Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/3130332e31382e32382e302f32322d3234203d3e203435373036.roa
File:                     3130332e31382e32382e302f32322d3234203d3e203435373036.roa (raw, json)
Hash identifier:          Og1WIa42Ljyk1coTqcyrLMYu4TjgeM0yBlFnoKhLkxg=
Subject key identifier:   F3:D3:AF:2F:9D:DB:E3:DB:D1:B5:0B:94:21:D2:37:9B:1D:6E:5E:2B
Certificate issuer:       /CN=490B3FBCC6F0FC65785096A153DC87BC5057ACE5
Certificate serial:       200239CBEEAE9D4ACBD36897282558AB08D9D641
Authority key identifier: 49:0B:3F:BC:C6:F0:FC:65:78:50:96:A1:53:DC:87:BC:50:57:AC:E5
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/490B3FBCC6F0FC65785096A153DC87BC5057ACE5.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/3130332e31382e32382e302f32322d3234203d3e203435373036.roa
Signing time:             Fri 06 Jun 2025 03:00:00 +0000
ROA not before:           Fri 06 Jun 2025 02:55:00 +0000
ROA not after:            Fri 05 Jun 2026 03:00:00 +0000
asID:                     45706
IP address blocks:        103.18.28.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/490B3FBCC6F0FC65785096A153DC87BC5057ACE5.crl
                          rsync://repo-rpki.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/490B3FBCC6F0FC65785096A153DC87BC5057ACE5.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/490B3FBCC6F0FC65785096A153DC87BC5057ACE5.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Jun 2025 06:21:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:02:39:cb:ee:ae:9d:4a:cb:d3:68:97:28:25:58:ab:08:d9:d6:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490B3FBCC6F0FC65785096A153DC87BC5057ACE5
        Validity
            Not Before: Jun  6 02:55:00 2025 GMT
            Not After : Jun  5 03:00:00 2026 GMT
        Subject: CN=F3D3AF2F9DDBE3DBD1B50B9421D2379B1D6E5E2B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:ce:34:cc:d6:3e:1c:14:58:b0:44:24:d3:a4:
                    21:07:79:3d:b0:ae:06:32:43:28:0c:1f:44:e3:3d:
                    c6:b9:d5:4d:a1:6f:79:e0:6c:de:b9:c7:ca:c0:96:
                    10:f0:ae:80:e8:a4:7f:73:3c:ce:a5:f5:45:36:c8:
                    35:c9:89:1b:05:63:bf:9f:c7:76:53:9a:f4:a1:f8:
                    7a:e1:cd:ee:8b:2b:33:1d:4b:7f:55:0d:94:30:4d:
                    22:a6:ce:56:d9:a2:df:56:53:15:59:da:51:79:90:
                    a1:f6:6d:bb:c7:79:28:36:2a:d4:1a:59:2f:84:ab:
                    b8:4d:98:c1:14:76:2f:3d:c5:99:89:23:47:ab:a0:
                    62:be:ee:1d:33:a6:84:89:30:01:e1:f3:e1:04:c3:
                    86:b7:63:21:c2:87:4a:e4:81:39:91:45:c1:e9:f6:
                    3e:c6:e5:5b:e0:54:c9:dd:a0:85:df:3d:1a:1a:05:
                    32:66:96:52:95:cf:5f:20:a3:aa:36:f1:24:a9:7f:
                    9f:99:0a:19:23:05:0f:27:b7:28:c0:11:26:57:87:
                    d5:11:fb:fb:3b:be:e3:fd:8a:3c:be:18:ba:2b:2c:
                    c9:32:15:b5:57:25:15:73:9d:01:67:4f:c7:df:bb:
                    92:a6:90:f6:f7:70:c7:76:0b:a7:40:4e:73:ca:6d:
                    64:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:D3:AF:2F:9D:DB:E3:DB:D1:B5:0B:94:21:D2:37:9B:1D:6E:5E:2B
            X509v3 Authority Key Identifier:
