Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/cc0d40bc-93c8-415b-b6a8-aef088d7f4d4/0/3130332e38312e3235322e302f32332d3233203d3e20313530353337.roa
File:                     3130332e38312e3235322e302f32332d3233203d3e20313530353337.roa (raw, json)
Hash identifier:          bY09S58JuRMnRZFg/qJz8l2GALj8CEukiohA16BsJD4=
Subject key identifier:   E6:B5:35:2E:30:23:5A:5A:93:07:24:FA:A4:1A:32:31:F5:65:F6:DC
Certificate issuer:       /CN=3B1029D44B93CA0397DA506FE1E2147503641EC6
Certificate serial:       139900114307D3A457586B9AD33F662924907721
Authority key identifier: 3B:10:29:D4:4B:93:CA:03:97:DA:50:6F:E1:E2:14:75:03:64:1E:C6
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B1029D44B93CA0397DA506FE1E2147503641EC6.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/cc0d40bc-93c8-415b-b6a8-aef088d7f4d4/0/3130332e38312e3235322e302f32332d3233203d3e20313530353337.roa
Signing time:             Wed 19 Mar 2025 06:04:15 +0000
ROA not before:           Wed 19 Mar 2025 05:59:15 +0000
ROA not after:            Wed 18 Mar 2026 06:04:15 +0000
asID:                     150537
IP address blocks:        103.81.252.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/cc0d40bc-93c8-415b-b6a8-aef088d7f4d4/0/3B1029D44B93CA0397DA506FE1E2147503641EC6.crl
                          rsync://repo-rpki.idnic.net/repo/cc0d40bc-93c8-415b-b6a8-aef088d7f4d4/0/3B1029D44B93CA0397DA506FE1E2147503641EC6.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B1029D44B93CA0397DA506FE1E2147503641EC6.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Apr 2025 10:37:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:99:00:11:43:07:d3:a4:57:58:6b:9a:d3:3f:66:29:24:90:77:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B1029D44B93CA0397DA506FE1E2147503641EC6
        Validity
            Not Before: Mar 19 05:59:15 2025 GMT
            Not After : Mar 18 06:04:15 2026 GMT
        Subject: CN=E6B5352E30235A5A930724FAA41A3231F565F6DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c4:f3:18:bc:d4:5d:72:40:77:0b:7d:62:aa:
                    2e:af:d7:6d:cf:73:a8:c9:73:02:7e:f8:66:41:12:
                    77:07:1b:e9:0a:dc:aa:71:89:5e:07:e3:12:c2:c6:
                    04:cd:02:83:1a:e3:ea:16:f6:bb:44:54:bb:ac:79:
                    e9:57:4c:72:cd:81:b7:79:65:af:da:83:ec:35:d1:
                    f6:fd:5d:78:b8:87:d7:8b:cb:e5:03:bc:76:e5:c8:
                    79:d5:16:78:53:c7:93:7e:82:13:21:81:68:38:95:
                    54:23:87:e7:23:ea:e7:3f:f2:cd:66:0c:36:f1:32:
                    c5:f3:c4:1b:f1:b5:a2:b4:b1:d2:2f:50:1d:18:3a:
                    b6:81:4d:5c:3f:01:75:4c:2c:0b:34:1d:43:d8:c0:
                    77:00:13:05:c6:7d:13:ff:33:5f:2a:98:6e:bf:df:
                    e2:98:31:84:9d:ad:03:d5:17:1f:48:c1:80:08:66:
                    ec:6c:a3:2b:64:3b:a7:f4:96:d4:2d:ad:5f:83:c1:
                    23:89:83:cd:e3:52:76:42:a1:7b:ce:e6:b3:6a:b7:
                    9d:ac:ba:ab:18:6d:9d:cf:14:4a:b5:b2:31:3a:89:
                    52:42:ce:5f:e5:de:06:8d:88:68:8a:b8:03:f5:2f:
                    01:d3:cd:e5:ca:5c:65:c6:78:83:e8:d1:f4:67:15:
                    04:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:B5:35:2E:30:23:5A:5A:93:07:24:FA:A4:1A:32:31:F5:65:F6:DC
            X509v3 Authority Key Identifier:
                keyid:3B:10:29:D4:4B:93:CA:03:97:DA:50:6F:E1:E2:14:75:03:64:1E:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/cc0d40bc-93c8-415b-b6a8-aef088d7f4d4/0/3B1029D44B93CA0397DA506FE1E2147503641EC6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B1029D44B93CA0397DA506FE1E2147503641EC6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cc0d40bc-93c8-415b-b6a8-aef088d7f4d4/0/3130332e38312e3235322e302f32332d3233203d3e20313530353337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.81.252.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1c:5f:7c:d1:92:13:a9:01:6d:90:39:a6:f9:bd:72:0f:e6:99:
         d9:bb:ce:07:68:27:07:97:5c:50:22:1d:3d:74:0f:8f:5c:85:
         fa:d1:22:25:67:fd:3e:d5:97:e2:e6:9a:b6:5a:c2:c5:c9:61:
         b8:e3:95:8f:4f:d8:4e:8e:d7:9a:67:5b:94:99:21:ee:94:4d:
         b8:b5:a4:b0:26:2f:17:d8:71:5f:01:68:d0:7a:12:96:08:53:
         39:41:5f:a2:54:be:a7:09:bc:db:e9:f0:27:6d:e7:c8:b5:96:
         fe:c6:6d:8b:3b:78:e2:88:54:61:6a:21:84:5f:32:93:7e:ec:
         62:95:62:28:fd:70:7a:76:4b:e6:d6:29:05:fc:d0:fb:39:34:
         59:29:88:ac:e9:2e:67:55:81:d0:02:19:18:ce:c3:72:cb:79:
         cb:41:f4:9a:13:07:c5:c6:9e:01:5a:f1:cf:d2:3f:cb:b0:78:
         b5:ad:9e:5c:0f:93:cc:5b:31:c1:5b:70:ad:b6:9c:0d:50:d7:
         86:b8:e1:a6:90:4c:b8:95:b4:1c:51:4a:ce:7d:12:f2:ef:3e:
         42:1e:30:c3:85:0e:3b:21:c1:48:2c:48:7f:1f:51:17:3f:bc:
         ed:e5:44:49:ca:12:27:5c:4a:e8:4a:42:c3:01:53:e2:71:53:
         ae:24:17:be
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUE5kAEUMH06RXWGua0z9mKSSQdyEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0IxMDI5RDQ0QjkzQ0EwMzk3REE1MDZGRTFFMjE0NzUw
MzY0MUVDNjAeFw0yNTAzMTkwNTU5MTVaFw0yNjAzMTgwNjA0MTVaMDMxMTAvBgNV
BAMTKEU2QjUzNTJFMzAyMzVBNUE5MzA3MjRGQUE0MUEzMjMxRjU2NUY2REMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2xPMYvNRdckB3C31iqi6v123P
c6jJcwJ++GZBEncHG+kK3KpxiV4H4xLCxgTNAoMa4+oW9rtEVLuseelXTHLNgbd5
Za/ag+w10fb9XXi4h9eLy+UDvHblyHnVFnhTx5N+ghMhgWg4lVQjh+cj6uc/8s1m
DDbxMsXzxBvxtaK0sdIvUB0YOraBTVw/AXVMLAs0HUPYwHcAEwXGfRP/M18qmG6/
3+KYMYSdrQPVFx9IwYAIZuxsoytkO6f0ltQtrV+DwSOJg83jUnZCoXvO5rNqt52s
uqsYbZ3PFEq1sjE6iVJCzl/l3gaNiGiKuAP1LwHTzeXKXGXGeIPo0fRnFQTLAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQU5rU1LjAjWlqTByT6pBoyMfVl9twwHwYDVR0j
BBgwFoAUOxAp1EuTygOX2lBv4eIUdQNkHsYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j
YzBkNDBiYy05M2M4LTQxNWItYjZhOC1hZWYwODhkN2Y0ZDQvMC8zQjEwMjlENDRC
OTNDQTAzOTdEQTUwNkZFMUUyMTQ3NTAzNjQxRUM2LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvM0IxMDI5RDQ0QjkzQ0EwMzk3REE1MDZGRTFFMjE0NzUwMzY0
MUVDNi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2NjMGQ0MGJjLTkzYzgtNDE1Yi1i
NmE4LWFlZjA4OGQ3ZjRkNC8wLzMxMzAzMzJlMzgzMTJlMzIzNTMyMmUzMDJmMzIz
MzJkMzIzMzIwM2QzZTIwMzEzNTMwMzUzMzM3LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ1H8MA0GCSqG
SIb3DQEBCwUAA4IBAQAcX3zRkhOpAW2QOab5vXIP5pnZu84HaCcHl1xQIh09dA+P
XIX60SIlZ/0+1Zfi5pq2WsLFyWG445WPT9hOjteaZ1uUmSHulE24taSwJi8X2HFf
AWjQehKWCFM5QV+iVL6nCbzb6fAnbefItZb+xm2LO3jiiFRhaiGEXzKTfuxilWIo
/XB6dkvm1ikF/ND7OTRZKYis6S5nVYHQAhkYzsNyy3nLQfSaEwfFxp4BWvHP0j/L
sHi1rZ5cD5PMWzHBW3CttpwNUNeGuOGmkEy4lbQcUUrOfRLy7z5CHjDDhQ47IcFI
LEh/H1EXP7zt5URJyhInXEroSkLDAVPicVOuJBe+
-----END CERTIFICATE-----
Generated at Sun Apr 6 13:29:25 2025 by rpki-client