Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/3130332e3131322e3134342e302f32332d3233203d3e20313337333334.roa
File:                     3130332e3131322e3134342e302f32332d3233203d3e20313337333334.roa (raw, json)
Hash identifier:          FvX/FfDWw99zVOmt+3J83lO751Y4wEfpuqgpwws/quk=
Subject key identifier:   2A:DE:41:B8:B0:10:65:A3:9E:70:D0:20:44:0D:01:44:00:15:D3:0A
Certificate issuer:       /CN=094D556CA0B55AF4A636873A1B1E7032B2C9813C
Certificate serial:       7A6FF0990A4D03DC8DC3D0F49D5356322D1346EA
Authority key identifier: 09:4D:55:6C:A0:B5:5A:F4:A6:36:87:3A:1B:1E:70:32:B2:C9:81:3C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/094D556CA0B55AF4A636873A1B1E7032B2C9813C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/3130332e3131322e3134342e302f32332d3233203d3e20313337333334.roa
Signing time:             Wed 28 May 2025 07:00:02 +0000
ROA not before:           Wed 28 May 2025 06:55:02 +0000
ROA not after:            Wed 27 May 2026 07:00:02 +0000
asID:                     137334
IP address blocks:        103.112.144.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/094D556CA0B55AF4A636873A1B1E7032B2C9813C.crl
                          rsync://repo-rpki.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/094D556CA0B55AF4A636873A1B1E7032B2C9813C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/094D556CA0B55AF4A636873A1B1E7032B2C9813C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Jun 2025 01:45:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:6f:f0:99:0a:4d:03:dc:8d:c3:d0:f4:9d:53:56:32:2d:13:46:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=094D556CA0B55AF4A636873A1B1E7032B2C9813C
        Validity
            Not Before: May 28 06:55:02 2025 GMT
            Not After : May 27 07:00:02 2026 GMT
        Subject: CN=2ADE41B8B01065A39E70D020440D01440015D30A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:d6:18:9c:e4:1e:07:ae:cf:f5:ae:14:63:98:
                    45:6b:a6:fd:80:79:94:ef:c4:6b:cd:a8:0c:04:59:
                    75:cf:08:2b:44:a3:51:b3:c6:af:37:b5:1a:bb:36:
                    93:7b:2a:3a:ed:94:6e:b3:5d:ec:2b:e2:54:42:70:
                    e5:03:0e:10:4f:60:b7:eb:a7:1a:2c:78:2f:49:b2:
                    e1:97:d7:b8:8e:4e:30:a5:d5:95:f3:3a:eb:62:43:
                    3b:dc:01:94:aa:b8:f7:19:4c:d8:72:4d:d0:1d:bc:
                    28:23:35:76:f5:3a:1f:74:4a:3e:50:84:96:c6:8b:
                    46:ad:97:ff:66:41:43:f7:f9:6f:5b:46:93:37:40:
                    05:ea:48:78:e6:d1:62:42:06:b3:74:3a:ea:c8:fb:
                    71:c4:0d:4f:e7:c5:cd:d0:09:67:61:12:01:26:e4:
                    c4:24:53:89:3c:47:f2:d6:17:a6:ef:05:8a:0a:29:
                    98:d3:32:2b:7e:78:f7:52:0b:44:c2:0d:55:5d:2c:
                    03:32:7a:10:9f:44:da:3c:f1:73:ce:79:a9:8b:24:
                    8a:dc:c5:fb:cf:67:08:12:42:8b:dc:df:90:ed:7a:
                    84:f0:49:8a:1a:ea:c0:5a:3d:78:4a:82:10:15:21:
                    ca:12:df:2e:cb:33:a2:ed:e6:41:5a:78:22:e8:d6:
                    33:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:DE:41:B8:B0:10:65:A3:9E:70:D0:20:44:0D:01:44:00:15:D3:0A
            X509v3 Authority Key Identifier:
