Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/51f16c45-96fb-4c92-804e-64b0bf280302/0/3130332e3131312e3131382e302f32342d3234203d3e20313439393531.roa
File:                     3130332e3131312e3131382e302f32342d3234203d3e20313439393531.roa (raw, json)
Hash identifier:          FK++k16W5o1G1ymHbgbWCr22LclnvM/8CkDyIWrtSXU=
Subject key identifier:   59:A3:39:C2:40:CE:C2:D1:D1:51:C5:F1:62:96:0C:83:CC:70:8D:FB
Certificate issuer:       /CN=CA14F96C33329D8CA42315C2B500AB2D57B1E35B
Certificate serial:       781F5C9422CED3113866746E058AAA00D74C26F2
Authority key identifier: CA:14:F9:6C:33:32:9D:8C:A4:23:15:C2:B5:00:AB:2D:57:B1:E3:5B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA14F96C33329D8CA42315C2B500AB2D57B1E35B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/51f16c45-96fb-4c92-804e-64b0bf280302/0/3130332e3131312e3131382e302f32342d3234203d3e20313439393531.roa
Signing time:             Fri 27 Jun 2025 04:00:38 +0000
ROA not before:           Fri 27 Jun 2025 03:55:38 +0000
ROA not after:            Fri 26 Jun 2026 04:00:38 +0000
asID:                     149951
IP address blocks:        103.111.118.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/51f16c45-96fb-4c92-804e-64b0bf280302/0/CA14F96C33329D8CA42315C2B500AB2D57B1E35B.crl
                          rsync://repo-rpki.idnic.net/repo/51f16c45-96fb-4c92-804e-64b0bf280302/0/CA14F96C33329D8CA42315C2B500AB2D57B1E35B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA14F96C33329D8CA42315C2B500AB2D57B1E35B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 02 Jul 2025 16:49:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:1f:5c:94:22:ce:d3:11:38:66:74:6e:05:8a:aa:00:d7:4c:26:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA14F96C33329D8CA42315C2B500AB2D57B1E35B
        Validity
            Not Before: Jun 27 03:55:38 2025 GMT
            Not After : Jun 26 04:00:38 2026 GMT
        Subject: CN=59A339C240CEC2D1D151C5F162960C83CC708DFB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:05:39:ce:1e:5b:90:77:54:e1:90:4b:23:6d:
                    4a:f8:15:19:02:a0:84:b5:0e:ec:1e:13:f6:89:82:
                    47:ea:fb:bc:b0:bb:17:fd:85:11:9f:f8:de:86:31:
                    37:10:1a:cd:f2:9b:56:4f:06:06:f8:c2:8b:5e:d0:
                    15:3c:bd:95:f2:40:39:c9:50:e6:36:00:9e:44:6a:
                    b5:0c:72:6b:09:de:77:ee:4f:16:8d:fd:ae:71:2e:
                    a6:a3:df:d8:f8:4a:b7:2a:10:d8:83:a1:58:37:ca:
                    22:9c:b4:0a:59:4e:58:4b:94:3f:44:a5:0e:d0:de:
                    04:a2:0f:f3:c4:f5:71:30:38:d2:7e:ad:aa:fa:43:
                    4e:6e:26:36:79:2e:24:c1:df:6f:43:43:fd:2f:d7:
                    c5:4b:65:51:d4:df:83:2a:99:5d:63:5c:26:41:bd:
                    b2:71:b0:5b:bb:cf:74:86:8d:1a:be:89:a2:c9:9e:
                    30:44:bb:d2:ee:41:99:dd:e0:32:42:45:ce:6d:3e:
                    23:b0:ec:8c:f0:09:d2:a3:96:23:5f:37:90:df:66:
                    20:cd:59:df:38:65:a2:13:0c:2b:95:7a:82:58:15:
                    39:a2:b4:6a:11:3b:c9:87:10:50:fb:64:58:e5:48:
                    f4:e8:6a:2b:29:16:6b:cf:d3:fe:83:41:4a:1a:1d:
                    b6:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:A3:39:C2:40:CE:C2:D1:D1:51:C5:F1:62:96:0C:83:CC:70:8D:FB
            X509v3 Authority Key Identifier:
