Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/6aac3562-d549-43ce-851f-fe924727f918/0/3130332e3134362e33302e302f32332d3234203d3e203634333135.roa
File:                     3130332e3134362e33302e302f32332d3234203d3e203634333135.roa (raw, json)
Hash identifier:          /239pszFQR401waeO1nbymytBG2YD4EpQ6fMJcBK450=
Subject key identifier:   61:7D:77:E8:89:FB:85:34:32:D7:17:23:A7:5B:96:38:9C:28:8E:51
Certificate issuer:       /CN=490A06B20F6192568F1FE75F8A39FCE7E2AC87F5
Certificate serial:       331900CDA86C88AA6791939CA4865723905FF7C6
Authority key identifier: 49:0A:06:B2:0F:61:92:56:8F:1F:E7:5F:8A:39:FC:E7:E2:AC:87:F5
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6aac3562-d549-43ce-851f-fe924727f918/0/3130332e3134362e33302e302f32332d3234203d3e203634333135.roa
Signing time:             Mon 02 Jun 2025 02:04:22 +0000
ROA not before:           Mon 02 Jun 2025 01:59:22 +0000
ROA not after:            Mon 01 Jun 2026 02:04:22 +0000
asID:                     64315
IP address blocks:        103.146.30.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/6aac3562-d549-43ce-851f-fe924727f918/0/490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.crl
                          rsync://repo-rpki.idnic.net/repo/6aac3562-d549-43ce-851f-fe924727f918/0/490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Jun 2025 09:16:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:19:00:cd:a8:6c:88:aa:67:91:93:9c:a4:86:57:23:90:5f:f7:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490A06B20F6192568F1FE75F8A39FCE7E2AC87F5
        Validity
            Not Before: Jun  2 01:59:22 2025 GMT
            Not After : Jun  1 02:04:22 2026 GMT
        Subject: CN=617D77E889FB853432D71723A75B96389C288E51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e6:93:ab:c3:d5:25:bb:c2:a3:c4:17:6f:da:
                    06:af:a4:1a:a0:42:b3:bf:ee:4d:24:26:a6:e9:a6:
                    b5:c0:97:a5:b4:a3:03:40:8a:db:e9:8a:1d:2f:d1:
                    f8:5f:c4:fc:7f:56:81:d2:b2:1b:90:8e:3a:2e:0b:
                    a9:e3:c0:ae:05:70:1a:a8:1f:23:2c:76:70:5f:51:
                    8e:c5:ec:a3:aa:da:ef:31:03:5c:67:e7:f6:fa:2b:
                    be:c6:35:bc:4d:30:d5:f3:0e:38:7a:2e:6e:65:fb:
                    e7:ba:af:eb:13:cf:19:49:c2:45:5e:67:54:a2:04:
                    cb:20:28:c1:bb:0f:5b:c9:91:4f:f0:be:e1:29:5d:
                    be:32:b5:28:8b:05:a2:02:a5:08:ee:cc:c8:c9:31:
                    1c:6e:37:49:7a:a6:ad:18:f8:85:28:01:cb:1a:9e:
                    7a:75:43:50:b7:59:97:0d:f8:2f:9a:a3:67:86:3d:
                    5e:cd:0a:54:ed:59:7d:75:61:52:25:0a:4c:67:39:
                    29:51:21:4e:ee:bf:dc:2b:11:0e:17:57:38:f1:4b:
                    88:99:16:a6:27:55:73:04:ef:a0:13:d3:ed:d7:2f:
                    0f:de:1c:52:1b:03:10:7a:07:ca:8b:b6:49:b9:35:
                    22:55:5e:47:2b:6a:65:c6:3a:b3:2a:9b:8e:ce:c5:
                    29:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:7D:77:E8:89:FB:85:34:32:D7:17:23:A7:5B:96:38:9C:28:8E:51
            X509v3 Authority Key Identifier:
