Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e74d0bf9-cc9a-42a3-830a-76f6d32b2f45/0/3130332e32362e3137362e302f32332d3234203d3e203538383231.roa
File:                     3130332e32362e3137362e302f32332d3234203d3e203538383231.roa (raw, json)
Hash identifier:          ZMf4hqz32o6JWeuknkypuSEYiicMrl6BzPzDdk4JbqY=
Subject key identifier:   2A:33:8D:36:3D:F2:80:84:16:E3:0E:46:60:97:76:B1:CD:80:7A:F8
Certificate issuer:       /CN=2370B87417B78EB4410F4394F29FB327D1401F0D
Certificate serial:       4F689468D6B9192703B06D8BA81B09DEC7CF7D35
Authority key identifier: 23:70:B8:74:17:B7:8E:B4:41:0F:43:94:F2:9F:B3:27:D1:40:1F:0D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2370B87417B78EB4410F4394F29FB327D1401F0D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e74d0bf9-cc9a-42a3-830a-76f6d32b2f45/0/3130332e32362e3137362e302f32332d3234203d3e203538383231.roa
Signing time:             Wed 07 May 2025 02:57:21 +0000
ROA not before:           Wed 07 May 2025 02:52:21 +0000
ROA not after:            Wed 06 May 2026 02:57:21 +0000
asID:                     58821
IP address blocks:        103.26.176.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e74d0bf9-cc9a-42a3-830a-76f6d32b2f45/0/2370B87417B78EB4410F4394F29FB327D1401F0D.crl
                          rsync://repo-rpki.idnic.net/repo/e74d0bf9-cc9a-42a3-830a-76f6d32b2f45/0/2370B87417B78EB4410F4394F29FB327D1401F0D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2370B87417B78EB4410F4394F29FB327D1401F0D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Jun 2025 13:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:68:94:68:d6:b9:19:27:03:b0:6d:8b:a8:1b:09:de:c7:cf:7d:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2370B87417B78EB4410F4394F29FB327D1401F0D
        Validity
            Not Before: May  7 02:52:21 2025 GMT
            Not After : May  6 02:57:21 2026 GMT
        Subject: CN=2A338D363DF2808416E30E46609776B1CD807AF8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:79:c7:bf:81:1b:03:ac:18:14:54:d2:1f:b5:
                    81:8d:b5:9b:69:db:a0:28:23:f8:a3:f0:16:21:13:
                    d0:97:ed:c5:3d:47:86:a1:b3:68:df:e0:2b:df:fd:
                    39:e5:4e:db:b9:fc:67:63:dd:a9:bc:10:56:2b:75:
                    47:5b:61:7d:63:d6:9c:b9:18:c0:6a:db:62:10:27:
                    79:87:d9:2e:ba:a7:8e:92:38:3f:d4:77:ec:35:c4:
                    a9:97:cf:c1:32:79:ab:25:15:00:4f:89:2c:d6:b1:
                    b1:f0:16:cf:16:58:e3:b4:1f:2d:43:0f:f6:a8:f0:
                    68:c3:03:e3:97:44:e4:44:f4:ca:16:fd:34:16:f8:
                    45:af:7f:a2:a1:29:9b:a8:a6:5b:2c:e6:8e:e2:b5:
                    1e:83:45:fa:7b:9e:ec:33:73:20:08:5f:b5:32:55:
                    df:3b:f4:ce:7f:ec:07:b9:a4:51:40:6e:3e:d3:bf:
                    70:36:e7:f6:e4:a7:60:a2:f4:22:54:55:e6:fb:8c:
                    fc:aa:7e:16:e3:6b:8b:a8:d7:5d:e7:68:2e:f5:29:
                    2b:03:61:ba:86:e1:35:4c:2c:a7:54:fa:46:a1:03:
                    ed:05:1f:fb:fe:1d:bb:f5:28:8c:d8:70:2a:ce:8a:
                    26:10:2b:88:b7:a9:1e:cd:3a:58:a9:94:72:56:71:
                    11:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:33:8D:36:3D:F2:80:84:16:E3:0E:46:60:97:76:B1:CD:80:7A:F8
            X509v3 Authority Key Identifier:
                keyid:23:70:B8:74:17:B7:8E:B4:41:0F:43:94:F2:9F:B3:27:D1:40:1F:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e74d0bf9-cc9a-42a3-830a-76f6d32b2f45/0/2370B87417B78EB4410F4394F29FB327D1401F0D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2370B87417B78EB4410F4394F29FB327D1401F0D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e74d0bf9-cc9a-42a3-830a-76f6d32b2f45/0/3130332e32362e3137362e302f32332d3234203d3e203538383231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.26.176.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a0:e9:9f:d2:39:74:f9:2b:7e:90:9a:07:0b:d9:e1:9a:6c:d0:
         75:bf:3f:ef:e1:d5:b1:0c:9c:81:2f:60:3f:82:40:31:09:1b:
         ed:77:c5:9a:de:5f:8d:98:fa:2b:a3:22:8f:db:66:9e:f9:b3:
         29:f1:13:a4:b6:67:cc:e5:a8:d1:c0:65:0d:c6:3f:cb:1e:2b:
         58:70:7c:de:1b:0e:0d:77:aa:dc:5f:fd:1f:1c:10:b8:22:f2:
         30:3b:e9:ea:03:4c:f2:c5:68:2e:d1:90:91:5a:75:3e:da:db:
         ea:63:a2:6c:69:4b:c1:7d:ad:f3:8f:2f:40:cd:c0:de:da:96:
         48:47:6e:fa:18:9d:81:b4:f2:68:04:70:54:84:e5:63:a5:fa:
         9c:0c:1a:20:c4:a9:18:55:df:47:28:ba:ad:96:3c:a5:ad:c7:
         10:bf:85:5b:d9:77:47:19:b2:3c:27:64:39:3a:8a:85:12:cc:
         18:e7:16:76:36:af:0c:a4:81:71:2f:e3:92:59:50:8f:89:19:
         56:4b:d1:4d:e7:3e:6f:b4:88:a8:1f:ce:67:fb:8b:c9:2f:f1:
         06:56:fc:4f:b0:c1:0b:df:93:5d:2d:0b:59:26:f2:ef:b0:e6:
         63:1e:7f:09:a4:16:85:3c:5f:7f:51:f1:34:f8:9f:e3:00:47:
         ff:e8:1a:50
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUT2iUaNa5GScDsG2LqBsJ3sfPfTUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjM3MEI4NzQxN0I3OEVCNDQxMEY0Mzk0RjI5RkIzMjdE
MTQwMUYwRDAeFw0yNTA1MDcwMjUyMjFaFw0yNjA1MDYwMjU3MjFaMDMxMTAvBgNV
BAMTKDJBMzM4RDM2M0RGMjgwODQxNkUzMEU0NjYwOTc3NkIxQ0Q4MDdBRjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzece/gRsDrBgUVNIftYGNtZtp
26AoI/ij8BYhE9CX7cU9R4ahs2jf4Cvf/TnlTtu5/Gdj3am8EFYrdUdbYX1j1py5
GMBq22IQJ3mH2S66p46SOD/Ud+w1xKmXz8EyeaslFQBPiSzWsbHwFs8WWOO0Hy1D
D/ao8GjDA+OXRORE9MoW/TQW+EWvf6KhKZuoplss5o7itR6DRfp7nuwzcyAIX7Uy
Vd879M5/7Ae5pFFAbj7Tv3A25/bkp2Ci9CJUVeb7jPyqfhbja4uo113naC71KSsD
YbqG4TVMLKdU+kahA+0FH/v+Hbv1KIzYcCrOiiYQK4i3qR7NOliplHJWcRGrAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUKjONNj3ygIQW4w5GYJd2sc2AevgwHwYDVR0j
BBgwFoAUI3C4dBe3jrRBD0OU8p+zJ9FAHw0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l
NzRkMGJmOS1jYzlhLTQyYTMtODMwYS03NmY2ZDMyYjJmNDUvMC8yMzcwQjg3NDE3
Qjc4RUI0NDEwRjQzOTRGMjlGQjMyN0QxNDAxRjBELmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMjM3MEI4NzQxN0I3OEVCNDQxMEY0Mzk0RjI5RkIzMjdEMTQw
MUYwRC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2U3NGQwYmY5LWNjOWEtNDJhMy04
MzBhLTc2ZjZkMzJiMmY0NS8wLzMxMzAzMzJlMzIzNjJlMzEzNzM2MmUzMDJmMzIz
MzJkMzIzNDIwM2QzZTIwMzUzODM4MzIzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAWcasDANBgkqhkiG
9w0BAQsFAAOCAQEAoOmf0jl0+St+kJoHC9nhmmzQdb8/7+HVsQycgS9gP4JAMQkb
7XfFmt5fjZj6K6Mij9tmnvmzKfETpLZnzOWo0cBlDcY/yx4rWHB83hsODXeq3F/9
HxwQuCLyMDvp6gNM8sVoLtGQkVp1Ptrb6mOibGlLwX2t848vQM3A3tqWSEdu+hid
gbTyaARwVITlY6X6nAwaIMSpGFXfRyi6rZY8pa3HEL+FW9l3RxmyPCdkOTqKhRLM
GOcWdjavDKSBcS/jkllQj4kZVkvRTec+b7SIqB/OZ/uLyS/xBlb8T7DBC9+TXS0L
WSby77DmYx5/CaQWhTxff1HxNPif4wBH/+gaUA==
-----END CERTIFICATE-----
Generated at Thu Jun 5 18:22:56 2025 by rpki-client