                keyid:09:4D:55:6C:A0:B5:5A:F4:A6:36:87:3A:1B:1E:70:32:B2:C9:81:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/094D556CA0B55AF4A636873A1B1E7032B2C9813C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/094D556CA0B55AF4A636873A1B1E7032B2C9813C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/3130332e3131322e3134342e302f32332d3233203d3e20313337333334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.112.144.0/23

    Signature Algorithm: sha256WithRSAEncryption
         40:f0:79:cd:7f:e0:fb:39:79:8c:81:10:82:a0:f6:c7:7b:79:
         b7:a4:0c:3b:52:61:dd:8d:56:e1:ef:0f:bf:8b:08:78:11:6c:
         75:1d:60:de:a8:8e:73:88:87:5e:5f:83:cb:7b:3c:dd:30:c8:
         59:bd:02:dd:84:85:74:f7:4d:12:90:53:a9:c6:1f:18:a6:e6:
         22:cf:86:c4:ac:47:e2:22:c3:3d:2d:d0:1b:ca:e8:11:f4:d2:
         ec:24:8d:bc:81:cb:f1:07:37:68:55:3d:34:75:55:a4:02:25:
         7c:e1:57:cb:8c:54:82:49:5f:f0:5b:3f:87:ec:95:b9:57:cd:
         94:f1:0b:28:b3:26:99:36:94:64:3c:d0:a9:81:3b:4f:2f:35:
         ce:7d:c8:3c:8f:ce:f5:c3:2b:24:17:8e:70:0a:f4:61:c8:34:
         47:22:aa:31:d4:e8:d9:c8:d1:2b:9d:b1:a1:86:a0:46:08:db:
         7a:09:bc:d8:5e:a9:76:30:53:e0:f6:f1:cc:0c:18:06:5e:e1:
         68:e7:77:c9:95:39:0a:db:a5:22:8e:62:05:08:14:68:45:42:
         da:bb:01:67:c7:ac:fa:7c:67:e4:f1:bc:c5:94:fc:69:31:ef:
         d8:6a:7e:a9:d0:22:9e:03:cc:8c:48:a0:9a:97:d6:43:7e:69:
         72:20:53:44
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUem/wmQpNA9yNw9D0nVNWMi0TRuowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDk0RDU1NkNBMEI1NUFGNEE2MzY4NzNBMUIxRTcwMzJC
MkM5ODEzQzAeFw0yNTA1MjgwNjU1MDJaFw0yNjA1MjcwNzAwMDJaMDMxMTAvBgNV
BAMTKDJBREU0MUI4QjAxMDY1QTM5RTcwRDAyMDQ0MEQwMTQ0MDAxNUQzMEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDd1hic5B4Hrs/1rhRjmEVrpv2A
eZTvxGvNqAwEWXXPCCtEo1Gzxq83tRq7NpN7KjrtlG6zXewr4lRCcOUDDhBPYLfr
pxoseC9JsuGX17iOTjCl1ZXzOutiQzvcAZSquPcZTNhyTdAdvCgjNXb1Oh90Sj5Q
hJbGi0atl/9mQUP3+W9bRpM3QAXqSHjm0WJCBrN0OurI+3HEDU/nxc3QCWdhEgEm
5MQkU4k8R/LWF6bvBYoKKZjTMit+ePdSC0TCDVVdLAMyehCfRNo88XPOeamLJIrc
xfvPZwgSQovc35DteoTwSYoa6sBaPXhKghAVIcoS3y7LM6Lt5kFaeCLo1jMVAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUKt5BuLAQZaOecNAgRA0BRAAV0wowHwYDVR0j
BBgwFoAUCU1VbKC1WvSmNoc6Gx5wMrLJgTwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84
Y2QwOGViMy05MzdkLTQzMDQtOTE2Ny00NjNkN2M1OGQ1ZTQvMC8wOTRENTU2Q0Ew
QjU1QUY0QTYzNjg3M0ExQjFFNzAzMkIyQzk4MTNDLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMDk0RDU1NkNBMEI1NUFGNEE2MzY4NzNBMUIxRTcwMzJCMkM5
ODEzQy5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzhjZDA4ZWIzLTkzN2QtNDMwNC05
MTY3LTQ2M2Q3YzU4ZDVlNC8wLzMxMzAzMzJlMzEzMTMyMmUzMTM0MzQyZTMwMmYz
MjMzMmQzMjMzMjAzZDNlMjAzMTMzMzczMzMzMzQucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFncJAwDQYJ
KoZIhvcNAQELBQADggEBAEDwec1/4Ps5eYyBEIKg9sd7ebekDDtSYd2NVuHvD7+L
CHgRbHUdYN6ojnOIh15fg8t7PN0wyFm9At2EhXT3TRKQU6nGHxim5iLPhsSsR+Ii
wz0t0BvK6BH00uwkjbyBy/EHN2hVPTR1VaQCJXzhV8uMVIJJX/BbP4fslblXzZTx
CyizJpk2lGQ80KmBO08vNc59yDyPzvXDKyQXjnAK9GHINEciqjHU6NnI0SudsaGG
oEYI23oJvNheqXYwU+D28cwMGAZe4Wjnd8mVOQrbpSKOYgUIFGhFQtq7AWfHrPp8
Z+TxvMWU/Gkx79hqfqnQIp4DzIxIoJqX1kN+aXIgU0Q=
-----END CERTIFICATE-----
Generated at Sat Jun 7 12:10:21 2025 by rpki-client