Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/d47026a9-0c9a-4d79-ad67-2c9dbd366d0b/0/3130332e3135312e3134302e302f32332d3234203d3e20313430343137.roa
File:                     3130332e3135312e3134302e302f32332d3234203d3e20313430343137.roa (raw, json)
Hash identifier:          maLwNGdhj2YMExFHAn5+1Sop9522GuyaLGRVR2YiAsA=
Subject key identifier:   05:3A:04:D3:A1:E6:CA:77:45:2E:24:FF:AA:13:FD:17:02:CC:B9:87
Certificate issuer:       /CN=FCD5B562FAED9B9D67F9DE5DB70578BFDB0057B3
Certificate serial:       072C3F52FC806C1923805F1FE8DB139E9107E095
Authority key identifier: FC:D5:B5:62:FA:ED:9B:9D:67:F9:DE:5D:B7:05:78:BF:DB:00:57:B3
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FCD5B562FAED9B9D67F9DE5DB70578BFDB0057B3.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d47026a9-0c9a-4d79-ad67-2c9dbd366d0b/0/3130332e3135312e3134302e302f32332d3234203d3e20313430343137.roa
Signing time:             Sun 18 May 2025 01:00:01 +0000
ROA not before:           Sun 18 May 2025 00:55:01 +0000
ROA not after:            Sun 17 May 2026 01:00:01 +0000
asID:                     140417
IP address blocks:        103.151.140.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d47026a9-0c9a-4d79-ad67-2c9dbd366d0b/0/FCD5B562FAED9B9D67F9DE5DB70578BFDB0057B3.crl
                          rsync://repo-rpki.idnic.net/repo/d47026a9-0c9a-4d79-ad67-2c9dbd366d0b/0/FCD5B562FAED9B9D67F9DE5DB70578BFDB0057B3.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FCD5B562FAED9B9D67F9DE5DB70578BFDB0057B3.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Jun 2025 21:52:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:2c:3f:52:fc:80:6c:19:23:80:5f:1f:e8:db:13:9e:91:07:e0:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FCD5B562FAED9B9D67F9DE5DB70578BFDB0057B3
        Validity
            Not Before: May 18 00:55:01 2025 GMT
            Not After : May 17 01:00:01 2026 GMT
        Subject: CN=053A04D3A1E6CA77452E24FFAA13FD1702CCB987
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:0c:db:72:48:f5:08:91:c0:04:c4:bb:a1:c2:
                    8f:67:b5:1d:51:58:92:29:3c:cf:ba:6e:e6:7c:a3:
                    8c:d5:ce:04:01:ae:97:6f:7e:43:e3:af:38:3d:c5:
                    79:ff:98:cd:68:bc:97:f7:4e:b4:72:5c:a6:05:f6:
                    2a:1f:55:d2:9a:05:8e:dd:7e:95:01:d2:77:6c:9c:
                    b3:cf:21:e7:5f:73:a6:03:01:b9:2d:c1:bb:90:c0:
                    ac:11:ca:ea:4a:9f:de:a0:d8:00:44:5d:10:25:d2:
                    23:57:d3:63:7c:ee:b5:03:75:fc:7a:6d:fa:b7:94:
                    f3:8b:de:93:50:75:3c:8e:c2:b1:62:61:12:99:96:
                    fa:a9:90:1f:97:af:74:de:38:a1:5c:e4:d3:e7:26:
                    6c:75:af:03:41:02:38:53:07:3c:ce:bd:33:77:84:
                    e5:c2:29:28:f3:94:3e:0a:29:cc:4d:47:e6:ec:ac:
                    43:31:10:44:99:ec:17:f4:84:94:5e:90:1f:37:e1:
                    01:2d:64:71:5e:15:29:0e:25:10:40:3c:c4:c3:cd:
                    10:55:56:1f:17:8d:13:39:c4:cd:2e:c1:ad:20:07:
                    b2:44:c7:83:98:52:f6:71:4c:40:77:5c:4c:93:d0:
                    2d:74:b3:57:df:92:35:43:f0:52:11:94:88:43:62:
                    5a:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:3A:04:D3:A1:E6:CA:77:45:2E:24:FF:AA:13:FD:17:02:CC:B9:87
            X509v3 Authority Key Identifier:
                keyid:FC:D5:B5:62:FA:ED:9B:9D:67:F9:DE:5D:B7:05:78:BF:DB:00:57:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d47026a9-0c9a-4d79-ad67-2c9dbd366d0b/0/FCD5B562FAED9B9D67F9DE5DB70578BFDB0057B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FCD5B562FAED9B9D67F9DE5DB70578BFDB0057B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d47026a9-0c9a-4d79-ad67-2c9dbd366d0b/0/3130332e3135312e3134302e302f32332d3234203d3e20313430343137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.151.140.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9e:3d:5a:c0:02:b8:a2:93:09:89:4c:d5:07:8d:0f:49:20:31:
         cb:d6:93:09:a6:b2:86:c9:e1:62:ce:40:89:6a:14:a4:6a:fe:
         44:d4:34:26:7b:94:c4:33:0b:9b:0b:07:79:3e:aa:9f:fa:bf:
         60:eb:21:a9:24:02:3c:07:8f:47:1b:91:cf:93:15:c7:b3:78:
         50:6c:3f:48:34:cc:f8:5a:fe:3c:14:ac:08:9c:ea:fe:84:9f:
         6d:a4:db:6b:9d:b4:5f:62:6c:9b:72:16:ad:7a:55:ed:7e:4b:
         dd:f6:76:85:16:16:0f:a7:ad:0e:df:71:6a:31:0a:4c:db:c6:
         ce:08:58:3a:54:a2:d0:ed:70:61:35:08:00:de:62:22:38:e4:
         43:bf:28:ea:da:18:8a:c2:03:c9:1a:94:90:07:c0:b4:de:18:
         d5:80:72:eb:1f:4d:09:b3:8c:24:0d:f8:cd:49:75:7d:a7:d6:
         ab:71:a9:fd:e6:64:52:28:4b:98:1b:b2:c1:a5:c4:a0:56:01:
         e6:f3:0a:18:c4:0d:8b:3d:c1:d9:6c:51:18:6c:82:d4:48:33:
         40:81:05:1a:e3:b6:15:7a:07:38:fd:9e:b8:f7:c6:8a:a8:ad:
         17:fc:c7:5d:ce:e4:9c:35:b9:22:10:b1:c5:69:66:f6:31:11:
         b8:dc:3e:7d
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUByw/UvyAbBkjgF8f6NsTnpEH4JUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkNENUI1NjJGQUVEOUI5RDY3RjlERTVEQjcwNTc4QkZE
QjAwNTdCMzAeFw0yNTA1MTgwMDU1MDFaFw0yNjA1MTcwMTAwMDFaMDMxMTAvBgNV
BAMTKDA1M0EwNEQzQTFFNkNBNzc0NTJFMjRGRkFBMTNGRDE3MDJDQ0I5ODcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeDNtySPUIkcAExLuhwo9ntR1R
WJIpPM+6buZ8o4zVzgQBrpdvfkPjrzg9xXn/mM1ovJf3TrRyXKYF9iofVdKaBY7d
fpUB0ndsnLPPIedfc6YDAbktwbuQwKwRyupKn96g2ABEXRAl0iNX02N87rUDdfx6
bfq3lPOL3pNQdTyOwrFiYRKZlvqpkB+Xr3TeOKFc5NPnJmx1rwNBAjhTBzzOvTN3
hOXCKSjzlD4KKcxNR+bsrEMxEESZ7Bf0hJRekB834QEtZHFeFSkOJRBAPMTDzRBV
Vh8XjRM5xM0uwa0gB7JEx4OYUvZxTEB3XEyT0C10s1ffkjVD8FIRlIhDYlpdAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUBToE06HmyndFLiT/qhP9FwLMuYcwHwYDVR0j
BBgwFoAU/NW1Yvrtm51n+d5dtwV4v9sAV7MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k
NDcwMjZhOS0wYzlhLTRkNzktYWQ2Ny0yYzlkYmQzNjZkMGIvMC9GQ0Q1QjU2MkZB
RUQ5QjlENjdGOURFNURCNzA1NzhCRkRCMDA1N0IzLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRkNENUI1NjJGQUVEOUI5RDY3RjlERTVEQjcwNTc4QkZEQjAw
NTdCMy5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Q0NzAyNmE5LTBjOWEtNGQ3OS1h
ZDY3LTJjOWRiZDM2NmQwYi8wLzMxMzAzMzJlMzEzNTMxMmUzMTM0MzAyZTMwMmYz
MjMzMmQzMjM0MjAzZDNlMjAzMTM0MzAzNDMxMzcucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnl4wwDQYJ
KoZIhvcNAQELBQADggEBAJ49WsACuKKTCYlM1QeND0kgMcvWkwmmsobJ4WLOQIlq
FKRq/kTUNCZ7lMQzC5sLB3k+qp/6v2DrIakkAjwHj0cbkc+TFcezeFBsP0g0zPha
/jwUrAic6v6En22k22udtF9ibJtyFq16Ve1+S932doUWFg+nrQ7fcWoxCkzbxs4I
WDpUotDtcGE1CADeYiI45EO/KOraGIrCA8kalJAHwLTeGNWAcusfTQmzjCQN+M1J
dX2n1qtxqf3mZFIoS5gbssGlxKBWAebzChjEDYs9wdlsURhsgtRIM0CBBRrjthV6
Bzj9nrj3xoqorRf8x13O5Jw1uSIQscVpZvYxEbjcPn0=
-----END CERTIFICATE-----
Generated at Sat Jun 7 04:22:51 2025 by rpki-client