                keyid:49:0B:3F:BC:C6:F0:FC:65:78:50:96:A1:53:DC:87:BC:50:57:AC:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/490B3FBCC6F0FC65785096A153DC87BC5057ACE5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/490B3FBCC6F0FC65785096A153DC87BC5057ACE5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/3130332e31382e32382e302f32322d3234203d3e203435373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.18.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b7:6a:79:b1:c7:32:d7:7c:ef:23:ce:89:03:9d:d9:f1:32:a8:
         58:62:ce:38:f4:c5:fd:a5:db:24:98:73:ff:25:7e:3d:43:36:
         cc:9a:81:80:04:61:41:3a:9c:bc:c0:53:a5:0e:7e:81:a5:d9:
         b7:86:80:76:e4:82:a7:c0:63:4d:91:5b:6f:9a:a4:98:06:a9:
         15:0a:e5:3a:db:73:9d:fd:4d:67:23:f5:2c:0a:ca:5e:bf:ff:
         bd:6f:37:d7:bd:d6:36:59:d4:91:62:9f:8c:10:2d:2b:e9:c8:
         d3:e8:06:83:ae:a2:55:28:80:06:06:ca:d5:6e:73:2c:68:69:
         14:cb:df:29:c7:2a:b8:55:52:4d:3d:34:10:9c:b0:d2:0a:f7:
         76:84:c3:2f:9d:9a:ca:aa:2b:ae:87:ff:c1:26:87:c7:17:8e:
         e3:1c:15:c0:91:ff:62:4b:23:8d:53:77:f8:e1:1c:f0:aa:c8:
         22:b2:a5:38:6a:6a:cf:0f:05:89:9b:e0:04:ba:6e:dc:32:44:
         5a:09:4e:69:39:09:62:35:7f:23:ee:cd:1e:e1:f6:e7:79:56:
         32:d3:11:97:0b:51:0e:0f:5c:19:52:21:c7:10:a1:42:0d:67:
         4d:38:7f:f1:c2:45:59:4a:7d:b2:a4:00:9a:f6:d5:e0:92:90:
         38:1d:db:d0
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUIAI5y+6unUrL02iXKCVYqwjZ1kEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDkwQjNGQkNDNkYwRkM2NTc4NTA5NkExNTNEQzg3QkM1
MDU3QUNFNTAeFw0yNTA2MDYwMjU1MDBaFw0yNjA2MDUwMzAwMDBaMDMxMTAvBgNV
BAMTKEYzRDNBRjJGOUREQkUzREJEMUI1MEI5NDIxRDIzNzlCMUQ2RTVFMkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhzjTM1j4cFFiwRCTTpCEHeT2w
rgYyQygMH0TjPca51U2hb3ngbN65x8rAlhDwroDopH9zPM6l9UU2yDXJiRsFY7+f
x3ZTmvSh+Hrhze6LKzMdS39VDZQwTSKmzlbZot9WUxVZ2lF5kKH2bbvHeSg2KtQa
WS+Eq7hNmMEUdi89xZmJI0eroGK+7h0zpoSJMAHh8+EEw4a3YyHCh0rkgTmRRcHp
9j7G5VvgVMndoIXfPRoaBTJmllKVz18go6o28SSpf5+ZChkjBQ8ntyjAESZXh9UR
+/s7vuP9ijy+GLorLMkyFbVXJRVznQFnT8ffu5KmkPb3cMd2C6dATnPKbWTPAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQU89OvL53b49vRtQuUIdI3mx1uXiswHwYDVR0j
BBgwFoAUSQs/vMbw/GV4UJahU9yHvFBXrOUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83
N2NkNjhmNC02OWE1LTQ3NWYtYWVlNC0zZWY0YjhkMzAyZGQvMC80OTBCM0ZCQ0M2
RjBGQzY1Nzg1MDk2QTE1M0RDODdCQzUwNTdBQ0U1LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNDkwQjNGQkNDNkYwRkM2NTc4NTA5NkExNTNEQzg3QkM1MDU3
QUNFNS5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzc3Y2Q2OGY0LTY5YTUtNDc1Zi1h
ZWU0LTNlZjRiOGQzMDJkZC8wLzMxMzAzMzJlMzEzODJlMzIzODJlMzAyZjMyMzIy
ZDMyMzQyMDNkM2UyMDM0MzUzNzMwMzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJnEhwwDQYJKoZIhvcN
AQELBQADggEBALdqebHHMtd87yPOiQOd2fEyqFhizjj0xf2l2ySYc/8lfj1DNsya
gYAEYUE6nLzAU6UOfoGl2beGgHbkgqfAY02RW2+apJgGqRUK5Trbc539TWcj9SwK
yl6//71vN9e91jZZ1JFin4wQLSvpyNPoBoOuolUogAYGytVucyxoaRTL3ynHKrhV
Uk09NBCcsNIK93aEwy+dmsqqK66H/8Emh8cXjuMcFcCR/2JLI41Td/jhHPCqyCKy
pThqas8PBYmb4AS6btwyRFoJTmk5CWI1fyPuzR7h9ud5VjLTEZcLUQ4PXBlSIccQ
oUINZ004f/HCRVlKfbKkAJr21eCSkDgd29A=
-----END CERTIFICATE-----
Generated at Sat Jun 7 16:39:31 2025 by rpki-client