Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/98f92447-acd3-427c-b5e7-db3917f185c8/0/3130332e3134382e3131302e302f32342d3234203d3e203436303332.roa
File:                     3130332e3134382e3131302e302f32342d3234203d3e203436303332.roa (raw, json)
Hash identifier:          BJgtZE4CiLbqvj8IAg5L3Vwr4txyhS0zWerD1TQbUtY=
Subject key identifier:   3C:E9:0E:3A:6A:48:A7:10:13:83:55:6F:78:F2:D4:A7:0E:EF:6A:9E
Certificate issuer:       /CN=5FCDFAAAB84905868D4FBDBE718B949501D97DC4
Certificate serial:       3CE578EF52846675DF7C0D5F501DF84F581F8D47
Authority key identifier: 5F:CD:FA:AA:B8:49:05:86:8D:4F:BD:BE:71:8B:94:95:01:D9:7D:C4
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5FCDFAAAB84905868D4FBDBE718B949501D97DC4.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/98f92447-acd3-427c-b5e7-db3917f185c8/0/3130332e3134382e3131302e302f32342d3234203d3e203436303332.roa
Signing time:             Mon 02 Jun 2025 01:03:00 +0000
ROA not before:           Mon 02 Jun 2025 00:58:00 +0000
ROA not after:            Mon 01 Jun 2026 01:03:00 +0000
asID:                     46032
IP address blocks:        103.148.110.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/98f92447-acd3-427c-b5e7-db3917f185c8/0/5FCDFAAAB84905868D4FBDBE718B949501D97DC4.crl
                          rsync://repo-rpki.idnic.net/repo/98f92447-acd3-427c-b5e7-db3917f185c8/0/5FCDFAAAB84905868D4FBDBE718B949501D97DC4.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5FCDFAAAB84905868D4FBDBE718B949501D97DC4.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Jun 2025 16:04:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:e5:78:ef:52:84:66:75:df:7c:0d:5f:50:1d:f8:4f:58:1f:8d:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FCDFAAAB84905868D4FBDBE718B949501D97DC4
        Validity
            Not Before: Jun  2 00:58:00 2025 GMT
            Not After : Jun  1 01:03:00 2026 GMT
        Subject: CN=3CE90E3A6A48A7101383556F78F2D4A70EEF6A9E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:5e:78:87:36:ee:b7:e7:40:a8:30:26:91:ba:
                    d4:93:18:fc:d3:6a:53:09:20:72:95:26:d1:1a:4c:
                    c4:8d:21:f7:6c:7d:e2:14:0a:a6:ae:10:f6:29:f7:
                    9e:a7:2c:ca:60:c2:b4:ff:8c:35:aa:83:b9:ea:e7:
                    d1:36:42:f3:40:77:26:ae:90:b6:e6:02:0a:d1:3f:
                    c6:e8:b1:14:3d:03:f7:23:55:45:b3:2e:84:23:b4:
                    e3:e7:99:24:a0:88:27:9d:81:71:47:90:cf:96:00:
                    82:17:b3:d8:37:95:48:90:24:08:7d:89:bb:94:1d:
                    9f:a3:b7:05:8d:a4:7a:33:29:ea:d0:d1:54:c4:df:
                    8c:db:67:cd:07:60:46:30:13:08:b0:06:c6:6f:26:
                    fc:e0:78:a7:31:a7:f2:cd:c0:11:25:fe:41:6b:37:
                    94:d1:c7:48:5e:9c:9a:af:34:60:ff:a0:5d:da:f1:
                    59:1d:70:d5:5b:c0:9c:48:fb:12:e2:f4:15:db:a8:
                    1e:78:5e:d0:47:12:e3:be:30:88:23:39:26:f3:48:
                    bb:c7:fb:97:9b:85:5f:43:fc:d1:ee:13:28:46:96:
                    89:93:a7:e9:67:53:b9:80:14:55:10:7f:4e:1c:47:
                    4b:cb:98:1e:62:a9:e8:56:7b:75:4e:ac:8a:c8:7b:
                    65:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:E9:0E:3A:6A:48:A7:10:13:83:55:6F:78:F2:D4:A7:0E:EF:6A:9E
            X509v3 Authority Key Identifier:
                keyid:5F:CD:FA:AA:B8:49:05:86:8D:4F:BD:BE:71:8B:94:95:01:D9:7D:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/98f92447-acd3-427c-b5e7-db3917f185c8/0/5FCDFAAAB84905868D4FBDBE718B949501D97DC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5FCDFAAAB84905868D4FBDBE718B949501D97DC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/98f92447-acd3-427c-b5e7-db3917f185c8/0/3130332e3134382e3131302e302f32342d3234203d3e203436303332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.148.110.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:51:84:a5:4f:ee:13:f8:5b:23:65:44:a7:bc:7f:a5:b5:4e:
         b0:63:a5:de:b6:d2:fd:14:64:5c:bf:34:b9:b3:e2:e9:72:62:
         3f:ae:40:32:70:b6:7d:64:e7:5b:08:8b:b8:85:8a:ba:fc:a7:
         87:79:a9:82:a2:ba:9d:22:57:04:ad:eb:15:c3:83:7a:5c:14:
         64:69:a0:69:a1:55:6c:86:07:72:66:54:ef:0f:b2:ea:8c:a3:
         2c:b0:d4:06:ea:14:b0:11:0e:a2:d6:8b:b5:4b:70:b2:cc:f6:
         14:8a:2c:90:d7:23:65:12:77:b4:11:38:e6:1b:2b:f0:bd:e8:
         ed:a8:65:85:e2:f0:87:b8:47:a6:9d:43:f2:dc:e7:4f:51:9e:
         f9:c2:fe:ea:6f:6f:e8:71:99:a8:de:26:3d:7b:0f:69:ca:38:
         81:d6:20:8f:01:58:09:1f:60:87:28:c1:32:31:7a:45:61:4f:
         da:70:8d:6f:c1:50:69:78:0d:fd:18:33:8f:17:2d:56:3a:26:
         47:39:f9:50:b4:71:54:43:30:89:8d:98:17:16:61:6c:a1:75:
         4c:35:0d:0b:d5:38:49:20:ec:bb:d5:55:63:c8:df:f8:44:dd:
         f7:bd:6d:6b:db:93:d0:70:42:28:ed:c9:a3:3c:88:00:36:63:
         32:71:f7:c8
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUPOV471KEZnXffA1fUB34T1gfjUcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUZDREZBQUFCODQ5MDU4NjhENEZCREJFNzE4Qjk0OTUw
MUQ5N0RDNDAeFw0yNTA2MDIwMDU4MDBaFw0yNjA2MDEwMTAzMDBaMDMxMTAvBgNV
BAMTKDNDRTkwRTNBNkE0OEE3MTAxMzgzNTU2Rjc4RjJENEE3MEVFRjZBOUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoXniHNu6350CoMCaRutSTGPzT
alMJIHKVJtEaTMSNIfdsfeIUCqauEPYp956nLMpgwrT/jDWqg7nq59E2QvNAdyau
kLbmAgrRP8bosRQ9A/cjVUWzLoQjtOPnmSSgiCedgXFHkM+WAIIXs9g3lUiQJAh9
ibuUHZ+jtwWNpHozKerQ0VTE34zbZ80HYEYwEwiwBsZvJvzgeKcxp/LNwBEl/kFr
N5TRx0henJqvNGD/oF3a8VkdcNVbwJxI+xLi9BXbqB54XtBHEuO+MIgjOSbzSLvH
+5ebhV9D/NHuEyhGlomTp+lnU7mAFFUQf04cR0vLmB5iqehWe3VOrIrIe2WvAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUPOkOOmpIpxATg1VvePLUpw7vap4wHwYDVR0j
BBgwFoAUX836qrhJBYaNT72+cYuUlQHZfcQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85
OGY5MjQ0Ny1hY2QzLTQyN2MtYjVlNy1kYjM5MTdmMTg1YzgvMC81RkNERkFBQUI4
NDkwNTg2OEQ0RkJEQkU3MThCOTQ5NTAxRDk3REM0LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNUZDREZBQUFCODQ5MDU4NjhENEZCREJFNzE4Qjk0OTUwMUQ5
N0RDNC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzk4ZjkyNDQ3LWFjZDMtNDI3Yy1i
NWU3LWRiMzkxN2YxODVjOC8wLzMxMzAzMzJlMzEzNDM4MmUzMTMxMzAyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzNDM2MzAzMzMyLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ5RuMA0GCSqG
SIb3DQEBCwUAA4IBAQBBUYSlT+4T+FsjZUSnvH+ltU6wY6XettL9FGRcvzS5s+Lp
cmI/rkAycLZ9ZOdbCIu4hYq6/KeHeamCorqdIlcEresVw4N6XBRkaaBpoVVshgdy
ZlTvD7LqjKMssNQG6hSwEQ6i1ou1S3CyzPYUiiyQ1yNlEne0ETjmGyvwvejtqGWF
4vCHuEemnUPy3OdPUZ75wv7qb2/ocZmo3iY9ew9pyjiB1iCPAVgJH2CHKMEyMXpF
YU/acI1vwVBpeA39GDOPFy1WOiZHOflQtHFUQzCJjZgXFmFsoXVMNQ0L1ThJIOy7
1VVjyN/4RN33vW1r25PQcEIo7cmjPIgANmMycffI
-----END CERTIFICATE-----
Generated at Sat Jun 7 20:54:52 2025 by rpki-client