Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/fc568b5b-b6ae-453e-8e16-d55dd635460b/0/3130332e3135332e3139302e302f32332d3233203d3e20313430343639.roa
File:                     3130332e3135332e3139302e302f32332d3233203d3e20313430343639.roa (raw, json)
Hash identifier:          Ts5xtS1oQbReAZqtallUwZhr/nW63EWdb9tsEvZsE08=
Subject key identifier:   02:3B:75:A3:E9:2B:D6:8E:A3:87:DB:99:1F:42:DA:6C:7F:E9:3C:7A
Certificate issuer:       /CN=10C3E17639C8B193629F97DCBD1EF4332CC9A8AD
Certificate serial:       46CF8ABB6E0F0DC7EF64B591FD5EE53943E6ECEB
Authority key identifier: 10:C3:E1:76:39:C8:B1:93:62:9F:97:DC:BD:1E:F4:33:2C:C9:A8:AD
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10C3E17639C8B193629F97DCBD1EF4332CC9A8AD.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/fc568b5b-b6ae-453e-8e16-d55dd635460b/0/3130332e3135332e3139302e302f32332d3233203d3e20313430343639.roa
Signing time:             Mon 02 Jun 2025 02:04:15 +0000
ROA not before:           Mon 02 Jun 2025 01:59:15 +0000
ROA not after:            Mon 01 Jun 2026 02:04:15 +0000
asID:                     140469
IP address blocks:        103.153.190.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/fc568b5b-b6ae-453e-8e16-d55dd635460b/0/10C3E17639C8B193629F97DCBD1EF4332CC9A8AD.crl
                          rsync://repo-rpki.idnic.net/repo/fc568b5b-b6ae-453e-8e16-d55dd635460b/0/10C3E17639C8B193629F97DCBD1EF4332CC9A8AD.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10C3E17639C8B193629F97DCBD1EF4332CC9A8AD.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Jun 2025 23:25:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:cf:8a:bb:6e:0f:0d:c7:ef:64:b5:91:fd:5e:e5:39:43:e6:ec:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10C3E17639C8B193629F97DCBD1EF4332CC9A8AD
        Validity
            Not Before: Jun  2 01:59:15 2025 GMT
            Not After : Jun  1 02:04:15 2026 GMT
        Subject: CN=023B75A3E92BD68EA387DB991F42DA6C7FE93C7A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e7:72:b7:dc:3d:e4:ae:73:b9:c2:32:e2:25:
                    a5:cb:44:ca:73:8a:d6:a1:63:b1:b6:68:c0:d0:66:
                    b3:3b:0b:ba:0a:98:53:c8:d3:5e:97:46:b9:23:8a:
                    1e:36:71:52:7b:46:d7:28:dd:99:e3:7b:c0:8a:c9:
                    9c:f3:11:54:9e:64:ca:c2:7b:b8:77:dc:ce:40:78:
                    9e:81:6d:68:23:4b:55:96:af:74:48:ce:cf:32:96:
                    3b:93:bd:d5:f3:15:52:7c:09:e8:d5:8f:69:79:0f:
                    99:80:c9:03:0c:b1:15:85:a2:9e:c8:c9:ee:b2:93:
                    cb:00:ce:f2:8b:e8:d1:8e:b4:99:11:8a:bc:72:51:
                    04:2a:70:27:89:27:ad:19:b2:20:15:7d:6e:1f:51:
                    55:bb:ce:90:f7:cc:55:ea:33:9e:d8:ce:ce:d7:8b:
                    fe:de:8a:83:b3:e1:a8:83:d4:21:e1:93:88:71:18:
                    5c:8f:be:7b:d2:66:fc:d4:07:e4:d6:8e:d5:b3:29:
                    7f:59:98:10:c8:9a:b5:cc:72:6e:7d:3d:6b:86:65:
                    1a:11:4f:9a:87:e2:c7:f9:58:fd:c9:39:92:79:99:
                    38:2e:2f:67:d8:5e:3a:3f:31:95:d8:0a:28:db:f3:
                    c8:86:bb:98:7e:4d:6d:47:6f:95:61:60:39:e8:53:
                    53:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:3B:75:A3:E9:2B:D6:8E:A3:87:DB:99:1F:42:DA:6C:7F:E9:3C:7A
            X509v3 Authority Key Identifier:
                keyid:10:C3:E1:76:39:C8:B1:93:62:9F:97:DC:BD:1E:F4:33:2C:C9:A8:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/fc568b5b-b6ae-453e-8e16-d55dd635460b/0/10C3E17639C8B193629F97DCBD1EF4332CC9A8AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10C3E17639C8B193629F97DCBD1EF4332CC9A8AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fc568b5b-b6ae-453e-8e16-d55dd635460b/0/3130332e3135332e3139302e302f32332d3233203d3e20313430343639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.153.190.0/23

    Signature Algorithm: sha256WithRSAEncryption
         11:0f:19:d2:3e:b0:6d:1d:e6:a0:ed:2f:52:4e:9d:0f:ca:15:
         7f:35:f4:68:84:1e:b9:1e:84:12:28:95:f8:32:b9:6d:48:3c:
         95:fb:4c:f3:38:56:e0:bd:07:83:b1:35:7c:4c:b7:e0:d0:51:
         b2:f7:06:82:b0:59:fc:0b:00:f9:e7:a2:13:1f:4b:be:37:c6:
         6b:35:bd:82:8c:08:07:32:f1:19:2c:8a:2b:2c:a8:84:7e:0d:
         57:59:37:d7:71:fc:38:16:3b:06:ca:96:af:db:2d:32:fe:73:
         72:98:d5:e4:79:da:5d:f0:14:a4:ae:19:36:2b:39:37:51:68:
         eb:0c:ad:ce:b2:be:70:c4:55:5e:ce:18:2d:a2:a3:ae:61:a1:
         df:d2:a3:2e:8b:92:4d:31:bc:5a:4d:22:ce:6f:11:09:0f:af:
         c2:c6:f0:3e:6b:2e:ce:8e:ad:26:e7:07:bb:8d:e2:5e:40:90:
         44:f4:76:76:88:9f:25:31:14:4a:63:46:d4:7e:50:22:9f:60:
         70:e5:0c:c6:10:51:eb:e7:83:77:0e:c5:ae:5f:b3:81:23:88:
         c8:de:2e:b6:1d:de:da:7b:6d:22:08:80:e2:eb:6d:b6:02:46:
         ea:5c:66:5a:e3:fd:bc:a1:85:7a:6a:ee:34:83:69:94:e1:43:
         29:8e:a3:c9
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIURs+Ku24PDcfvZLWR/V7lOUPm7OswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTBDM0UxNzYzOUM4QjE5MzYyOUY5N0RDQkQxRUY0MzMy
Q0M5QThBRDAeFw0yNTA2MDIwMTU5MTVaFw0yNjA2MDEwMjA0MTVaMDMxMTAvBgNV
BAMTKDAyM0I3NUEzRTkyQkQ2OEVBMzg3REI5OTFGNDJEQTZDN0ZFOTNDN0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+53K33D3krnO5wjLiJaXLRMpz
itahY7G2aMDQZrM7C7oKmFPI016XRrkjih42cVJ7Rtco3Znje8CKyZzzEVSeZMrC
e7h33M5AeJ6BbWgjS1WWr3RIzs8yljuTvdXzFVJ8CejVj2l5D5mAyQMMsRWFop7I
ye6yk8sAzvKL6NGOtJkRirxyUQQqcCeJJ60ZsiAVfW4fUVW7zpD3zFXqM57Yzs7X
i/7eioOz4aiD1CHhk4hxGFyPvnvSZvzUB+TWjtWzKX9ZmBDImrXMcm59PWuGZRoR
T5qH4sf5WP3JOZJ5mTguL2fYXjo/MZXYCijb88iGu5h+TW1Hb5VhYDnoU1MJAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUAjt1o+kr1o6jh9uZH0LabH/pPHowHwYDVR0j
BBgwFoAUEMPhdjnIsZNin5fcvR70MyzJqK0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m
YzU2OGI1Yi1iNmFlLTQ1M2UtOGUxNi1kNTVkZDYzNTQ2MGIvMC8xMEMzRTE3NjM5
QzhCMTkzNjI5Rjk3RENCRDFFRjQzMzJDQzlBOEFELmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMTBDM0UxNzYzOUM4QjE5MzYyOUY5N0RDQkQxRUY0MzMyQ0M5
QThBRC5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2ZjNTY4YjViLWI2YWUtNDUzZS04
ZTE2LWQ1NWRkNjM1NDYwYi8wLzMxMzAzMzJlMzEzNTMzMmUzMTM5MzAyZTMwMmYz
MjMzMmQzMjMzMjAzZDNlMjAzMTM0MzAzNDM2Mzkucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnmb4wDQYJ
KoZIhvcNAQELBQADggEBABEPGdI+sG0d5qDtL1JOnQ/KFX819GiEHrkehBIolfgy
uW1IPJX7TPM4VuC9B4OxNXxMt+DQUbL3BoKwWfwLAPnnohMfS743xms1vYKMCAcy
8RksiissqIR+DVdZN9dx/DgWOwbKlq/bLTL+c3KY1eR52l3wFKSuGTYrOTdRaOsM
rc6yvnDEVV7OGC2io65hod/Soy6Lkk0xvFpNIs5vEQkPr8LG8D5rLs6OrSbnB7uN
4l5AkET0dnaInyUxFEpjRtR+UCKfYHDlDMYQUevng3cOxa5fs4EjiMjeLrYd3tp7
bSIIgOLrbbYCRupcZlrj/byhhXpq7jSDaZThQymOo8k=
-----END CERTIFICATE-----
Generated at Sun Jun 8 13:27:50 2025 by rpki-client