1:c6:
                    8f:04:b1:37:5c:c8:a3:69:1e:6c:94:7c:2d:c0:13:
                    20:18:f2:3d:2d:6e:eb:bc:47:6c:71:4d:e9:2c:f5:
                    d7:eb:f2:98:fd:d5:47:13:87:44:70:56:d0:d6:83:
                    16:b2:41:20:cd:57:dd:e1:59:41:20:0a:34:40:69:
                    06:3e:5a:3c:2d:0a:4c:fd:e4:a7:d6:94:83:d7:bb:
                    8e:13:c8:11:b1:cd:98:24:50:cc:fa:11:58:f5:20:
                    e3:a1:66:2a:0a:7c:65:74:3d:b4:3f:6f:81:06:ad:
                    63:1e:c2:60:0a:71:7a:fe:62:86:72:58:5f:fd:7d:
                    3e:87:f1:b4:22:48:f6:0d:4e:87:fb:75:41:5e:86:
                    56:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:5A:E6:61:89:6A:35:61:38:58:30:48:60:14:BC:C1:18:95:A3:14
            X509v3 Authority Key Identifier:
                keyid:52:34:A4:28:BC:63:55:9E:25:11:B3:EF:FB:08:5B:82:B1:95:A8:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6a071514-e4de-4ace-a0df-f7c4ab8074a5/0/5234A428BC63559E2511B3EFFB085B82B195A8ED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5234A428BC63559E2511B3EFFB085B82B195A8ED.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6a071514-e4de-4ace-a0df-f7c4ab8074a5/0/3130332e31372e37362e302f32332d3233203d3e20313331373831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.17.76.0/23

    Signature Algorithm: sha256WithRSAEncryption
         57:82:50:6a:89:0b:96:05:79:3d:ba:9c:70:8d:8e:4b:53:03:
         3e:8d:4b:ba:43:7f:cb:cf:8c:37:b3:33:a6:d3:93:93:62:99:
         a8:6d:98:eb:a1:52:3b:d5:7d:d9:e3:69:b0:5e:0c:67:f4:a7:
         4d:f0:77:de:78:03:b6:f6:db:97:56:f3:3b:b3:55:a6:65:35:
         8e:c2:6e:cd:f1:d9:c6:a8:86:ce:92:f1:af:2b:0b:47:d3:55:
         06:ac:3e:de:30:49:16:ab:d0:db:36:20:26:94:2b:b3:66:f5:
         8c:28:fa:33:04:bc:df:ba:05:74:21:53:49:7b:d0:d8:6a:84:
         e4:4b:c0:bf:aa:5c:5a:a1:07:98:f5:14:55:7b:ef:83:bd:14:
         bd:05:ad:05:48:99:a2:68:e2:80:e5:a3:7d:24:e0:02:e4:69:
         37:02:24:a7:f5:7e:d9:1a:a4:ae:a2:09:88:5b:f1:74:16:eb:
         8a:a4:ca:3b:06:d8:cc:47:fb:f4:86:86:55:03:7d:84:15:3d:
         bb:c9:a1:39:bd:66:8f:93:d8:f8:10:78:6e:d6:fd:4e:05:4c:
         82:6b:b0:39:59:c3:18:d7:f0:53:5f:5c:d8:68:4b:f2:05:eb:
         07:cc:2c:d5:c1:fa:0b:0e:84:c6:7a:27:bf:89:23:58:b1:b7:
         66:57:2c:52
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUc8GjN+Nwh/d5mNLmw8CZldkPN7YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTIzNEE0MjhCQzYzNTU5RTI1MTFCM0VGRkIwODVCODJC
MTk1QThFRDAeFw0yNTAzMjcxNjM2NTdaFw0yNjAzMjYxNjQxNTdaMDMxMTAvBgNV
BAMTKDU5NUFFNjYxODk2QTM1NjEzODU4MzA0ODYwMTRCQ0MxMTg5NUEzMTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDukUyIIdQca1ziZIopj7KIcjp3
KREkUN+JTWyP9x41XTvrZlHRJAIinm5H0azmXHjDdVyXC/PAxFUIuHxfwffJzhE7
dQ1T944+MgUMRmjvq6nmFAMtHX1h3eiA0iUiLEq5LTZ2CgDg1AoDp5J2BvDDhiRQ
BoHhxo8EsTdcyKNpHmyUfC3AEyAY8j0tbuu8R2xxTeks9dfr8pj91UcTh0RwVtDW
gxayQSDNV93hWUEgCjRAaQY+WjwtCkz95KfWlIPXu44TyBGxzZgkUMz6EVj1IOOh
ZioKfGV0PbQ/b4EGrWMewmAKcXr+YoZyWF/9fT6H8bQiSPYNTof7dUFehlZLAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUWVrmYYlqNWE4WDBIYBS8wRiVoxQwHwYDVR0j
BBgwFoAUUjSkKLxjVZ4lEbPv+whbgrGVqO0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82
YTA3MTUxNC1lNGRlLTRhY2UtYTBkZi1mN2M0YWI4MDc0YTUvMC81MjM0QTQyOEJD
NjM1NTlFMjUxMUIzRUZGQjA4NUI4MkIxOTVBOEVELmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNTIzNEE0MjhCQzYzNTU5RTI1MTFCM0VGRkIwODVCODJCMTk1
QThFRC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzZhMDcxNTE0LWU0ZGUtNGFjZS1h
MGRmLWY3YzRhYjgwNzRhNS8wLzMxMzAzMzJlMzEzNzJlMzczNjJlMzAyZjMyMzMy
ZDMyMzMyMDNkM2UyMDMxMzMzMTM3MzgzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAWcRTDANBgkqhkiG
9w0BAQsFAAOCAQEAV4JQaokLlgV5PbqccI2OS1MDPo1LukN/y8+MN7MzptOTk2KZ
qG2Y66FSO9V92eNpsF4MZ/SnTfB33ngDtvbbl1bzO7NVpmU1jsJuzfHZxqiGzpLx
rysLR9NVBqw+3jBJFqvQ2zYgJpQrs2b1jCj6MwS837oFdCFTSXvQ2GqE5EvAv6pc
WqEHmPUUVXvvg70UvQWtBUiZomjigOWjfSTgAuRpNwIkp/V+2RqkrqIJiFvxdBbr
iqTKOwbYzEf79IaGVQN9hBU9u8mhOb1mj5PY+BB4btb9TgVMgmuwOVnDGNfwU19c
2GhL8gXrB8ws1cH6Cw6Exnonv4kjWLG3ZlcsUg==
-----END CERTIFICATE-----
Generated at Sun Apr 6 13:34:14 2025 by rpki-client