Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/1ce8da9c-bdbd-4908-ba92-d90fea9c8f05/0/3130332e34392e35302e302f32332d3234203d3e20313530343830.roa
File:                     3130332e34392e35302e302f32332d3234203d3e20313530343830.roa (raw, json)
Hash identifier:          IgvUit+JVnRvJOkjIYlvNPAALXRaIVBYKC5WzTyMkfQ=
Subject key identifier:   AD:ED:7C:BA:E6:EA:07:84:2E:74:A1:C3:97:13:57:86:48:8B:03:C8
Certificate issuer:       /CN=722D23AD0F959CE5CBFF927C152517F07060D195
Certificate serial:       1B4CDB175516E98F2042AC5A44320D3DF5807BF4
Authority key identifier: 72:2D:23:AD:0F:95:9C:E5:CB:FF:92:7C:15:25:17:F0:70:60:D1:95
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/722D23AD0F959CE5CBFF927C152517F07060D195.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/1ce8da9c-bdbd-4908-ba92-d90fea9c8f05/0/3130332e34392e35302e302f32332d3234203d3e20313530343830.roa
Signing time:             Fri 03 Oct 2025 23:00:00 +0000
ROA not before:           Fri 03 Oct 2025 22:55:00 +0000
ROA not after:            Fri 02 Oct 2026 23:00:00 +0000
asID:                     150480
IP address blocks:        103.49.50.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/1ce8da9c-bdbd-4908-ba92-d90fea9c8f05/0/722D23AD0F959CE5CBFF927C152517F07060D195.crl
                          rsync://repo-rpki.idnic.net/repo/1ce8da9c-bdbd-4908-ba92-d90fea9c8f05/0/722D23AD0F959CE5CBFF927C152517F07060D195.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/722D23AD0F959CE5CBFF927C152517F07060D195.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Oct 2025 02:09:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:4c:db:17:55:16:e9:8f:20:42:ac:5a:44:32:0d:3d:f5:80:7b:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=722D23AD0F959CE5CBFF927C152517F07060D195
        Validity
            Not Before: Oct  3 22:55:00 2025 GMT
            Not After : Oct  2 23:00:00 2026 GMT
        Subject: CN=ADED7CBAE6EA07842E74A1C397135786488B03C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:43:32:dd:d4:60:83:81:07:28:f4:d0:84:03:
                    87:0e:a4:bc:52:e1:7a:63:07:c0:06:55:6f:98:75:
                    9b:d1:2a:98:7c:82:95:c1:35:a7:5b:d5:54:d7:30:
                    af:d0:10:26:cb:d3:f3:36:09:07:8c:ae:48:e3:3a:
                    4d:30:7e:a2:ce:77:94:0f:60:a6:cd:2a:b3:e1:71:
                    48:e1:75:6b:89:36:35:ab:10:d4:3c:0f:6a:83:4b:
                    44:2d:ca:b6:f7:65:14:c3:63:36:3f:b9:ce:74:aa:
                    fe:d8:25:2a:d0:91:40:40:12:ef:3b:79:38:42:f5:
                    4c:67:14:d5:45:03:cc:77:c6:84:79:9a:e4:2e:c7:
                    72:dd:56:fe:07:58:73:83:0b:c9:25:3b:53:79:b9:
                    5d:74:f5:63:12:5d:25:1c:e8:29:d7:e2:8e:e6:d8:
                    cf:a3:74:91:d2:ec:9e:12:7f:b3:b4:6c:48:93:37:
                    28:af:f5:cf:f3:fb:37:26:ee:5f:36:26:ce:1b:0a:
                    a4:44:96:6d:14:86:7a:59:61:df:39:d8:73:46:20:
                    52:f9:d4:b2:c4:05:53:fc:d6:88:4c:6b:5b:2e:84:
                    93:5c:47:8b:58:b0:97:1b:d1:d2:28:e4:5a:e7:67:
                    91:3f:3c:e1:63:5a:f1:94:b3:6d:63:43:55:5d:53:
                    61:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:ED:7C:BA:E6:EA:07:84:2E:74:A1:C3:97:13:57:86:48:8B:03:C8
            X509v3 Authority Key Identifier:
                keyid:72:2D:23:AD:0F:95:9C:E5:CB:FF:92:7C:15:25:17:F0:70:60:D1:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/1ce8da9c-bdbd-4908-ba92-d90fea9c8f05/0/722D23AD0F959CE5CBFF927C152517F07060D195.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/722D23AD0F959CE5CBFF927C152517F07060D195.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ce8da9c-bdbd-4908-ba92-d90fea9c8f05/0/3130332e34392e35302e302f32332d3234203d3e20313530343830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.49.50.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ae:fa:88:cd:23:4b:e4:10:86:6c:01:b5:da:71:8c:23:07:28:
         22:9d:25:28:8e:c6:9d:42:2a:72:2b:bf:7d:7e:e6:34:6b:52:
         f1:20:80:42:19:61:90:60:2b:4b:61:9e:d8:24:58:fe:a4:c3:
         91:23:33:c1:7c:c7:0b:1b:85:f7:e8:06:fb:13:b5:19:f4:fe:
         95:dc:9b:e6:86:9d:8f:5d:28:2d:ab:3b:d9:14:05:e5:f8:69:
         e6:2e:59:bf:30:ce:94:ed:68:14:30:13:6b:1d:2d:12:56:ab:
         37:27:26:96:54:46:d5:20:7d:f1:6f:96:12:68:a8:f8:fd:2f:
         2a:a8:8c:09:cc:e0:4f:57:af:5a:03:33:bf:41:4e:4a:b6:75:
         27:70:08:13:e2:85:72:c9:37:d7:93:3d:e2:67:08:98:47:96:
         ef:10:3c:6d:4f:4d:32:08:48:05:28:0a:48:60:ee:b2:d4:a3:
         19:d1:07:ff:61:36:51:4a:11:1a:d4:9c:7d:12:3d:d0:bf:5f:
         18:8f:27:d6:95:44:3f:23:4b:7f:f5:cf:22:ad:06:cc:0e:04:
         b3:94:c1:cd:2c:2c:e3:50:5a:6a:36:80:a3:f6:f2:10:dc:c7:
         2d:89:67:ce:26:85:08:77:82:60:7c:02:47:3e:b0:88:ed:d4:
         f8:3f:74:6c
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUG0zbF1UW6Y8gQqxaRDINPfWAe/QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzIyRDIzQUQwRjk1OUNFNUNCRkY5MjdDMTUyNTE3RjA3
MDYwRDE5NTAeFw0yNTEwMDMyMjU1MDBaFw0yNjEwMDIyMzAwMDBaMDMxMTAvBgNV
BAMTKEFERUQ3Q0JBRTZFQTA3ODQyRTc0QTFDMzk3MTM1Nzg2NDg4QjAzQzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOQzLd1GCDgQco9NCEA4cOpLxS
4XpjB8AGVW+YdZvRKph8gpXBNadb1VTXMK/QECbL0/M2CQeMrkjjOk0wfqLOd5QP
YKbNKrPhcUjhdWuJNjWrENQ8D2qDS0Qtyrb3ZRTDYzY/uc50qv7YJSrQkUBAEu87
eThC9UxnFNVFA8x3xoR5muQux3LdVv4HWHODC8klO1N5uV109WMSXSUc6CnX4o7m
2M+jdJHS7J4Sf7O0bEiTNyiv9c/z+zcm7l82Js4bCqRElm0UhnpZYd852HNGIFL5
1LLEBVP81ohMa1suhJNcR4tYsJcb0dIo5FrnZ5E/POFjWvGUs21jQ1VdU2EbAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUre18uubqB4QudKHDlxNXhkiLA8gwHwYDVR0j
BBgwFoAUci0jrQ+VnOXL/5J8FSUX8HBg0ZUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x
Y2U4ZGE5Yy1iZGJkLTQ5MDgtYmE5Mi1kOTBmZWE5YzhmMDUvMC83MjJEMjNBRDBG
OTU5Q0U1Q0JGRjkyN0MxNTI1MTdGMDcwNjBEMTk1LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNzIyRDIzQUQwRjk1OUNFNUNCRkY5MjdDMTUyNTE3RjA3MDYw
RDE5NS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzFjZThkYTljLWJkYmQtNDkwOC1i
YTkyLWQ5MGZlYTljOGYwNS8wLzMxMzAzMzJlMzQzOTJlMzUzMDJlMzAyZjMyMzMy
ZDMyMzQyMDNkM2UyMDMxMzUzMDM0MzgzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAWcxMjANBgkqhkiG
9w0BAQsFAAOCAQEArvqIzSNL5BCGbAG12nGMIwcoIp0lKI7GnUIqciu/fX7mNGtS
8SCAQhlhkGArS2Ge2CRY/qTDkSMzwXzHCxuF9+gG+xO1GfT+ldyb5oadj10oLas7
2RQF5fhp5i5ZvzDOlO1oFDATax0tElarNycmllRG1SB98W+WEmio+P0vKqiMCczg
T1evWgMzv0FOSrZ1J3AIE+KFcsk315M94mcImEeW7xA8bU9NMghIBSgKSGDustSj
GdEH/2E2UUoRGtScfRI90L9fGI8n1pVEPyNLf/XPIq0GzA4Es5TBzSws41BaajaA
o/byENzHLYlnziaFCHeCYHwCRz6wiO3U+D90bA==
-----END CERTIFICATE-----
Generated at Mon Oct 20 17:48:22 2025 by rpki-client