Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/3130332e33392e34382e302f32342d3234203d3e203633353031.roa
File:                     3130332e33392e34382e302f32342d3234203d3e203633353031.roa (raw, json)
Hash identifier:          YLwR3x+9Ktbemo/unDpiFl0Wr9oNKDN+CzK0/aYC+Pw=
Subject key identifier:   30:FD:FA:4F:A0:78:4B:62:94:D4:15:87:61:B3:B4:E9:50:D2:C9:06
Certificate issuer:       /CN=455696A81F434F9A36D66F455F4B3C43855A18E1
Certificate serial:       65790CF67E47D8059F0CEFFD267BF55117491B6D
Authority key identifier: 45:56:96:A8:1F:43:4F:9A:36:D6:6F:45:5F:4B:3C:43:85:5A:18:E1
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/455696A81F434F9A36D66F455F4B3C43855A18E1.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/3130332e33392e34382e302f32342d3234203d3e203633353031.roa
Signing time:             Sun 25 May 2025 17:00:02 +0000
ROA not before:           Sun 25 May 2025 16:55:02 +0000
ROA not after:            Sun 24 May 2026 17:00:02 +0000
asID:                     63501
IP address blocks:        103.39.48.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/455696A81F434F9A36D66F455F4B3C43855A18E1.crl
                          rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/455696A81F434F9A36D66F455F4B3C43855A18E1.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/455696A81F434F9A36D66F455F4B3C43855A18E1.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Jun 2025 02:20:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:79:0c:f6:7e:47:d8:05:9f:0c:ef:fd:26:7b:f5:51:17:49:1b:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=455696A81F434F9A36D66F455F4B3C43855A18E1
        Validity
            Not Before: May 25 16:55:02 2025 GMT
            Not After : May 24 17:00:02 2026 GMT
        Subject: CN=30FDFA4FA0784B6294D4158761B3B4E950D2C906
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:57:e3:66:de:94:a7:eb:58:fe:ce:b2:03:cf:
                    5a:c6:c9:24:48:f9:99:bd:3a:5d:65:a6:dd:0f:01:
                    ff:37:3d:c0:7b:e8:7f:ab:e9:96:12:40:fe:1b:54:
                    d9:f2:49:87:f4:45:50:b5:44:6c:f1:17:48:c7:29:
                    5a:b1:a0:bd:55:58:68:ff:7c:4f:f1:2a:35:5d:40:
                    89:f4:6c:82:7c:43:b0:a8:2e:b8:88:04:9c:16:de:
                    0d:b2:b1:2a:ae:10:b3:74:96:58:7c:54:9a:93:cb:
                    85:44:ca:7a:29:8c:1e:fe:5d:68:64:46:95:f0:37:
                    7c:a3:0e:38:74:e4:94:e8:d8:65:50:23:8f:ef:06:
                    a3:6f:e3:a9:21:be:97:1a:43:9d:aa:9a:7e:b5:51:
                    86:b3:12:d1:60:28:f5:10:ac:98:47:7e:6c:41:1e:
                    2a:02:bb:2c:ac:b2:08:dd:cd:cf:66:94:53:c6:df:
                    05:54:e7:d4:c5:df:fa:7c:4c:3c:64:41:b3:e3:0c:
                    ac:d1:bc:3c:99:b6:5c:6e:c8:87:e4:31:d2:3f:54:
                    91:de:1e:90:ee:30:99:a3:6d:cc:c4:3d:ab:30:e9:
                    e6:50:f4:20:dc:69:bf:f4:3d:e9:b8:ff:65:df:dd:
                    bd:47:38:73:1c:f7:bb:73:03:d5:b9:d4:7c:aa:d2:
                    b8:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:FD:FA:4F:A0:78:4B:62:94:D4:15:87:61:B3:B4:E9:50:D2:C9:06
            X509v3 Authority Key Identifier:
