Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/3130332e33392e35312e302f32342d3234203d3e203633353031.roa
File:                     3130332e33392e35312e302f32342d3234203d3e203633353031.roa (raw, json)
Hash identifier:          JH5C1ysIyofYJFDdAetBTcCh1nnZyIwvE4THQXZ6l3g=
Subject key identifier:   7C:DA:AB:D5:C2:E8:6C:E1:94:AC:42:FF:55:EE:0C:52:17:8F:7D:52
Certificate issuer:       /CN=455696A81F434F9A36D66F455F4B3C43855A18E1
Certificate serial:       77DE76A9CA7B9E05880248939FF28D22606DF886
Authority key identifier: 45:56:96:A8:1F:43:4F:9A:36:D6:6F:45:5F:4B:3C:43:85:5A:18:E1
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/455696A81F434F9A36D66F455F4B3C43855A18E1.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/3130332e33392e35312e302f32342d3234203d3e203633353031.roa
Signing time:             Sun 25 May 2025 17:00:02 +0000
ROA not before:           Sun 25 May 2025 16:55:02 +0000
ROA not after:            Sun 24 May 2026 17:00:02 +0000
asID:                     63501
IP address blocks:        103.39.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/455696A81F434F9A36D66F455F4B3C43855A18E1.crl
                          rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/455696A81F434F9A36D66F455F4B3C43855A18E1.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/455696A81F434F9A36D66F455F4B3C43855A18E1.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Jun 2025 02:20:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:de:76:a9:ca:7b:9e:05:88:02:48:93:9f:f2:8d:22:60:6d:f8:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=455696A81F434F9A36D66F455F4B3C43855A18E1
        Validity
            Not Before: May 25 16:55:02 2025 GMT
            Not After : May 24 17:00:02 2026 GMT
        Subject: CN=7CDAABD5C2E86CE194AC42FF55EE0C52178F7D52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:81:3d:3a:ee:42:09:5a:fa:43:7a:b1:95:b2:
                    5b:2e:9b:d2:44:ab:c7:15:69:67:ba:49:75:37:de:
                    e9:0f:99:9f:af:99:78:5d:be:8d:9b:3d:3e:01:5f:
                    87:c2:02:24:e5:74:0c:87:0e:13:2b:5f:ae:d6:4e:
                    6a:62:99:36:29:7a:8b:22:9b:5e:ae:56:b8:bd:40:
                    53:47:3e:a2:e7:30:4b:74:03:37:6c:d4:fd:d7:aa:
                    06:91:cb:e3:2b:01:ac:53:c4:06:5a:67:9e:50:a4:
                    ab:2e:da:e0:0c:d2:f2:47:e4:9a:44:3e:24:fe:d9:
                    3b:90:c7:8f:bb:6b:46:6c:e6:69:40:5c:0f:21:86:
                    48:97:9c:d6:6b:fa:90:c7:28:99:50:01:4a:b4:5b:
                    02:f0:0b:a2:77:b0:7c:26:6e:29:66:90:89:e7:05:
                    8e:17:c2:34:0a:3e:ca:8d:5e:9d:dc:93:13:72:f3:
                    46:a1:82:93:8c:f0:06:7d:08:9b:39:83:99:43:15:
                    2d:27:78:66:25:7d:74:51:64:34:21:dd:17:77:2e:
                    82:70:12:f8:e0:d6:f0:bf:94:bb:c6:11:11:af:5f:
                    4b:8b:9d:78:cb:b3:8c:6b:b1:f9:26:1f:4b:51:d0:
                    18:96:df:8a:85:c4:e4:c8:09:e6:2f:3a:eb:f1:7f:
                    90:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:DA:AB:D5:C2:E8:6C:E1:94:AC:42:FF:55:EE:0C:52:17:8F:7D:52
            X509v3 Authority Key Identifier:
