Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/0e57991a-156d-4b55-90cb-79b876cf6a4a/0/3130332e3138342e3138312e302f32342d3234203d3e20313339333831.roa
File:                     3130332e3138342e3138312e302f32342d3234203d3e20313339333831.roa (raw, json)
Hash identifier:          amwDD/Sw1ZMDPleCIfQ45Yvn4tCtR3QQCTma/8S3s6A=
Subject key identifier:   AE:CD:BB:0C:E8:44:31:F7:1C:1A:B4:49:B5:D9:DB:8E:E1:67:0A:F1
Certificate issuer:       /CN=1678828C849BDE3472FE846308767F54ED7F8232
Certificate serial:       7840C15284CD7E32932374470BBB98EFACC00AE9
Authority key identifier: 16:78:82:8C:84:9B:DE:34:72:FE:84:63:08:76:7F:54:ED:7F:82:32
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1678828C849BDE3472FE846308767F54ED7F8232.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/0e57991a-156d-4b55-90cb-79b876cf6a4a/0/3130332e3138342e3138312e302f32342d3234203d3e20313339333831.roa
Signing time:             Tue 19 Aug 2025 08:00:00 +0000
ROA not before:           Tue 19 Aug 2025 07:55:00 +0000
ROA not after:            Tue 18 Aug 2026 08:00:00 +0000
asID:                     139381
IP address blocks:        103.184.181.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/0e57991a-156d-4b55-90cb-79b876cf6a4a/0/1678828C849BDE3472FE846308767F54ED7F8232.crl
                          rsync://repo-rpki.idnic.net/repo/0e57991a-156d-4b55-90cb-79b876cf6a4a/0/1678828C849BDE3472FE846308767F54ED7F8232.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1678828C849BDE3472FE846308767F54ED7F8232.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Aug 2025 04:17:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:40:c1:52:84:cd:7e:32:93:23:74:47:0b:bb:98:ef:ac:c0:0a:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1678828C849BDE3472FE846308767F54ED7F8232
        Validity
            Not Before: Aug 19 07:55:00 2025 GMT
            Not After : Aug 18 08:00:00 2026 GMT
        Subject: CN=AECDBB0CE84431F71C1AB449B5D9DB8EE1670AF1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:73:89:88:0d:ac:ff:30:40:a2:c5:46:37:73:
                    40:4b:be:97:9e:03:fa:fa:d2:e2:ca:92:be:0f:d0:
                    59:2a:81:87:b1:c5:c6:04:64:c3:f1:b0:4b:e9:50:
                    ef:82:58:ec:ce:ec:e3:18:f2:8a:57:d8:0c:d4:58:
                    e0:f1:28:91:c7:b3:54:81:ca:75:64:23:12:0e:bc:
                    71:72:a6:a2:0a:f1:bf:c8:ec:d6:8f:68:8f:c5:cd:
                    d7:a4:fd:6f:70:e2:7a:d6:16:5b:66:c4:04:b2:d2:
                    73:67:d0:d5:44:fc:ec:09:f2:90:02:9c:27:52:70:
                    3f:e1:8a:67:cc:39:2b:f4:19:c7:e5:0e:c0:64:bd:
                    b0:6f:dd:f6:92:78:c4:f2:e1:c5:54:0a:2b:fa:6b:
                    92:b7:b1:12:7c:26:25:5c:0b:e9:74:66:0a:33:fb:
                    43:36:9a:65:c2:57:74:01:2d:b3:58:d4:18:ee:c4:
                    d4:25:f4:d7:83:57:87:ce:b9:9a:c6:14:df:6d:44:
                    a9:35:51:b8:2b:a6:fc:07:d2:ed:5d:83:a5:2d:2f:
                    6e:d0:d0:4c:d0:94:8c:ad:3e:72:9d:43:4a:69:be:
                    9b:db:d7:41:8c:aa:e6:bf:08:c0:32:d1:59:4c:b6:
                    2b:f3:dc:0e:19:0d:43:88:0d:9b:12:42:b4:92:29:
                    bf:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:CD:BB:0C:E8:44:31:F7:1C:1A:B4:49:B5:D9:DB:8E:E1:67:0A:F1
            X509v3 Authority Key Identifier:
                keyid:16:78:82:8C:84:9B:DE:34:72:FE:84:63:08:76:7F:54:ED:7F:82:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/0e57991a-156d-4b55-90cb-79b876cf6a4a/0/1678828C849BDE3472FE846308767F54ED7F8232.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1678828C849BDE3472FE846308767F54ED7F8232.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0e57991a-156d-4b55-90cb-79b876cf6a4a/0/3130332e3138342e3138312e302f32342d3234203d3e20313339333831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.184.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:e9:74:a5:8e:06:40:fc:27:57:14:ee:eb:17:c0:d2:b8:d5:
         ce:1c:a3:e1:eb:17:03:96:f9:dc:92:c7:85:8d:ad:6a:f1:23:
         69:2e:57:61:69:74:b3:20:7b:9d:85:d0:ba:23:6e:3c:95:8b:
         50:ba:bf:36:fe:7a:55:26:03:3e:18:d0:b3:21:17:e1:ca:9f:
         5e:07:03:c5:c8:8e:1f:32:9d:46:1b:18:16:30:fa:6d:5b:40:
         84:20:97:97:da:97:4e:10:c7:3e:7e:ed:66:ee:21:41:3a:d4:
         e9:ba:f5:03:06:0f:86:71:0e:5e:fb:18:c3:bc:46:55:21:88:
         50:5a:a4:4e:4a:84:33:50:0e:bb:f8:b4:5c:4d:10:1f:f8:e5:
         da:a4:d6:d4:9c:1f:78:ee:7a:9d:a5:ac:87:73:50:49:92:f9:
         17:3a:9d:82:36:db:cb:97:20:a0:db:2f:bc:aa:d3:e9:bc:dc:
         48:ab:11:0c:1a:30:7c:a6:aa:51:5e:d1:fe:c5:fc:8a:4e:89:
         57:e1:62:3a:7c:01:ff:71:28:6f:67:21:d2:97:dd:79:e5:a8:
         6f:f4:75:ac:f7:fc:31:fe:79:82:8a:52:29:08:62:8d:e5:2c:
         36:02:2a:31:12:a6:8c:25:44:3f:68:54:65:8b:d6:57:bc:1e:
         97:4b:59:d8
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUeEDBUoTNfjKTI3RHC7uY76zACukwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTY3ODgyOEM4NDlCREUzNDcyRkU4NDYzMDg3NjdGNTRF
RDdGODIzMjAeFw0yNTA4MTkwNzU1MDBaFw0yNjA4MTgwODAwMDBaMDMxMTAvBgNV
BAMTKEFFQ0RCQjBDRTg0NDMxRjcxQzFBQjQ0OUI1RDlEQjhFRTE2NzBBRjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKc4mIDaz/MECixUY3c0BLvpee
A/r60uLKkr4P0FkqgYexxcYEZMPxsEvpUO+CWOzO7OMY8opX2AzUWODxKJHHs1SB
ynVkIxIOvHFypqIK8b/I7NaPaI/Fzdek/W9w4nrWFltmxASy0nNn0NVE/OwJ8pAC
nCdScD/himfMOSv0GcflDsBkvbBv3faSeMTy4cVUCiv6a5K3sRJ8JiVcC+l0Zgoz
+0M2mmXCV3QBLbNY1BjuxNQl9NeDV4fOuZrGFN9tRKk1UbgrpvwH0u1dg6UtL27Q
0EzQlIytPnKdQ0ppvpvb10GMqua/CMAy0VlMtivz3A4ZDUOIDZsSQrSSKb93AgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUrs27DOhEMfccGrRJtdnbjuFnCvEwHwYDVR0j
BBgwFoAUFniCjISb3jRy/oRjCHZ/VO1/gjIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w
ZTU3OTkxYS0xNTZkLTRiNTUtOTBjYi03OWI4NzZjZjZhNGEvMC8xNjc4ODI4Qzg0
OUJERTM0NzJGRTg0NjMwODc2N0Y1NEVEN0Y4MjMyLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMTY3ODgyOEM4NDlCREUzNDcyRkU4NDYzMDg3NjdGNTRFRDdG
ODIzMi5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzBlNTc5OTFhLTE1NmQtNGI1NS05
MGNiLTc5Yjg3NmNmNmE0YS8wLzMxMzAzMzJlMzEzODM0MmUzMTM4MzEyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzkzMzM4MzEucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnuLUwDQYJ
KoZIhvcNAQELBQADggEBAHHpdKWOBkD8J1cU7usXwNK41c4co+HrFwOW+dySx4WN
rWrxI2kuV2FpdLMge52F0LojbjyVi1C6vzb+elUmAz4Y0LMhF+HKn14HA8XIjh8y
nUYbGBYw+m1bQIQgl5fal04Qxz5+7WbuIUE61Om69QMGD4ZxDl77GMO8RlUhiFBa
pE5KhDNQDrv4tFxNEB/45dqk1tScH3juep2lrIdzUEmS+Rc6nYI228uXIKDbL7yq
0+m83EirEQwaMHymqlFe0f7F/IpOiVfhYjp8Af9xKG9nIdKX3XnlqG/0daz3/DH+
eYKKUikIYo3lLDYCKjESpowlRD9oVGWL1le8HpdLWdg=
-----END CERTIFICATE-----
Generated at Sat Aug 23 17:00:58 2025 by rpki-client