Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/3130332e3234362e3131382e302f32342d3234203d3e203536323433.roa
File:                     3130332e3234362e3131382e302f32342d3234203d3e203536323433.roa (raw, json)
Hash identifier:          /w7eKmK7IgjbUT0N0MS/xY50UMcyTaRIoyZfbv+wX+Q=
Subject key identifier:   91:E9:80:73:C8:32:53:61:79:6C:67:CD:A6:52:69:19:57:7C:03:12
Certificate issuer:       /CN=012D2F59937FDBE65095B9EB4971D9D31EFDA93C
Certificate serial:       5771E461B3CFEF6E54870603417A719A23EE2227
Authority key identifier: 01:2D:2F:59:93:7F:DB:E6:50:95:B9:EB:49:71:D9:D3:1E:FD:A9:3C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/3130332e3234362e3131382e302f32342d3234203d3e203536323433.roa
Signing time:             Wed 07 May 2025 10:00:01 +0000
ROA not before:           Wed 07 May 2025 09:55:01 +0000
ROA not after:            Wed 06 May 2026 10:00:01 +0000
asID:                     56243
IP address blocks:        103.246.118.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.crl
                          rsync://repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 May 2025 14:53:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:71:e4:61:b3:cf:ef:6e:54:87:06:03:41:7a:71:9a:23:ee:22:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=012D2F59937FDBE65095B9EB4971D9D31EFDA93C
        Validity
            Not Before: May  7 09:55:01 2025 GMT
            Not After : May  6 10:00:01 2026 GMT
        Subject: CN=91E98073C8325361796C67CDA6526919577C0312
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:88:18:4a:97:42:35:f7:92:b8:7d:70:f3:0e:
                    b3:85:84:f9:74:a1:50:de:dd:96:d0:3f:a8:e9:9c:
                    50:aa:76:4f:6f:72:0a:e4:60:a4:98:0d:c2:8b:d2:
                    f2:b4:53:81:a5:79:8e:f2:65:fe:62:0d:69:4e:11:
                    ad:d4:e6:1b:a7:ba:1b:40:31:3d:8c:80:a8:d2:f7:
                    ef:15:38:69:25:df:c5:cf:05:bf:78:3c:ba:f7:ab:
                    03:46:a9:d8:b7:b1:70:9c:91:30:0b:1b:91:da:57:
                    8f:46:d7:be:44:33:f1:33:9e:ea:46:4e:81:16:a8:
                    f4:62:52:8f:5f:86:82:b9:05:97:ca:f7:e5:e9:98:
                    52:39:51:26:74:36:9d:d5:ad:c4:8d:54:98:e3:60:
                    33:c7:d0:af:66:ed:f8:1e:0c:5f:4d:5e:e1:79:0e:
                    bd:ec:7c:69:09:6d:36:64:78:e5:3b:35:49:06:da:
                    43:72:5d:a4:94:12:b6:ca:cb:98:d1:bb:f3:e2:de:
                    c7:89:cc:eb:0f:88:f4:aa:c9:1e:ef:8c:67:64:7a:
                    bf:ae:7a:b5:94:23:10:89:1c:db:49:0d:60:03:cf:
                    ba:38:45:4f:17:d0:b3:fa:f1:5d:75:8f:38:15:51:
                    3e:89:14:74:c2:e7:38:cf:22:1e:ff:21:86:76:89:
                    f0:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:E9:80:73:C8:32:53:61:79:6C:67:CD:A6:52:69:19:57:7C:03:12
            X509v3 Authority Key Identifier:
                keyid:01:2D:2F:59:93:7F:DB:E6:50:95:B9:EB:49:71:D9:D3:1E:FD:A9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/3130332e3234362e3131382e302f32342d3234203d3e203536323433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.246.118.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:d1:81:c0:da:1f:3f:d1:32:1e:54:c0:62:f7:4f:3c:f2:f9:
         a9:ee:07:ab:fe:80:ec:b8:72:0a:25:d1:f2:b3:24:6a:1c:f7:
         21:5d:bc:01:5e:0c:e3:18:b7:c3:8c:91:a2:2d:84:89:69:64:
         04:1c:83:e9:06:91:88:26:2d:79:c2:28:20:e6:6a:51:f8:32:
         95:db:b5:73:03:9a:1f:96:61:16:04:8b:3b:51:3a:95:38:c6:
         56:92:7b:9f:be:ff:04:8e:c1:80:b0:b2:95:9d:ac:ba:75:a4:
         69:66:c0:bd:f3:fe:df:0d:73:15:94:02:12:bb:cc:eb:c5:20:
         c0:ac:4d:90:08:26:96:f2:59:dc:52:12:5d:0d:e7:6d:c4:ca:
         bd:e6:00:ea:78:e9:79:f9:05:8f:62:b9:0e:21:99:3b:20:16:
         0f:05:1d:b5:42:15:6c:b8:36:a5:0e:11:ff:95:2e:3f:f7:e6:
         a8:95:64:be:31:2e:f1:b3:8a:23:f0:f7:2e:19:8c:af:08:94:
         8e:1f:42:4e:bf:57:52:22:87:44:a4:8f:2f:6d:50:c7:92:11:
         9c:26:f0:38:12:38:09:c4:12:e0:90:da:55:3d:0c:07:03:89:
         1c:52:5f:d7:68:d8:83:02:56:60:b3:32:33:6b:5b:5c:60:a1:
         c7:21:34:ca
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUV3HkYbPP725UhwYDQXpxmiPuIicwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDEyRDJGNTk5MzdGREJFNjUwOTVCOUVCNDk3MUQ5RDMx
RUZEQTkzQzAeFw0yNTA1MDcwOTU1MDFaFw0yNjA1MDYxMDAwMDFaMDMxMTAvBgNV
BAMTKDkxRTk4MDczQzgzMjUzNjE3OTZDNjdDREE2NTI2OTE5NTc3QzAzMTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsiBhKl0I195K4fXDzDrOFhPl0
oVDe3ZbQP6jpnFCqdk9vcgrkYKSYDcKL0vK0U4GleY7yZf5iDWlOEa3U5hunuhtA
MT2MgKjS9+8VOGkl38XPBb94PLr3qwNGqdi3sXCckTALG5HaV49G175EM/EznupG
ToEWqPRiUo9fhoK5BZfK9+XpmFI5USZ0Np3VrcSNVJjjYDPH0K9m7fgeDF9NXuF5
Dr3sfGkJbTZkeOU7NUkG2kNyXaSUErbKy5jRu/Pi3seJzOsPiPSqyR7vjGdker+u
erWUIxCJHNtJDWADz7o4RU8X0LP68V11jzgVUT6JFHTC5zjPIh7/IYZ2ifCfAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUkemAc8gyU2F5bGfNplJpGVd8AxIwHwYDVR0j
BBgwFoAUAS0vWZN/2+ZQlbnrSXHZ0x79qTwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x
ODZiMzg4OS02OTY2LTQ1ZWYtOTA3My1hZDE0MDExYWMzYjIvMC8wMTJEMkY1OTkz
N0ZEQkU2NTA5NUI5RUI0OTcxRDlEMzFFRkRBOTNDLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMDEyRDJGNTk5MzdGREJFNjUwOTVCOUVCNDk3MUQ5RDMxRUZE
QTkzQy5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzE4NmIzODg5LTY5NjYtNDVlZi05
MDczLWFkMTQwMTFhYzNiMi8wLzMxMzAzMzJlMzIzNDM2MmUzMTMxMzgyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzNTM2MzIzNDMzLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ/Z2MA0GCSqG
SIb3DQEBCwUAA4IBAQBi0YHA2h8/0TIeVMBi90888vmp7ger/oDsuHIKJdHysyRq
HPchXbwBXgzjGLfDjJGiLYSJaWQEHIPpBpGIJi15wigg5mpR+DKV27VzA5oflmEW
BIs7UTqVOMZWknufvv8EjsGAsLKVnay6daRpZsC98/7fDXMVlAISu8zrxSDArE2Q
CCaW8lncUhJdDedtxMq95gDqeOl5+QWPYrkOIZk7IBYPBR21QhVsuDalDhH/lS4/
9+aolWS+MS7xs4oj8PcuGYyvCJSOH0JOv1dSIodEpI8vbVDHkhGcJvA4EjgJxBLg
kNpVPQwHA4kcUl/XaNiDAlZgszIza1tcYKHHITTK
-----END CERTIFICATE-----
Generated at Wed May 14 15:11:41 2025 by rpki-client