Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/dfc6ad64-7543-48ad-b158-e82676a11c70/0/3130332e39362e35342e302f32332d3233203d3e20313530393637.roa
File:                     3130332e39362e35342e302f32332d3233203d3e20313530393637.roa (raw, json)
Hash identifier:          sf7Z4Dj1PN+l91MbwnFDpewNOOEB7EDrorjf9fk38qg=
Subject key identifier:   08:FD:CA:A7:D1:A2:53:91:14:09:DC:AC:E6:6C:CC:BD:DD:0E:F4:76
Certificate issuer:       /CN=94F615F011BBB2C259625D478AF937086CA8D2EF
Certificate serial:       3C89DD13D1B76879C910250F6DE570D5CC76D50D
Authority key identifier: 94:F6:15:F0:11:BB:B2:C2:59:62:5D:47:8A:F9:37:08:6C:A8:D2:EF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94F615F011BBB2C259625D478AF937086CA8D2EF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/dfc6ad64-7543-48ad-b158-e82676a11c70/0/3130332e39362e35342e302f32332d3233203d3e20313530393637.roa
Signing time:             Fri 23 May 2025 07:00:32 +0000
ROA not before:           Fri 23 May 2025 06:55:32 +0000
ROA not after:            Fri 22 May 2026 07:00:32 +0000
asID:                     150967
IP address blocks:        103.96.54.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/dfc6ad64-7543-48ad-b158-e82676a11c70/0/94F615F011BBB2C259625D478AF937086CA8D2EF.crl
                          rsync://repo-rpki.idnic.net/repo/dfc6ad64-7543-48ad-b158-e82676a11c70/0/94F615F011BBB2C259625D478AF937086CA8D2EF.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94F615F011BBB2C259625D478AF937086CA8D2EF.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Jun 2025 09:36:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:89:dd:13:d1:b7:68:79:c9:10:25:0f:6d:e5:70:d5:cc:76:d5:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94F615F011BBB2C259625D478AF937086CA8D2EF
        Validity
            Not Before: May 23 06:55:32 2025 GMT
            Not After : May 22 07:00:32 2026 GMT
        Subject: CN=08FDCAA7D1A253911409DCACE66CCCBDDD0EF476
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:87:a1:84:31:5f:2d:7a:4c:75:a7:d6:c5:40:
                    4e:e7:b0:cd:8a:1e:8d:54:8d:67:90:7b:f3:fd:fa:
                    40:cb:07:05:ff:bf:83:54:3b:6f:bf:e2:eb:58:88:
                    2e:e6:8f:fa:ae:4d:b5:45:25:cf:6a:68:bd:86:97:
                    07:2c:fb:65:55:1f:b8:46:cc:c1:70:d1:7a:39:15:
                    78:9e:39:7a:94:81:ea:31:72:fb:0f:16:f6:4d:e6:
                    48:96:60:b2:cf:a9:69:95:2d:66:a0:44:4c:d7:38:
                    d4:1c:b4:ef:ac:27:4f:98:7c:76:db:de:92:c9:b3:
                    98:73:94:2e:4f:de:c5:8c:d3:0b:33:34:a3:b2:17:
                    be:2f:4c:8a:ff:b7:ba:9a:4e:d9:ad:2e:90:05:dd:
                    83:c5:fe:4b:f7:61:6e:77:2e:83:b2:a5:a3:dc:25:
                    2a:23:99:1f:1e:28:85:bf:ca:94:6a:63:62:3a:1d:
                    a6:cc:f8:79:40:e0:8a:ff:2a:08:2b:c2:de:85:fa:
                    22:92:bc:e3:c8:5f:8c:a0:e7:8a:cf:7d:74:40:cd:
                    f6:94:bc:3c:64:09:53:24:17:5a:e8:b5:b2:c6:7f:
                    72:81:8c:80:aa:56:ea:1d:ac:62:e8:40:f5:cc:4e:
                    1f:2d:c1:2b:a8:46:e4:ee:03:c6:dd:a2:43:23:46:
                    8d:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:FD:CA:A7:D1:A2:53:91:14:09:DC:AC:E6:6C:CC:BD:DD:0E:F4:76
            X509v3 Authority Key Identifier:
                keyid:94:F6:15:F0:11:BB:B2:C2:59:62:5D:47:8A:F9:37:08:6C:A8:D2:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/dfc6ad64-7543-48ad-b158-e82676a11c70/0/94F615F011BBB2C259625D478AF937086CA8D2EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94F615F011BBB2C259625D478AF937086CA8D2EF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dfc6ad64-7543-48ad-b158-e82676a11c70/0/3130332e39362e35342e302f32332d3233203d3e20313530393637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.96.54.0/23

    Signature Algorithm: sha256WithRSAEncryption
         36:d4:fd:77:07:07:a7:a6:58:74:7d:b2:1c:48:41:7d:82:0e:
         7e:5e:2a:cb:44:96:00:e6:07:da:a0:f0:ac:6e:6b:38:cd:ad:
         62:3b:47:a8:81:25:72:c6:da:ee:13:21:6a:51:17:5b:a5:67:
         59:bc:16:26:14:10:7e:a7:00:85:76:00:51:4c:b6:3b:fb:29:
         db:fb:7b:85:4c:4e:47:cc:8b:6a:43:9a:b7:b7:c4:1d:c1:f5:
         56:8b:78:f3:26:f4:37:51:b1:ee:40:d7:a1:a9:6c:75:6a:02:
         a3:89:a6:8a:ec:9b:28:84:42:d2:ec:c3:b1:ac:4d:15:c8:26:
         af:50:ba:15:9b:9d:5a:dd:1a:44:5f:8b:01:65:28:06:e4:c2:
         3d:25:5c:6b:0c:2a:12:a4:a7:95:d6:13:fd:e9:d0:01:13:74:
         9d:e1:df:ad:38:4e:84:b2:f3:9b:bc:4b:b6:da:68:cd:aa:52:
         39:e5:74:25:22:2c:a7:71:3a:f3:26:30:bd:24:24:a7:de:df:
         6d:ee:0c:9a:2e:cf:f7:be:bb:1c:86:a3:9d:05:26:ca:24:c9:
         6c:75:e2:9f:f3:88:eb:58:5a:83:19:0d:ab:3b:b5:b5:e7:44:
         25:d4:7e:a8:cd:04:01:f6:0d:74:ec:d0:7f:4b:d4:84:e8:88:
         05:76:f1:83
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUPIndE9G3aHnJECUPbeVw1cx21Q0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTRGNjE1RjAxMUJCQjJDMjU5NjI1RDQ3OEFGOTM3MDg2
Q0E4RDJFRjAeFw0yNTA1MjMwNjU1MzJaFw0yNjA1MjIwNzAwMzJaMDMxMTAvBgNV
BAMTKDA4RkRDQUE3RDFBMjUzOTExNDA5RENBQ0U2NkNDQ0JEREQwRUY0NzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnh6GEMV8tekx1p9bFQE7nsM2K
Ho1UjWeQe/P9+kDLBwX/v4NUO2+/4utYiC7mj/quTbVFJc9qaL2Glwcs+2VVH7hG
zMFw0Xo5FXieOXqUgeoxcvsPFvZN5kiWYLLPqWmVLWagREzXONQctO+sJ0+YfHbb
3pLJs5hzlC5P3sWM0wszNKOyF74vTIr/t7qaTtmtLpAF3YPF/kv3YW53LoOypaPc
JSojmR8eKIW/ypRqY2I6HabM+HlA4Ir/Kggrwt6F+iKSvOPIX4yg54rPfXRAzfaU
vDxkCVMkF1rotbLGf3KBjICqVuodrGLoQPXMTh8twSuoRuTuA8bdokMjRo3BAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUCP3Kp9GiU5EUCdys5mzMvd0O9HYwHwYDVR0j
BBgwFoAUlPYV8BG7ssJZYl1Hivk3CGyo0u8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k
ZmM2YWQ2NC03NTQzLTQ4YWQtYjE1OC1lODI2NzZhMTFjNzAvMC85NEY2MTVGMDEx
QkJCMkMyNTk2MjVENDc4QUY5MzcwODZDQThEMkVGLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvOTRGNjE1RjAxMUJCQjJDMjU5NjI1RDQ3OEFGOTM3MDg2Q0E4
RDJFRi5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2RmYzZhZDY0LTc1NDMtNDhhZC1i
MTU4LWU4MjY3NmExMWM3MC8wLzMxMzAzMzJlMzkzNjJlMzUzNDJlMzAyZjMyMzMy
ZDMyMzMyMDNkM2UyMDMxMzUzMDM5MzYzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAWdgNjANBgkqhkiG
9w0BAQsFAAOCAQEANtT9dwcHp6ZYdH2yHEhBfYIOfl4qy0SWAOYH2qDwrG5rOM2t
YjtHqIElcsba7hMhalEXW6VnWbwWJhQQfqcAhXYAUUy2O/sp2/t7hUxOR8yLakOa
t7fEHcH1Vot48yb0N1Gx7kDXoalsdWoCo4mmiuybKIRC0uzDsaxNFcgmr1C6FZud
Wt0aRF+LAWUoBuTCPSVcawwqEqSnldYT/enQARN0neHfrThOhLLzm7xLttpozapS
OeV0JSIsp3E68yYwvSQkp97fbe4Mmi7P9767HIajnQUmyiTJbHXin/OI61hagxkN
qzu1tedEJdR+qM0EAfYNdOzQf0vUhOiIBXbxgw==
-----END CERTIFICATE-----
Generated at Sat Jun 7 09:28:44 2025 by rpki-client