                keyid:CA:14:F9:6C:33:32:9D:8C:A4:23:15:C2:B5:00:AB:2D:57:B1:E3:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/51f16c45-96fb-4c92-804e-64b0bf280302/0/CA14F96C33329D8CA42315C2B500AB2D57B1E35B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA14F96C33329D8CA42315C2B500AB2D57B1E35B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/51f16c45-96fb-4c92-804e-64b0bf280302/0/3130332e3131312e3131382e302f32342d3234203d3e20313439393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.111.118.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:68:b9:c6:72:82:b2:e7:e4:e1:cd:19:4b:f3:20:17:1f:9f:
         db:36:c2:16:ab:da:dd:91:95:4e:54:65:9e:a5:6f:30:36:e2:
         7b:ae:49:c4:76:61:39:9a:00:4c:0c:72:33:38:05:ed:14:e5:
         5f:db:c3:3d:07:da:37:b0:9f:a6:d5:89:4b:16:ea:f5:b6:65:
         d1:de:9a:9f:e1:6b:da:2a:e4:0c:96:17:1c:37:f1:1e:3a:dc:
         a4:a1:4c:b1:9d:48:af:08:83:30:ab:47:2b:b7:d0:53:1a:52:
         ce:dc:5c:db:4a:4d:51:31:d4:76:6b:76:e8:57:39:72:23:af:
         35:c4:8b:36:9d:d2:06:fc:db:2d:2d:a5:04:91:c9:4d:2e:70:
         09:00:71:63:b4:ea:86:36:d5:ad:54:23:ec:b6:a8:e1:9e:e0:
         a3:1b:ef:3d:c4:54:8b:ab:55:a2:4e:2e:ba:44:6a:a7:d1:49:
         f6:5f:f6:ac:4d:4b:01:c5:38:93:2e:cb:a1:3e:0e:db:8d:4a:
         bb:7f:1c:d9:5c:cf:cc:e5:bd:f4:3d:d4:d2:c5:14:30:19:12:
         f8:c2:41:e2:8d:dd:fd:d0:97:0c:9c:9e:cb:18:71:fb:93:eb:
         1f:b2:24:a6:33:3a:ae:37:c5:6d:a1:fc:2e:7b:04:25:a3:31:
         a2:4e:00:f8
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUeB9clCLO0xE4ZnRuBYqqANdMJvIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0ExNEY5NkMzMzMyOUQ4Q0E0MjMxNUMyQjUwMEFCMkQ1
N0IxRTM1QjAeFw0yNTA2MjcwMzU1MzhaFw0yNjA2MjYwNDAwMzhaMDMxMTAvBgNV
BAMTKDU5QTMzOUMyNDBDRUMyRDFEMTUxQzVGMTYyOTYwQzgzQ0M3MDhERkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZBTnOHluQd1ThkEsjbUr4FRkC
oIS1DuweE/aJgkfq+7ywuxf9hRGf+N6GMTcQGs3ym1ZPBgb4wote0BU8vZXyQDnJ
UOY2AJ5EarUMcmsJ3nfuTxaN/a5xLqaj39j4SrcqENiDoVg3yiKctApZTlhLlD9E
pQ7Q3gSiD/PE9XEwONJ+rar6Q05uJjZ5LiTB329DQ/0v18VLZVHU34MqmV1jXCZB
vbJxsFu7z3SGjRq+iaLJnjBEu9LuQZnd4DJCRc5tPiOw7IzwCdKjliNfN5DfZiDN
Wd84ZaITDCuVeoJYFTmitGoRO8mHEFD7ZFjlSPToaispFmvP0/6DQUoaHbaHAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUWaM5wkDOwtHRUcXxYpYMg8xwjfswHwYDVR0j
BBgwFoAUyhT5bDMynYykIxXCtQCrLVex41swDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81
MWYxNmM0NS05NmZiLTRjOTItODA0ZS02NGIwYmYyODAzMDIvMC9DQTE0Rjk2QzMz
MzI5RDhDQTQyMzE1QzJCNTAwQUIyRDU3QjFFMzVCLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQ0ExNEY5NkMzMzMyOUQ4Q0E0MjMxNUMyQjUwMEFCMkQ1N0Ix
RTM1Qi5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzUxZjE2YzQ1LTk2ZmItNGM5Mi04
MDRlLTY0YjBiZjI4MDMwMi8wLzMxMzAzMzJlMzEzMTMxMmUzMTMxMzgyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzkzOTM1MzEucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnb3YwDQYJ
KoZIhvcNAQELBQADggEBAARoucZygrLn5OHNGUvzIBcfn9s2whar2t2RlU5UZZ6l
bzA24nuuScR2YTmaAEwMcjM4Be0U5V/bwz0H2jewn6bViUsW6vW2ZdHemp/ha9oq
5AyWFxw38R463KShTLGdSK8IgzCrRyu30FMaUs7cXNtKTVEx1HZrduhXOXIjrzXE
izad0gb82y0tpQSRyU0ucAkAcWO06oY21a1UI+y2qOGe4KMb7z3EVIurVaJOLrpE
aqfRSfZf9qxNSwHFOJMuy6E+DtuNSrt/HNlcz8zlvfQ91NLFFDAZEvjCQeKN3f3Q
lwycnssYcfuT6x+yJKYzOq43xW2h/C57BCWjMaJOAPg=
-----END CERTIFICATE-----
Generated at Mon Jun 30 13:51:18 2025 by rpki-client