Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/3130332e31382e33322e302f32342d3234203d3e203435333132.roa
File:                     3130332e31382e33322e302f32342d3234203d3e203435333132.roa (raw, json)
Hash identifier:          4Citujlna8D/k1MJvQpvm9lSlndkit3lqneQ9DdcNiI=
Subject key identifier:   4E:9B:29:51:D7:40:73:92:C2:95:F0:59:9D:47:CA:46:0B:11:72:11
Certificate issuer:       /CN=154EE03198467B96315FDB527FB3BBCCA0BFC441
Certificate serial:       48EC1A2736B4930B1BC9D04A4816F389E62EAB46
Authority key identifier: 15:4E:E0:31:98:46:7B:96:31:5F:DB:52:7F:B3:BB:CC:A0:BF:C4:41
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/154EE03198467B96315FDB527FB3BBCCA0BFC441.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/3130332e31382e33322e302f32342d3234203d3e203435333132.roa
Signing time:             Mon 02 Jun 2025 02:03:14 +0000
ROA not before:           Mon 02 Jun 2025 01:58:14 +0000
ROA not after:            Mon 01 Jun 2026 02:03:14 +0000
asID:                     45312
IP address blocks:        103.18.32.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/154EE03198467B96315FDB527FB3BBCCA0BFC441.crl
                          rsync://repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/154EE03198467B96315FDB527FB3BBCCA0BFC441.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/154EE03198467B96315FDB527FB3BBCCA0BFC441.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Jun 2025 12:49:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:ec:1a:27:36:b4:93:0b:1b:c9:d0:4a:48:16:f3:89:e6:2e:ab:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=154EE03198467B96315FDB527FB3BBCCA0BFC441
        Validity
            Not Before: Jun  2 01:58:14 2025 GMT
            Not After : Jun  1 02:03:14 2026 GMT
        Subject: CN=4E9B2951D7407392C295F0599D47CA460B117211
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:32:12:51:d6:de:34:8d:4c:cb:b2:5c:99:5f:
                    71:4d:bf:a5:be:65:d7:7c:11:72:6c:ce:f1:50:d7:
                    bb:b5:8a:a9:ce:77:da:bb:d4:38:19:fc:88:af:38:
                    f1:6f:3d:a9:85:1e:61:f9:0d:37:94:40:83:56:fc:
                    85:5d:ad:f7:8d:76:15:cd:f7:df:fc:db:12:1f:f2:
                    26:c7:1d:1d:67:cd:3b:c9:e9:16:90:ac:10:c9:11:
                    c6:32:bd:2f:f1:17:af:a2:2c:fb:9f:86:e4:ed:c4:
                    0e:83:96:eb:4a:5e:fe:9f:3e:bc:0e:57:49:24:16:
                    b0:99:a2:0d:14:e1:73:98:d0:0c:ac:8a:76:a4:ea:
                    78:b8:33:3f:f7:5d:ae:aa:5d:c3:11:e6:07:fa:88:
                    56:99:41:4b:84:8c:c2:a9:5d:53:57:ac:54:10:6c:
                    4c:5e:0d:84:58:c3:ed:6c:bb:d8:03:e0:92:af:a4:
                    dd:9d:d5:2d:34:44:f6:6d:74:f8:bd:31:27:3c:da:
                    d1:61:28:50:ba:de:9d:04:ea:97:02:d9:8d:6f:2d:
                    88:54:fa:d2:7f:f7:00:89:14:d7:ba:d6:63:f3:bc:
                    77:83:6b:2e:15:3f:da:b5:f7:4a:e8:90:d0:e0:38:
                    20:4c:6d:e3:a4:82:73:bb:11:ff:75:6c:93:28:0e:
                    7e:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:9B:29:51:D7:40:73:92:C2:95:F0:59:9D:47:CA:46:0B:11:72:11
            X509v3 Authority Key Identifier:
                keyid:15:4E:E0:31:98:46:7B:96:31:5F:DB:52:7F:B3:BB:CC:A0:BF:C4:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/154EE03198467B96315FDB527FB3BBCCA0BFC441.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/154EE03198467B96315FDB527FB3BBCCA0BFC441.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/3130332e31382e33322e302f32342d3234203d3e203435333132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.18.32.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:25:94:53:13:d5:e0:2f:6f:c7:d8:51:96:74:cd:a6:d3:5f:
         94:ce:5a:d6:71:7a:b7:a0:6a:c6:ea:e9:10:b3:07:7d:60:c1:
         ad:5c:98:62:3b:ed:8c:84:5e:e4:3a:6d:3c:d3:3d:3a:2b:38:
         4f:dc:5f:49:f3:2b:99:fb:85:9e:17:c4:43:69:a3:af:c2:f6:
         c0:a2:3a:39:3f:91:d4:30:a6:aa:1c:4b:70:42:06:77:ae:0e:
         85:91:1f:46:4b:b8:d0:d4:2c:fd:5e:84:d3:ca:ee:35:51:33:
         1a:58:83:b9:6b:b5:3e:1b:68:72:8b:c1:62:36:8e:0a:d3:02:
         4f:81:5c:6b:4c:88:6f:cc:a2:2a:19:7e:22:3a:f3:92:03:7c:
         2f:66:1a:94:e9:0f:ba:44:ed:3e:31:ed:d3:b8:23:13:69:87:
         4e:3f:e5:ca:c1:b1:99:60:97:c7:1c:a6:32:b4:c2:e4:4d:0e:
         2e:63:1c:c6:8f:d4:d9:57:3f:6b:7c:89:dc:e9:33:4e:2a:98:
         fa:2f:2f:58:ce:66:92:8d:8b:68:cb:10:dd:31:59:12:43:ad:
         61:19:5d:98:4c:27:e9:e2:3d:9f:bc:cd:db:8b:47:72:a5:e9:
         2d:ae:41:33:bd:34:52:65:1e:8b:b4:07:9e:43:4b:c2:3b:e7:
         ef:f8:c3:24
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUSOwaJza0kwsbydBKSBbzieYuq0YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTU0RUUwMzE5ODQ2N0I5NjMxNUZEQjUyN0ZCM0JCQ0NB
MEJGQzQ0MTAeFw0yNTA2MDIwMTU4MTRaFw0yNjA2MDEwMjAzMTRaMDMxMTAvBgNV
BAMTKDRFOUIyOTUxRDc0MDczOTJDMjk1RjA1OTlENDdDQTQ2MEIxMTcyMTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwMhJR1t40jUzLslyZX3FNv6W+
Zdd8EXJszvFQ17u1iqnOd9q71DgZ/IivOPFvPamFHmH5DTeUQINW/IVdrfeNdhXN
99/82xIf8ibHHR1nzTvJ6RaQrBDJEcYyvS/xF6+iLPufhuTtxA6DlutKXv6fPrwO
V0kkFrCZog0U4XOY0Aysinak6ni4Mz/3Xa6qXcMR5gf6iFaZQUuEjMKpXVNXrFQQ
bExeDYRYw+1su9gD4JKvpN2d1S00RPZtdPi9MSc82tFhKFC63p0E6pcC2Y1vLYhU
+tJ/9wCJFNe61mPzvHeDay4VP9q190rokNDgOCBMbeOkgnO7Ef91bJMoDn5hAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQUTpspUddAc5LClfBZnUfKRgsRchEwHwYDVR0j
BBgwFoAUFU7gMZhGe5YxX9tSf7O7zKC/xEEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j
NjIxZjc1My1hODhlLTRlZGYtYTMwNi1iZDkzZDVhMzhmZWEvMC8xNTRFRTAzMTk4
NDY3Qjk2MzE1RkRCNTI3RkIzQkJDQ0EwQkZDNDQxLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMTU0RUUwMzE5ODQ2N0I5NjMxNUZEQjUyN0ZCM0JCQ0NBMEJG
QzQ0MS5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2M2MjFmNzUzLWE4OGUtNGVkZi1h
MzA2LWJkOTNkNWEzOGZlYS8wLzMxMzAzMzJlMzEzODJlMzMzMjJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDM0MzUzMzMxMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnEiAwDQYJKoZIhvcN
AQELBQADggEBAGsllFMT1eAvb8fYUZZ0zabTX5TOWtZxeregasbq6RCzB31gwa1c
mGI77YyEXuQ6bTzTPTorOE/cX0nzK5n7hZ4XxENpo6/C9sCiOjk/kdQwpqocS3BC
BneuDoWRH0ZLuNDULP1ehNPK7jVRMxpYg7lrtT4baHKLwWI2jgrTAk+BXGtMiG/M
oioZfiI685IDfC9mGpTpD7pE7T4x7dO4IxNph04/5crBsZlgl8ccpjK0wuRNDi5j
HMaP1NlXP2t8idzpM04qmPovL1jOZpKNi2jLEN0xWRJDrWEZXZhMJ+niPZ+8zduL
R3Kl6S2uQTO9NFJlHou0B55DS8I75+/4wyQ=
-----END CERTIFICATE-----
Generated at Thu Jun 5 18:12:18 2025 by rpki-client