Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/d67fb837-1b2f-4c4e-b999-6e990ddc1499/0/3130332e3134322e3230322e302f32332d3233203d3e20313339333738.roa
File:                     3130332e3134322e3230322e302f32332d3233203d3e20313339333738.roa (raw, json)
Hash identifier:          aOFDhPstKOFaNipOEFwONnhh/OGsZlp5fuQdDXOoo9E=
Subject key identifier:   34:5F:26:5E:A0:C3:ED:0A:A9:96:87:61:3E:8A:37:9A:80:97:94:3C
Certificate issuer:       /CN=C5CA2999FE7612F56CCCB7441743B05181458ED0
Certificate serial:       1043D415C1D6D042C26987A15FE078C4E42507A6
Authority key identifier: C5:CA:29:99:FE:76:12:F5:6C:CC:B7:44:17:43:B0:51:81:45:8E:D0
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5CA2999FE7612F56CCCB7441743B05181458ED0.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d67fb837-1b2f-4c4e-b999-6e990ddc1499/0/3130332e3134322e3230322e302f32332d3233203d3e20313339333738.roa
Signing time:             Mon 02 Jun 2025 02:03:46 +0000
ROA not before:           Mon 02 Jun 2025 01:58:46 +0000
ROA not after:            Mon 01 Jun 2026 02:03:46 +0000
asID:                     139378
IP address blocks:        103.142.202.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d67fb837-1b2f-4c4e-b999-6e990ddc1499/0/C5CA2999FE7612F56CCCB7441743B05181458ED0.crl
                          rsync://repo-rpki.idnic.net/repo/d67fb837-1b2f-4c4e-b999-6e990ddc1499/0/C5CA2999FE7612F56CCCB7441743B05181458ED0.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5CA2999FE7612F56CCCB7441743B05181458ED0.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Jun 2025 21:50:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:43:d4:15:c1:d6:d0:42:c2:69:87:a1:5f:e0:78:c4:e4:25:07:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C5CA2999FE7612F56CCCB7441743B05181458ED0
        Validity
            Not Before: Jun  2 01:58:46 2025 GMT
            Not After : Jun  1 02:03:46 2026 GMT
        Subject: CN=345F265EA0C3ED0AA99687613E8A379A8097943C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:46:bd:d1:de:a7:22:3c:7c:3f:d1:b6:29:08:
                    05:bb:74:86:96:10:d2:b1:b9:8f:4a:67:ff:ff:9b:
                    bf:40:d2:8b:20:4d:ad:f7:8f:b6:c5:40:29:02:69:
                    7e:6f:5a:7d:ef:06:f6:15:a2:af:bc:e3:cd:ee:fe:
                    f1:98:f7:a1:dc:77:2f:87:ac:7c:84:b7:34:4e:99:
                    06:df:8e:32:2a:69:66:36:38:0b:33:ab:31:db:61:
                    1b:9e:78:c4:68:0a:6c:67:91:d8:9c:11:ee:cb:f0:
                    25:99:e0:5c:31:57:b9:3e:53:6e:28:51:19:8b:16:
                    08:33:b1:18:0a:07:ee:ad:67:5f:3a:1c:51:16:9a:
                    c0:31:41:ec:a6:cf:65:dd:99:e7:44:af:a0:3a:06:
                    c6:05:95:c8:5f:12:62:5c:55:90:fe:84:a1:ca:c2:
                    de:38:1d:1d:09:f0:88:e3:75:b4:69:1b:bf:57:86:
                    5d:80:d1:af:f2:6a:5a:ae:0a:6e:46:e6:05:63:88:
                    4b:45:87:00:2d:ab:c2:16:3e:be:a6:23:92:73:43:
                    97:3c:05:09:60:a6:00:92:7e:d9:37:d2:0b:e7:2b:
                    e4:fa:16:25:22:21:49:ff:75:59:0b:64:89:11:f3:
                    36:13:28:73:55:f2:8d:d8:97:47:a0:f9:2f:82:4d:
                    46:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:5F:26:5E:A0:C3:ED:0A:A9:96:87:61:3E:8A:37:9A:80:97:94:3C
            X509v3 Authority Key Identifier:
                keyid:C5:CA:29:99:FE:76:12:F5:6C:CC:B7:44:17:43:B0:51:81:45:8E:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d67fb837-1b2f-4c4e-b999-6e990ddc1499/0/C5CA2999FE7612F56CCCB7441743B05181458ED0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5CA2999FE7612F56CCCB7441743B05181458ED0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d67fb837-1b2f-4c4e-b999-6e990ddc1499/0/3130332e3134322e3230322e302f32332d3233203d3e20313339333738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.142.202.0/23

    Signature Algorithm: sha256WithRSAEncryption
         d2:76:35:12:b8:85:d4:82:7b:2c:7c:73:99:e9:bd:9f:04:7b:
         c2:9a:49:31:3a:cc:d2:98:1e:d4:e8:88:fe:5f:a5:4b:62:e5:
         0e:84:ae:3c:4e:ab:fb:11:ae:b5:db:98:7f:08:b0:b5:ec:1c:
         9d:83:be:2f:c1:57:ef:7a:c2:66:ed:16:bf:5e:b6:97:54:0d:
         6f:9e:01:e0:82:04:05:ff:a8:77:fd:34:3b:47:47:7b:b6:2d:
         05:fa:99:1f:c2:cf:f9:e5:91:e8:38:19:18:fa:ad:34:32:1e:
         b7:2f:83:33:7c:97:c3:28:d7:19:e6:59:63:b1:73:c2:66:c5:
         b2:89:1b:68:0e:65:8c:45:57:1b:03:5f:4d:7b:f1:7c:62:53:
         f9:29:76:55:ad:dd:3e:72:a5:63:72:2d:ba:13:41:92:04:44:
         d0:28:96:0f:e0:92:58:cf:b5:90:b7:c8:43:9d:18:df:40:f2:
         b4:a5:67:6f:d4:e0:2c:35:60:7d:1d:cf:bc:af:e8:d0:ea:7c:
         f5:c0:c1:9c:18:47:2a:ca:63:25:8b:02:45:47:de:a6:96:4e:
         98:2b:f7:50:f4:bc:fa:a2:9d:22:23:26:0a:1d:d3:ef:47:12:
         50:21:81:2f:56:67:c6:8a:cc:bf:e1:9f:41:1b:ab:78:d8:69:
         42:d2:eb:06
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUEEPUFcHW0ELCaYehX+B4xOQlB6YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzVDQTI5OTlGRTc2MTJGNTZDQ0NCNzQ0MTc0M0IwNTE4
MTQ1OEVEMDAeFw0yNTA2MDIwMTU4NDZaFw0yNjA2MDEwMjAzNDZaMDMxMTAvBgNV
BAMTKDM0NUYyNjVFQTBDM0VEMEFBOTk2ODc2MTNFOEEzNzlBODA5Nzk0M0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7Rr3R3qciPHw/0bYpCAW7dIaW
ENKxuY9KZ///m79A0osgTa33j7bFQCkCaX5vWn3vBvYVoq+8483u/vGY96Hcdy+H
rHyEtzROmQbfjjIqaWY2OAszqzHbYRueeMRoCmxnkdicEe7L8CWZ4FwxV7k+U24o
URmLFggzsRgKB+6tZ186HFEWmsAxQeymz2XdmedEr6A6BsYFlchfEmJcVZD+hKHK
wt44HR0J8IjjdbRpG79Xhl2A0a/yalquCm5G5gVjiEtFhwAtq8IWPr6mI5JzQ5c8
BQlgpgCSftk30gvnK+T6FiUiIUn/dVkLZIkR8zYTKHNV8o3Yl0eg+S+CTUaxAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUNF8mXqDD7QqplodhPoo3moCXlDwwHwYDVR0j
BBgwFoAUxcopmf52EvVszLdEF0OwUYFFjtAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k
NjdmYjgzNy0xYjJmLTRjNGUtYjk5OS02ZTk5MGRkYzE0OTkvMC9DNUNBMjk5OUZF
NzYxMkY1NkNDQ0I3NDQxNzQzQjA1MTgxNDU4RUQwLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQzVDQTI5OTlGRTc2MTJGNTZDQ0NCNzQ0MTc0M0IwNTE4MTQ1
OEVEMC5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Q2N2ZiODM3LTFiMmYtNGM0ZS1i
OTk5LTZlOTkwZGRjMTQ5OS8wLzMxMzAzMzJlMzEzNDMyMmUzMjMwMzIyZTMwMmYz
MjMzMmQzMjMzMjAzZDNlMjAzMTMzMzkzMzM3Mzgucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnjsowDQYJ
KoZIhvcNAQELBQADggEBANJ2NRK4hdSCeyx8c5npvZ8Ee8KaSTE6zNKYHtToiP5f
pUti5Q6ErjxOq/sRrrXbmH8IsLXsHJ2Dvi/BV+96wmbtFr9etpdUDW+eAeCCBAX/
qHf9NDtHR3u2LQX6mR/Cz/nlkeg4GRj6rTQyHrcvgzN8l8Mo1xnmWWOxc8JmxbKJ
G2gOZYxFVxsDX0178XxiU/kpdlWt3T5ypWNyLboTQZIERNAolg/gkljPtZC3yEOd
GN9A8rSlZ2/U4Cw1YH0dz7yv6NDqfPXAwZwYRyrKYyWLAkVH3qaWTpgr91D0vPqi
nSIjJgod0+9HElAhgS9WZ8aKzL/hn0Ebq3jYaULS6wY=
-----END CERTIFICATE-----
Generated at Sat Jun 7 05:18:51 2025 by rpki-client