                keyid:45:56:96:A8:1F:43:4F:9A:36:D6:6F:45:5F:4B:3C:43:85:5A:18:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/455696A81F434F9A36D66F455F4B3C43855A18E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/455696A81F434F9A36D66F455F4B3C43855A18E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/3130332e33392e34382e302f32342d3234203d3e203633353031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.39.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:72:e0:d9:62:a2:ec:a7:5c:9a:39:f3:f5:54:90:d0:bc:c3:
         4f:f4:72:39:f7:3f:a6:03:1d:ec:e1:33:63:2a:23:9e:ef:db:
         f6:e9:de:6f:40:96:bd:9e:3b:86:69:11:7b:bc:c3:bf:93:b8:
         51:4a:13:cb:b8:7f:75:4d:c4:94:94:91:41:84:44:be:c7:76:
         e4:62:99:64:7b:af:70:b7:aa:e4:55:a5:d6:2b:f2:95:d5:62:
         7b:2d:9a:05:70:0f:d7:d4:17:87:c9:b0:4e:1f:2f:ec:ee:4e:
         fc:03:9d:c7:ff:07:40:61:31:54:39:fc:60:03:a6:b8:3a:97:
         11:5f:12:3c:bc:71:95:0a:40:cb:08:9b:68:a9:bf:71:1c:7d:
         91:ba:db:02:7b:67:e6:32:1a:b0:df:1f:09:ed:34:64:6a:76:
         22:d9:7d:42:93:b6:30:69:fa:7e:eb:79:12:ed:5c:a6:fb:cb:
         5b:5b:15:6d:26:9d:f5:30:e1:bb:2c:ac:82:5e:aa:9d:50:b6:
         d1:11:73:df:f0:a6:14:2d:49:3f:e4:f5:d0:1d:f1:0e:b0:ff:
         35:b2:1a:aa:3f:43:18:dd:3a:df:c9:9f:04:66:b7:b8:5f:61:
         13:ca:5d:26:48:06:34:6f:69:e7:a9:7f:2e:1f:53:98:55:8b:
         45:76:cd:c6
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUZXkM9n5H2AWfDO/9Jnv1URdJG20wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDU1Njk2QTgxRjQzNEY5QTM2RDY2RjQ1NUY0QjNDNDM4
NTVBMThFMTAeFw0yNTA1MjUxNjU1MDJaFw0yNjA1MjQxNzAwMDJaMDMxMTAvBgNV
BAMTKDMwRkRGQTRGQTA3ODRCNjI5NEQ0MTU4NzYxQjNCNEU5NTBEMkM5MDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7V+Nm3pSn61j+zrIDz1rGySRI
+Zm9Ol1lpt0PAf83PcB76H+r6ZYSQP4bVNnySYf0RVC1RGzxF0jHKVqxoL1VWGj/
fE/xKjVdQIn0bIJ8Q7CoLriIBJwW3g2ysSquELN0llh8VJqTy4VEynopjB7+XWhk
RpXwN3yjDjh05JTo2GVQI4/vBqNv46khvpcaQ52qmn61UYazEtFgKPUQrJhHfmxB
HioCuyyssgjdzc9mlFPG3wVU59TF3/p8TDxkQbPjDKzRvDyZtlxuyIfkMdI/VJHe
HpDuMJmjbczEPasw6eZQ9CDcab/0Pem4/2Xf3b1HOHMc97tzA9W51Hyq0rjTAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQUMP36T6B4S2KU1BWHYbO06VDSyQYwHwYDVR0j
BBgwFoAURVaWqB9DT5o21m9FX0s8Q4VaGOEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
ZDkxOGIxNS1lNjNlLTRiMzgtYTA1Yy02NTBmYjQ5ZjA1OTQvMC80NTU2OTZBODFG
NDM0RjlBMzZENjZGNDU1RjRCM0M0Mzg1NUExOEUxLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNDU1Njk2QTgxRjQzNEY5QTM2RDY2RjQ1NUY0QjNDNDM4NTVB
MThFMS5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2FkOTE4YjE1LWU2M2UtNGIzOC1h
MDVjLTY1MGZiNDlmMDU5NC8wLzMxMzAzMzJlMzMzOTJlMzQzODJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDM2MzMzNTMwMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnJzAwDQYJKoZIhvcN
AQELBQADggEBAHZy4NliouynXJo58/VUkNC8w0/0cjn3P6YDHezhM2MqI57v2/bp
3m9Alr2eO4ZpEXu8w7+TuFFKE8u4f3VNxJSUkUGERL7HduRimWR7r3C3quRVpdYr
8pXVYnstmgVwD9fUF4fJsE4fL+zuTvwDncf/B0BhMVQ5/GADprg6lxFfEjy8cZUK
QMsIm2ipv3EcfZG62wJ7Z+YyGrDfHwntNGRqdiLZfUKTtjBp+n7reRLtXKb7y1tb
FW0mnfUw4bssrIJeqp1QttERc9/wphQtST/k9dAd8Q6w/zWyGqo/QxjdOt/JnwRm
t7hfYRPKXSZIBjRvaeepfy4fU5hVi0V2zcY=
-----END CERTIFICATE-----
Generated at Sat Jun 7 04:04:05 2025 by rpki-client