Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/3130332e36362e34352e302f32342d3234203d3e203233363934.roa
File:                     3130332e36362e34352e302f32342d3234203d3e203233363934.roa (raw, json)
Hash identifier:          3D9vuP9WnybAIy/tjpIyzYKT6Y/ASbbbLJ7Kn+x1z7Q=
Subject key identifier:   FF:A9:40:73:2F:B4:72:95:CC:D7:13:46:A9:45:C0:03:74:DA:1A:BA
Certificate issuer:       /CN=3E0D060F214DF8E6493243033EBD30ABD627ED36
Certificate serial:       4884DF3FB4BB2B181BD8970644E88ECA83ACE17E
Authority key identifier: 3E:0D:06:0F:21:4D:F8:E6:49:32:43:03:3E:BD:30:AB:D6:27:ED:36
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E0D060F214DF8E6493243033EBD30ABD627ED36.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/3130332e36362e34352e302f32342d3234203d3e203233363934.roa
Signing time:             Thu 08 May 2025 11:00:01 +0000
ROA not before:           Thu 08 May 2025 10:55:01 +0000
ROA not after:            Thu 07 May 2026 11:00:01 +0000
asID:                     23694
IP address blocks:        103.66.45.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/3E0D060F214DF8E6493243033EBD30ABD627ED36.crl
                          rsync://repo-rpki.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/3E0D060F214DF8E6493243033EBD30ABD627ED36.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E0D060F214DF8E6493243033EBD30ABD627ED36.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Jun 2025 04:32:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:84:df:3f:b4:bb:2b:18:1b:d8:97:06:44:e8:8e:ca:83:ac:e1:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E0D060F214DF8E6493243033EBD30ABD627ED36
        Validity
            Not Before: May  8 10:55:01 2025 GMT
            Not After : May  7 11:00:01 2026 GMT
        Subject: CN=FFA940732FB47295CCD71346A945C00374DA1ABA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:35:4b:41:27:18:0f:0b:61:23:bf:ae:ed:98:
                    fd:2a:ca:67:37:ee:5e:65:74:b6:92:91:7e:ca:55:
                    58:b6:fd:f0:32:71:2e:3e:f0:df:55:8a:50:d6:a1:
                    59:34:cb:7c:f3:6b:37:34:b7:fd:e6:d6:32:45:12:
                    82:aa:11:f2:3d:3d:c2:13:87:47:f6:65:4e:9c:f3:
                    71:04:1f:fa:db:af:d6:cc:49:27:3a:6c:0c:0a:2d:
                    40:cd:0b:37:db:4e:30:c8:77:72:c4:95:8e:36:19:
                    60:c4:d7:8d:31:61:11:77:b4:2b:13:93:93:76:ec:
                    02:53:8b:44:a4:30:12:b7:3b:15:c0:3f:13:53:8a:
                    ab:f9:0e:da:94:9c:76:e8:e3:fc:6d:8c:37:43:12:
                    67:2d:ae:f1:8a:d0:57:a9:39:6b:f8:78:16:cc:19:
                    ef:98:5d:b5:b6:82:df:b5:a5:07:fe:9f:e9:50:7a:
                    b5:58:b7:52:30:a2:18:23:c3:ab:93:3b:d7:5e:63:
                    3b:f8:5d:8a:da:ab:00:7b:96:11:f8:99:a2:a6:ff:
                    78:84:89:70:5a:5c:f3:74:73:3f:dc:6b:4d:98:15:
                    60:09:fd:52:9b:4d:19:79:16:17:0d:f1:7e:75:d0:
                    10:0c:fc:3e:1d:14:e1:1d:d9:36:c8:06:a2:5e:01:
                    92:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:A9:40:73:2F:B4:72:95:CC:D7:13:46:A9:45:C0:03:74:DA:1A:BA
            X509v3 Authority Key Identifier:
