Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/1ca292b2-4ae4-41df-887a-c172c3e1ae73/0/3130332e3137392e3231382e302f32342d3234203d3e20313431353936.roa
File:                     3130332e3137392e3231382e302f32342d3234203d3e20313431353936.roa (raw, json)
Hash identifier:          8fuakgFHy3xUm7QgcDkjO9QSLBuvkIz5uGSpSL5YMTY=
Subject key identifier:   C1:77:5C:1F:E9:0E:5E:19:44:CF:9C:C0:35:DE:1E:AB:D4:FB:31:0F
Certificate issuer:       /CN=139934661CE07BEBBFA824F7225502B15AE8B653
Certificate serial:       4024BBA03BFD13E682B9A770A1D42331E16CDEA4
Authority key identifier: 13:99:34:66:1C:E0:7B:EB:BF:A8:24:F7:22:55:02:B1:5A:E8:B6:53
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/139934661CE07BEBBFA824F7225502B15AE8B653.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/1ca292b2-4ae4-41df-887a-c172c3e1ae73/0/3130332e3137392e3231382e302f32342d3234203d3e20313431353936.roa
Signing time:             Tue 03 Jun 2025 11:02:32 +0000
ROA not before:           Tue 03 Jun 2025 10:57:32 +0000
ROA not after:            Tue 02 Jun 2026 11:02:32 +0000
asID:                     141596
IP address blocks:        103.179.218.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/1ca292b2-4ae4-41df-887a-c172c3e1ae73/0/139934661CE07BEBBFA824F7225502B15AE8B653.crl
                          rsync://repo-rpki.idnic.net/repo/1ca292b2-4ae4-41df-887a-c172c3e1ae73/0/139934661CE07BEBBFA824F7225502B15AE8B653.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/139934661CE07BEBBFA824F7225502B15AE8B653.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 02 Jul 2025 15:04:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:24:bb:a0:3b:fd:13:e6:82:b9:a7:70:a1:d4:23:31:e1:6c:de:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=139934661CE07BEBBFA824F7225502B15AE8B653
        Validity
            Not Before: Jun  3 10:57:32 2025 GMT
            Not After : Jun  2 11:02:32 2026 GMT
        Subject: CN=C1775C1FE90E5E1944CF9CC035DE1EABD4FB310F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:a8:6e:df:59:dd:13:07:7f:a0:d8:33:be:26:
                    4b:f9:6a:90:96:99:44:f1:11:f9:f3:cc:04:26:b6:
                    67:d4:fd:10:a4:a5:dc:dc:dd:8f:de:b2:8b:f7:59:
                    98:bf:59:91:70:58:ad:83:40:4a:02:93:0e:10:12:
                    4e:f8:37:36:f3:d8:cc:9d:48:95:68:22:cd:76:b1:
                    92:13:ae:9f:9e:2e:d4:14:13:ad:9e:01:51:a9:4b:
                    4b:25:06:17:3f:6b:b7:27:85:d0:ea:a1:22:39:f9:
                    19:c9:ad:23:05:13:49:fe:b6:c2:d7:ca:8a:62:1b:
                    92:8a:21:6b:7e:e3:fe:5d:e6:4c:11:38:21:fe:7e:
                    e0:4f:b8:12:bf:87:5a:54:ff:e7:46:c3:4a:ae:5f:
                    69:dc:1b:74:7b:b5:e0:22:85:24:06:5e:47:55:9d:
                    0e:67:91:83:94:a3:ac:d5:fd:1a:9c:97:d6:99:f9:
                    51:63:ee:d7:b1:4f:c1:94:cd:57:2d:71:25:bd:2e:
                    08:b5:96:e3:23:9f:52:e1:8a:14:2b:d4:ff:7f:7b:
                    74:ac:a7:44:13:50:74:1b:9f:11:78:79:48:05:24:
                    bb:22:91:46:73:62:47:41:1b:c7:5c:03:00:61:42:
                    36:86:7c:10:5b:26:5b:8c:2b:80:99:c0:39:88:34:
                    a2:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:77:5C:1F:E9:0E:5E:19:44:CF:9C:C0:35:DE:1E:AB:D4:FB:31:0F
            X509v3 Authority Key Identifier:
