Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/fc568b5b-b6ae-453e-8e16-d55dd635460b/0/3130332e3135332e3139312e302f32342d3234203d3e20313430343639.roa
File:                     3130332e3135332e3139312e302f32342d3234203d3e20313430343639.roa (raw, json)
Hash identifier:          624g30p2voUe7YOI6fxkypPwiKquVP6kSsxSvqN561I=
Subject key identifier:   46:7D:CC:18:5C:76:89:0B:05:6F:E7:BA:55:35:F2:7B:3F:48:38:0A
Certificate issuer:       /CN=10C3E17639C8B193629F97DCBD1EF4332CC9A8AD
Certificate serial:       0B690E52F69100183D61B1B3A490E23F66EF535C
Authority key identifier: 10:C3:E1:76:39:C8:B1:93:62:9F:97:DC:BD:1E:F4:33:2C:C9:A8:AD
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10C3E17639C8B193629F97DCBD1EF4332CC9A8AD.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/fc568b5b-b6ae-453e-8e16-d55dd635460b/0/3130332e3135332e3139312e302f32342d3234203d3e20313430343639.roa
Signing time:             Mon 02 Jun 2025 02:04:15 +0000
ROA not before:           Mon 02 Jun 2025 01:59:15 +0000
ROA not after:            Mon 01 Jun 2026 02:04:15 +0000
asID:                     140469
IP address blocks:        103.153.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/fc568b5b-b6ae-453e-8e16-d55dd635460b/0/10C3E17639C8B193629F97DCBD1EF4332CC9A8AD.crl
                          rsync://repo-rpki.idnic.net/repo/fc568b5b-b6ae-453e-8e16-d55dd635460b/0/10C3E17639C8B193629F97DCBD1EF4332CC9A8AD.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10C3E17639C8B193629F97DCBD1EF4332CC9A8AD.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Jun 2025 23:25:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:69:0e:52:f6:91:00:18:3d:61:b1:b3:a4:90:e2:3f:66:ef:53:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10C3E17639C8B193629F97DCBD1EF4332CC9A8AD
        Validity
            Not Before: Jun  2 01:59:15 2025 GMT
            Not After : Jun  1 02:04:15 2026 GMT
        Subject: CN=467DCC185C76890B056FE7BA5535F27B3F48380A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:76:d6:20:7f:31:54:8d:2f:98:49:82:69:fc:
                    1d:6e:01:aa:0d:aa:f0:d5:b6:aa:22:4a:ef:1c:2d:
                    89:f9:cf:12:dd:79:71:3d:36:32:71:60:e0:18:10:
                    01:95:3c:36:c1:b7:2f:3d:36:a8:7b:49:77:99:62:
                    04:5d:5c:46:57:ce:4e:d6:9f:ae:41:97:a1:af:a5:
                    8e:03:80:6a:0b:35:ae:09:6d:5f:70:e2:76:d5:e8:
                    13:80:c1:a0:d0:04:7a:fc:f9:1e:4e:1e:fa:13:25:
                    d4:57:34:21:b6:68:e7:58:38:e8:64:5f:77:7e:24:
                    e8:af:2a:94:97:07:f4:4d:95:83:d4:13:54:83:07:
                    f3:c2:87:13:fb:b7:b6:69:f0:d9:c0:e6:1d:bc:de:
                    c1:8d:9c:41:c0:63:22:1b:7a:e2:83:fe:7d:47:7a:
                    dd:d9:14:60:98:22:a0:b9:48:2c:f0:c9:d4:57:96:
                    0d:81:6c:5d:60:7a:66:c5:29:01:c3:1f:6e:e6:92:
                    52:54:9e:ba:f5:12:ac:21:77:b6:95:c4:fe:68:73:
                    7b:42:0d:5e:3c:c7:c7:0a:5c:fc:1c:4b:11:ba:ee:
                    aa:f3:5a:f5:a4:c3:83:d0:41:ec:3f:ac:3b:07:e9:
                    d3:f6:25:06:67:4a:b2:dc:c4:ba:70:45:50:27:bd:
                    70:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:7D:CC:18:5C:76:89:0B:05:6F:E7:BA:55:35:F2:7B:3F:48:38:0A
            X509v3 Authority Key Identifier:
                keyid:10:C3:E1:76:39:C8:B1:93:62:9F:97:DC:BD:1E:F4:33:2C:C9:A8:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/fc568b5b-b6ae-453e-8e16-d55dd635460b/0/10C3E17639C8B193629F97DCBD1EF4332CC9A8AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10C3E17639C8B193629F97DCBD1EF4332CC9A8AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fc568b5b-b6ae-453e-8e16-d55dd635460b/0/3130332e3135332e3139312e302f32342d3234203d3e20313430343639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.153.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:aa:61:4a:28:55:da:d8:67:0f:93:78:e2:d9:ce:c1:b1:1b:
         02:cc:a1:93:ce:6e:be:fb:5e:47:ca:48:39:63:97:a6:9f:e4:
         c7:13:23:b3:28:ac:c8:3f:15:d0:83:39:75:cc:5d:e7:e6:1f:
         90:7e:51:0f:7a:29:75:30:00:f7:26:86:da:c1:48:8b:41:b8:
         8c:92:27:b2:6e:44:40:bb:11:98:ed:af:dd:0a:9b:f8:e4:4d:
         b2:5c:3c:ea:55:92:e4:8c:e0:b5:ed:c9:91:47:0c:e4:2b:02:
         f2:f9:c9:b8:6d:e4:b0:f8:68:54:c5:6b:1a:c0:32:63:d4:e9:
         ea:a2:0c:cf:4d:ab:f6:61:03:01:70:cc:ad:0c:f9:9d:9d:68:
         b4:5d:c5:ca:84:45:28:92:f8:83:d2:f4:75:21:70:18:7c:82:
         68:00:b6:e6:e5:40:46:b7:9c:9a:db:92:31:32:d4:db:9b:d0:
         4c:4f:8b:9c:7a:2a:fb:b2:ee:f4:0c:5f:6f:5e:cd:ca:36:83:
         82:d9:aa:bd:52:ac:fe:14:ea:41:fb:40:67:4f:c4:5b:12:21:
         18:94:22:4e:1d:b4:12:ea:55:51:cc:5d:f9:6e:b3:13:18:87:
         2f:d9:08:ea:45:e3:51:47:cf:19:b4:7b:71:8d:3f:76:dd:0e:
         60:11:a2:41
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUC2kOUvaRABg9YbGzpJDiP2bvU1wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTBDM0UxNzYzOUM4QjE5MzYyOUY5N0RDQkQxRUY0MzMy
Q0M5QThBRDAeFw0yNTA2MDIwMTU5MTVaFw0yNjA2MDEwMjA0MTVaMDMxMTAvBgNV
BAMTKDQ2N0RDQzE4NUM3Njg5MEIwNTZGRTdCQTU1MzVGMjdCM0Y0ODM4MEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6dtYgfzFUjS+YSYJp/B1uAaoN
qvDVtqoiSu8cLYn5zxLdeXE9NjJxYOAYEAGVPDbBty89Nqh7SXeZYgRdXEZXzk7W
n65Bl6GvpY4DgGoLNa4JbV9w4nbV6BOAwaDQBHr8+R5OHvoTJdRXNCG2aOdYOOhk
X3d+JOivKpSXB/RNlYPUE1SDB/PChxP7t7Zp8NnA5h283sGNnEHAYyIbeuKD/n1H
et3ZFGCYIqC5SCzwydRXlg2BbF1gembFKQHDH27mklJUnrr1Eqwhd7aVxP5oc3tC
DV48x8cKXPwcSxG67qrzWvWkw4PQQew/rDsH6dP2JQZnSrLcxLpwRVAnvXB3AgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQURn3MGFx2iQsFb+e6VTXyez9IOAowHwYDVR0j
BBgwFoAUEMPhdjnIsZNin5fcvR70MyzJqK0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m
YzU2OGI1Yi1iNmFlLTQ1M2UtOGUxNi1kNTVkZDYzNTQ2MGIvMC8xMEMzRTE3NjM5
QzhCMTkzNjI5Rjk3RENCRDFFRjQzMzJDQzlBOEFELmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMTBDM0UxNzYzOUM4QjE5MzYyOUY5N0RDQkQxRUY0MzMyQ0M5
QThBRC5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2ZjNTY4YjViLWI2YWUtNDUzZS04
ZTE2LWQ1NWRkNjM1NDYwYi8wLzMxMzAzMzJlMzEzNTMzMmUzMTM5MzEyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzAzNDM2Mzkucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnmb8wDQYJ
KoZIhvcNAQELBQADggEBADKqYUooVdrYZw+TeOLZzsGxGwLMoZPObr77XkfKSDlj
l6af5McTI7MorMg/FdCDOXXMXefmH5B+UQ96KXUwAPcmhtrBSItBuIySJ7JuREC7
EZjtr90Km/jkTbJcPOpVkuSM4LXtyZFHDOQrAvL5ybht5LD4aFTFaxrAMmPU6eqi
DM9Nq/ZhAwFwzK0M+Z2daLRdxcqERSiS+IPS9HUhcBh8gmgAtublQEa3nJrbkjEy
1Nub0ExPi5x6Kvuy7vQMX29ezco2g4LZqr1SrP4U6kH7QGdPxFsSIRiUIk4dtBLq
VVHMXflusxMYhy/ZCOpF41FHzxm0e3GNP3bdDmARokE=
-----END CERTIFICATE-----
Generated at Sat Jun 7 06:08:17 2025 by rpki-client