                keyid:3E:0D:06:0F:21:4D:F8:E6:49:32:43:03:3E:BD:30:AB:D6:27:ED:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/3E0D060F214DF8E6493243033EBD30ABD627ED36.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E0D060F214DF8E6493243033EBD30ABD627ED36.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/3130332e36362e34352e302f32342d3234203d3e203233363934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.66.45.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:de:e2:c5:57:f6:c7:0b:30:af:14:d9:57:1e:0c:0d:cf:2c:
         45:45:7f:a0:8b:38:7e:fc:dd:05:7a:ed:b0:e6:c3:cf:cd:39:
         73:f0:09:a6:0a:99:72:28:42:d1:e2:8a:0b:90:96:a7:4d:7c:
         44:9a:f7:59:4e:dd:7f:3d:d6:c5:e9:26:5f:ee:42:ba:74:88:
         17:e1:f8:85:43:65:39:4b:2a:8d:a7:b6:f5:d6:21:b2:39:45:
         b1:14:e5:ae:f3:7c:19:d3:6a:e1:b7:c0:9f:54:f3:3c:06:f2:
         a6:94:76:c8:94:0e:1a:de:eb:7a:fc:d9:9a:9d:1b:80:f2:41:
         5d:2d:ca:4f:fb:d6:50:33:cc:f1:83:02:76:06:c7:05:58:6c:
         8f:c0:ea:ad:47:c8:86:0a:4e:f0:9f:72:50:21:5d:00:b5:e7:
         d0:9c:7c:13:0a:30:67:ca:ea:67:29:39:86:59:c1:b9:2d:19:
         e1:3b:a9:6e:2c:a1:f9:78:90:af:a3:8d:81:16:5f:84:55:b0:
         ee:9d:a2:4c:f0:96:53:28:46:b9:fd:69:ac:f7:5b:42:98:11:
         ee:ed:72:41:d6:65:3d:17:f3:14:2e:c0:a2:80:e0:42:00:ba:
         53:cf:0b:31:33:8a:2e:32:74:5e:0a:44:55:76:bb:7c:18:32:
         d7:35:4a:20
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUSITfP7S7Kxgb2JcGROiOyoOs4X4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0UwRDA2MEYyMTRERjhFNjQ5MzI0MzAzM0VCRDMwQUJE
NjI3RUQzNjAeFw0yNTA1MDgxMDU1MDFaFw0yNjA1MDcxMTAwMDFaMDMxMTAvBgNV
BAMTKEZGQTk0MDczMkZCNDcyOTVDQ0Q3MTM0NkE5NDVDMDAzNzREQTFBQkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkNUtBJxgPC2Ejv67tmP0qymc3
7l5ldLaSkX7KVVi2/fAycS4+8N9VilDWoVk0y3zzazc0t/3m1jJFEoKqEfI9PcIT
h0f2ZU6c83EEH/rbr9bMSSc6bAwKLUDNCzfbTjDId3LElY42GWDE140xYRF3tCsT
k5N27AJTi0SkMBK3OxXAPxNTiqv5DtqUnHbo4/xtjDdDEmctrvGK0FepOWv4eBbM
Ge+YXbW2gt+1pQf+n+lQerVYt1Iwohgjw6uTO9deYzv4XYraqwB7lhH4maKm/3iE
iXBaXPN0cz/ca02YFWAJ/VKbTRl5FhcN8X510BAM/D4dFOEd2TbIBqJeAZLhAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQU/6lAcy+0cpXM1xNGqUXAA3TaGrowHwYDVR0j
BBgwFoAUPg0GDyFN+OZJMkMDPr0wq9Yn7TYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84
YjRmODUxMS0wN2IzLTRhNjEtYmQwNC0yZTY2NWM5Mjc4ZmMvMC8zRTBEMDYwRjIx
NERGOEU2NDkzMjQzMDMzRUJEMzBBQkQ2MjdFRDM2LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvM0UwRDA2MEYyMTRERjhFNjQ5MzI0MzAzM0VCRDMwQUJENjI3
RUQzNi5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzhiNGY4NTExLTA3YjMtNGE2MS1i
ZDA0LTJlNjY1YzkyNzhmYy8wLzMxMzAzMzJlMzYzNjJlMzQzNTJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDMyMzMzNjM5MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnQi0wDQYJKoZIhvcN
AQELBQADggEBAHre4sVX9scLMK8U2VceDA3PLEVFf6CLOH783QV67bDmw8/NOXPw
CaYKmXIoQtHiiguQlqdNfESa91lO3X891sXpJl/uQrp0iBfh+IVDZTlLKo2ntvXW
IbI5RbEU5a7zfBnTauG3wJ9U8zwG8qaUdsiUDhre63r82ZqdG4DyQV0tyk/71lAz
zPGDAnYGxwVYbI/A6q1HyIYKTvCfclAhXQC159CcfBMKMGfK6mcpOYZZwbktGeE7
qW4sofl4kK+jjYEWX4RVsO6dokzwllMoRrn9aaz3W0KYEe7tckHWZT0X8xQuwKKA
4EIAulPPCzEzii4ydF4KRFV2u3wYMtc1SiA=
-----END CERTIFICATE-----
Generated at Thu Jun 5 18:26:50 2025 by rpki-client