Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/d4f48a89-90c5-4f5a-8015-36f1196a71c8/0/3130332e3135312e39322e302f32332d3234203d3e203435323935.roa
File:                     3130332e3135312e39322e302f32332d3234203d3e203435323935.roa (raw, json)
Hash identifier:          WCf4k80HtpWJXreA4Q6XD5iDNEeVQ9AU8BVWi8IEoSM=
Subject key identifier:   E2:C6:78:A5:1D:D0:B0:EA:52:7C:4C:34:1B:25:20:57:66:C1:0D:17
Certificate issuer:       /CN=F30F14F4AEB6630FF4E270B0729358AEBFA97733
Certificate serial:       786DE58F3EF3414A0669C1E159F72C61E347663D
Authority key identifier: F3:0F:14:F4:AE:B6:63:0F:F4:E2:70:B0:72:93:58:AE:BF:A9:77:33
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F30F14F4AEB6630FF4E270B0729358AEBFA97733.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d4f48a89-90c5-4f5a-8015-36f1196a71c8/0/3130332e3135312e39322e302f32332d3234203d3e203435323935.roa
Signing time:             Mon 02 Jun 2025 02:04:01 +0000
ROA not before:           Mon 02 Jun 2025 01:59:01 +0000
ROA not after:            Mon 01 Jun 2026 02:04:01 +0000
asID:                     45295
IP address blocks:        103.151.92.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d4f48a89-90c5-4f5a-8015-36f1196a71c8/0/F30F14F4AEB6630FF4E270B0729358AEBFA97733.crl
                          rsync://repo-rpki.idnic.net/repo/d4f48a89-90c5-4f5a-8015-36f1196a71c8/0/F30F14F4AEB6630FF4E270B0729358AEBFA97733.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F30F14F4AEB6630FF4E270B0729358AEBFA97733.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Jun 2025 19:33:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:6d:e5:8f:3e:f3:41:4a:06:69:c1:e1:59:f7:2c:61:e3:47:66:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F30F14F4AEB6630FF4E270B0729358AEBFA97733
        Validity
            Not Before: Jun  2 01:59:01 2025 GMT
            Not After : Jun  1 02:04:01 2026 GMT
        Subject: CN=E2C678A51DD0B0EA527C4C341B25205766C10D17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:de:77:f0:ac:26:77:1d:cf:f6:c9:4c:05:50:
                    21:d0:77:39:97:2d:bc:d6:30:60:63:89:b1:5a:0f:
                    0c:72:0a:a2:b7:d0:a7:a5:be:36:ea:b5:2d:64:19:
                    42:2d:97:23:53:6f:65:12:50:6b:7a:c4:42:91:a0:
                    4a:2d:41:06:6c:9e:ae:27:6c:1c:38:b4:dd:99:4d:
                    c8:93:01:77:cf:33:6b:19:4a:c6:be:e0:66:0a:80:
                    6b:9f:e5:6c:30:28:cc:a3:b3:c1:d1:c6:5f:0e:9b:
                    2d:65:61:15:94:cd:00:44:30:f3:aa:de:85:d2:0f:
                    54:ea:a8:80:09:5a:76:02:91:71:3a:9e:24:86:50:
                    fd:7a:c5:db:48:3b:03:a2:7b:21:52:7a:bd:34:7d:
                    1b:ae:18:53:4a:7f:e7:d2:05:84:47:6f:82:cc:55:
                    26:7a:88:b6:73:10:7b:2e:30:c0:dc:77:59:26:e3:
                    03:10:3d:c8:81:8b:67:85:d6:b7:4d:ad:bc:97:10:
                    06:dc:01:dd:ba:a4:40:a4:51:a5:f4:a0:74:a0:4d:
                    a2:7a:5c:f6:3b:e6:fb:7c:26:6b:9e:5b:02:e0:09:
                    59:e1:0b:77:51:27:83:a0:64:c2:b3:8e:61:b1:be:
                    66:6b:e5:e4:be:cb:a1:37:8a:4f:2b:69:0a:5b:ff:
                    25:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:C6:78:A5:1D:D0:B0:EA:52:7C:4C:34:1B:25:20:57:66:C1:0D:17
            X509v3 Authority Key Identifier:
