Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/9141f884-d5c9-4336-9a5c-777419e56dce/0/3130332e362e3131372e302f32342d3234203d3e20313332313634.roa
File:                     3130332e362e3131372e302f32342d3234203d3e20313332313634.roa (raw, json)
Hash identifier:          kVt5AplIi2tCio95fGZq/cPfVyltnVVl2G0ZCHPdgRg=
Subject key identifier:   19:C5:A3:FB:3D:F9:F9:4E:A2:3B:68:FA:9F:57:80:6B:94:B8:1F:2D
Certificate issuer:       /CN=63FD8DEE5A4438A50FF50B6B9B9D6A3F53F348DC
Certificate serial:       71EEDB5C96D81195ADE9647F6C7BFEF270FD18B6
Authority key identifier: 63:FD:8D:EE:5A:44:38:A5:0F:F5:0B:6B:9B:9D:6A:3F:53:F3:48:DC
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/63FD8DEE5A4438A50FF50B6B9B9D6A3F53F348DC.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/9141f884-d5c9-4336-9a5c-777419e56dce/0/3130332e362e3131372e302f32342d3234203d3e20313332313634.roa
Signing time:             Mon 02 Jun 2025 01:03:14 +0000
ROA not before:           Mon 02 Jun 2025 00:58:14 +0000
ROA not after:            Mon 01 Jun 2026 01:03:14 +0000
asID:                     132164
IP address blocks:        103.6.117.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/9141f884-d5c9-4336-9a5c-777419e56dce/0/63FD8DEE5A4438A50FF50B6B9B9D6A3F53F348DC.crl
                          rsync://repo-rpki.idnic.net/repo/9141f884-d5c9-4336-9a5c-777419e56dce/0/63FD8DEE5A4438A50FF50B6B9B9D6A3F53F348DC.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/63FD8DEE5A4438A50FF50B6B9B9D6A3F53F348DC.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Jun 2025 04:12:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:ee:db:5c:96:d8:11:95:ad:e9:64:7f:6c:7b:fe:f2:70:fd:18:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63FD8DEE5A4438A50FF50B6B9B9D6A3F53F348DC
        Validity
            Not Before: Jun  2 00:58:14 2025 GMT
            Not After : Jun  1 01:03:14 2026 GMT
        Subject: CN=19C5A3FB3DF9F94EA23B68FA9F57806B94B81F2D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:08:4f:22:a9:18:1d:ce:76:a4:b4:cc:c4:76:
                    76:9c:46:06:2c:7e:85:c3:33:17:20:df:07:e5:0b:
                    98:ce:e7:22:61:c8:b9:90:b5:aa:4f:63:e1:9b:c7:
                    a0:d6:3e:d5:4c:84:d9:cb:17:09:b9:b5:a7:c6:9b:
                    74:18:a5:c3:bd:25:6a:2c:39:47:77:cf:34:0a:14:
                    4d:da:7c:42:6c:55:d6:de:2e:f6:62:41:85:ba:37:
                    12:d2:31:dd:e4:e6:4d:30:f7:d8:2c:0c:09:06:80:
                    db:58:4d:a7:ee:a3:aa:67:01:27:f9:e1:a6:91:dc:
                    99:31:aa:95:9e:8a:e1:24:eb:5d:18:7c:c1:53:d5:
                    57:30:c3:36:d6:b4:41:e2:85:b5:25:75:f0:2c:bf:
                    33:56:5e:9c:fd:fb:be:49:6a:1b:35:b2:fb:66:b3:
                    fc:60:b1:b1:5e:ad:50:aa:da:6b:f0:9d:8e:06:72:
                    66:6f:70:86:35:82:e1:d1:99:8c:96:5d:3a:14:64:
                    2d:b6:68:c2:4d:0f:ec:b9:e6:7c:5e:14:3b:32:e1:
                    42:c0:3b:e4:00:92:00:d4:74:c1:10:7e:eb:04:19:
                    5c:3b:69:45:7a:93:bb:ca:e1:7e:44:4e:eb:50:0a:
                    a6:d9:25:1f:e4:84:a3:c5:ca:9b:ac:19:36:fd:6f:
                    f1:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:C5:A3:FB:3D:F9:F9:4E:A2:3B:68:FA:9F:57:80:6B:94:B8:1F:2D
            X509v3 Authority Key Identifier:
                keyid:63:FD:8D:EE:5A:44:38:A5:0F:F5:0B:6B:9B:9D:6A:3F:53:F3:48:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/9141f884-d5c9-4336-9a5c-777419e56dce/0/63FD8DEE5A4438A50FF50B6B9B9D6A3F53F348DC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/63FD8DEE5A4438A50FF50B6B9B9D6A3F53F348DC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9141f884-d5c9-4336-9a5c-777419e56dce/0/3130332e362e3131372e302f32342d3234203d3e20313332313634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.6.117.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:ea:29:59:a3:5d:ef:bf:2b:ca:a6:76:c4:ea:c7:f9:39:67:
         86:5b:fc:51:a3:18:1a:14:87:da:59:3f:cd:9b:86:07:40:14:
         ac:94:7b:df:c6:26:37:ea:d3:cb:eb:ab:f4:df:b7:44:d3:7b:
         50:98:dc:92:7c:a5:7e:39:93:82:8d:a6:0d:c0:c9:1b:97:46:
         cf:84:a8:48:17:48:fe:ca:17:36:af:d2:71:c0:d4:61:4f:a5:
         1c:c6:4f:1e:f7:49:a3:ae:f3:d0:4f:c8:5b:4b:bb:40:6c:e7:
         8c:07:02:e2:fb:75:31:71:36:57:39:97:4e:75:d3:0b:a9:9c:
         e9:c8:31:96:97:63:bc:f0:04:8d:ba:70:e8:0a:7e:6d:59:44:
         c7:4f:98:b1:ee:66:1f:99:1a:38:97:c4:19:9e:39:a1:60:09:
         12:09:9d:a7:b9:67:35:47:00:f8:8b:5b:d1:9e:a7:17:f9:27:
         eb:77:8a:e4:3a:4e:f5:eb:4c:71:eb:df:f4:2a:49:bc:06:a0:
         40:ca:c8:a7:46:95:3a:1f:36:ee:19:62:fd:81:bc:52:eb:08:
         f0:37:82:ea:87:22:a4:08:bb:33:5d:de:74:89:de:92:7d:cf:
         aa:13:7d:90:96:7f:7b:a1:8f:36:85:7e:96:61:ee:64:a6:0f:
         9a:5c:43:85
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUce7bXJbYEZWt6WR/bHv+8nD9GLYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjNGRDhERUU1QTQ0MzhBNTBGRjUwQjZCOUI5RDZBM0Y1
M0YzNDhEQzAeFw0yNTA2MDIwMDU4MTRaFw0yNjA2MDEwMTAzMTRaMDMxMTAvBgNV
BAMTKDE5QzVBM0ZCM0RGOUY5NEVBMjNCNjhGQTlGNTc4MDZCOTRCODFGMkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXCE8iqRgdznaktMzEdnacRgYs
foXDMxcg3wflC5jO5yJhyLmQtapPY+Gbx6DWPtVMhNnLFwm5tafGm3QYpcO9JWos
OUd3zzQKFE3afEJsVdbeLvZiQYW6NxLSMd3k5k0w99gsDAkGgNtYTafuo6pnASf5
4aaR3JkxqpWeiuEk610YfMFT1VcwwzbWtEHihbUldfAsvzNWXpz9+75Jahs1svtm
s/xgsbFerVCq2mvwnY4GcmZvcIY1guHRmYyWXToUZC22aMJND+y55nxeFDsy4ULA
O+QAkgDUdMEQfusEGVw7aUV6k7vK4X5ETutQCqbZJR/khKPFypusGTb9b/E/AgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUGcWj+z35+U6iO2j6n1eAa5S4Hy0wHwYDVR0j
BBgwFoAUY/2N7lpEOKUP9Qtrm51qP1PzSNwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85
MTQxZjg4NC1kNWM5LTQzMzYtOWE1Yy03Nzc0MTllNTZkY2UvMC82M0ZEOERFRTVB
NDQzOEE1MEZGNTBCNkI5QjlENkEzRjUzRjM0OERDLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNjNGRDhERUU1QTQ0MzhBNTBGRjUwQjZCOUI5RDZBM0Y1M0Yz
NDhEQy5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzkxNDFmODg0LWQ1YzktNDMzNi05
YTVjLTc3NzQxOWU1NmRjZS8wLzMxMzAzMzJlMzYyZTMxMzEzNzJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDMxMzMzMjMxMzYzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGcGdTANBgkqhkiG
9w0BAQsFAAOCAQEASeopWaNd778ryqZ2xOrH+Tlnhlv8UaMYGhSH2lk/zZuGB0AU
rJR738YmN+rTy+ur9N+3RNN7UJjcknylfjmTgo2mDcDJG5dGz4SoSBdI/soXNq/S
ccDUYU+lHMZPHvdJo67z0E/IW0u7QGznjAcC4vt1MXE2VzmXTnXTC6mc6cgxlpdj
vPAEjbpw6Ap+bVlEx0+Yse5mH5kaOJfEGZ45oWAJEgmdp7lnNUcA+Itb0Z6nF/kn
63eK5DpO9etMcevf9CpJvAagQMrIp0aVOh827hli/YG8UusI8DeC6ocipAi7M13e
dInekn3PqhN9kJZ/e6GPNoV+lmHuZKYPmlxDhQ==
-----END CERTIFICATE-----
Generated at Sat Jun 7 06:09:24 2025 by rpki-client