Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/3130332e33392e35302e302f32332d3233203d3e203633353031.roa
File:                     3130332e33392e35302e302f32332d3233203d3e203633353031.roa (raw, json)
Hash identifier:          KZop+FhSj6+a2cj+ncq6IceeMQZFfFRMm8A5B880EEg=
Subject key identifier:   8B:30:9A:48:D6:82:32:CB:03:34:5D:A3:1D:B3:A5:8D:D2:4A:91:CD
Certificate issuer:       /CN=455696A81F434F9A36D66F455F4B3C43855A18E1
Certificate serial:       18F89C2ED71A14B8A78A00CF61779C6142233ACB
Authority key identifier: 45:56:96:A8:1F:43:4F:9A:36:D6:6F:45:5F:4B:3C:43:85:5A:18:E1
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/455696A81F434F9A36D66F455F4B3C43855A18E1.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/3130332e33392e35302e302f32332d3233203d3e203633353031.roa
Signing time:             Sun 25 May 2025 19:00:02 +0000
ROA not before:           Sun 25 May 2025 18:55:02 +0000
ROA not after:            Sun 24 May 2026 19:00:02 +0000
asID:                     63501
IP address blocks:        103.39.50.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/455696A81F434F9A36D66F455F4B3C43855A18E1.crl
                          rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/455696A81F434F9A36D66F455F4B3C43855A18E1.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/455696A81F434F9A36D66F455F4B3C43855A18E1.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Jun 2025 02:20:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:f8:9c:2e:d7:1a:14:b8:a7:8a:00:cf:61:77:9c:61:42:23:3a:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=455696A81F434F9A36D66F455F4B3C43855A18E1
        Validity
            Not Before: May 25 18:55:02 2025 GMT
            Not After : May 24 19:00:02 2026 GMT
        Subject: CN=8B309A48D68232CB03345DA31DB3A58DD24A91CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:70:64:49:61:0c:55:e2:63:c3:6e:bb:c2:e5:
                    4b:ee:8a:42:5c:9d:9e:d6:57:3c:97:b0:17:93:bb:
                    44:e8:21:71:20:91:7c:68:00:4f:0d:70:3b:d6:e2:
                    dc:e1:c3:ba:bb:81:ab:57:b8:6f:62:80:87:06:72:
                    41:a5:82:44:18:a2:f1:8f:b5:3d:94:a8:ca:6e:fe:
                    30:b0:e6:6a:9e:b1:cf:92:03:45:e3:23:85:46:c2:
                    a7:28:e3:35:ac:32:b5:63:1a:e7:b4:db:1a:4a:9f:
                    16:88:e6:b4:31:61:11:87:89:e5:32:d7:2d:b4:6b:
                    65:ae:b3:16:03:e1:4d:43:ad:25:b0:2c:df:7b:0a:
                    31:52:e4:62:37:78:a0:9f:f7:3c:85:5a:cc:b9:5a:
                    19:da:52:3a:91:bf:d9:35:c5:73:5d:b6:83:d7:b3:
                    42:ef:a6:fa:a4:e8:29:87:14:82:6b:7c:69:c3:5e:
                    af:47:fe:fd:75:41:41:b9:05:4b:27:fe:f7:db:4d:
                    79:17:f7:a7:7b:54:b3:c6:a0:40:cd:f9:5f:09:9c:
                    bd:15:52:67:d2:1b:d7:84:6c:2a:a8:8b:67:88:cd:
                    4d:3c:37:6a:09:96:a5:5a:c4:97:4c:09:41:97:7f:
                    50:a2:c2:32:33:d5:66:1a:56:c1:db:32:44:49:38:
                    bb:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:30:9A:48:D6:82:32:CB:03:34:5D:A3:1D:B3:A5:8D:D2:4A:91:CD
            X509v3 Authority Key Identifier:
                keyid:45:56:96:A8:1F:43:4F:9A:36:D6:6F:45:5F:4B:3C:43:85:5A:18:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/455696A81F434F9A36D66F455F4B3C43855A18E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/455696A81F434F9A36D66F455F4B3C43855A18E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/3130332e33392e35302e302f32332d3233203d3e203633353031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.39.50.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2d:db:62:7d:fd:2a:8f:72:63:a3:6c:66:ef:8d:d8:56:87:5e:
         18:4d:cf:39:4a:6e:ce:4d:53:db:ae:60:fc:5f:87:b6:e9:93:
         5c:bf:71:1f:c8:7e:d6:ce:23:c3:58:a1:86:aa:f3:07:2e:5c:
         ac:ea:51:ff:d9:ef:66:e7:8d:a3:dc:c2:03:51:9e:d2:e2:27:
         e7:94:3d:ca:b6:1f:e1:e9:f5:25:fa:6b:5d:ba:bc:1b:6d:5b:
         e8:46:ac:c5:23:5b:64:ac:2f:85:2d:56:2d:76:b8:bc:ac:84:
         03:5e:01:81:50:17:66:2a:4c:a5:04:05:0a:1f:4d:3f:71:5a:
         1d:77:66:5b:5a:93:af:19:cd:09:90:cb:58:4b:8d:ee:70:b8:
         44:d9:cb:62:95:bc:51:8f:fe:a6:1b:02:3f:68:12:27:5e:bd:
         a8:fb:60:6d:0c:ae:f4:98:5d:d2:04:0c:db:62:10:12:d3:cc:
         10:81:a7:6d:b6:28:c8:17:c5:f1:02:9c:53:d9:76:61:7b:f5:
         c8:b6:72:bc:0e:14:d2:cc:c4:1c:25:34:6d:72:c4:ae:57:7f:
         67:9d:35:cf:e3:82:fe:f4:17:14:73:1f:bf:00:8b:b7:16:85:
         ad:db:43:7a:b7:30:c6:7e:62:2a:13:11:8e:43:f2:4b:b3:c0:
         a1:a1:27:a2
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUGPicLtcaFLinigDPYXecYUIjOsswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDU1Njk2QTgxRjQzNEY5QTM2RDY2RjQ1NUY0QjNDNDM4
NTVBMThFMTAeFw0yNTA1MjUxODU1MDJaFw0yNjA1MjQxOTAwMDJaMDMxMTAvBgNV
BAMTKDhCMzA5QTQ4RDY4MjMyQ0IwMzM0NURBMzFEQjNBNThERDI0QTkxQ0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpcGRJYQxV4mPDbrvC5UvuikJc
nZ7WVzyXsBeTu0ToIXEgkXxoAE8NcDvW4tzhw7q7gatXuG9igIcGckGlgkQYovGP
tT2UqMpu/jCw5mqesc+SA0XjI4VGwqco4zWsMrVjGue02xpKnxaI5rQxYRGHieUy
1y20a2WusxYD4U1DrSWwLN97CjFS5GI3eKCf9zyFWsy5WhnaUjqRv9k1xXNdtoPX
s0Lvpvqk6CmHFIJrfGnDXq9H/v11QUG5BUsn/vfbTXkX96d7VLPGoEDN+V8JnL0V
UmfSG9eEbCqoi2eIzU08N2oJlqVaxJdMCUGXf1CiwjIz1WYaVsHbMkRJOLsPAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQUizCaSNaCMssDNF2jHbOljdJKkc0wHwYDVR0j
BBgwFoAURVaWqB9DT5o21m9FX0s8Q4VaGOEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
ZDkxOGIxNS1lNjNlLTRiMzgtYTA1Yy02NTBmYjQ5ZjA1OTQvMC80NTU2OTZBODFG
NDM0RjlBMzZENjZGNDU1RjRCM0M0Mzg1NUExOEUxLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNDU1Njk2QTgxRjQzNEY5QTM2RDY2RjQ1NUY0QjNDNDM4NTVB
MThFMS5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2FkOTE4YjE1LWU2M2UtNGIzOC1h
MDVjLTY1MGZiNDlmMDU5NC8wLzMxMzAzMzJlMzMzOTJlMzUzMDJlMzAyZjMyMzMy
ZDMyMzMyMDNkM2UyMDM2MzMzNTMwMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnJzIwDQYJKoZIhvcN
AQELBQADggEBAC3bYn39Ko9yY6NsZu+N2FaHXhhNzzlKbs5NU9uuYPxfh7bpk1y/
cR/IftbOI8NYoYaq8wcuXKzqUf/Z72bnjaPcwgNRntLiJ+eUPcq2H+Hp9SX6a126
vBttW+hGrMUjW2SsL4UtVi12uLyshANeAYFQF2YqTKUEBQofTT9xWh13Zltak68Z
zQmQy1hLje5wuETZy2KVvFGP/qYbAj9oEidevaj7YG0MrvSYXdIEDNtiEBLTzBCB
p222KMgXxfECnFPZdmF79ci2crwOFNLMxBwlNG1yxK5Xf2edNc/jgv70FxRzH78A
i7cWha3bQ3q3MMZ+YioTEY5D8kuzwKGhJ6I=
-----END CERTIFICATE-----
Generated at Sat Jun 7 03:59:57 2025 by rpki-client