                keyid:45:56:96:A8:1F:43:4F:9A:36:D6:6F:45:5F:4B:3C:43:85:5A:18:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/455696A81F434F9A36D66F455F4B3C43855A18E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/455696A81F434F9A36D66F455F4B3C43855A18E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/3130332e33392e35312e302f32342d3234203d3e203633353031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.39.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:78:67:5a:0a:e2:b8:8e:6a:b0:c4:4a:49:ac:ee:f1:50:05:
         a7:f5:92:a8:f1:6c:ab:58:ca:7d:ab:f9:a8:8b:c2:d8:10:b5:
         bd:5b:a7:61:c2:58:87:25:a9:77:b3:39:79:0f:23:92:e9:e7:
         97:5a:1d:f6:a5:fa:3c:a3:99:36:f6:e1:c2:f2:cc:88:24:38:
         33:fa:9e:00:fb:11:c4:c1:5b:60:d9:67:fb:62:33:f6:db:04:
         c3:2b:12:72:fa:c4:3f:f9:9f:3d:e6:99:30:eb:3c:f4:3a:ee:
         23:4f:39:7b:0c:9c:a0:0e:3c:7f:05:99:7a:70:f9:89:f4:91:
         7f:e7:84:06:95:46:05:87:15:62:44:5c:7e:3a:53:b5:4d:58:
         ac:92:c2:16:3b:81:c2:84:49:08:32:df:b9:d0:e2:b0:83:d5:
         51:5c:72:ee:c6:fc:90:bb:0b:82:ed:6c:aa:37:2a:20:35:d3:
         44:ee:31:ae:2f:82:9d:c7:eb:aa:b0:01:ff:72:74:89:8a:43:
         0b:ad:ff:e8:58:5a:6f:8e:67:ef:fd:f0:f3:c4:9a:83:7c:d4:
         74:98:a2:76:41:51:b0:19:d7:7f:70:8b:ef:7a:46:85:30:44:
         3a:1f:66:c8:b2:6d:f5:27:9b:8d:d3:52:9c:1c:64:b8:b7:f2:
         65:83:9c:89
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUd952qcp7ngWIAkiTn/KNImBt+IYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDU1Njk2QTgxRjQzNEY5QTM2RDY2RjQ1NUY0QjNDNDM4
NTVBMThFMTAeFw0yNTA1MjUxNjU1MDJaFw0yNjA1MjQxNzAwMDJaMDMxMTAvBgNV
BAMTKDdDREFBQkQ1QzJFODZDRTE5NEFDNDJGRjU1RUUwQzUyMTc4RjdENTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKgT067kIJWvpDerGVslsum9JE
q8cVaWe6SXU33ukPmZ+vmXhdvo2bPT4BX4fCAiTldAyHDhMrX67WTmpimTYpeosi
m16uVri9QFNHPqLnMEt0Azds1P3XqgaRy+MrAaxTxAZaZ55QpKsu2uAM0vJH5JpE
PiT+2TuQx4+7a0Zs5mlAXA8hhkiXnNZr+pDHKJlQAUq0WwLwC6J3sHwmbilmkInn
BY4XwjQKPsqNXp3ckxNy80ahgpOM8AZ9CJs5g5lDFS0neGYlfXRRZDQh3Rd3LoJw
Evjg1vC/lLvGERGvX0uLnXjLs4xrsfkmH0tR0BiW34qFxOTICeYvOuvxf5CNAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQUfNqr1cLobOGUrEL/Ve4MUhePfVIwHwYDVR0j
BBgwFoAURVaWqB9DT5o21m9FX0s8Q4VaGOEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
ZDkxOGIxNS1lNjNlLTRiMzgtYTA1Yy02NTBmYjQ5ZjA1OTQvMC80NTU2OTZBODFG
NDM0RjlBMzZENjZGNDU1RjRCM0M0Mzg1NUExOEUxLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNDU1Njk2QTgxRjQzNEY5QTM2RDY2RjQ1NUY0QjNDNDM4NTVB
MThFMS5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2FkOTE4YjE1LWU2M2UtNGIzOC1h
MDVjLTY1MGZiNDlmMDU5NC8wLzMxMzAzMzJlMzMzOTJlMzUzMTJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDM2MzMzNTMwMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnJzMwDQYJKoZIhvcN
AQELBQADggEBADp4Z1oK4riOarDESkms7vFQBaf1kqjxbKtYyn2r+aiLwtgQtb1b
p2HCWIclqXezOXkPI5Lp55daHfal+jyjmTb24cLyzIgkODP6ngD7EcTBW2DZZ/ti
M/bbBMMrEnL6xD/5nz3mmTDrPPQ67iNPOXsMnKAOPH8FmXpw+Yn0kX/nhAaVRgWH
FWJEXH46U7VNWKySwhY7gcKESQgy37nQ4rCD1VFccu7G/JC7C4LtbKo3KiA100Tu
Ma4vgp3H66qwAf9ydImKQwut/+hYWm+OZ+/98PPEmoN81HSYonZBUbAZ139wi+96
RoUwRDofZsiybfUnm43TUpwcZLi38mWDnIk=
-----END CERTIFICATE-----
Generated at Sat Jun 7 04:05:13 2025 by rpki-client