Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/0a788b4a-d451-49fb-b7cd-719810870f1a/0/3130332e3130382e3132362e302f32342d3234203d3e203539313334.roa
File:                     3130332e3130382e3132362e302f32342d3234203d3e203539313334.roa (raw, json)
Hash identifier:          JQPY1hR36z2SwsI5Y4cr/zQo0NDgsurp+zEd8VFWX3Q=
Subject key identifier:   DC:C5:06:8B:59:73:CB:69:86:DC:2E:6D:85:65:7B:7E:A8:A2:AF:5C
Certificate issuer:       /CN=095AAB2FD179056DA8846FA0E90F79F7D901792C
Certificate serial:       3234BB5E94CD05CF045C5721A33B892048BB5683
Authority key identifier: 09:5A:AB:2F:D1:79:05:6D:A8:84:6F:A0:E9:0F:79:F7:D9:01:79:2C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/095AAB2FD179056DA8846FA0E90F79F7D901792C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/0a788b4a-d451-49fb-b7cd-719810870f1a/0/3130332e3130382e3132362e302f32342d3234203d3e203539313334.roa
Signing time:             Tue 24 Jun 2025 11:00:01 +0000
ROA not before:           Tue 24 Jun 2025 10:55:01 +0000
ROA not after:            Tue 23 Jun 2026 11:00:01 +0000
asID:                     59134
IP address blocks:        103.108.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/0a788b4a-d451-49fb-b7cd-719810870f1a/0/095AAB2FD179056DA8846FA0E90F79F7D901792C.crl
                          rsync://repo-rpki.idnic.net/repo/0a788b4a-d451-49fb-b7cd-719810870f1a/0/095AAB2FD179056DA8846FA0E90F79F7D901792C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/095AAB2FD179056DA8846FA0E90F79F7D901792C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 02 Jul 2025 06:29:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:34:bb:5e:94:cd:05:cf:04:5c:57:21:a3:3b:89:20:48:bb:56:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=095AAB2FD179056DA8846FA0E90F79F7D901792C
        Validity
            Not Before: Jun 24 10:55:01 2025 GMT
            Not After : Jun 23 11:00:01 2026 GMT
        Subject: CN=DCC5068B5973CB6986DC2E6D85657B7EA8A2AF5C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:71:2f:0b:f5:3b:f4:44:8c:25:7e:5a:15:49:
                    2b:ec:87:6d:43:b9:c7:12:41:36:be:d1:6e:e0:fb:
                    10:2b:00:b0:20:3f:01:88:27:5a:6a:86:86:14:91:
                    2d:69:eb:d9:26:d9:f4:27:0c:1d:1e:4e:22:09:2c:
                    54:56:91:c7:d7:f9:e8:3c:00:9a:dd:25:40:41:19:
                    48:73:d1:f7:f8:63:c7:51:44:7f:69:16:d2:87:dc:
                    09:7b:76:db:2d:c7:c5:f1:92:f7:a9:cc:8b:94:71:
                    4b:e8:1b:91:fd:f2:fb:f1:53:43:85:84:b1:b8:a5:
                    10:f8:0b:03:f2:c6:15:87:e4:f1:c6:1d:21:ab:c5:
                    78:a7:ed:5a:85:c1:a7:01:04:da:76:df:27:a0:85:
                    21:a2:e2:db:c5:c6:e2:5a:77:6d:58:ef:70:ab:b2:
                    83:22:50:05:88:ff:16:99:42:7b:b3:3b:c9:0b:ed:
                    1f:de:69:61:9c:8b:57:fd:4c:f9:96:4b:2f:75:6a:
                    70:17:b8:ab:99:36:50:05:7a:6c:1d:2b:02:99:97:
                    6b:45:5a:ef:ed:40:6e:88:35:68:55:36:d3:ba:27:
                    23:dd:2f:18:8a:3c:b1:a6:eb:be:dd:13:3f:b9:8e:
                    68:ee:c8:97:76:21:ec:62:61:cd:2f:8e:d2:51:78:
                    46:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:C5:06:8B:59:73:CB:69:86:DC:2E:6D:85:65:7B:7E:A8:A2:AF:5C
            X509v3 Authority Key Identifier:
