Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/414e04fa-7188-4f4f-81bb-330389f87015/0/3130332e35352e3235332e302f32342d3234203d3e20313531353838.roa
File:                     3130332e35352e3235332e302f32342d3234203d3e20313531353838.roa (raw, json)
Hash identifier:          QzBzm2jTi52qCuHNFLxAMIYm8xcW8JwG11leVCtzjT8=
Subject key identifier:   93:0C:0B:08:F9:22:8F:74:C0:A6:0B:DF:0C:D9:6B:0C:9D:96:7F:CF
Certificate issuer:       /CN=782659A7F6433029248A38A1C68F2E9971161391
Certificate serial:       28A45B94F4DE47472486D86C187DA3FC2507C924
Authority key identifier: 78:26:59:A7:F6:43:30:29:24:8A:38:A1:C6:8F:2E:99:71:16:13:91
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/782659A7F6433029248A38A1C68F2E9971161391.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/414e04fa-7188-4f4f-81bb-330389f87015/0/3130332e35352e3235332e302f32342d3234203d3e20313531353838.roa
Signing time:             Mon 12 May 2025 08:00:00 +0000
ROA not before:           Mon 12 May 2025 07:55:00 +0000
ROA not after:            Mon 11 May 2026 08:00:00 +0000
asID:                     151588
IP address blocks:        103.55.253.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/414e04fa-7188-4f4f-81bb-330389f87015/0/782659A7F6433029248A38A1C68F2E9971161391.crl
                          rsync://repo-rpki.idnic.net/repo/414e04fa-7188-4f4f-81bb-330389f87015/0/782659A7F6433029248A38A1C68F2E9971161391.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/782659A7F6433029248A38A1C68F2E9971161391.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 15 May 2025 09:18:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:a4:5b:94:f4:de:47:47:24:86:d8:6c:18:7d:a3:fc:25:07:c9:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=782659A7F6433029248A38A1C68F2E9971161391
        Validity
            Not Before: May 12 07:55:00 2025 GMT
            Not After : May 11 08:00:00 2026 GMT
        Subject: CN=930C0B08F9228F74C0A60BDF0CD96B0C9D967FCF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:d3:30:bd:2c:23:65:92:48:75:e4:92:34:72:
                    56:59:d0:52:16:49:69:a3:83:5c:05:db:23:a9:3d:
                    a8:4c:0d:59:ca:3f:dd:2d:19:43:3d:0c:c5:41:e3:
                    ad:a9:9a:8f:33:d6:61:95:51:df:82:46:a5:0f:08:
                    2d:a7:53:7f:c2:5c:44:46:fd:f6:b7:82:21:eb:b5:
                    b9:1f:34:63:5b:3c:ae:d7:9c:4b:91:d8:b1:f3:92:
                    58:e6:31:f0:89:82:64:35:43:52:77:26:ce:d1:b3:
                    aa:ed:d3:6e:00:fa:db:74:0f:7f:c4:1d:b2:7c:7c:
                    d8:13:6c:16:81:5e:63:39:bf:de:54:d0:39:80:bf:
                    e6:05:f5:27:02:c6:64:97:22:7b:46:ec:76:e9:e9:
                    b1:45:4a:48:35:71:e6:4b:af:5f:63:ba:5d:98:6a:
                    d2:57:d9:76:d7:e5:de:c1:a4:fe:49:b6:9c:5c:4a:
                    83:c7:f7:0c:e3:1e:64:b2:f2:10:42:f0:21:d9:7a:
                    41:10:98:48:28:1d:4c:7f:9e:7e:f8:fe:77:70:d3:
                    86:14:6d:66:74:fe:44:91:f5:97:34:2b:a3:d5:c2:
                    e2:59:40:8b:45:99:85:f6:07:33:75:cd:e4:b1:39:
                    2b:98:15:5a:ec:de:86:0f:85:d4:8b:fc:c7:4f:b2:
                    aa:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:0C:0B:08:F9:22:8F:74:C0:A6:0B:DF:0C:D9:6B:0C:9D:96:7F:CF
            X509v3 Authority Key Identifier:
                keyid:78:26:59:A7:F6:43:30:29:24:8A:38:A1:C6:8F:2E:99:71:16:13:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/414e04fa-7188-4f4f-81bb-330389f87015/0/782659A7F6433029248A38A1C68F2E9971161391.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/782659A7F6433029248A38A1C68F2E9971161391.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/414e04fa-7188-4f4f-81bb-330389f87015/0/3130332e35352e3235332e302f32342d3234203d3e20313531353838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.55.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:c9:25:5a:ee:b2:d9:1e:2c:d1:4c:e0:8c:25:44:80:1e:d7:
         0e:b2:ed:91:a8:96:ad:c5:23:d9:ee:3c:99:7a:cf:9a:cf:ed:
         d0:dd:d8:81:a2:0e:cc:0e:fe:0d:77:a0:e6:81:85:28:b3:66:
         d3:6e:22:9a:a1:5d:e6:c8:1c:61:8b:8b:40:2c:99:26:90:ce:
         75:e5:42:50:1c:ed:5f:70:bf:2d:10:d1:58:13:a1:34:82:a2:
         1c:42:d7:45:55:62:74:8f:57:b6:45:5d:a6:4d:fc:ec:1b:f9:
         01:c2:62:04:55:33:9b:a6:0b:a5:2c:64:0d:1f:9f:96:33:4a:
         d2:25:55:a3:15:82:46:bf:a8:f4:b7:f3:1b:3b:1d:47:aa:81:
         ce:21:40:77:2c:73:ba:45:e1:be:1f:83:35:69:f1:18:b4:59:
         0a:86:c4:37:0e:4f:3c:61:77:d7:69:54:b2:61:4c:33:31:b1:
         29:74:d8:36:bd:ef:9c:7c:a7:49:af:dc:9e:b5:ac:8b:e6:15:
         30:67:eb:53:f8:8a:3f:d5:85:8a:f8:9f:6f:b2:2b:aa:ea:3b:
         fa:3c:d8:0c:a7:4a:28:e4:e5:27:14:e0:5a:22:dd:b8:a4:c0:
         67:0f:ea:f3:ce:e1:81:07:4e:3c:a3:76:0f:7a:79:a6:78:e9:
         97:d1:0a:0d
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUKKRblPTeR0ckhthsGH2j/CUHySQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzgyNjU5QTdGNjQzMzAyOTI0OEEzOEExQzY4RjJFOTk3
MTE2MTM5MTAeFw0yNTA1MTIwNzU1MDBaFw0yNjA1MTEwODAwMDBaMDMxMTAvBgNV
BAMTKDkzMEMwQjA4RjkyMjhGNzRDMEE2MEJERjBDRDk2QjBDOUQ5NjdGQ0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCa0zC9LCNlkkh15JI0clZZ0FIW
SWmjg1wF2yOpPahMDVnKP90tGUM9DMVB462pmo8z1mGVUd+CRqUPCC2nU3/CXERG
/fa3giHrtbkfNGNbPK7XnEuR2LHzkljmMfCJgmQ1Q1J3Js7Rs6rt024A+tt0D3/E
HbJ8fNgTbBaBXmM5v95U0DmAv+YF9ScCxmSXIntG7Hbp6bFFSkg1ceZLr19jul2Y
atJX2XbX5d7BpP5JtpxcSoPH9wzjHmSy8hBC8CHZekEQmEgoHUx/nn74/ndw04YU
bWZ0/kSR9Zc0K6PVwuJZQItFmYX2BzN1zeSxOSuYFVrs3oYPhdSL/MdPsqr3AgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUkwwLCPkij3TApgvfDNlrDJ2Wf88wHwYDVR0j
BBgwFoAUeCZZp/ZDMCkkijihxo8umXEWE5EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80
MTRlMDRmYS03MTg4LTRmNGYtODFiYi0zMzAzODlmODcwMTUvMC83ODI2NTlBN0Y2
NDMzMDI5MjQ4QTM4QTFDNjhGMkU5OTcxMTYxMzkxLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNzgyNjU5QTdGNjQzMzAyOTI0OEEzOEExQzY4RjJFOTk3MTE2
MTM5MS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzQxNGUwNGZhLTcxODgtNGY0Zi04
MWJiLTMzMDM4OWY4NzAxNS8wLzMxMzAzMzJlMzUzNTJlMzIzNTMzMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzNTMxMzUzODM4LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZzf9MA0GCSqG
SIb3DQEBCwUAA4IBAQAuySVa7rLZHizRTOCMJUSAHtcOsu2RqJatxSPZ7jyZes+a
z+3Q3diBog7MDv4Nd6DmgYUos2bTbiKaoV3myBxhi4tALJkmkM515UJQHO1fcL8t
ENFYE6E0gqIcQtdFVWJ0j1e2RV2mTfzsG/kBwmIEVTObpgulLGQNH5+WM0rSJVWj
FYJGv6j0t/MbOx1HqoHOIUB3LHO6ReG+H4M1afEYtFkKhsQ3Dk88YXfXaVSyYUwz
MbEpdNg2ve+cfKdJr9yetayL5hUwZ+tT+Io/1YWK+J9vsiuq6jv6PNgMp0oo5OUn
FOBaIt24pMBnD+rzzuGBB048o3YPenmmeOmX0QoN
-----END CERTIFICATE-----
Generated at Tue May 13 19:54:34 2025 by rpki-client