Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/dac801a0-7912-4b01-a281-88024624a2d4/0/3130332e3138302e3139382e302f32342d3234203d3e20313439333638.roa
File:                     3130332e3138302e3139382e302f32342d3234203d3e20313439333638.roa (raw, json)
Hash identifier:          5lY4f9V94dB+03La5b3P91qI5RBjwa5CSpgEJJRGvxc=
Subject key identifier:   D5:81:2C:96:18:98:71:01:DA:61:9B:5C:8C:68:43:27:09:32:25:B2
Certificate issuer:       /CN=196DBD061B4577EF848600B17A266D689F5A70B5
Certificate serial:       7307C9EA4B840D13C1BCADC93026A72899362EA6
Authority key identifier: 19:6D:BD:06:1B:45:77:EF:84:86:00:B1:7A:26:6D:68:9F:5A:70:B5
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/196DBD061B4577EF848600B17A266D689F5A70B5.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/dac801a0-7912-4b01-a281-88024624a2d4/0/3130332e3138302e3139382e302f32342d3234203d3e20313439333638.roa
Signing time:             Tue 27 May 2025 16:00:01 +0000
ROA not before:           Tue 27 May 2025 15:55:01 +0000
ROA not after:            Tue 26 May 2026 16:00:01 +0000
asID:                     149368
IP address blocks:        103.180.198.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/dac801a0-7912-4b01-a281-88024624a2d4/0/196DBD061B4577EF848600B17A266D689F5A70B5.crl
                          rsync://repo-rpki.idnic.net/repo/dac801a0-7912-4b01-a281-88024624a2d4/0/196DBD061B4577EF848600B17A266D689F5A70B5.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/196DBD061B4577EF848600B17A266D689F5A70B5.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Jun 2025 19:12:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:07:c9:ea:4b:84:0d:13:c1:bc:ad:c9:30:26:a7:28:99:36:2e:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=196DBD061B4577EF848600B17A266D689F5A70B5
        Validity
            Not Before: May 27 15:55:01 2025 GMT
            Not After : May 26 16:00:01 2026 GMT
        Subject: CN=D5812C9618987101DA619B5C8C684327093225B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:a2:56:51:74:30:a5:c3:9e:ac:ac:9e:aa:91:
                    22:88:e8:3b:ea:c4:53:63:e7:80:47:b9:fd:3a:68:
                    dc:c9:a5:5b:9a:f0:f6:38:bd:ba:ac:2a:ea:16:ae:
                    82:b2:ab:69:b4:51:a4:b0:d2:9d:ff:b3:74:a5:e6:
                    65:f7:54:7f:93:1d:28:d5:d5:48:79:07:1e:d9:c1:
                    af:94:fe:8b:3d:16:72:f7:f6:f3:c5:48:aa:a8:49:
                    25:ff:f1:22:4e:97:7c:e8:50:2c:45:b0:56:aa:35:
                    2e:86:91:40:c0:8a:a8:66:96:2e:9c:1f:88:a9:84:
                    90:a3:b6:a2:b4:72:44:94:53:06:78:91:3f:1c:f3:
                    1f:80:ed:b3:7d:9a:00:2c:34:93:f3:86:3c:7b:63:
                    6d:d7:41:66:13:2c:37:bc:fb:36:fb:58:ef:44:06:
                    76:db:07:64:6e:ae:3a:bb:79:f0:d6:55:73:ea:2e:
                    9a:de:c5:79:37:d7:38:a3:48:a1:71:2c:1c:d3:0d:
                    84:f8:0c:8f:42:96:57:62:fb:f7:53:58:ac:c0:05:
                    16:80:28:4f:a7:bf:10:99:f5:5b:e5:30:da:04:3e:
                    27:2b:86:e4:b3:37:57:d9:b0:59:d6:89:77:10:5e:
                    fe:bb:45:b2:c7:ad:d4:09:58:2a:5e:53:60:c5:b3:
                    5b:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:81:2C:96:18:98:71:01:DA:61:9B:5C:8C:68:43:27:09:32:25:B2
            X509v3 Authority Key Identifier:
                keyid:19:6D:BD:06:1B:45:77:EF:84:86:00:B1:7A:26:6D:68:9F:5A:70:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/dac801a0-7912-4b01-a281-88024624a2d4/0/196DBD061B4577EF848600B17A266D689F5A70B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/196DBD061B4577EF848600B17A266D689F5A70B5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dac801a0-7912-4b01-a281-88024624a2d4/0/3130332e3138302e3139382e302f32342d3234203d3e20313439333638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.180.198.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:3a:f8:25:3b:c7:04:6d:a3:69:f5:31:8a:fb:fd:7f:bf:40:
         d6:a3:94:07:aa:31:68:00:b5:45:b3:3e:d8:76:b7:bb:b2:d0:
         36:27:1e:36:1e:3b:a6:f0:32:90:26:3c:53:2b:54:b6:0a:29:
         63:1b:17:7e:0a:37:69:7d:42:8e:ed:20:e6:ae:5e:69:4d:10:
         74:a1:ab:66:d2:ff:c0:c7:98:88:b0:d9:95:34:d2:91:4d:75:
         42:96:35:86:82:f3:c2:40:93:40:56:ec:27:4f:9a:24:81:39:
         5f:7a:bb:77:09:e0:59:74:99:93:c5:a5:bf:d2:63:35:f6:25:
         cf:b1:d9:42:47:da:68:9b:1d:74:34:46:1b:01:af:07:18:f8:
         60:40:53:da:35:42:1c:76:d5:6a:b4:f6:3b:01:2a:df:5d:3f:
         ba:ae:44:a1:54:65:3d:a4:d5:6f:6e:4a:25:df:3a:19:e0:58:
         fc:9a:c4:d6:56:40:be:00:0e:56:14:c8:c1:c0:d7:47:46:b8:
         77:e9:e0:c3:32:cf:d6:9b:72:6f:26:9e:2f:1b:e8:de:a9:35:
         2a:2d:43:fa:0c:0c:45:ae:7f:f4:63:0d:26:7d:2f:05:b5:aa:
         77:38:3d:ac:58:3e:c5:3a:62:0a:26:0d:4b:b3:b8:ff:54:e9:
         f1:4b:69:5b
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUcwfJ6kuEDRPBvK3JMCanKJk2LqYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTk2REJEMDYxQjQ1NzdFRjg0ODYwMEIxN0EyNjZENjg5
RjVBNzBCNTAeFw0yNTA1MjcxNTU1MDFaFw0yNjA1MjYxNjAwMDFaMDMxMTAvBgNV
BAMTKEQ1ODEyQzk2MTg5ODcxMDFEQTYxOUI1QzhDNjg0MzI3MDkzMjI1QjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvolZRdDClw56srJ6qkSKI6Dvq
xFNj54BHuf06aNzJpVua8PY4vbqsKuoWroKyq2m0UaSw0p3/s3Sl5mX3VH+THSjV
1Uh5Bx7Zwa+U/os9FnL39vPFSKqoSSX/8SJOl3zoUCxFsFaqNS6GkUDAiqhmli6c
H4iphJCjtqK0ckSUUwZ4kT8c8x+A7bN9mgAsNJPzhjx7Y23XQWYTLDe8+zb7WO9E
BnbbB2Rurjq7efDWVXPqLprexXk31zijSKFxLBzTDYT4DI9Clldi+/dTWKzABRaA
KE+nvxCZ9VvlMNoEPicrhuSzN1fZsFnWiXcQXv67RbLHrdQJWCpeU2DFs1tdAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQU1YEslhiYcQHaYZtcjGhDJwkyJbIwHwYDVR0j
BBgwFoAUGW29BhtFd++EhgCxeiZtaJ9acLUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k
YWM4MDFhMC03OTEyLTRiMDEtYTI4MS04ODAyNDYyNGEyZDQvMC8xOTZEQkQwNjFC
NDU3N0VGODQ4NjAwQjE3QTI2NkQ2ODlGNUE3MEI1LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMTk2REJEMDYxQjQ1NzdFRjg0ODYwMEIxN0EyNjZENjg5RjVB
NzBCNS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2RhYzgwMWEwLTc5MTItNGIwMS1h
MjgxLTg4MDI0NjI0YTJkNC8wLzMxMzAzMzJlMzEzODMwMmUzMTM5MzgyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzkzMzM2Mzgucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABntMYwDQYJ
KoZIhvcNAQELBQADggEBABk6+CU7xwRto2n1MYr7/X+/QNajlAeqMWgAtUWzPth2
t7uy0DYnHjYeO6bwMpAmPFMrVLYKKWMbF34KN2l9Qo7tIOauXmlNEHShq2bS/8DH
mIiw2ZU00pFNdUKWNYaC88JAk0BW7CdPmiSBOV96u3cJ4Fl0mZPFpb/SYzX2Jc+x
2UJH2mibHXQ0RhsBrwcY+GBAU9o1Qhx21Wq09jsBKt9dP7quRKFUZT2k1W9uSiXf
OhngWPyaxNZWQL4ADlYUyMHA10dGuHfp4MMyz9abcm8mni8b6N6pNSotQ/oMDEWu
f/RjDSZ9LwW1qnc4PaxYPsU6YgomDUuzuP9U6fFLaVs=
-----END CERTIFICATE-----
Generated at Sat Jun 7 20:15:00 2025 by rpki-client