                keyid:09:5A:AB:2F:D1:79:05:6D:A8:84:6F:A0:E9:0F:79:F7:D9:01:79:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/0a788b4a-d451-49fb-b7cd-719810870f1a/0/095AAB2FD179056DA8846FA0E90F79F7D901792C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/095AAB2FD179056DA8846FA0E90F79F7D901792C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0a788b4a-d451-49fb-b7cd-719810870f1a/0/3130332e3130382e3132362e302f32342d3234203d3e203539313334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.108.126.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ce:80:69:25:e9:68:34:18:ab:81:eb:80:86:5e:78:98:56:ec:
         6d:3a:14:bb:db:32:9f:ef:69:71:14:b0:37:9c:24:f8:4a:11:
         f4:a0:7e:e7:cd:76:a3:d9:20:d4:7e:64:b1:db:7f:ab:08:f2:
         f4:0e:9e:88:00:4e:31:78:d0:ff:c5:35:9f:be:fe:bd:95:14:
         16:d1:e3:8f:26:df:60:fb:96:7d:39:fa:dd:90:ab:cb:30:99:
         4b:9b:f3:9a:b5:4f:59:f4:a0:83:16:d6:44:b2:7a:0d:78:27:
         f9:73:48:1c:6f:10:36:48:5b:a3:54:c5:c5:14:20:d5:9f:54:
         a1:4c:60:35:61:47:9b:6a:da:e2:21:5c:60:b0:17:3a:cd:d4:
         e2:56:c5:25:63:76:01:4c:95:87:a4:b9:5e:f8:27:87:40:e4:
         f0:33:23:ae:01:d0:d8:10:c6:fd:5b:21:01:40:54:2f:c4:bd:
         38:0e:4f:c3:be:d4:73:f8:37:62:41:bd:1b:84:a0:21:ad:98:
         10:b9:c7:48:49:d6:dd:dc:8d:c4:3a:dc:a4:5a:02:1a:60:5a:
         61:f1:65:1b:9e:4b:e8:33:fd:d2:61:d8:2b:ae:21:47:34:ee:
         76:51:b6:e9:bf:9a:cf:51:db:a4:3e:cd:4d:5c:2d:69:60:77:
         5a:70:4a:87
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUMjS7XpTNBc8EXFchozuJIEi7VoMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDk1QUFCMkZEMTc5MDU2REE4ODQ2RkEwRTkwRjc5RjdE
OTAxNzkyQzAeFw0yNTA2MjQxMDU1MDFaFw0yNjA2MjMxMTAwMDFaMDMxMTAvBgNV
BAMTKERDQzUwNjhCNTk3M0NCNjk4NkRDMkU2RDg1NjU3QjdFQThBMkFGNUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJcS8L9Tv0RIwlfloVSSvsh21D
uccSQTa+0W7g+xArALAgPwGIJ1pqhoYUkS1p69km2fQnDB0eTiIJLFRWkcfX+eg8
AJrdJUBBGUhz0ff4Y8dRRH9pFtKH3Al7dtstx8XxkvepzIuUcUvoG5H98vvxU0OF
hLG4pRD4CwPyxhWH5PHGHSGrxXin7VqFwacBBNp23yeghSGi4tvFxuJad21Y73Cr
soMiUAWI/xaZQnuzO8kL7R/eaWGci1f9TPmWSy91anAXuKuZNlAFemwdKwKZl2tF
Wu/tQG6INWhVNtO6JyPdLxiKPLGm677dEz+5jmjuyJd2IexiYc0vjtJReEZBAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQU3MUGi1lzy2mG3C5thWV7fqiir1wwHwYDVR0j
BBgwFoAUCVqrL9F5BW2ohG+g6Q9599kBeSwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w
YTc4OGI0YS1kNDUxLTQ5ZmItYjdjZC03MTk4MTA4NzBmMWEvMC8wOTVBQUIyRkQx
NzkwNTZEQTg4NDZGQTBFOTBGNzlGN0Q5MDE3OTJDLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMDk1QUFCMkZEMTc5MDU2REE4ODQ2RkEwRTkwRjc5RjdEOTAx
NzkyQy5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzBhNzg4YjRhLWQ0NTEtNDlmYi1i
N2NkLTcxOTgxMDg3MGYxYS8wLzMxMzAzMzJlMzEzMDM4MmUzMTMyMzYyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzNTM5MzEzMzM0LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ2x+MA0GCSqG
SIb3DQEBCwUAA4IBAQDOgGkl6Wg0GKuB64CGXniYVuxtOhS72zKf72lxFLA3nCT4
ShH0oH7nzXaj2SDUfmSx23+rCPL0Dp6IAE4xeND/xTWfvv69lRQW0eOPJt9g+5Z9
OfrdkKvLMJlLm/OatU9Z9KCDFtZEsnoNeCf5c0gcbxA2SFujVMXFFCDVn1ShTGA1
YUebatriIVxgsBc6zdTiVsUlY3YBTJWHpLle+CeHQOTwMyOuAdDYEMb9WyEBQFQv
xL04Dk/DvtRz+DdiQb0bhKAhrZgQucdISdbd3I3EOtykWgIaYFph8WUbnkvoM/3S
YdgrriFHNO52Ubbpv5rPUdukPs1NXC1pYHdacEqH
-----END CERTIFICATE-----
Generated at Mon Jun 30 01:20:52 2025 by rpki-client