Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/fe1cbd79-8f26-4b0e-8b3b-ab9e9938fcae/0/3130332e3138312e37362e302f32342d3234203d3e20313439333739.roa
File:                     3130332e3138312e37362e302f32342d3234203d3e20313439333739.roa (raw, json)
Hash identifier:          Fd7yVNtVPCM6piUfSXh9X3JKHqUDZdjbopzWmm3ObMk=
Subject key identifier:   B9:C2:95:C4:7C:30:E0:55:E3:4F:E2:99:F7:8F:66:EF:C3:E3:9D:27
Certificate issuer:       /CN=EC973BE13EF324E7D59046CF7690A12F9DF12932
Certificate serial:       2AF6033DC6BB943EA751440151A3636286D1E5D3
Authority key identifier: EC:97:3B:E1:3E:F3:24:E7:D5:90:46:CF:76:90:A1:2F:9D:F1:29:32
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC973BE13EF324E7D59046CF7690A12F9DF12932.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/fe1cbd79-8f26-4b0e-8b3b-ab9e9938fcae/0/3130332e3138312e37362e302f32342d3234203d3e20313439333739.roa
Signing time:             Sat 17 May 2025 09:02:02 +0000
ROA not before:           Sat 17 May 2025 08:57:02 +0000
ROA not after:            Sat 16 May 2026 09:02:02 +0000
asID:                     149379
IP address blocks:        103.181.76.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/fe1cbd79-8f26-4b0e-8b3b-ab9e9938fcae/0/EC973BE13EF324E7D59046CF7690A12F9DF12932.crl
                          rsync://repo-rpki.idnic.net/repo/fe1cbd79-8f26-4b0e-8b3b-ab9e9938fcae/0/EC973BE13EF324E7D59046CF7690A12F9DF12932.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC973BE13EF324E7D59046CF7690A12F9DF12932.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Jun 2025 13:36:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:f6:03:3d:c6:bb:94:3e:a7:51:44:01:51:a3:63:62:86:d1:e5:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC973BE13EF324E7D59046CF7690A12F9DF12932
        Validity
            Not Before: May 17 08:57:02 2025 GMT
            Not After : May 16 09:02:02 2026 GMT
        Subject: CN=B9C295C47C30E055E34FE299F78F66EFC3E39D27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:3a:73:c0:c2:44:8d:0a:f7:2f:4f:0f:d9:36:
                    bc:45:ae:d3:a1:f6:ef:0b:33:52:0c:9e:18:03:20:
                    76:6c:57:92:e0:37:bc:7f:45:d4:81:b6:0c:66:bf:
                    4f:ce:d4:91:74:a3:1d:85:4e:a9:c1:f3:2d:17:59:
                    8e:19:e1:22:f1:57:6c:db:d6:bf:a9:64:0e:6c:71:
                    94:d8:ad:88:5e:ff:5f:81:f2:c5:51:b4:48:54:76:
                    66:36:36:98:e3:96:45:53:6e:99:50:e2:9f:55:d1:
                    c8:fb:80:d7:05:56:49:fe:52:54:77:ac:71:64:e3:
                    66:ae:b9:7e:0c:8a:4a:e3:5e:78:4b:c8:c7:52:9f:
                    79:a7:b1:23:d2:c8:84:8e:ec:92:78:22:b4:2f:cc:
                    88:da:41:f1:ed:c5:c6:29:19:f4:b5:c4:e2:0c:c2:
                    42:c3:76:17:d7:35:a0:2f:ae:71:71:6d:a7:23:f5:
                    35:1c:41:fd:3a:73:a4:d8:d1:57:8d:b1:50:3a:fa:
                    f7:5a:e9:16:de:28:7e:18:0e:57:56:24:f1:f8:dc:
                    7e:41:68:aa:9b:71:51:73:66:22:b0:c5:48:57:69:
                    0d:4b:7d:fd:92:02:df:c3:ea:b9:4b:86:76:a5:10:
                    19:8b:8b:c8:a1:90:b3:8e:4c:48:31:c5:ee:e5:89:
                    77:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:C2:95:C4:7C:30:E0:55:E3:4F:E2:99:F7:8F:66:EF:C3:E3:9D:27
            X509v3 Authority Key Identifier:
                keyid:EC:97:3B:E1:3E:F3:24:E7:D5:90:46:CF:76:90:A1:2F:9D:F1:29:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/fe1cbd79-8f26-4b0e-8b3b-ab9e9938fcae/0/EC973BE13EF324E7D59046CF7690A12F9DF12932.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC973BE13EF324E7D59046CF7690A12F9DF12932.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fe1cbd79-8f26-4b0e-8b3b-ab9e9938fcae/0/3130332e3138312e37362e302f32342d3234203d3e20313439333739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.181.76.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:c4:20:c9:a1:be:92:eb:72:67:61:d0:7f:ce:f2:f4:18:0a:
         71:09:f9:95:99:73:7e:d5:57:38:52:4a:ee:f7:d4:ba:d6:a2:
         67:93:30:c8:4d:80:4d:62:6a:c2:30:5f:17:6f:43:db:04:52:
         3f:97:ef:d2:a3:4a:5f:b4:cc:d2:5c:e4:b6:fe:ad:0d:55:00:
         8e:c9:27:2b:54:ca:4e:08:4f:bb:45:1f:ec:9b:3b:5e:2a:e1:
         7f:1c:ae:d3:62:f1:b1:8a:ad:cc:70:4d:0c:44:de:bb:ea:2f:
         93:e3:57:2c:4e:73:9e:d4:ef:68:85:fa:b9:ef:a2:3c:72:9b:
         a2:a2:78:cb:8d:62:78:1b:da:b9:3f:d7:48:c1:f0:1e:08:9d:
         84:62:f8:39:a2:05:07:dd:a7:59:bb:53:f5:d3:60:38:1e:b5:
         b6:ca:b7:8c:48:22:d1:9a:f3:5b:9b:56:fa:ea:73:8f:7d:cc:
         4e:e2:9d:19:63:1a:19:4e:92:e6:69:10:a4:b3:e1:2e:c8:33:
         3f:c0:eb:dd:2a:6a:76:18:be:cd:20:6d:3a:df:70:8b:b3:b6:
         60:b2:2d:dd:89:a6:b8:ec:59:2a:7d:d8:98:73:f0:17:9c:d3:
         dd:c4:b5:4d:82:ab:8f:56:3c:92:fb:5d:01:8f:5b:52:3c:fa:
         1f:1f:57:b4
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUKvYDPca7lD6nUUQBUaNjYobR5dMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUM5NzNCRTEzRUYzMjRFN0Q1OTA0NkNGNzY5MEExMkY5
REYxMjkzMjAeFw0yNTA1MTcwODU3MDJaFw0yNjA1MTYwOTAyMDJaMDMxMTAvBgNV
BAMTKEI5QzI5NUM0N0MzMEUwNTVFMzRGRTI5OUY3OEY2NkVGQzNFMzlEMjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVOnPAwkSNCvcvTw/ZNrxFrtOh
9u8LM1IMnhgDIHZsV5LgN7x/RdSBtgxmv0/O1JF0ox2FTqnB8y0XWY4Z4SLxV2zb
1r+pZA5scZTYrYhe/1+B8sVRtEhUdmY2NpjjlkVTbplQ4p9V0cj7gNcFVkn+UlR3
rHFk42auuX4MikrjXnhLyMdSn3mnsSPSyISO7JJ4IrQvzIjaQfHtxcYpGfS1xOIM
wkLDdhfXNaAvrnFxbacj9TUcQf06c6TY0VeNsVA6+vda6RbeKH4YDldWJPH43H5B
aKqbcVFzZiKwxUhXaQ1Lff2SAt/D6rlLhnalEBmLi8ihkLOOTEgxxe7liXfRAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUucKVxHww4FXjT+KZ949m78PjnScwHwYDVR0j
BBgwFoAU7Jc74T7zJOfVkEbPdpChL53xKTIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m
ZTFjYmQ3OS04ZjI2LTRiMGUtOGIzYi1hYjllOTkzOGZjYWUvMC9FQzk3M0JFMTNF
RjMyNEU3RDU5MDQ2Q0Y3NjkwQTEyRjlERjEyOTMyLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRUM5NzNCRTEzRUYzMjRFN0Q1OTA0NkNGNzY5MEExMkY5REYx
MjkzMi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2ZlMWNiZDc5LThmMjYtNGIwZS04
YjNiLWFiOWU5OTM4ZmNhZS8wLzMxMzAzMzJlMzEzODMxMmUzNzM2MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzNDM5MzMzNzM5LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ7VMMA0GCSqG
SIb3DQEBCwUAA4IBAQCdxCDJob6S63JnYdB/zvL0GApxCfmVmXN+1Vc4Ukru99S6
1qJnkzDITYBNYmrCMF8Xb0PbBFI/l+/So0pftMzSXOS2/q0NVQCOyScrVMpOCE+7
RR/smzteKuF/HK7TYvGxiq3McE0MRN676i+T41csTnOe1O9ohfq576I8cpuionjL
jWJ4G9q5P9dIwfAeCJ2EYvg5ogUH3adZu1P102A4HrW2yreMSCLRmvNbm1b66nOP
fcxO4p0ZYxoZTpLmaRCks+EuyDM/wOvdKmp2GL7NIG0633CLs7Zgsi3diaa47Fkq
fdiYc/AXnNPdxLVNgquPVjyS+10Bj1tSPPofH1e0
-----END CERTIFICATE-----
Generated at Sat Jun 7 13:45:37 2025 by rpki-client