Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/0a788b4a-d451-49fb-b7cd-719810870f1a/0/3130332e3235322e35312e302f32342d3234203d3e203539313334.roa
File:                     3130332e3235322e35312e302f32342d3234203d3e203539313334.roa (raw, json)
Hash identifier:          92hDDvlrQq6+Ep7VlgXGUFdRGUo5NBqpCP5dHFzwWeg=
Subject key identifier:   28:82:36:DE:73:65:E2:87:88:D6:43:85:91:6D:4E:E6:7D:1C:D6:EC
Certificate issuer:       /CN=095AAB2FD179056DA8846FA0E90F79F7D901792C
Certificate serial:       2005E6BD2CFA528ED839844B887B0CDFB3FF704D
Authority key identifier: 09:5A:AB:2F:D1:79:05:6D:A8:84:6F:A0:E9:0F:79:F7:D9:01:79:2C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/095AAB2FD179056DA8846FA0E90F79F7D901792C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/0a788b4a-d451-49fb-b7cd-719810870f1a/0/3130332e3235322e35312e302f32342d3234203d3e203539313334.roa
Signing time:             Tue 24 Jun 2025 11:00:01 +0000
ROA not before:           Tue 24 Jun 2025 10:55:01 +0000
ROA not after:            Tue 23 Jun 2026 11:00:01 +0000
asID:                     59134
IP address blocks:        103.252.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/0a788b4a-d451-49fb-b7cd-719810870f1a/0/095AAB2FD179056DA8846FA0E90F79F7D901792C.crl
                          rsync://repo-rpki.idnic.net/repo/0a788b4a-d451-49fb-b7cd-719810870f1a/0/095AAB2FD179056DA8846FA0E90F79F7D901792C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/095AAB2FD179056DA8846FA0E90F79F7D901792C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 02 Jul 2025 06:29:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:05:e6:bd:2c:fa:52:8e:d8:39:84:4b:88:7b:0c:df:b3:ff:70:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=095AAB2FD179056DA8846FA0E90F79F7D901792C
        Validity
            Not Before: Jun 24 10:55:01 2025 GMT
            Not After : Jun 23 11:00:01 2026 GMT
        Subject: CN=288236DE7365E28788D64385916D4EE67D1CD6EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:4e:27:49:72:f1:b9:c7:06:ce:4a:81:6a:90:
                    3b:c7:1e:50:a7:b9:39:56:0c:fa:a6:0c:a3:78:16:
                    0d:06:c5:61:b2:9d:e9:9b:75:11:04:2b:b6:3a:07:
                    68:2f:e7:05:51:b9:ab:54:fa:36:15:1a:c9:e2:05:
                    63:00:9a:04:d2:89:d4:d2:c3:9a:c6:16:11:86:54:
                    9c:ea:2b:9c:e9:54:2e:ef:8e:dc:4d:5d:84:74:2a:
                    2d:7c:dc:2a:19:b8:f9:ee:a7:86:92:87:07:4c:79:
                    71:18:c4:e6:07:2c:02:88:62:7c:43:97:19:97:ed:
                    72:30:bb:97:ed:4b:80:e0:17:c0:62:de:c5:f7:49:
                    c1:9a:6d:b2:db:28:57:35:9a:70:ec:ff:29:95:73:
                    64:46:f4:9e:0e:08:23:99:7a:44:ea:59:e6:fc:53:
                    fa:a4:8e:a6:86:92:dc:89:ae:56:d6:c6:e3:43:60:
                    1b:01:30:2f:dc:d9:86:c5:d7:65:0d:de:ec:20:45:
                    c8:3e:94:55:15:02:d2:24:df:ab:95:dc:86:61:04:
                    58:75:92:d3:5a:0f:e8:c4:bd:fb:1a:cd:a3:36:da:
                    59:d3:58:8a:a0:00:f5:66:ab:6c:2e:3b:c1:f4:bd:
                    24:db:90:e4:f6:ce:53:bd:bb:58:58:fd:b7:58:43:
                    15:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:82:36:DE:73:65:E2:87:88:D6:43:85:91:6D:4E:E6:7D:1C:D6:EC
            X509v3 Authority Key Identifier:
                keyid:09:5A:AB:2F:D1:79:05:6D:A8:84:6F:A0:E9:0F:79:F7:D9:01:79:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/0a788b4a-d451-49fb-b7cd-719810870f1a/0/095AAB2FD179056DA8846FA0E90F79F7D901792C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/095AAB2FD179056DA8846FA0E90F79F7D901792C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0a788b4a-d451-49fb-b7cd-719810870f1a/0/3130332e3235322e35312e302f32342d3234203d3e203539313334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.252.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:4c:3d:03:33:21:63:37:7a:3c:72:7d:24:3a:8a:76:ab:35:
         d6:1a:1e:84:95:83:e8:41:a3:16:51:a0:f6:4a:f5:de:17:b7:
         0c:ff:a0:33:8c:5b:59:93:c4:e3:57:30:05:3a:30:3f:cc:99:
         87:cd:30:3f:ba:34:f7:ce:34:ad:c4:b1:f8:94:8d:e0:4a:f3:
         f2:cd:6d:98:40:68:13:ae:21:91:fc:34:96:1f:8c:8b:2f:56:
         70:4a:9a:a0:87:1c:a8:b2:b3:ad:6a:67:5f:16:b6:a6:59:2c:
         9f:75:1e:9a:e1:59:2c:bc:6b:d7:99:f3:ad:4b:a2:dc:ed:94:
         4f:00:01:f1:ff:f2:14:42:22:5e:bb:f6:3d:8a:a2:d7:9e:6f:
         0f:59:6d:c3:bc:57:ef:bd:15:e2:72:31:55:26:c7:dc:df:16:
         75:d5:cd:b7:4d:7c:b2:69:a9:42:33:f8:ca:7a:99:77:10:ce:
         21:80:de:45:b9:80:f1:a3:66:7c:cd:ac:13:ba:cb:bf:02:16:
         6a:af:5b:84:22:47:04:22:06:b8:87:2e:05:37:a5:56:70:e0:
         8b:f0:68:ab:de:f8:b2:61:b2:bb:59:46:15:e4:cf:dc:6f:56:
         30:ed:3e:75:41:23:6c:37:51:ca:fc:b9:82:61:89:42:8f:a1:
         a6:52:b6:cb
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUIAXmvSz6Uo7YOYRLiHsM37P/cE0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDk1QUFCMkZEMTc5MDU2REE4ODQ2RkEwRTkwRjc5RjdE
OTAxNzkyQzAeFw0yNTA2MjQxMDU1MDFaFw0yNjA2MjMxMTAwMDFaMDMxMTAvBgNV
BAMTKDI4ODIzNkRFNzM2NUUyODc4OEQ2NDM4NTkxNkQ0RUU2N0QxQ0Q2RUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLTidJcvG5xwbOSoFqkDvHHlCn
uTlWDPqmDKN4Fg0GxWGynembdREEK7Y6B2gv5wVRuatU+jYVGsniBWMAmgTSidTS
w5rGFhGGVJzqK5zpVC7vjtxNXYR0Ki183CoZuPnup4aShwdMeXEYxOYHLAKIYnxD
lxmX7XIwu5ftS4DgF8Bi3sX3ScGabbLbKFc1mnDs/ymVc2RG9J4OCCOZekTqWeb8
U/qkjqaGktyJrlbWxuNDYBsBMC/c2YbF12UN3uwgRcg+lFUVAtIk36uV3IZhBFh1
ktNaD+jEvfsazaM22lnTWIqgAPVmq2wuO8H0vSTbkOT2zlO9u1hY/bdYQxUFAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUKII23nNl4oeI1kOFkW1O5n0c1uwwHwYDVR0j
BBgwFoAUCVqrL9F5BW2ohG+g6Q9599kBeSwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w
YTc4OGI0YS1kNDUxLTQ5ZmItYjdjZC03MTk4MTA4NzBmMWEvMC8wOTVBQUIyRkQx
NzkwNTZEQTg4NDZGQTBFOTBGNzlGN0Q5MDE3OTJDLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMDk1QUFCMkZEMTc5MDU2REE4ODQ2RkEwRTkwRjc5RjdEOTAx
NzkyQy5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzBhNzg4YjRhLWQ0NTEtNDlmYi1i
N2NkLTcxOTgxMDg3MGYxYS8wLzMxMzAzMzJlMzIzNTMyMmUzNTMxMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzUzOTMxMzMzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGf8MzANBgkqhkiG
9w0BAQsFAAOCAQEAnUw9AzMhYzd6PHJ9JDqKdqs11hoehJWD6EGjFlGg9kr13he3
DP+gM4xbWZPE41cwBTowP8yZh80wP7o09840rcSx+JSN4Erz8s1tmEBoE64hkfw0
lh+Miy9WcEqaoIccqLKzrWpnXxa2plksn3UemuFZLLxr15nzrUui3O2UTwAB8f/y
FEIiXrv2PYqi155vD1ltw7xX770V4nIxVSbH3N8WddXNt018smmpQjP4ynqZdxDO
IYDeRbmA8aNmfM2sE7rLvwIWaq9bhCJHBCIGuIcuBTelVnDgi/Boq974smGyu1lG
FeTP3G9WMO0+dUEjbDdRyvy5gmGJQo+hplK2yw==
-----END CERTIFICATE-----
Generated at Mon Jun 30 13:23:14 2025 by rpki-client