Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/3130332e39342e382e302f32342d3234203d3e203435373232.roa
File:                     3130332e39342e382e302f32342d3234203d3e203435373232.roa (raw, json)
Hash identifier:          dTEDIPJlLGDlRHB30/PzLB90DYFKiiQue74QgGKHEVI=
Subject key identifier:   F1:B7:C6:A3:18:A6:3F:49:93:2E:01:B2:17:EC:38:43:37:37:14:3F
Certificate issuer:       /CN=5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C
Certificate serial:       6C2BFB3F5A29F8120993D7C8E1159EF86E56B86C
Authority key identifier: 51:10:A7:17:EF:E9:6B:12:E5:D3:A4:75:E9:B2:17:9E:5D:E0:EA:0C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/3130332e39342e382e302f32342d3234203d3e203435373232.roa
Signing time:             Mon 02 Jun 2025 02:02:51 +0000
ROA not before:           Mon 02 Jun 2025 01:57:51 +0000
ROA not after:            Mon 01 Jun 2026 02:02:51 +0000
asID:                     45722
IP address blocks:        103.94.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.crl
                          rsync://repo-rpki.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Jun 2025 05:09:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:2b:fb:3f:5a:29:f8:12:09:93:d7:c8:e1:15:9e:f8:6e:56:b8:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C
        Validity
            Not Before: Jun  2 01:57:51 2025 GMT
            Not After : Jun  1 02:02:51 2026 GMT
        Subject: CN=F1B7C6A318A63F49932E01B217EC38433737143F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:bb:8f:8d:fb:77:be:f6:70:fc:a6:ab:f6:cf:
                    68:e1:a0:5a:43:d3:16:79:69:3f:c1:83:4d:f6:3d:
                    aa:67:3e:3f:e2:e7:e4:ea:3e:c4:4f:e1:c9:57:b8:
                    09:bb:a0:57:c5:30:bc:f5:9d:4e:3d:83:d0:76:45:
                    23:d3:da:b4:2f:22:b9:9b:58:38:2d:03:65:d9:49:
                    56:c1:3b:9a:2e:41:12:e0:01:cf:c4:89:cf:46:f0:
                    6a:2f:f6:d5:d1:2a:6f:bb:2f:0b:22:d6:0e:af:4f:
                    63:9d:6f:ac:d3:85:e9:f4:51:eb:fb:0f:02:e0:ad:
                    3c:ab:50:46:1b:03:15:3a:ac:79:18:df:50:8c:cb:
                    fc:a6:39:ac:5d:0f:a3:2e:60:55:31:d3:70:16:13:
                    78:a6:4e:82:4a:34:92:9d:77:6b:7f:e8:6e:8c:ee:
                    38:31:0f:eb:4a:91:a0:81:03:2a:32:4d:83:63:f6:
                    94:fe:41:c8:f1:b4:54:f4:7a:e0:85:75:b3:3e:dd:
                    6c:08:b4:54:0d:99:06:28:64:16:2e:ee:b2:a0:21:
                    90:fb:29:3b:29:18:a9:12:7a:62:09:8a:59:11:fc:
                    d2:97:02:20:d7:e8:64:bd:51:82:c9:b9:8d:ef:56:
                    3d:93:a3:e2:69:cb:83:26:22:c5:a4:4d:4b:26:4b:
                    d8:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:B7:C6:A3:18:A6:3F:49:93:2E:01:B2:17:EC:38:43:37:37:14:3F
            X509v3 Authority Key Identifier:
                keyid:51:10:A7:17:EF:E9:6B:12:E5:D3:A4:75:E9:B2:17:9E:5D:E0:EA:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/3130332e39342e382e302f32342d3234203d3e203435373232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.94.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a7:a1:c4:1a:5a:94:64:14:46:9c:ff:75:8d:82:26:c5:de:e6:
         e7:be:ff:16:55:6f:fe:e1:a9:ba:67:ca:6f:a8:92:86:8f:46:
         5a:80:10:af:3b:e2:17:c0:e9:be:e6:a3:71:88:1e:dc:4e:1c:
         19:19:57:e3:2a:35:e4:96:28:46:90:6b:58:c5:26:a2:46:39:
         ea:2f:e3:61:06:8f:7f:b4:9b:32:da:05:09:ce:ca:50:5e:8a:
         8c:d2:48:99:a4:89:ad:46:a3:a8:83:d0:84:a2:c4:38:19:2c:
         6e:59:5a:d8:68:d7:f6:1b:fc:37:7f:0b:4e:ec:a9:5c:0b:53:
         13:d9:1f:a0:1a:5b:27:95:12:6f:55:6f:ed:d5:8a:6b:b2:d2:
         15:50:0a:83:31:64:77:58:bb:61:9b:d3:8f:d6:a2:41:c4:42:
         fe:b2:3d:1e:aa:be:c6:9e:d2:25:1b:23:65:fc:c2:1a:f9:86:
         41:b6:9b:5a:b3:30:4c:9d:33:81:40:38:bd:32:75:e6:fd:6d:
         04:10:49:64:eb:0b:aa:c2:b9:cf:c9:56:4e:ec:e2:10:7d:10:
         9e:54:ef:05:9c:44:32:c4:34:22:72:96:8c:b3:c5:fe:35:97:
         5f:f4:11:1d:bc:e0:0e:b8:00:96:97:d5:9c:93:04:4f:1c:2f:
         37:fb:54:62
-----BEGIN CERTIFICATE-----
MIIFIzCCBAugAwIBAgIUbCv7P1op+BIJk9fI4RWe+G5WuGwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTExMEE3MTdFRkU5NkIxMkU1RDNBNDc1RTlCMjE3OUU1
REUwRUEwQzAeFw0yNTA2MDIwMTU3NTFaFw0yNjA2MDEwMjAyNTFaMDMxMTAvBgNV
BAMTKEYxQjdDNkEzMThBNjNGNDk5MzJFMDFCMjE3RUMzODQzMzczNzE0M0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6u4+N+3e+9nD8pqv2z2jhoFpD
0xZ5aT/Bg032PapnPj/i5+TqPsRP4clXuAm7oFfFMLz1nU49g9B2RSPT2rQvIrmb
WDgtA2XZSVbBO5ouQRLgAc/Eic9G8Gov9tXRKm+7Lwsi1g6vT2Odb6zThen0Uev7
DwLgrTyrUEYbAxU6rHkY31CMy/ymOaxdD6MuYFUx03AWE3imToJKNJKdd2t/6G6M
7jgxD+tKkaCBAyoyTYNj9pT+QcjxtFT0euCFdbM+3WwItFQNmQYoZBYu7rKgIZD7
KTspGKkSemIJilkR/NKXAiDX6GS9UYLJuY3vVj2To+Jpy4MmIsWkTUsmS9j9AgMB
AAGjggItMIICKTAdBgNVHQ4EFgQU8bfGoximP0mTLgGyF+w4Qzc3FD8wHwYDVR0j
BBgwFoAUURCnF+/paxLl06R16bIXnl3g6gwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l
NjA3ZDkyOS00Y2E4LTRmNTMtYTI5OC01ZTMzYmUxZjg2MDQvMC81MTEwQTcxN0VG
RTk2QjEyRTVEM0E0NzVFOUIyMTc5RTVERTBFQTBDLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNTExMEE3MTdFRkU5NkIxMkU1RDNBNDc1RTlCMjE3OUU1REUw
RUEwQy5jZXIwgZ0GCCsGAQUFBwELBIGQMIGNMIGKBggrBgEFBQcwC4Z+cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTYwN2Q5MjktNGNhOC00ZjUzLWEy
OTgtNWUzM2JlMWY4NjA0LzAvMzEzMDMzMmUzOTM0MmUzODJlMzAyZjMyMzQyZDMy
MzQyMDNkM2UyMDM0MzUzNzMyMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH
DgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnXggwDQYJKoZIhvcNAQEL
BQADggEBAKehxBpalGQURpz/dY2CJsXe5ue+/xZVb/7hqbpnym+okoaPRlqAEK87
4hfA6b7mo3GIHtxOHBkZV+MqNeSWKEaQa1jFJqJGOeov42EGj3+0mzLaBQnOylBe
iozSSJmkia1Go6iD0ISixDgZLG5ZWtho1/Yb/Dd/C07sqVwLUxPZH6AaWyeVEm9V
b+3Vimuy0hVQCoMxZHdYu2Gb04/WokHEQv6yPR6qvsae0iUbI2X8whr5hkG2m1qz
MEydM4FAOL0ydeb9bQQQSWTrC6rCuc/JVk7s4hB9EJ5U7wWcRDLENCJyloyzxf41
l1/0ER284A64AJaX1ZyTBE8cLzf7VGI=
-----END CERTIFICATE-----
Generated at Sat Jun 7 23:14:37 2025 by rpki-client