                keyid:F3:0F:14:F4:AE:B6:63:0F:F4:E2:70:B0:72:93:58:AE:BF:A9:77:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d4f48a89-90c5-4f5a-8015-36f1196a71c8/0/F30F14F4AEB6630FF4E270B0729358AEBFA97733.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F30F14F4AEB6630FF4E270B0729358AEBFA97733.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d4f48a89-90c5-4f5a-8015-36f1196a71c8/0/3130332e3135312e39322e302f32332d3234203d3e203435323935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.151.92.0/23

    Signature Algorithm: sha256WithRSAEncryption
         62:8d:eb:ba:02:86:09:0b:07:f4:42:e9:54:f7:c7:35:9d:9e:
         e7:f4:92:b7:2a:06:8a:87:e0:3d:ff:f0:4b:36:2d:10:64:92:
         fc:8b:e5:41:26:ae:d7:4a:a5:3c:57:e4:9a:d4:95:f7:90:e1:
         2e:b9:82:a6:39:2d:87:fb:03:fe:5b:7e:4d:a3:5c:54:a2:df:
         1d:b6:1c:7d:89:29:62:5a:d9:02:62:36:03:60:a7:57:b1:0e:
         ee:c4:94:91:12:37:b9:f8:d4:ef:d2:8f:71:ce:37:d0:e2:79:
         2c:3e:a1:92:fa:35:5a:8a:5b:e1:66:e3:e5:95:55:d3:9e:b6:
         9c:80:09:4d:3a:1f:93:ab:74:cb:41:f1:81:12:4b:1e:0a:b7:
         9d:ba:34:c7:16:bb:a8:60:e7:05:2a:c6:0b:47:e3:e5:37:29:
         74:53:ed:60:06:c4:bb:36:24:07:1e:a5:0b:a4:b6:84:8f:89:
         7b:c3:aa:89:0b:3c:cf:ba:e5:13:35:7a:42:cc:7b:5e:89:88:
         26:9f:8f:bf:33:f1:6a:79:84:ee:39:3e:70:d6:70:df:da:ae:
         83:48:7f:a3:3f:db:a9:84:43:ba:9a:e9:cf:ec:96:cc:74:cd:
         a5:5c:2c:7b:92:07:d5:46:c4:d4:aa:80:b6:f3:c2:28:0d:26:
         da:47:51:2f
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUeG3ljz7zQUoGacHhWfcsYeNHZj0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjMwRjE0RjRBRUI2NjMwRkY0RTI3MEIwNzI5MzU4QUVC
RkE5NzczMzAeFw0yNTA2MDIwMTU5MDFaFw0yNjA2MDEwMjA0MDFaMDMxMTAvBgNV
BAMTKEUyQzY3OEE1MUREMEIwRUE1MjdDNEMzNDFCMjUyMDU3NjZDMTBEMTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM3nfwrCZ3Hc/2yUwFUCHQdzmX
LbzWMGBjibFaDwxyCqK30KelvjbqtS1kGUItlyNTb2USUGt6xEKRoEotQQZsnq4n
bBw4tN2ZTciTAXfPM2sZSsa+4GYKgGuf5WwwKMyjs8HRxl8Omy1lYRWUzQBEMPOq
3oXSD1TqqIAJWnYCkXE6niSGUP16xdtIOwOieyFSer00fRuuGFNKf+fSBYRHb4LM
VSZ6iLZzEHsuMMDcd1km4wMQPciBi2eF1rdNrbyXEAbcAd26pECkUaX0oHSgTaJ6
XPY75vt8JmueWwLgCVnhC3dRJ4OgZMKzjmGxvmZr5eS+y6E3ik8raQpb/yUdAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQU4sZ4pR3QsOpSfEw0GyUgV2bBDRcwHwYDVR0j
BBgwFoAU8w8U9K62Yw/04nCwcpNYrr+pdzMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k
NGY0OGE4OS05MGM1LTRmNWEtODAxNS0zNmYxMTk2YTcxYzgvMC9GMzBGMTRGNEFF
QjY2MzBGRjRFMjcwQjA3MjkzNThBRUJGQTk3NzMzLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRjMwRjE0RjRBRUI2NjMwRkY0RTI3MEIwNzI5MzU4QUVCRkE5
NzczMy5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Q0ZjQ4YTg5LTkwYzUtNGY1YS04
MDE1LTM2ZjExOTZhNzFjOC8wLzMxMzAzMzJlMzEzNTMxMmUzOTMyMmUzMDJmMzIz
MzJkMzIzNDIwM2QzZTIwMzQzNTMyMzkzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAWeXXDANBgkqhkiG
9w0BAQsFAAOCAQEAYo3rugKGCQsH9ELpVPfHNZ2e5/SStyoGiofgPf/wSzYtEGSS
/IvlQSau10qlPFfkmtSV95DhLrmCpjkth/sD/lt+TaNcVKLfHbYcfYkpYlrZAmI2
A2CnV7EO7sSUkRI3ufjU79KPcc430OJ5LD6hkvo1Wopb4Wbj5ZVV0562nIAJTTof
k6t0y0HxgRJLHgq3nbo0xxa7qGDnBSrGC0fj5TcpdFPtYAbEuzYkBx6lC6S2hI+J
e8OqiQs8z7rlEzV6Qsx7XomIJp+PvzPxanmE7jk+cNZw39qug0h/oz/bqYRDuprp
z+yWzHTNpVwse5IH1UbE1KqAtvPCKA0m2kdRLw==
-----END CERTIFICATE-----
Generated at Sat Jun 7 14:52:27 2025 by rpki-client