Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/3130332e35312e3132322e302f32332d3233203d3e20313530343730.roa
File:                     3130332e35312e3132322e302f32332d3233203d3e20313530343730.roa (raw, json)
Hash identifier:          NI7opR0A7S7kCuIeE9SGtTIr4seOauTv5NKnbC+c5S8=
Subject key identifier:   64:87:37:3D:8A:A7:19:77:F6:4D:0F:51:79:CC:AF:A6:C8:71:50:CA
Certificate issuer:       /CN=104C4FCF888F3C86B8C128D81C5B95FE5389BB59
Certificate serial:       12668FEECFFB450959286B02EE43EBE2DDFE113B
Authority key identifier: 10:4C:4F:CF:88:8F:3C:86:B8:C1:28:D8:1C:5B:95:FE:53:89:BB:59
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/104C4FCF888F3C86B8C128D81C5B95FE5389BB59.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/3130332e35312e3132322e302f32332d3233203d3e20313530343730.roa
Signing time:             Wed 24 Sep 2025 04:00:00 +0000
ROA not before:           Wed 24 Sep 2025 03:55:00 +0000
ROA not after:            Wed 23 Sep 2026 04:00:00 +0000
asID:                     150470
IP address blocks:        103.51.122.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/104C4FCF888F3C86B8C128D81C5B95FE5389BB59.crl
                          rsync://repo-rpki.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/104C4FCF888F3C86B8C128D81C5B95FE5389BB59.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/104C4FCF888F3C86B8C128D81C5B95FE5389BB59.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Oct 2025 13:29:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:66:8f:ee:cf:fb:45:09:59:28:6b:02:ee:43:eb:e2:dd:fe:11:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=104C4FCF888F3C86B8C128D81C5B95FE5389BB59
        Validity
            Not Before: Sep 24 03:55:00 2025 GMT
            Not After : Sep 23 04:00:00 2026 GMT
        Subject: CN=6487373D8AA71977F64D0F5179CCAFA6C87150CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:bf:4c:22:d1:6c:56:8b:74:e1:00:16:a1:f3:
                    a5:37:6b:16:81:87:f9:e2:5b:5b:fc:ce:c6:e0:84:
                    42:0e:6a:26:98:1c:6d:83:bc:f7:71:f3:ee:51:57:
                    d6:0e:be:ff:64:69:ee:16:56:61:46:aa:9f:fd:a6:
                    09:e6:3b:d9:d7:9e:34:64:45:19:ba:22:1e:c4:c6:
                    9d:4a:0a:79:2b:48:72:bc:20:71:d4:76:24:8e:01:
                    a2:98:65:b4:86:4d:d9:35:7b:45:cc:70:73:18:5f:
                    60:2c:00:a7:c1:f9:8e:99:e7:be:e3:a4:14:b7:e0:
                    db:42:08:a3:4c:fe:79:c9:44:51:7c:09:be:ba:f0:
                    1c:41:de:49:bd:57:02:7a:dd:0e:1f:5d:3b:24:6d:
                    02:aa:f9:7d:65:73:46:3a:0e:49:56:30:f1:14:92:
                    a8:1f:20:1e:fa:19:6c:b6:14:20:39:fb:2c:6d:a0:
                    fa:e3:8f:59:7f:7a:29:01:73:04:35:3b:fd:a2:2d:
                    5b:ae:87:1b:0c:20:00:db:4c:7e:ea:74:f8:25:8a:
                    84:c0:dc:74:4c:b6:ff:2b:7a:b3:8e:1d:db:b9:c0:
                    2d:01:93:88:ac:96:97:0e:1e:3d:2e:56:34:22:d2:
                    fb:47:f0:fb:9b:ee:d7:c0:d4:d3:72:8e:bd:0f:23:
                    c9:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:87:37:3D:8A:A7:19:77:F6:4D:0F:51:79:CC:AF:A6:C8:71:50:CA
            X509v3 Authority Key Identifier:
                keyid:10:4C:4F:CF:88:8F:3C:86:B8:C1:28:D8:1C:5B:95:FE:53:89:BB:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/104C4FCF888F3C86B8C128D81C5B95FE5389BB59.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/104C4FCF888F3C86B8C128D81C5B95FE5389BB59.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/3130332e35312e3132322e302f32332d3233203d3e20313530343730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.51.122.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3a:e4:a8:f5:d2:cf:07:b7:65:4e:da:39:61:fa:4e:53:27:81:
         8a:ee:6d:fc:05:41:a4:c8:29:e7:3e:07:d8:55:a2:3c:5e:1b:
         10:06:26:6c:ad:ad:cc:b8:c7:e4:51:ad:78:0d:26:97:01:ed:
         dc:19:f5:83:10:ef:f1:b3:77:c8:17:82:7a:34:81:69:2c:a5:
         bb:33:5e:07:07:be:3f:fd:f0:5a:6e:40:46:89:94:3a:7d:9b:
         bc:ac:4b:a2:44:74:84:51:4e:6c:4a:f8:d5:23:86:fa:f5:2c:
         b2:db:92:0c:20:cb:ca:5b:1d:fd:c4:8e:0a:cc:50:7e:21:c3:
         d5:08:0f:53:02:e1:ee:e3:9e:ee:d3:94:b6:e4:68:0b:f4:ea:
         a3:14:79:68:a9:cc:66:f0:29:4d:34:b1:55:22:43:c6:de:64:
         b2:16:49:12:89:27:02:7a:ec:52:d4:35:c5:47:76:e1:a3:23:
         18:71:71:ef:c8:57:96:5b:8d:bb:96:f8:32:3d:32:2a:f8:e5:
         82:9b:1e:67:1f:8c:46:02:d7:ca:95:f0:0c:32:f8:fc:8f:9e:
         62:ad:10:82:2d:c1:55:7a:1c:02:b2:7a:25:73:aa:6a:4a:6c:
         b0:6a:7e:4f:1a:f7:77:6a:62:be:ff:ac:29:1e:59:63:e7:63:
         be:ec:77:5d
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUEmaP7s/7RQlZKGsC7kPr4t3+ETswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTA0QzRGQ0Y4ODhGM0M4NkI4QzEyOEQ4MUM1Qjk1RkU1
Mzg5QkI1OTAeFw0yNTA5MjQwMzU1MDBaFw0yNjA5MjMwNDAwMDBaMDMxMTAvBgNV
BAMTKDY0ODczNzNEOEFBNzE5NzdGNjREMEY1MTc5Q0NBRkE2Qzg3MTUwQ0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqv0wi0WxWi3ThABah86U3axaB
h/niW1v8zsbghEIOaiaYHG2DvPdx8+5RV9YOvv9kae4WVmFGqp/9pgnmO9nXnjRk
RRm6Ih7Exp1KCnkrSHK8IHHUdiSOAaKYZbSGTdk1e0XMcHMYX2AsAKfB+Y6Z577j
pBS34NtCCKNM/nnJRFF8Cb668BxB3km9VwJ63Q4fXTskbQKq+X1lc0Y6DklWMPEU
kqgfIB76GWy2FCA5+yxtoPrjj1l/eikBcwQ1O/2iLVuuhxsMIADbTH7qdPglioTA
3HRMtv8rerOOHdu5wC0Bk4islpcOHj0uVjQi0vtH8Pub7tfA1NNyjr0PI8ldAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUZIc3PYqnGXf2TQ9RecyvpshxUMowHwYDVR0j
BBgwFoAUEExPz4iPPIa4wSjYHFuV/lOJu1kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z
MjhlZWM1Yi01MzI0LTQ0MjItYTMyZi05YjFkY2VkMzc1OWYvMC8xMDRDNEZDRjg4
OEYzQzg2QjhDMTI4RDgxQzVCOTVGRTUzODlCQjU5LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMTA0QzRGQ0Y4ODhGM0M4NkI4QzEyOEQ4MUM1Qjk1RkU1Mzg5
QkI1OS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzMyOGVlYzViLTUzMjQtNDQyMi1h
MzJmLTliMWRjZWQzNzU5Zi8wLzMxMzAzMzJlMzUzMTJlMzEzMjMyMmUzMDJmMzIz
MzJkMzIzMzIwM2QzZTIwMzEzNTMwMzQzNzMwLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZzN6MA0GCSqG
SIb3DQEBCwUAA4IBAQA65Kj10s8Ht2VO2jlh+k5TJ4GK7m38BUGkyCnnPgfYVaI8
XhsQBiZsra3MuMfkUa14DSaXAe3cGfWDEO/xs3fIF4J6NIFpLKW7M14HB74//fBa
bkBGiZQ6fZu8rEuiRHSEUU5sSvjVI4b69Syy25IMIMvKWx39xI4KzFB+IcPVCA9T
AuHu457u05S25GgL9OqjFHloqcxm8ClNNLFVIkPG3mSyFkkSiScCeuxS1DXFR3bh
oyMYcXHvyFeWW427lvgyPTIq+OWCmx5nH4xGAtfKlfAMMvj8j55irRCCLcFVehwC
snolc6pqSmywan5PGvd3amK+/6wpHllj52O+7Hdd
-----END CERTIFICATE-----
Generated at Tue Oct 21 00:01:03 2025 by rpki-client