Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/3130332e39342e31302e302f32342d3234203d3e203435373232.roa
File:                     3130332e39342e31302e302f32342d3234203d3e203435373232.roa (raw, json)
Hash identifier:          oriUzK7mgQPCjaTV1H4IccgCRtyIm4Y5jf+70OM+bhw=
Subject key identifier:   73:2B:7F:03:95:25:BA:98:1D:D2:C9:7C:E5:84:97:26:4C:05:DE:05
Certificate issuer:       /CN=5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C
Certificate serial:       18DDC7B28DB195E5AB050209DD899FBC1D6C8666
Authority key identifier: 51:10:A7:17:EF:E9:6B:12:E5:D3:A4:75:E9:B2:17:9E:5D:E0:EA:0C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/3130332e39342e31302e302f32342d3234203d3e203435373232.roa
Signing time:             Mon 02 Jun 2025 02:02:51 +0000
ROA not before:           Mon 02 Jun 2025 01:57:51 +0000
ROA not after:            Mon 01 Jun 2026 02:02:51 +0000
asID:                     45722
IP address blocks:        103.94.10.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.crl
                          rsync://repo-rpki.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Jun 2025 05:09:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:dd:c7:b2:8d:b1:95:e5:ab:05:02:09:dd:89:9f:bc:1d:6c:86:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C
        Validity
            Not Before: Jun  2 01:57:51 2025 GMT
            Not After : Jun  1 02:02:51 2026 GMT
        Subject: CN=732B7F039525BA981DD2C97CE58497264C05DE05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:95:da:db:5a:60:3d:3b:e1:12:44:89:67:d8:
                    5d:55:b0:38:e9:5a:c9:d3:8a:89:e6:cc:34:4d:89:
                    70:9d:c8:93:ba:8a:dc:2e:f5:c3:9c:1e:9e:9a:f1:
                    37:96:ad:60:0c:f6:b8:c0:2b:59:7c:12:2f:6e:e7:
                    19:bd:d6:48:4d:c6:b2:d4:eb:45:8f:ea:f2:44:5f:
                    34:91:b8:c6:e5:e7:4f:a7:2d:0c:b0:47:dd:fb:2a:
                    04:92:d2:1e:98:fa:7b:50:e3:be:54:2f:ac:69:ea:
                    92:8b:62:22:56:34:b6:1d:ee:e5:13:82:2c:a9:b0:
                    0e:a2:3b:3e:48:d3:02:75:09:77:91:56:9d:90:63:
                    33:13:5b:91:53:4a:37:e4:a5:11:32:d1:89:4c:bb:
                    ab:a5:29:71:14:28:33:92:a9:48:27:8a:4c:3d:7b:
                    18:89:69:2b:6b:9f:07:9b:bf:d0:f4:ec:fb:17:b4:
                    f9:be:d6:b1:2d:e6:1f:53:27:60:af:1f:55:f2:29:
                    7b:57:4f:bb:37:98:08:b4:31:07:b2:95:6d:fd:d6:
                    7f:ac:fc:9a:b7:c4:7b:32:73:b4:43:9f:36:27:fd:
                    d7:98:d7:b8:26:24:2d:1c:7c:3d:82:9b:a6:65:a7:
                    62:64:51:be:c9:a3:ef:b5:07:bb:d2:26:cb:8c:49:
                    ea:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:2B:7F:03:95:25:BA:98:1D:D2:C9:7C:E5:84:97:26:4C:05:DE:05
            X509v3 Authority Key Identifier:
                keyid:51:10:A7:17:EF:E9:6B:12:E5:D3:A4:75:E9:B2:17:9E:5D:E0:EA:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/3130332e39342e31302e302f32342d3234203d3e203435373232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.94.10.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b6:38:a3:aa:2a:0f:a3:59:14:0c:a9:0f:7d:11:a0:ab:9b:dd:
         99:c8:4f:b8:84:da:a5:8c:75:f0:15:bb:a2:f3:b7:11:df:43:
         63:00:e0:c7:4a:8b:9f:18:0f:2c:78:37:b9:c7:c1:1c:76:e3:
         9f:b7:52:08:0a:b2:98:67:7d:ae:6c:ba:4e:bf:30:85:bb:b2:
         05:84:1b:40:74:8e:77:38:7e:24:d0:f7:56:93:06:21:28:d1:
         56:50:48:bd:28:27:b7:5d:ae:75:b1:01:c5:3f:54:6c:f7:ad:
         48:58:2b:b7:e8:d1:2e:5c:5c:ac:68:9e:ce:61:c7:5b:c5:70:
         57:be:a7:b1:51:c7:a9:44:22:24:86:9c:3e:ce:9e:ad:c4:f0:
         75:86:df:85:e8:11:d9:dd:ac:94:ca:c2:37:26:2c:c0:d6:42:
         ef:a3:bd:31:10:52:42:35:b0:54:71:89:66:2e:bb:e7:b0:2b:
         3b:68:41:a1:7b:ca:46:a5:58:7a:36:62:00:8b:88:ef:54:0d:
         6e:65:d6:e8:84:e6:8f:88:c3:f3:1c:c9:f7:c3:db:14:55:4d:
         e7:87:88:4f:1a:25:3f:09:ee:ce:8c:8c:18:24:49:1b:22:0a:
         9e:68:16:b0:29:86:1d:ec:64:dc:e6:0a:78:87:69:2f:54:cd:
         fb:57:e5:0a
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUGN3Hso2xleWrBQIJ3YmfvB1shmYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTExMEE3MTdFRkU5NkIxMkU1RDNBNDc1RTlCMjE3OUU1
REUwRUEwQzAeFw0yNTA2MDIwMTU3NTFaFw0yNjA2MDEwMjAyNTFaMDMxMTAvBgNV
BAMTKDczMkI3RjAzOTUyNUJBOTgxREQyQzk3Q0U1ODQ5NzI2NEMwNURFMDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFldrbWmA9O+ESRIln2F1VsDjp
WsnTionmzDRNiXCdyJO6itwu9cOcHp6a8TeWrWAM9rjAK1l8Ei9u5xm91khNxrLU
60WP6vJEXzSRuMbl50+nLQywR937KgSS0h6Y+ntQ475UL6xp6pKLYiJWNLYd7uUT
giypsA6iOz5I0wJ1CXeRVp2QYzMTW5FTSjfkpREy0YlMu6ulKXEUKDOSqUgnikw9
exiJaStrnwebv9D07PsXtPm+1rEt5h9TJ2CvH1XyKXtXT7s3mAi0MQeylW391n+s
/Jq3xHsyc7RDnzYn/deY17gmJC0cfD2Cm6Zlp2JkUb7Jo++1B7vSJsuMSeqzAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQUcyt/A5Ulupgd0sl85YSXJkwF3gUwHwYDVR0j
BBgwFoAUURCnF+/paxLl06R16bIXnl3g6gwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l
NjA3ZDkyOS00Y2E4LTRmNTMtYTI5OC01ZTMzYmUxZjg2MDQvMC81MTEwQTcxN0VG
RTk2QjEyRTVEM0E0NzVFOUIyMTc5RTVERTBFQTBDLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNTExMEE3MTdFRkU5NkIxMkU1RDNBNDc1RTlCMjE3OUU1REUw
RUEwQy5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2U2MDdkOTI5LTRjYTgtNGY1My1h
Mjk4LTVlMzNiZTFmODYwNC8wLzMxMzAzMzJlMzkzNDJlMzEzMDJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDM0MzUzNzMyMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnXgowDQYJKoZIhvcN
AQELBQADggEBALY4o6oqD6NZFAypD30RoKub3ZnIT7iE2qWMdfAVu6LztxHfQ2MA
4MdKi58YDyx4N7nHwRx245+3UggKsphnfa5suk6/MIW7sgWEG0B0jnc4fiTQ91aT
BiEo0VZQSL0oJ7ddrnWxAcU/VGz3rUhYK7fo0S5cXKxons5hx1vFcFe+p7FRx6lE
IiSGnD7Onq3E8HWG34XoEdndrJTKwjcmLMDWQu+jvTEQUkI1sFRxiWYuu+ewKzto
QaF7ykalWHo2YgCLiO9UDW5l1uiE5o+Iw/McyffD2xRVTeeHiE8aJT8J7s6MjBgk
SRsiCp5oFrAphh3sZNzmCniHaS9UzftX5Qo=
-----END CERTIFICATE-----
Generated at Sat Jun 7 23:14:22 2025 by rpki-client