Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/89a40089-6041-45ed-8e44-a997c8acf480/0/3130332e3132362e3233322e302f32342d3234203d3e20313530393738.roa
File:                     3130332e3132362e3233322e302f32342d3234203d3e20313530393738.roa (raw, json)
Hash identifier:          eIcKVswkxVzPLsHeuZgtjUH51030AdVpi+kyPLC0pTE=
Subject key identifier:   DA:2E:7D:E7:83:81:7A:F4:DA:2C:4E:24:2C:D7:A5:E2:22:0E:A0:3D
Certificate issuer:       /CN=98906779AB8F30762B65B3E6AD7F48326A08605E
Certificate serial:       65DEE86D7095262EB0DF9E25A865D5C2B36AADDD
Authority key identifier: 98:90:67:79:AB:8F:30:76:2B:65:B3:E6:AD:7F:48:32:6A:08:60:5E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98906779AB8F30762B65B3E6AD7F48326A08605E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/89a40089-6041-45ed-8e44-a997c8acf480/0/3130332e3132362e3233322e302f32342d3234203d3e20313530393738.roa
Signing time:             Sat 15 Mar 2025 09:00:00 +0000
ROA not before:           Sat 15 Mar 2025 08:55:00 +0000
ROA not after:            Sat 14 Mar 2026 09:00:00 +0000
asID:                     150978
IP address blocks:        103.126.232.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/89a40089-6041-45ed-8e44-a997c8acf480/0/98906779AB8F30762B65B3E6AD7F48326A08605E.crl
                          rsync://repo-rpki.idnic.net/repo/89a40089-6041-45ed-8e44-a997c8acf480/0/98906779AB8F30762B65B3E6AD7F48326A08605E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98906779AB8F30762B65B3E6AD7F48326A08605E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Apr 2025 10:29:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:de:e8:6d:70:95:26:2e:b0:df:9e:25:a8:65:d5:c2:b3:6a:ad:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98906779AB8F30762B65B3E6AD7F48326A08605E
        Validity
            Not Before: Mar 15 08:55:00 2025 GMT
            Not After : Mar 14 09:00:00 2026 GMT
        Subject: CN=DA2E7DE783817AF4DA2C4E242CD7A5E2220EA03D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:45:59:5d:a4:56:05:7f:9b:d8:e1:d5:c4:8d:
                    fc:56:16:53:36:16:a4:e5:2e:ee:fe:64:1d:f0:34:
                    a2:c6:33:d4:29:06:61:b7:80:ac:5a:6f:fe:5d:e0:
                    34:17:f9:54:8e:a4:07:be:92:4b:33:dc:62:b4:74:
                    d4:ef:e8:fa:27:04:16:53:27:b4:90:67:1b:3e:36:
                    fd:d4:ff:c9:70:36:dd:2b:11:f2:d8:1e:9c:76:c9:
                    2f:ff:c5:bb:15:24:2c:85:0f:60:ba:b0:dc:24:d2:
                    29:1d:38:02:98:bd:d9:76:f7:84:81:da:86:24:bb:
                    3c:77:53:c0:d4:d6:ba:e6:1f:46:e0:d8:a7:f2:3f:
                    fe:10:48:e8:4e:c3:c7:aa:57:74:e0:50:af:82:f2:
                    b3:27:52:fd:13:39:8d:0c:89:6c:cc:cb:5e:59:12:
                    2e:8e:20:5c:03:f0:36:50:ab:64:33:ca:ff:9a:92:
                    b1:d7:87:17:1b:df:6a:52:cf:23:2d:ed:95:75:13:
                    dc:66:8a:70:85:f3:5a:57:dc:be:9d:7d:77:16:e0:
                    96:2c:cf:2b:a9:f6:a4:c1:40:1f:bf:0a:31:6c:09:
                    3e:21:99:f1:6c:ef:d3:b8:72:56:c9:de:6f:c6:e8:
                    14:ec:32:d7:3e:a2:58:f0:71:58:e6:0c:59:e6:1c:
                    97:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:2E:7D:E7:83:81:7A:F4:DA:2C:4E:24:2C:D7:A5:E2:22:0E:A0:3D
            X509v3 Authority Key Identifier:
                keyid:98:90:67:79:AB:8F:30:76:2B:65:B3:E6:AD:7F:48:32:6A:08:60:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/89a40089-6041-45ed-8e44-a997c8acf480/0/98906779AB8F30762B65B3E6AD7F48326A08605E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98906779AB8F30762B65B3E6AD7F48326A08605E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/89a40089-6041-45ed-8e44-a997c8acf480/0/3130332e3132362e3233322e302f32342d3234203d3e20313530393738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.126.232.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:ad:46:40:58:be:db:2e:e2:bf:dd:39:6a:d9:03:65:a0:05:
         84:b7:c2:83:5a:47:b2:2e:ee:8e:37:ee:bc:92:75:e9:f2:d5:
         bf:91:9a:e6:60:76:d5:11:bb:f8:b3:9c:4d:29:10:bf:79:90:
         eb:83:ca:e8:75:86:e3:7c:a3:c5:2d:01:0e:3f:65:d3:97:d7:
         71:bf:2d:c8:6b:f5:5b:68:10:30:19:cd:2c:f9:63:e8:61:21:
         8f:88:ef:3d:c9:07:48:c8:2d:e8:8d:b4:2e:f3:42:84:61:15:
         9e:02:60:10:a0:d4:6c:91:9d:6b:de:d8:3a:73:27:a6:98:32:
         61:0f:1d:81:22:8a:29:03:7e:2c:30:ce:f3:f4:ca:9e:d0:bb:
         04:5a:1c:88:6f:1e:6c:9e:9c:7d:17:88:13:0b:f3:ac:65:b2:
         01:be:aa:f5:a4:6a:81:32:a8:58:f1:0d:3e:e8:34:f5:bf:52:
         28:29:ad:d8:70:ac:46:53:c7:ef:4f:89:66:a2:ba:66:43:93:
         b9:02:87:f9:96:0b:5b:41:a5:dd:a8:fa:26:d2:29:47:bf:03:
         7c:ba:5c:30:86:b1:15:1c:72:2e:02:4b:32:49:89:ba:7e:7c:
         ea:09:89:0b:50:b4:cd:14:c4:57:b9:b5:66:fc:f6:78:07:1d:
         db:53:5d:09
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUZd7obXCVJi6w354lqGXVwrNqrd0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTg5MDY3NzlBQjhGMzA3NjJCNjVCM0U2QUQ3RjQ4MzI2
QTA4NjA1RTAeFw0yNTAzMTUwODU1MDBaFw0yNjAzMTQwOTAwMDBaMDMxMTAvBgNV
BAMTKERBMkU3REU3ODM4MTdBRjREQTJDNEUyNDJDRDdBNUUyMjIwRUEwM0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPRVldpFYFf5vY4dXEjfxWFlM2
FqTlLu7+ZB3wNKLGM9QpBmG3gKxab/5d4DQX+VSOpAe+kksz3GK0dNTv6PonBBZT
J7SQZxs+Nv3U/8lwNt0rEfLYHpx2yS//xbsVJCyFD2C6sNwk0ikdOAKYvdl294SB
2oYkuzx3U8DU1rrmH0bg2KfyP/4QSOhOw8eqV3TgUK+C8rMnUv0TOY0MiWzMy15Z
Ei6OIFwD8DZQq2Qzyv+akrHXhxcb32pSzyMt7ZV1E9xminCF81pX3L6dfXcW4JYs
zyup9qTBQB+/CjFsCT4hmfFs79O4clbJ3m/G6BTsMtc+oljwcVjmDFnmHJdrAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQU2i5954OBevTaLE4kLNel4iIOoD0wHwYDVR0j
BBgwFoAUmJBneauPMHYrZbPmrX9IMmoIYF4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84
OWE0MDA4OS02MDQxLTQ1ZWQtOGU0NC1hOTk3YzhhY2Y0ODAvMC85ODkwNjc3OUFC
OEYzMDc2MkI2NUIzRTZBRDdGNDgzMjZBMDg2MDVFLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvOTg5MDY3NzlBQjhGMzA3NjJCNjVCM0U2QUQ3RjQ4MzI2QTA4
NjA1RS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzg5YTQwMDg5LTYwNDEtNDVlZC04
ZTQ0LWE5OTdjOGFjZjQ4MC8wLzMxMzAzMzJlMzEzMjM2MmUzMjMzMzIyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTM1MzAzOTM3Mzgucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnfugwDQYJ
KoZIhvcNAQELBQADggEBAHqtRkBYvtsu4r/dOWrZA2WgBYS3woNaR7Iu7o437ryS
deny1b+RmuZgdtURu/iznE0pEL95kOuDyuh1huN8o8UtAQ4/ZdOX13G/Lchr9Vto
EDAZzSz5Y+hhIY+I7z3JB0jILeiNtC7zQoRhFZ4CYBCg1GyRnWve2DpzJ6aYMmEP
HYEiiikDfiwwzvP0yp7QuwRaHIhvHmyenH0XiBML86xlsgG+qvWkaoEyqFjxDT7o
NPW/UigprdhwrEZTx+9PiWaiumZDk7kCh/mWC1tBpd2o+ibSKUe/A3y6XDCGsRUc
ci4CSzJJibp+fOoJiQtQtM0UxFe5tWb89ngHHdtTXQk=
-----END CERTIFICATE-----
Generated at Sun Apr 6 13:57:06 2025 by rpki-client