Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/3130332e33382e3130332e302f32342d3234203d3e203338353234.roa
File:                     3130332e33382e3130332e302f32342d3234203d3e203338353234.roa (raw, json)
Hash identifier:          qwCCE2HMRE6RauTwjnrbcY0fYV1SIec4zhM9IaMmxeQ=
Subject key identifier:   47:FB:F9:89:98:9A:F9:23:BD:A2:F0:3A:28:19:06:4F:75:CA:64:89
Certificate issuer:       /CN=6B33A08D6452492D38FE5FC6560DF750CD283E9A
Certificate serial:       6F928D9485D70524C2F8A1222C003D3C84E2DFFA
Authority key identifier: 6B:33:A0:8D:64:52:49:2D:38:FE:5F:C6:56:0D:F7:50:CD:28:3E:9A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B33A08D6452492D38FE5FC6560DF750CD283E9A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/3130332e33382e3130332e302f32342d3234203d3e203338353234.roa
Signing time:             Mon 02 Jun 2025 02:02:47 +0000
ROA not before:           Mon 02 Jun 2025 01:57:47 +0000
ROA not after:            Mon 01 Jun 2026 02:02:47 +0000
asID:                     38524
IP address blocks:        103.38.103.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/6B33A08D6452492D38FE5FC6560DF750CD283E9A.crl
                          rsync://repo-rpki.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/6B33A08D6452492D38FE5FC6560DF750CD283E9A.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B33A08D6452492D38FE5FC6560DF750CD283E9A.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Jun 2025 03:14:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:92:8d:94:85:d7:05:24:c2:f8:a1:22:2c:00:3d:3c:84:e2:df:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B33A08D6452492D38FE5FC6560DF750CD283E9A
        Validity
            Not Before: Jun  2 01:57:47 2025 GMT
            Not After : Jun  1 02:02:47 2026 GMT
        Subject: CN=47FBF989989AF923BDA2F03A2819064F75CA6489
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:03:e2:57:bb:1d:98:c7:06:0d:5a:70:49:cf:
                    c6:d9:6b:3e:81:51:33:6f:b3:c3:78:3f:60:4e:68:
                    6e:67:90:bc:ae:7c:0a:11:f4:b9:a8:cb:07:17:0f:
                    f2:ee:19:ad:f0:54:67:96:cf:ea:e8:bb:04:43:a8:
                    11:51:94:48:33:80:8a:6b:49:f7:b0:5a:4e:31:9b:
                    b5:42:f7:d1:2f:8e:19:27:4c:e9:05:47:55:4a:0d:
                    d7:f1:96:f5:a6:bf:89:21:d6:dd:19:b0:47:93:b3:
                    4b:8a:43:fd:1e:be:0d:46:7c:90:cc:8a:4c:d9:a8:
                    39:ac:a6:68:a5:3f:99:74:48:3c:32:2b:fe:30:c5:
                    48:8a:f3:1b:33:09:13:b1:dc:5b:1a:b7:60:e3:40:
                    ab:fb:40:2c:5d:66:77:a2:53:60:97:90:0d:69:f0:
                    16:59:dd:32:59:61:4f:ff:3f:6d:6c:ae:02:dd:34:
                    24:43:65:7c:61:d2:d4:d3:1f:96:21:56:83:39:a5:
                    98:79:d6:3d:f4:ee:3e:7a:7c:e9:54:0a:15:32:b2:
                    42:5f:36:cc:c8:82:b9:ac:95:9c:01:40:4f:b3:2d:
                    3b:18:8a:ad:92:a6:8b:99:06:3a:80:61:82:b6:9f:
                    18:30:e2:a9:4e:60:8b:9c:31:bd:be:cd:63:a3:66:
                    bc:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:FB:F9:89:98:9A:F9:23:BD:A2:F0:3A:28:19:06:4F:75:CA:64:89
            X509v3 Authority Key Identifier:
                keyid:6B:33:A0:8D:64:52:49:2D:38:FE:5F:C6:56:0D:F7:50:CD:28:3E:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/6B33A08D6452492D38FE5FC6560DF750CD283E9A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B33A08D6452492D38FE5FC6560DF750CD283E9A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/3130332e33382e3130332e302f32342d3234203d3e203338353234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.38.103.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:d3:a0:85:ed:7d:da:ac:6e:82:27:f8:84:35:21:23:d9:4c:
         65:01:d3:97:c7:1f:1a:2c:37:24:26:4e:0c:96:d1:ac:2b:2e:
         a6:53:13:fe:d5:79:7e:73:da:3a:22:c7:3d:ad:20:2d:2e:cd:
         4c:93:ce:9b:0c:68:0e:71:6a:22:01:43:54:a0:e4:fc:b0:d8:
         25:c5:26:f3:96:0f:f1:7c:40:e7:5c:9e:6d:7a:72:52:b8:dc:
         53:06:f9:a5:2e:ea:8a:ba:70:af:d7:ba:fd:6a:c8:75:a8:93:
         ff:d6:f3:27:ed:c7:5f:57:48:9a:97:6b:25:ae:f9:c1:e1:29:
         01:53:69:76:2d:a9:23:24:38:86:8b:bc:3a:7b:0d:5b:e2:04:
         a8:fa:22:03:0e:9b:f7:4a:4b:81:ab:53:33:0c:c0:1b:ba:09:
         27:09:c9:3f:79:fc:72:00:f9:4c:25:46:70:b1:d6:06:65:28:
         25:4f:f3:93:57:01:77:d3:94:6f:e3:64:3f:e0:6f:10:41:ed:
         24:a0:2e:81:a8:8b:a7:be:a8:85:ad:ce:02:e3:7a:6d:4b:a6:
         bd:e9:50:03:26:a4:79:82:de:1b:e3:c4:51:08:40:5b:3e:6a:
         8d:4f:2e:ce:3b:a3:7e:64:55:83:1b:77:ad:a4:3f:21:ef:7e:
         a2:d9:c7:1b
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUb5KNlIXXBSTC+KEiLAA9PITi3/owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkIzM0EwOEQ2NDUyNDkyRDM4RkU1RkM2NTYwREY3NTBD
RDI4M0U5QTAeFw0yNTA2MDIwMTU3NDdaFw0yNjA2MDEwMjAyNDdaMDMxMTAvBgNV
BAMTKDQ3RkJGOTg5OTg5QUY5MjNCREEyRjAzQTI4MTkwNjRGNzVDQTY0ODkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEA+JXux2YxwYNWnBJz8bZaz6B
UTNvs8N4P2BOaG5nkLyufAoR9LmoywcXD/LuGa3wVGeWz+rouwRDqBFRlEgzgIpr
SfewWk4xm7VC99EvjhknTOkFR1VKDdfxlvWmv4kh1t0ZsEeTs0uKQ/0evg1GfJDM
ikzZqDmspmilP5l0SDwyK/4wxUiK8xszCROx3Fsat2DjQKv7QCxdZneiU2CXkA1p
8BZZ3TJZYU//P21srgLdNCRDZXxh0tTTH5YhVoM5pZh51j307j56fOlUChUyskJf
NszIgrmslZwBQE+zLTsYiq2SpouZBjqAYYK2nxgw4qlOYIucMb2+zWOjZryRAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUR/v5iZia+SO9ovA6KBkGT3XKZIkwHwYDVR0j
BBgwFoAUazOgjWRSSS04/l/GVg33UM0oPpowDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83
ZmY5NjlmYy0zOWM3LTQ0Y2QtODcxNi05Y2U0YzZkNWFjOTEvMC82QjMzQTA4RDY0
NTI0OTJEMzhGRTVGQzY1NjBERjc1MENEMjgzRTlBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNkIzM0EwOEQ2NDUyNDkyRDM4RkU1RkM2NTYwREY3NTBDRDI4
M0U5QS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzdmZjk2OWZjLTM5YzctNDRjZC04
NzE2LTljZTRjNmQ1YWM5MS8wLzMxMzAzMzJlMzMzODJlMzEzMDMzMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzMzODM1MzIzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGcmZzANBgkqhkiG
9w0BAQsFAAOCAQEAptOghe192qxugif4hDUhI9lMZQHTl8cfGiw3JCZODJbRrCsu
plMT/tV5fnPaOiLHPa0gLS7NTJPOmwxoDnFqIgFDVKDk/LDYJcUm85YP8XxA51ye
bXpyUrjcUwb5pS7qirpwr9e6/WrIdaiT/9bzJ+3HX1dImpdrJa75weEpAVNpdi2p
IyQ4hou8OnsNW+IEqPoiAw6b90pLgatTMwzAG7oJJwnJP3n8cgD5TCVGcLHWBmUo
JU/zk1cBd9OUb+NkP+BvEEHtJKAugaiLp76oha3OAuN6bUumvelQAyakeYLeG+PE
UQhAWz5qjU8uzjujfmRVgxt3raQ/Ie9+otnHGw==
-----END CERTIFICATE-----
Generated at Sat Jun 7 09:27:22 2025 by rpki-client