                keyid:49:0A:06:B2:0F:61:92:56:8F:1F:E7:5F:8A:39:FC:E7:E2:AC:87:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6aac3562-d549-43ce-851f-fe924727f918/0/490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6aac3562-d549-43ce-851f-fe924727f918/0/3130332e3134362e33302e302f32332d3234203d3e203634333135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.146.30.0/23

    Signature Algorithm: sha256WithRSAEncryption
         65:57:de:c2:06:4c:2a:76:37:16:67:96:b5:ff:58:8a:cd:4d:
         69:b2:e9:d1:bb:38:fe:e2:58:53:77:6a:33:12:c0:6b:06:cd:
         fd:77:e3:9d:36:ca:b1:b3:f6:ff:b2:fc:e4:9f:33:89:88:78:
         3b:ee:c8:3f:6c:5e:68:49:f4:c9:b3:79:a0:01:cb:ab:49:85:
         d0:2b:4f:83:60:ef:8e:fa:b6:cb:2f:fc:40:66:77:ff:f6:5c:
         27:bf:d1:2f:52:bc:20:6f:92:25:0a:d6:ae:a8:2f:2d:f5:b6:
         72:63:ed:eb:db:dd:ba:2b:65:ed:bf:ef:e5:36:84:77:69:63:
         a6:d2:5d:c0:89:97:ae:42:26:4d:8a:d9:24:41:d9:fd:56:25:
         d3:25:20:02:65:23:ac:84:74:69:4f:f1:39:ac:11:cd:73:a2:
         66:93:e8:f9:0f:2b:e3:39:c4:af:15:d8:42:64:20:e7:6f:78:
         e5:e4:e1:b5:3d:3c:5f:fd:be:e3:a1:20:a2:12:7a:b7:69:46:
         85:41:da:4e:a4:27:6b:21:6a:53:93:5b:a9:4e:37:90:05:1c:
         e2:19:4b:af:c3:74:45:12:d9:3a:37:7a:7b:e5:93:a1:ff:c4:
         3c:cc:00:23:d1:dd:f0:79:ba:f7:46:83:74:35:fb:a3:81:bd:
         92:3a:5c:1d
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUMxkAzahsiKpnkZOcpIZXI5Bf98YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDkwQTA2QjIwRjYxOTI1NjhGMUZFNzVGOEEzOUZDRTdF
MkFDODdGNTAeFw0yNTA2MDIwMTU5MjJaFw0yNjA2MDEwMjA0MjJaMDMxMTAvBgNV
BAMTKDYxN0Q3N0U4ODlGQjg1MzQzMkQ3MTcyM0E3NUI5NjM4OUMyODhFNTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC55pOrw9Ulu8KjxBdv2gavpBqg
QrO/7k0kJqbpprXAl6W0owNAitvpih0v0fhfxPx/VoHSshuQjjouC6njwK4FcBqo
HyMsdnBfUY7F7KOq2u8xA1xn5/b6K77GNbxNMNXzDjh6Lm5l++e6r+sTzxlJwkVe
Z1SiBMsgKMG7D1vJkU/wvuEpXb4ytSiLBaICpQjuzMjJMRxuN0l6pq0Y+IUoAcsa
nnp1Q1C3WZcN+C+ao2eGPV7NClTtWX11YVIlCkxnOSlRIU7uv9wrEQ4XVzjxS4iZ
FqYnVXME76AT0+3XLw/eHFIbAxB6B8qLtkm5NSJVXkcramXGOrMqm47OxSltAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUYX136In7hTQy1xcjp1uWOJwojlEwHwYDVR0j
BBgwFoAUSQoGsg9hklaPH+dfijn85+Ksh/UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82
YWFjMzU2Mi1kNTQ5LTQzY2UtODUxZi1mZTkyNDcyN2Y5MTgvMC80OTBBMDZCMjBG
NjE5MjU2OEYxRkU3NUY4QTM5RkNFN0UyQUM4N0Y1LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNDkwQTA2QjIwRjYxOTI1NjhGMUZFNzVGOEEzOUZDRTdFMkFD
ODdGNS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzZhYWMzNTYyLWQ1NDktNDNjZS04
NTFmLWZlOTI0NzI3ZjkxOC8wLzMxMzAzMzJlMzEzNDM2MmUzMzMwMmUzMDJmMzIz
MzJkMzIzNDIwM2QzZTIwMzYzNDMzMzEzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAWeSHjANBgkqhkiG
9w0BAQsFAAOCAQEAZVfewgZMKnY3FmeWtf9Yis1NabLp0bs4/uJYU3dqMxLAawbN
/XfjnTbKsbP2/7L85J8ziYh4O+7IP2xeaEn0ybN5oAHLq0mF0CtPg2Dvjvq2yy/8
QGZ3//ZcJ7/RL1K8IG+SJQrWrqgvLfW2cmPt69vduitl7b/v5TaEd2ljptJdwImX
rkImTYrZJEHZ/VYl0yUgAmUjrIR0aU/xOawRzXOiZpPo+Q8r4znErxXYQmQg5294
5eThtT08X/2+46EgohJ6t2lGhUHaTqQnayFqU5NbqU43kAUc4hlLr8N0RRLZOjd6
e+WTof/EPMwAI9Hd8Hm690aDdDX7o4G9kjpcHQ==
-----END CERTIFICATE-----
Generated at Fri Jun 6 17:14:29 2025 by rpki-client