                keyid:13:99:34:66:1C:E0:7B:EB:BF:A8:24:F7:22:55:02:B1:5A:E8:B6:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/1ca292b2-4ae4-41df-887a-c172c3e1ae73/0/139934661CE07BEBBFA824F7225502B15AE8B653.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/139934661CE07BEBBFA824F7225502B15AE8B653.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ca292b2-4ae4-41df-887a-c172c3e1ae73/0/3130332e3137392e3231382e302f32342d3234203d3e20313431353936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.179.218.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:f3:76:76:f9:29:94:e8:e1:83:a1:e8:96:de:c9:3e:2f:12:
         c9:77:5d:2b:28:5d:e8:6e:66:71:bf:11:03:f9:a8:5a:82:ec:
         62:d6:ef:3b:5f:c8:45:fc:46:6e:4b:71:04:b0:e4:1f:28:64:
         90:fb:11:a4:48:d1:72:11:e2:93:b5:9b:a1:8a:40:bd:1e:97:
         be:26:69:33:63:57:e4:81:a4:43:dd:e2:74:9a:0a:df:b8:65:
         b5:22:a5:04:2f:39:36:a8:35:e8:f5:e1:d3:a8:ed:d0:3c:d0:
         92:d3:b5:83:ee:a5:4f:35:ab:71:86:bb:56:18:11:ae:50:76:
         6f:39:5c:63:87:e5:f7:45:df:43:9f:7e:a4:ee:6d:b2:0d:00:
         bf:46:8b:c6:1b:74:3f:48:ef:1c:32:65:d6:97:76:a4:7e:48:
         85:c9:66:af:80:3e:86:0a:87:51:f9:b3:9f:34:4b:57:d6:a5:
         69:88:38:17:da:1e:31:d9:e0:7d:35:cb:37:37:f0:77:83:da:
         25:3c:83:25:42:4e:cb:45:ef:a6:75:ab:e4:68:8f:89:38:f8:
         af:4f:ec:8a:af:4e:09:a7:e1:4e:70:d3:9b:64:13:2a:fc:81:
         06:79:8e:97:29:58:43:c4:a6:39:c6:47:59:6f:e6:2a:b1:d8:
         3e:8f:4d:c5
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUQCS7oDv9E+aCuadwodQjMeFs3qQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTM5OTM0NjYxQ0UwN0JFQkJGQTgyNEY3MjI1NTAyQjE1
QUU4QjY1MzAeFw0yNTA2MDMxMDU3MzJaFw0yNjA2MDIxMTAyMzJaMDMxMTAvBgNV
BAMTKEMxNzc1QzFGRTkwRTVFMTk0NENGOUNDMDM1REUxRUFCRDRGQjMxMEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDqG7fWd0TB3+g2DO+Jkv5apCW
mUTxEfnzzAQmtmfU/RCkpdzc3Y/esov3WZi/WZFwWK2DQEoCkw4QEk74Nzbz2Myd
SJVoIs12sZITrp+eLtQUE62eAVGpS0slBhc/a7cnhdDqoSI5+RnJrSMFE0n+tsLX
yopiG5KKIWt+4/5d5kwROCH+fuBPuBK/h1pU/+dGw0quX2ncG3R7teAihSQGXkdV
nQ5nkYOUo6zV/Rqcl9aZ+VFj7texT8GUzVctcSW9Lgi1luMjn1LhihQr1P9/e3Ss
p0QTUHQbnxF4eUgFJLsikUZzYkdBG8dcAwBhQjaGfBBbJluMK4CZwDmINKKRAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUwXdcH+kOXhlEz5zANd4eq9T7MQ8wHwYDVR0j
BBgwFoAUE5k0Zhzge+u/qCT3IlUCsVrotlMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x
Y2EyOTJiMi00YWU0LTQxZGYtODg3YS1jMTcyYzNlMWFlNzMvMC8xMzk5MzQ2NjFD
RTA3QkVCQkZBODI0RjcyMjU1MDJCMTVBRThCNjUzLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMTM5OTM0NjYxQ0UwN0JFQkJGQTgyNEY3MjI1NTAyQjE1QUU4
QjY1My5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzFjYTI5MmIyLTRhZTQtNDFkZi04
ODdhLWMxNzJjM2UxYWU3My8wLzMxMzAzMzJlMzEzNzM5MmUzMjMxMzgyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzEzNTM5MzYucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABns9owDQYJ
KoZIhvcNAQELBQADggEBAFfzdnb5KZTo4YOh6JbeyT4vEsl3XSsoXehuZnG/EQP5
qFqC7GLW7ztfyEX8Rm5LcQSw5B8oZJD7EaRI0XIR4pO1m6GKQL0el74maTNjV+SB
pEPd4nSaCt+4ZbUipQQvOTaoNej14dOo7dA80JLTtYPupU81q3GGu1YYEa5Qdm85
XGOH5fdF30OffqTubbINAL9Gi8YbdD9I7xwyZdaXdqR+SIXJZq+APoYKh1H5s580
S1fWpWmIOBfaHjHZ4H01yzc38HeD2iU8gyVCTstF76Z1q+Roj4k4+K9P7IqvTgmn
4U5w05tkEyr8gQZ5jpcpWEPEpjnGR1lv5iqx2D6PTcU=
-----END CERTIFICATE-----
Generated at Mon Jun 30 21:03:58 2025 by rpki-client