Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/20481e49-f4c1-4c13-94b7-0701c92c3450/0/3130332e3234322e37392e302f32342d3234203d3e20333936393832.roa
File:                     3130332e3234322e37392e302f32342d3234203d3e20333936393832.roa (raw, json)
Hash identifier:          n+/j+X0EHKdzJwOO4f/AMp89n5rbo9zZecMjnTepVSI=
Subject key identifier:   AB:15:5F:A2:DF:5A:D8:F7:D0:F3:F0:42:E7:68:50:E5:B3:55:91:5E
Certificate issuer:       /CN=46E596CAE0AEADA8B4135425216E8783D92E6C76
Certificate serial:       188D1793C254E267F885AF0FDBC90EF7651BDA5F
Authority key identifier: 46:E5:96:CA:E0:AE:AD:A8:B4:13:54:25:21:6E:87:83:D9:2E:6C:76
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/46E596CAE0AEADA8B4135425216E8783D92E6C76.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/20481e49-f4c1-4c13-94b7-0701c92c3450/0/3130332e3234322e37392e302f32342d3234203d3e20333936393832.roa
Signing time:             Thu 05 Jun 2025 19:00:01 +0000
ROA not before:           Thu 05 Jun 2025 18:55:01 +0000
ROA not after:            Thu 04 Jun 2026 19:00:01 +0000
asID:                     396982
IP address blocks:        103.242.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/20481e49-f4c1-4c13-94b7-0701c92c3450/0/46E596CAE0AEADA8B4135425216E8783D92E6C76.crl
                          rsync://repo-rpki.idnic.net/repo/20481e49-f4c1-4c13-94b7-0701c92c3450/0/46E596CAE0AEADA8B4135425216E8783D92E6C76.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/46E596CAE0AEADA8B4135425216E8783D92E6C76.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 03 Jul 2025 18:00:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:8d:17:93:c2:54:e2:67:f8:85:af:0f:db:c9:0e:f7:65:1b:da:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46E596CAE0AEADA8B4135425216E8783D92E6C76
        Validity
            Not Before: Jun  5 18:55:01 2025 GMT
            Not After : Jun  4 19:00:01 2026 GMT
        Subject: CN=AB155FA2DF5AD8F7D0F3F042E76850E5B355915E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:1a:41:07:57:fa:56:42:e1:b6:3d:dd:f3:79:
                    c9:8e:bb:9c:2e:c7:92:43:02:20:01:72:f9:cd:b1:
                    e4:6e:66:56:0d:77:f9:b7:f4:09:ec:2e:19:e3:74:
                    7a:90:b8:9b:ea:64:1d:74:24:6d:40:08:cf:d8:3e:
                    a8:ae:4d:28:0c:da:11:4a:59:b9:fa:9c:af:0e:6f:
                    7d:c8:e9:ca:f9:b0:3e:d4:b8:ef:31:18:9e:86:df:
                    d4:14:20:52:d6:9a:2f:ed:6a:70:d4:c3:b4:6f:59:
                    1a:ae:b4:9c:93:11:a6:60:2c:f8:54:92:1f:e9:eb:
                    f0:5a:e0:18:2a:7d:d8:83:b3:74:30:93:8b:3c:f8:
                    99:28:64:c9:a8:0f:1e:94:da:b5:27:8f:63:0c:47:
                    63:02:fc:e1:8b:ec:7d:73:8c:61:8a:f0:3a:4d:1a:
                    11:3f:67:16:08:bf:27:f9:90:b6:29:c5:3b:4e:98:
                    09:45:95:07:48:3c:43:5c:b3:41:a8:50:95:76:6c:
                    87:09:81:3b:53:31:ae:40:d8:d2:82:93:9d:2c:01:
                    66:e4:21:ec:14:bc:9a:1f:fd:9d:89:fc:bf:00:ad:
                    d9:37:e6:2d:01:97:c0:62:b6:42:2e:82:db:f2:f4:
                    73:d1:b0:1b:cd:13:99:03:f2:78:2b:8a:3e:ec:b3:
                    9d:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:15:5F:A2:DF:5A:D8:F7:D0:F3:F0:42:E7:68:50:E5:B3:55:91:5E
            X509v3 Authority Key Identifier:
                keyid:46:E5:96:CA:E0:AE:AD:A8:B4:13:54:25:21:6E:87:83:D9:2E:6C:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/20481e49-f4c1-4c13-94b7-0701c92c3450/0/46E596CAE0AEADA8B4135425216E8783D92E6C76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/46E596CAE0AEADA8B4135425216E8783D92E6C76.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/20481e49-f4c1-4c13-94b7-0701c92c3450/0/3130332e3234322e37392e302f32342d3234203d3e20333936393832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.242.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:fe:fa:e7:32:4d:24:6e:59:04:53:3f:de:15:1e:c2:1e:ba:
         a3:01:b3:66:e2:bf:65:b1:06:7f:14:35:8b:f5:e7:b0:e1:97:
         c2:d7:30:9f:fd:af:a2:da:c7:17:67:4d:16:8d:3b:61:2a:56:
         e9:46:34:ae:0d:0e:ba:28:ce:76:85:79:2b:74:8a:a7:0b:a3:
         6c:c2:71:0c:a9:d1:66:fa:bc:d6:e6:74:7c:36:8f:d1:f0:d7:
         14:1a:38:ee:c3:84:22:4f:7c:ad:84:6d:7e:c3:f7:61:4f:2a:
         bd:f8:77:7d:2f:ae:d6:95:b2:4b:4f:63:d3:0d:66:36:7c:a6:
         33:fc:02:6c:97:7c:9b:b4:f4:f2:54:9f:c4:19:9b:e7:83:48:
         6e:35:b9:29:27:c3:ec:5a:06:78:98:84:1a:1d:04:15:06:92:
         05:58:d8:f1:d8:10:8c:f2:58:92:94:0a:25:fb:da:70:d2:1d:
         ef:be:fb:be:9b:83:c3:ac:35:e1:2e:90:f3:7f:39:9d:f6:34:
         78:ca:7b:3c:09:f3:4f:07:77:63:48:b0:6b:52:d5:e5:80:20:
         49:fa:a0:ee:db:d0:ba:c9:df:8e:89:90:17:4c:a8:da:c2:b3:
         fd:a5:be:31:31:17:4a:0b:4c:d5:0f:9a:7c:c8:af:51:b3:11:
         d3:b1:ae:e2
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUGI0Xk8JU4mf4ha8P28kO92Ub2l8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDZFNTk2Q0FFMEFFQURBOEI0MTM1NDI1MjE2RTg3ODNE
OTJFNkM3NjAeFw0yNTA2MDUxODU1MDFaFw0yNjA2MDQxOTAwMDFaMDMxMTAvBgNV
BAMTKEFCMTU1RkEyREY1QUQ4RjdEMEYzRjA0MkU3Njg1MEU1QjM1NTkxNUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVGkEHV/pWQuG2Pd3zecmOu5wu
x5JDAiABcvnNseRuZlYNd/m39AnsLhnjdHqQuJvqZB10JG1ACM/YPqiuTSgM2hFK
Wbn6nK8Ob33I6cr5sD7UuO8xGJ6G39QUIFLWmi/tanDUw7RvWRqutJyTEaZgLPhU
kh/p6/Ba4BgqfdiDs3Qwk4s8+JkoZMmoDx6U2rUnj2MMR2MC/OGL7H1zjGGK8DpN
GhE/ZxYIvyf5kLYpxTtOmAlFlQdIPENcs0GoUJV2bIcJgTtTMa5A2NKCk50sAWbk
IewUvJof/Z2J/L8Ardk35i0Bl8BitkIugtvy9HPRsBvNE5kD8ngrij7ss53NAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUqxVfot9a2PfQ8/BC52hQ5bNVkV4wHwYDVR0j
BBgwFoAURuWWyuCurai0E1QlIW6Hg9kubHYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y
MDQ4MWU0OS1mNGMxLTRjMTMtOTRiNy0wNzAxYzkyYzM0NTAvMC80NkU1OTZDQUUw
QUVBREE4QjQxMzU0MjUyMTZFODc4M0Q5MkU2Qzc2LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNDZFNTk2Q0FFMEFFQURBOEI0MTM1NDI1MjE2RTg3ODNEOTJF
NkM3Ni5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzIwNDgxZTQ5LWY0YzEtNGMxMy05
NGI3LTA3MDFjOTJjMzQ1MC8wLzMxMzAzMzJlMzIzNDMyMmUzNzM5MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzMzOTM2MzkzODMyLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ/JPMA0GCSqG
SIb3DQEBCwUAA4IBAQCF/vrnMk0kblkEUz/eFR7CHrqjAbNm4r9lsQZ/FDWL9eew
4ZfC1zCf/a+i2scXZ00WjTthKlbpRjSuDQ66KM52hXkrdIqnC6NswnEMqdFm+rzW
5nR8No/R8NcUGjjuw4QiT3ythG1+w/dhTyq9+Hd9L67WlbJLT2PTDWY2fKYz/AJs
l3ybtPTyVJ/EGZvng0huNbkpJ8PsWgZ4mIQaHQQVBpIFWNjx2BCM8liSlAol+9pw
0h3vvvu+m4PDrDXhLpDzfzmd9jR4yns8CfNPB3djSLBrUtXlgCBJ+qDu29C6yd+O
iZAXTKjawrP9pb4xMRdKC0zVD5p8yK9RsxHTsa7i
-----END CERTIFICATE-----
Generated at Mon Jun 30 17:14:33 2025 by rpki-client