Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a124aa8c-dedc-4376-9381-0a81e6bcc564/0/3130332e3130352e39382e302f32342d3234203d3e20313336383638.roa
File:                     3130332e3130352e39382e302f32342d3234203d3e20313336383638.roa (raw, json)
Hash identifier:          gEF6XHOWRCqM+iWbvzjd5eE8QEvtBHMbgAap2D0U424=
Subject key identifier:   F9:54:85:EA:2F:D6:4E:6D:05:D2:A4:4D:18:FD:D3:AE:0A:73:42:7C
Certificate issuer:       /CN=4DF415D2DB760C39855B3F3D9CF3CE441A783E36
Certificate serial:       46C647BAF784C815C00397A8AD589944D82A8DC5
Authority key identifier: 4D:F4:15:D2:DB:76:0C:39:85:5B:3F:3D:9C:F3:CE:44:1A:78:3E:36
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DF415D2DB760C39855B3F3D9CF3CE441A783E36.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a124aa8c-dedc-4376-9381-0a81e6bcc564/0/3130332e3130352e39382e302f32342d3234203d3e20313336383638.roa
Signing time:             Mon 02 Jun 2025 01:02:37 +0000
ROA not before:           Mon 02 Jun 2025 00:57:37 +0000
ROA not after:            Mon 01 Jun 2026 01:02:37 +0000
asID:                     136868
IP address blocks:        103.105.98.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a124aa8c-dedc-4376-9381-0a81e6bcc564/0/4DF415D2DB760C39855B3F3D9CF3CE441A783E36.crl
                          rsync://repo-rpki.idnic.net/repo/a124aa8c-dedc-4376-9381-0a81e6bcc564/0/4DF415D2DB760C39855B3F3D9CF3CE441A783E36.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DF415D2DB760C39855B3F3D9CF3CE441A783E36.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Jun 2025 17:32:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:c6:47:ba:f7:84:c8:15:c0:03:97:a8:ad:58:99:44:d8:2a:8d:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4DF415D2DB760C39855B3F3D9CF3CE441A783E36
        Validity
            Not Before: Jun  2 00:57:37 2025 GMT
            Not After : Jun  1 01:02:37 2026 GMT
        Subject: CN=F95485EA2FD64E6D05D2A44D18FDD3AE0A73427C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:8c:99:7f:1e:a2:2d:e8:41:ab:ed:ce:f4:88:
                    36:48:da:4c:fb:a4:36:cc:0c:f5:fe:28:c0:42:0b:
                    81:10:f5:28:38:22:0e:fa:d0:e2:e7:eb:b2:e4:c2:
                    39:91:73:a1:2c:3a:7b:a1:38:a7:83:63:3c:b4:33:
                    89:c3:e6:96:2b:a9:0c:3d:62:56:d9:94:a3:55:0b:
                    a0:18:69:fe:ab:93:ec:42:da:8c:97:96:49:0f:11:
                    7f:4e:bb:ef:d3:62:89:1a:e3:e7:4f:73:a5:fb:64:
                    d8:43:21:83:11:31:da:c9:be:16:b7:90:b3:63:ad:
                    0e:47:47:68:52:ab:08:35:04:6e:3c:8d:72:1d:8d:
                    e1:2e:38:eb:c1:dd:3a:17:48:5b:02:46:d3:95:a3:
                    5c:0b:7d:60:e6:e6:0b:61:37:f8:3a:70:a3:e9:f7:
                    14:9b:27:60:0f:0a:e3:a1:86:de:f5:1b:5f:f9:3b:
                    2b:ad:07:30:d0:0c:b6:b5:da:fd:07:95:52:8d:5b:
                    08:e8:93:8f:42:2c:e5:88:ce:55:05:a3:ed:f0:e2:
                    3d:93:32:d5:04:fb:aa:ac:be:51:05:74:76:ee:fb:
                    16:e6:d5:8d:76:19:8a:6a:fb:5f:5d:a3:df:23:b9:
                    fc:d9:b1:a9:69:e6:1c:1a:02:99:30:6c:c7:36:87:
                    91:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:54:85:EA:2F:D6:4E:6D:05:D2:A4:4D:18:FD:D3:AE:0A:73:42:7C
            X509v3 Authority Key Identifier:
                keyid:4D:F4:15:D2:DB:76:0C:39:85:5B:3F:3D:9C:F3:CE:44:1A:78:3E:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a124aa8c-dedc-4376-9381-0a81e6bcc564/0/4DF415D2DB760C39855B3F3D9CF3CE441A783E36.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DF415D2DB760C39855B3F3D9CF3CE441A783E36.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a124aa8c-dedc-4376-9381-0a81e6bcc564/0/3130332e3130352e39382e302f32342d3234203d3e20313336383638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.105.98.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:92:1b:f3:bd:76:93:64:07:43:68:14:bc:0b:ae:4b:42:82:
         92:e6:54:ee:21:45:17:af:6b:45:85:da:bf:a6:80:7e:b1:08:
         ce:87:bf:df:37:d6:17:1b:3e:d1:df:d8:d1:5c:18:53:2b:54:
         71:76:2a:09:61:e9:d2:3c:4d:93:38:d4:d1:70:f4:3f:57:72:
         60:83:2b:cf:52:9f:6e:e2:c5:a4:02:3b:c0:d6:83:c2:ea:52:
         48:0e:4a:b7:4f:fe:44:4d:68:fd:ca:f8:7f:32:f2:06:87:bd:
         66:66:5c:5e:68:bc:2f:cb:15:21:93:a5:9d:1c:73:d3:cb:08:
         2a:82:ad:f4:71:61:cf:63:ff:a5:af:42:dd:de:43:9b:28:f0:
         57:aa:37:2e:f2:56:2e:6a:6a:cb:61:af:57:93:ea:97:67:d5:
         08:1e:54:d5:e0:26:4f:7d:2b:45:7f:9d:95:b9:95:ab:3c:87:
         9a:06:ff:b5:bd:3a:a2:65:39:9f:5f:d2:01:5f:5f:49:10:a2:
         51:2b:ea:e7:c0:2b:0f:a4:1d:ac:1e:4b:c3:40:9e:a7:cd:b1:
         37:86:67:bf:bc:6b:d0:ce:a4:be:6f:01:a3:99:55:96:0e:7f:
         b0:a9:19:5e:7e:8a:18:e7:d5:ee:48:b8:5e:6c:2d:d0:31:5e:
         8d:57:df:c7
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIURsZHuveEyBXAA5eorViZRNgqjcUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNERGNDE1RDJEQjc2MEMzOTg1NUIzRjNEOUNGM0NFNDQx
QTc4M0UzNjAeFw0yNTA2MDIwMDU3MzdaFw0yNjA2MDEwMTAyMzdaMDMxMTAvBgNV
BAMTKEY5NTQ4NUVBMkZENjRFNkQwNUQyQTQ0RDE4RkREM0FFMEE3MzQyN0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBjJl/HqIt6EGr7c70iDZI2kz7
pDbMDPX+KMBCC4EQ9Sg4Ig760OLn67LkwjmRc6EsOnuhOKeDYzy0M4nD5pYrqQw9
YlbZlKNVC6AYaf6rk+xC2oyXlkkPEX9Ou+/TYoka4+dPc6X7ZNhDIYMRMdrJvha3
kLNjrQ5HR2hSqwg1BG48jXIdjeEuOOvB3ToXSFsCRtOVo1wLfWDm5gthN/g6cKPp
9xSbJ2APCuOhht71G1/5OyutBzDQDLa12v0HlVKNWwjok49CLOWIzlUFo+3w4j2T
MtUE+6qsvlEFdHbu+xbm1Y12GYpq+19do98jufzZsalp5hwaApkwbMc2h5GdAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQU+VSF6i/WTm0F0qRNGP3TrgpzQnwwHwYDVR0j
BBgwFoAUTfQV0tt2DDmFWz89nPPORBp4PjYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
MTI0YWE4Yy1kZWRjLTQzNzYtOTM4MS0wYTgxZTZiY2M1NjQvMC80REY0MTVEMkRC
NzYwQzM5ODU1QjNGM0Q5Q0YzQ0U0NDFBNzgzRTM2LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNERGNDE1RDJEQjc2MEMzOTg1NUIzRjNEOUNGM0NFNDQxQTc4
M0UzNi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2ExMjRhYThjLWRlZGMtNDM3Ni05
MzgxLTBhODFlNmJjYzU2NC8wLzMxMzAzMzJlMzEzMDM1MmUzOTM4MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzMzM2MzgzNjM4LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ2liMA0GCSqG
SIb3DQEBCwUAA4IBAQBpkhvzvXaTZAdDaBS8C65LQoKS5lTuIUUXr2tFhdq/poB+
sQjOh7/fN9YXGz7R39jRXBhTK1RxdioJYenSPE2TONTRcPQ/V3JggyvPUp9u4sWk
AjvA1oPC6lJIDkq3T/5ETWj9yvh/MvIGh71mZlxeaLwvyxUhk6WdHHPTywgqgq30
cWHPY/+lr0Ld3kObKPBXqjcu8lYuamrLYa9Xk+qXZ9UIHlTV4CZPfStFf52VuZWr
PIeaBv+1vTqiZTmfX9IBX19JEKJRK+rnwCsPpB2sHkvDQJ6nzbE3hme/vGvQzqS+
bwGjmVWWDn+wqRlefooY59XuSLhebC3QMV6NV9/H
-----END CERTIFICATE-----
Generated at Sun Jun 8 07:36:03 2025 by rpki-client