Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/25d38b42-b7c2-42b6-a2fc-675da254c776/0/3130332e3138342e31372e302f32342d3234203d3e20313530343739.roa
File:                     3130332e3138342e31372e302f32342d3234203d3e20313530343739.roa (raw, json)
Hash identifier:          5OD+ySaoYqwtpeDmzQIRWYH7Dq1Wh3/KhlzdkZcccKU=
Subject key identifier:   8F:05:61:8C:AA:B5:2A:D2:8A:15:C0:3C:04:0C:12:30:C3:E3:22:DC
Certificate issuer:       /CN=C37B0700A782E6CCEE7D187B10AAF240353AB253
Certificate serial:       519620105CA35FC547C8BAF93B59BAC22F4F20CE
Authority key identifier: C3:7B:07:00:A7:82:E6:CC:EE:7D:18:7B:10:AA:F2:40:35:3A:B2:53
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C37B0700A782E6CCEE7D187B10AAF240353AB253.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/25d38b42-b7c2-42b6-a2fc-675da254c776/0/3130332e3138342e31372e302f32342d3234203d3e20313530343739.roa
Signing time:             Thu 26 Jun 2025 06:03:19 +0000
ROA not before:           Thu 26 Jun 2025 05:58:19 +0000
ROA not after:            Thu 25 Jun 2026 06:03:19 +0000
asID:                     150479
IP address blocks:        103.184.17.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/25d38b42-b7c2-42b6-a2fc-675da254c776/0/C37B0700A782E6CCEE7D187B10AAF240353AB253.crl
                          rsync://repo-rpki.idnic.net/repo/25d38b42-b7c2-42b6-a2fc-675da254c776/0/C37B0700A782E6CCEE7D187B10AAF240353AB253.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C37B0700A782E6CCEE7D187B10AAF240353AB253.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 03 Jul 2025 18:00:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:96:20:10:5c:a3:5f:c5:47:c8:ba:f9:3b:59:ba:c2:2f:4f:20:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C37B0700A782E6CCEE7D187B10AAF240353AB253
        Validity
            Not Before: Jun 26 05:58:19 2025 GMT
            Not After : Jun 25 06:03:19 2026 GMT
        Subject: CN=8F05618CAAB52AD28A15C03C040C1230C3E322DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:8a:5c:cb:77:be:e0:16:45:f0:e4:5a:4a:cd:
                    28:a3:32:18:b5:07:92:2b:de:33:2a:29:2e:e4:40:
                    cb:89:bc:69:e9:b8:ed:f9:47:76:9d:58:7e:bb:7c:
                    ae:d8:3d:01:6c:79:43:c1:3d:48:aa:10:29:23:53:
                    11:c7:9a:3a:98:37:cd:d9:44:58:1f:9d:3a:34:8a:
                    86:34:9d:9a:3d:f4:dd:26:3f:6c:c2:a6:f2:68:fa:
                    b0:f5:32:c4:2c:84:eb:37:d5:b9:ef:e0:dc:da:c7:
                    b0:1e:63:6e:70:08:58:5e:1e:72:12:5d:5f:07:71:
                    eb:65:1f:87:89:98:a0:ec:3f:3c:4d:8d:34:52:54:
                    76:3c:b8:37:28:61:49:2d:68:2e:74:71:0b:88:73:
                    2e:e9:9b:00:cd:a6:09:06:62:17:bf:bd:44:f3:f8:
                    e6:db:1e:55:1a:90:22:37:5a:47:ef:55:b6:c3:71:
                    ea:ed:33:a5:1b:08:0a:10:71:bb:db:de:2c:6c:a3:
                    37:4b:e2:b4:30:a6:f9:51:a0:9a:13:c1:29:e8:76:
                    01:9d:6e:96:44:20:9f:c5:85:f2:b1:e4:fe:f6:63:
                    09:96:af:a6:54:a1:77:42:23:f3:ce:fd:c8:2d:3a:
                    1e:30:c4:e5:74:11:55:70:0e:b8:a3:c1:cc:6c:a1:
                    76:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:05:61:8C:AA:B5:2A:D2:8A:15:C0:3C:04:0C:12:30:C3:E3:22:DC
            X509v3 Authority Key Identifier:
                keyid:C3:7B:07:00:A7:82:E6:CC:EE:7D:18:7B:10:AA:F2:40:35:3A:B2:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/25d38b42-b7c2-42b6-a2fc-675da254c776/0/C37B0700A782E6CCEE7D187B10AAF240353AB253.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C37B0700A782E6CCEE7D187B10AAF240353AB253.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/25d38b42-b7c2-42b6-a2fc-675da254c776/0/3130332e3138342e31372e302f32342d3234203d3e20313530343739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.184.17.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b3:bc:2c:30:01:27:b4:ff:78:32:f5:0c:c2:52:57:d7:7a:20:
         16:11:bf:eb:f3:f5:bd:96:d3:0e:36:2e:cc:c1:ab:61:d1:ec:
         bb:d7:cf:73:9e:05:17:42:72:a8:8a:9a:40:38:f5:29:a5:09:
         fb:a1:2f:7f:8e:f4:9b:85:84:6f:13:43:33:a3:43:5c:b1:3b:
         85:e4:89:8a:c0:97:52:3a:75:ae:e5:cf:92:63:bc:04:f2:ab:
         34:0a:12:03:13:2a:ce:29:85:79:97:cd:bd:37:ac:a4:ba:ce:
         ef:cc:83:c7:1c:45:2d:f0:bc:1b:53:8d:11:4b:07:20:4e:5f:
         ed:c8:69:4e:62:e2:71:9f:1c:77:e2:7c:dc:38:57:21:a9:70:
         66:63:71:49:58:1f:93:e8:f2:45:61:36:e4:f8:fc:73:ec:95:
         bf:ff:bc:60:51:4e:5b:e1:ff:f2:9c:21:a9:06:85:5c:49:85:
         b8:2f:3b:6e:56:1a:39:9f:4b:1a:da:2b:08:f7:4d:10:93:ac:
         6c:05:40:d3:d1:55:7d:50:42:a2:d5:e4:93:32:f1:5d:36:3c:
         72:40:22:6e:12:c1:89:b5:a1:e5:b4:4d:26:9e:bd:20:a8:05:
         dc:d2:c8:1f:06:4f:41:bc:99:71:9a:57:e4:fa:fe:f5:c5:a7:
         36:09:45:05
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUUZYgEFyjX8VHyLr5O1m6wi9PIM4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzM3QjA3MDBBNzgyRTZDQ0VFN0QxODdCMTBBQUYyNDAz
NTNBQjI1MzAeFw0yNTA2MjYwNTU4MTlaFw0yNjA2MjUwNjAzMTlaMDMxMTAvBgNV
BAMTKDhGMDU2MThDQUFCNTJBRDI4QTE1QzAzQzA0MEMxMjMwQzNFMzIyREMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/ilzLd77gFkXw5FpKzSijMhi1
B5Ir3jMqKS7kQMuJvGnpuO35R3adWH67fK7YPQFseUPBPUiqECkjUxHHmjqYN83Z
RFgfnTo0ioY0nZo99N0mP2zCpvJo+rD1MsQshOs31bnv4Nzax7AeY25wCFheHnIS
XV8HcetlH4eJmKDsPzxNjTRSVHY8uDcoYUktaC50cQuIcy7pmwDNpgkGYhe/vUTz
+ObbHlUakCI3WkfvVbbDcertM6UbCAoQcbvb3ixsozdL4rQwpvlRoJoTwSnodgGd
bpZEIJ/FhfKx5P72YwmWr6ZUoXdCI/PO/cgtOh4wxOV0EVVwDrijwcxsoXbTAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUjwVhjKq1KtKKFcA8BAwSMMPjItwwHwYDVR0j
BBgwFoAUw3sHAKeC5szufRh7EKryQDU6slMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y
NWQzOGI0Mi1iN2MyLTQyYjYtYTJmYy02NzVkYTI1NGM3NzYvMC9DMzdCMDcwMEE3
ODJFNkNDRUU3RDE4N0IxMEFBRjI0MDM1M0FCMjUzLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQzM3QjA3MDBBNzgyRTZDQ0VFN0QxODdCMTBBQUYyNDAzNTNB
QjI1My5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzI1ZDM4YjQyLWI3YzItNDJiNi1h
MmZjLTY3NWRhMjU0Yzc3Ni8wLzMxMzAzMzJlMzEzODM0MmUzMTM3MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzNTMwMzQzNzM5LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ7gRMA0GCSqG
SIb3DQEBCwUAA4IBAQCzvCwwASe0/3gy9QzCUlfXeiAWEb/r8/W9ltMONi7Mwath
0ey7189zngUXQnKoippAOPUppQn7oS9/jvSbhYRvE0Mzo0NcsTuF5ImKwJdSOnWu
5c+SY7wE8qs0ChIDEyrOKYV5l829N6ykus7vzIPHHEUt8LwbU40RSwcgTl/tyGlO
YuJxnxx34nzcOFchqXBmY3FJWB+T6PJFYTbk+Pxz7JW//7xgUU5b4f/ynCGpBoVc
SYW4LztuVho5n0sa2isI900Qk6xsBUDT0VV9UEKi1eSTMvFdNjxyQCJuEsGJtaHl
tE0mnr0gqAXc0sgfBk9BvJlxmlfk+v71xac2CUUF
-----END CERTIFICATE-----
Generated at Mon Jun 30 16:44:04 2025 by rpki-client