Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/dfc6ad64-7543-48ad-b158-e82676a11c70/0/3130332e39362e35342e302f32332d3234203d3e20313530393637.roa
File:                     3130332e39362e35342e302f32332d3234203d3e20313530393637.roa (raw, json)
Hash identifier:          Pl5mXV2GVzrNQTc4RosdJvUks5j1v+XP+WNw1hZRoLA=
Subject key identifier:   E7:DA:90:C7:E1:13:1C:37:BD:0C:3D:A5:3A:CC:4C:80:2D:7D:D4:58
Certificate issuer:       /CN=94F615F011BBB2C259625D478AF937086CA8D2EF
Certificate serial:       27EDB590EE1B8EABEE96A485AAE2DBECC74F6D7B
Authority key identifier: 94:F6:15:F0:11:BB:B2:C2:59:62:5D:47:8A:F9:37:08:6C:A8:D2:EF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94F615F011BBB2C259625D478AF937086CA8D2EF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/dfc6ad64-7543-48ad-b158-e82676a11c70/0/3130332e39362e35342e302f32332d3234203d3e20313530393637.roa
Signing time:             Fri 23 May 2025 07:00:32 +0000
ROA not before:           Fri 23 May 2025 06:55:32 +0000
ROA not after:            Fri 22 May 2026 07:00:32 +0000
asID:                     150967
IP address blocks:        103.96.54.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/dfc6ad64-7543-48ad-b158-e82676a11c70/0/94F615F011BBB2C259625D478AF937086CA8D2EF.crl
                          rsync://repo-rpki.idnic.net/repo/dfc6ad64-7543-48ad-b158-e82676a11c70/0/94F615F011BBB2C259625D478AF937086CA8D2EF.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94F615F011BBB2C259625D478AF937086CA8D2EF.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Jun 2025 09:36:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:ed:b5:90:ee:1b:8e:ab:ee:96:a4:85:aa:e2:db:ec:c7:4f:6d:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94F615F011BBB2C259625D478AF937086CA8D2EF
        Validity
            Not Before: May 23 06:55:32 2025 GMT
            Not After : May 22 07:00:32 2026 GMT
        Subject: CN=E7DA90C7E1131C37BD0C3DA53ACC4C802D7DD458
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:9c:1e:ac:85:5e:d6:20:a0:95:ab:e9:53:46:
                    a4:4a:92:dd:de:8e:00:f3:dc:31:60:6d:fc:fa:09:
                    1c:ff:2f:fc:1b:79:9d:38:ed:7f:fc:f6:3b:47:8d:
                    4d:fc:18:7e:0b:31:ef:23:9e:58:30:32:be:2b:fc:
                    f8:43:6f:4b:71:54:e4:42:c9:c7:2c:8b:52:58:ec:
                    cc:e6:f7:2c:91:f0:75:f7:9e:0e:6d:60:6d:c5:7c:
                    52:41:b0:15:53:38:74:2e:b4:b8:77:fd:99:aa:03:
                    f0:fc:2d:17:11:41:e1:7c:66:e6:67:22:40:94:bb:
                    bb:c6:81:4b:f9:3a:fa:57:29:ec:ec:2f:93:dc:ec:
                    f2:f2:5b:d4:66:1b:c5:1e:71:8d:57:e0:49:bb:ad:
                    e1:85:98:6c:19:03:31:fa:f6:97:d0:c8:18:7c:1b:
                    bd:d3:47:2b:ad:e5:c1:d4:6e:60:a9:85:52:25:19:
                    c9:8e:f2:89:63:32:39:78:5c:6b:6c:67:4c:03:46:
                    78:c9:62:c8:3d:85:f6:3d:28:ee:86:90:e9:80:0f:
                    a4:7e:b9:84:d7:20:c2:e3:0f:e6:07:3a:23:a1:d2:
                    97:eb:e6:c8:41:d2:43:8c:59:99:cc:54:9f:47:3e:
                    d4:e6:c1:39:d5:a3:e2:85:d3:db:35:5b:72:7c:f9:
                    5d:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:DA:90:C7:E1:13:1C:37:BD:0C:3D:A5:3A:CC:4C:80:2D:7D:D4:58
            X509v3 Authority Key Identifier:
                keyid:94:F6:15:F0:11:BB:B2:C2:59:62:5D:47:8A:F9:37:08:6C:A8:D2:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/dfc6ad64-7543-48ad-b158-e82676a11c70/0/94F615F011BBB2C259625D478AF937086CA8D2EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94F615F011BBB2C259625D478AF937086CA8D2EF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dfc6ad64-7543-48ad-b158-e82676a11c70/0/3130332e39362e35342e302f32332d3234203d3e20313530393637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.96.54.0/23

    Signature Algorithm: sha256WithRSAEncryption
         40:ad:3b:59:e4:83:8b:5e:e3:70:1c:bb:54:74:ce:8f:ed:ab:
         18:37:78:ec:11:ac:0e:43:60:de:58:53:d2:d4:d1:68:17:1f:
         45:24:a4:08:ab:03:f2:bf:6e:bd:11:2f:bb:72:38:e9:b6:b9:
         ac:94:fe:e7:a3:80:a8:89:b0:0f:ab:67:56:d2:93:5c:3e:10:
         a2:10:d8:c3:2a:24:fa:a4:65:53:1a:f1:65:2f:67:9f:d2:23:
         21:06:5c:6e:73:84:b8:18:7a:26:47:03:1c:be:3c:5b:0d:78:
         3f:44:6f:d7:1e:96:12:1b:b5:6a:92:54:ca:9a:34:be:40:02:
         5e:eb:da:51:62:77:a3:7d:46:4a:65:f5:f3:e9:86:77:d4:de:
         6d:02:5d:5c:af:89:d5:6c:f5:30:fa:8f:d6:3a:18:2e:96:c1:
         8e:a8:22:94:2e:2d:ca:79:d9:e5:4f:d2:58:e2:8b:56:1b:c0:
         b3:a5:d3:e7:fb:42:91:36:dd:c1:04:f0:c0:4f:ec:08:43:ef:
         6e:26:ff:65:bf:2d:58:10:6c:47:3b:6b:b9:0c:6e:5d:7c:a1:
         40:7c:e7:1b:db:c1:8f:41:1e:db:5c:17:54:2d:cb:0c:1b:db:
         e1:aa:f2:5d:41:45:c7:d8:c4:ab:f7:60:1d:76:ab:84:fe:dd:
         93:77:a8:95
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUJ+21kO4bjqvulqSFquLb7MdPbXswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTRGNjE1RjAxMUJCQjJDMjU5NjI1RDQ3OEFGOTM3MDg2
Q0E4RDJFRjAeFw0yNTA1MjMwNjU1MzJaFw0yNjA1MjIwNzAwMzJaMDMxMTAvBgNV
BAMTKEU3REE5MEM3RTExMzFDMzdCRDBDM0RBNTNBQ0M0QzgwMkQ3REQ0NTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFnB6shV7WIKCVq+lTRqRKkt3e
jgDz3DFgbfz6CRz/L/wbeZ047X/89jtHjU38GH4LMe8jnlgwMr4r/PhDb0txVORC
yccsi1JY7Mzm9yyR8HX3ng5tYG3FfFJBsBVTOHQutLh3/ZmqA/D8LRcRQeF8ZuZn
IkCUu7vGgUv5OvpXKezsL5Pc7PLyW9RmG8UecY1X4Em7reGFmGwZAzH69pfQyBh8
G73TRyut5cHUbmCphVIlGcmO8oljMjl4XGtsZ0wDRnjJYsg9hfY9KO6GkOmAD6R+
uYTXIMLjD+YHOiOh0pfr5shB0kOMWZnMVJ9HPtTmwTnVo+KF09s1W3J8+V3zAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQU59qQx+ETHDe9DD2lOsxMgC191FgwHwYDVR0j
BBgwFoAUlPYV8BG7ssJZYl1Hivk3CGyo0u8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k
ZmM2YWQ2NC03NTQzLTQ4YWQtYjE1OC1lODI2NzZhMTFjNzAvMC85NEY2MTVGMDEx
QkJCMkMyNTk2MjVENDc4QUY5MzcwODZDQThEMkVGLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvOTRGNjE1RjAxMUJCQjJDMjU5NjI1RDQ3OEFGOTM3MDg2Q0E4
RDJFRi5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2RmYzZhZDY0LTc1NDMtNDhhZC1i
MTU4LWU4MjY3NmExMWM3MC8wLzMxMzAzMzJlMzkzNjJlMzUzNDJlMzAyZjMyMzMy
ZDMyMzQyMDNkM2UyMDMxMzUzMDM5MzYzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAWdgNjANBgkqhkiG
9w0BAQsFAAOCAQEAQK07WeSDi17jcBy7VHTOj+2rGDd47BGsDkNg3lhT0tTRaBcf
RSSkCKsD8r9uvREvu3I46ba5rJT+56OAqImwD6tnVtKTXD4QohDYwyok+qRlUxrx
ZS9nn9IjIQZcbnOEuBh6JkcDHL48Ww14P0Rv1x6WEhu1apJUypo0vkACXuvaUWJ3
o31GSmX18+mGd9TebQJdXK+J1Wz1MPqP1joYLpbBjqgilC4tynnZ5U/SWOKLVhvA
s6XT5/tCkTbdwQTwwE/sCEPvbib/Zb8tWBBsRztruQxuXXyhQHznG9vBj0Ee21wX
VC3LDBvb4aryXUFFx9jEq/dgHXarhP7dk3eolQ==
-----END CERTIFICATE-----
Generated at Sat Jun 7 09:35:42 2025 by rpki-client