Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/5ae2ebde-6311-488a-82b7-9d4c05530987/0/3130332e36392e3130362e302f32342d3234203d3e20313437303837.roa
File:                     3130332e36392e3130362e302f32342d3234203d3e20313437303837.roa (raw, json)
Hash identifier:          UzX8Svg8RWfpm+6J8R9XONBilrHJl2/jgcv7jngYYIc=
Subject key identifier:   26:2A:69:A7:0A:2E:02:7E:4C:20:BB:4A:81:AF:16:25:9E:33:8D:96
Certificate issuer:       /CN=35B589224D641562D0CFE2019F733A965FC8E0C7
Certificate serial:       4D566EB9A059AA0006565788766C0DE7788B7ED3
Authority key identifier: 35:B5:89:22:4D:64:15:62:D0:CF:E2:01:9F:73:3A:96:5F:C8:E0:C7
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35B589224D641562D0CFE2019F733A965FC8E0C7.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5ae2ebde-6311-488a-82b7-9d4c05530987/0/3130332e36392e3130362e302f32342d3234203d3e20313437303837.roa
Signing time:             Wed 26 Mar 2025 22:00:00 +0000
ROA not before:           Wed 26 Mar 2025 21:55:00 +0000
ROA not after:            Wed 25 Mar 2026 22:00:00 +0000
asID:                     147087
IP address blocks:        103.69.106.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/5ae2ebde-6311-488a-82b7-9d4c05530987/0/35B589224D641562D0CFE2019F733A965FC8E0C7.crl
                          rsync://repo-rpki.idnic.net/repo/5ae2ebde-6311-488a-82b7-9d4c05530987/0/35B589224D641562D0CFE2019F733A965FC8E0C7.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35B589224D641562D0CFE2019F733A965FC8E0C7.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 15 May 2025 04:42:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:56:6e:b9:a0:59:aa:00:06:56:57:88:76:6c:0d:e7:78:8b:7e:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35B589224D641562D0CFE2019F733A965FC8E0C7
        Validity
            Not Before: Mar 26 21:55:00 2025 GMT
            Not After : Mar 25 22:00:00 2026 GMT
        Subject: CN=262A69A70A2E027E4C20BB4A81AF16259E338D96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:66:62:31:5d:fb:8e:ff:2e:44:69:76:55:d1:
                    18:53:3f:89:22:bc:20:b9:e9:26:78:6c:b3:4d:fa:
                    fb:72:6a:7d:6d:ce:07:f0:26:26:16:44:54:e6:19:
                    52:ff:de:ec:b9:85:60:9f:36:f4:e3:28:47:6d:80:
                    7c:45:94:45:4d:00:76:7f:21:6c:3d:ca:92:27:09:
                    80:14:ba:5e:52:12:59:4a:8a:e7:1d:fd:fd:04:77:
                    20:f1:cc:dc:f9:31:19:21:27:de:25:9d:01:3d:74:
                    af:15:32:b2:d4:21:7c:c4:06:76:e2:f5:69:b8:44:
                    f2:cb:aa:4d:0f:9b:13:e5:78:7b:13:47:9c:27:79:
                    d1:4e:47:60:a2:bf:ba:fb:34:db:38:c8:29:ea:8f:
                    93:84:77:e1:78:9e:0d:22:46:f0:54:72:ac:94:bc:
                    54:43:89:56:7c:34:0a:74:01:95:56:12:01:7b:23:
                    b6:eb:17:13:2a:8f:23:44:9f:3d:37:98:71:37:c2:
                    fc:e8:6e:8c:71:4c:d6:8a:d4:ce:57:cb:7d:21:d4:
                    08:df:31:14:b0:d7:d1:8d:77:e3:00:38:e5:84:cd:
                    a6:b4:0c:ac:8b:1a:d3:7b:f5:92:cc:8b:78:46:60:
                    fc:ab:b9:3c:4d:ab:93:57:d0:61:86:35:10:ff:9d:
                    63:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:2A:69:A7:0A:2E:02:7E:4C:20:BB:4A:81:AF:16:25:9E:33:8D:96
            X509v3 Authority Key Identifier:
                keyid:35:B5:89:22:4D:64:15:62:D0:CF:E2:01:9F:73:3A:96:5F:C8:E0:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5ae2ebde-6311-488a-82b7-9d4c05530987/0/35B589224D641562D0CFE2019F733A965FC8E0C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35B589224D641562D0CFE2019F733A965FC8E0C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5ae2ebde-6311-488a-82b7-9d4c05530987/0/3130332e36392e3130362e302f32342d3234203d3e20313437303837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.69.106.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a7:54:0d:2c:01:9e:2a:aa:f5:9b:29:85:34:42:37:f1:1f:66:
         56:52:17:14:f8:4e:9d:02:49:ca:b9:b2:89:24:6a:4e:f2:4f:
         ef:54:a5:b9:df:22:02:1f:3a:26:1e:2c:94:ee:82:0e:79:12:
         3e:13:fb:03:38:da:59:82:52:a1:e3:01:b0:28:90:74:a8:a5:
         e6:66:a4:aa:9b:42:94:67:6d:1b:09:77:04:9e:95:6a:d2:9b:
         ed:12:10:40:42:28:f2:1f:39:5f:80:8e:05:c3:66:02:78:66:
         a2:d2:89:a0:af:50:3f:9d:84:2f:28:ed:1c:2c:78:55:7e:f7:
         bd:6e:44:12:00:d5:31:d0:7d:cf:ec:e3:12:da:64:af:2b:34:
         1b:bb:24:d9:42:c6:b7:3d:76:48:72:18:7e:5b:a6:24:c6:9e:
         76:72:44:76:ae:da:07:44:bf:a4:91:6e:f3:9d:42:ec:cc:1b:
         d5:15:b4:4b:28:b6:30:7d:de:bf:7c:81:0d:fa:93:5f:1c:eb:
         bc:d6:5a:60:7c:26:3c:64:d7:0c:d3:74:20:3c:31:c4:67:ae:
         d0:37:3e:41:0b:b8:ec:ec:d3:26:ba:9e:1a:f7:39:11:80:20:
         e0:24:24:e6:83:1c:3e:f4:2c:27:07:9c:13:9b:c2:52:2d:31:
         0b:aa:3e:97
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUTVZuuaBZqgAGVleIdmwN53iLftMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzVCNTg5MjI0RDY0MTU2MkQwQ0ZFMjAxOUY3MzNBOTY1
RkM4RTBDNzAeFw0yNTAzMjYyMTU1MDBaFw0yNjAzMjUyMjAwMDBaMDMxMTAvBgNV
BAMTKDI2MkE2OUE3MEEyRTAyN0U0QzIwQkI0QTgxQUYxNjI1OUUzMzhEOTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaZmIxXfuO/y5EaXZV0RhTP4ki
vCC56SZ4bLNN+vtyan1tzgfwJiYWRFTmGVL/3uy5hWCfNvTjKEdtgHxFlEVNAHZ/
IWw9ypInCYAUul5SEllKiucd/f0EdyDxzNz5MRkhJ94lnQE9dK8VMrLUIXzEBnbi
9Wm4RPLLqk0PmxPleHsTR5wnedFOR2Civ7r7NNs4yCnqj5OEd+F4ng0iRvBUcqyU
vFRDiVZ8NAp0AZVWEgF7I7brFxMqjyNEnz03mHE3wvzoboxxTNaK1M5Xy30h1Ajf
MRSw19GNd+MAOOWEzaa0DKyLGtN79ZLMi3hGYPyruTxNq5NX0GGGNRD/nWM1AgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUJipppwouAn5MILtKga8WJZ4zjZYwHwYDVR0j
BBgwFoAUNbWJIk1kFWLQz+IBn3M6ll/I4McwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81
YWUyZWJkZS02MzExLTQ4OGEtODJiNy05ZDRjMDU1MzA5ODcvMC8zNUI1ODkyMjRE
NjQxNTYyRDBDRkUyMDE5RjczM0E5NjVGQzhFMEM3LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMzVCNTg5MjI0RDY0MTU2MkQwQ0ZFMjAxOUY3MzNBOTY1RkM4
RTBDNy5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzVhZTJlYmRlLTYzMTEtNDg4YS04
MmI3LTlkNGMwNTUzMDk4Ny8wLzMxMzAzMzJlMzYzOTJlMzEzMDM2MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzNDM3MzAzODM3LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ0VqMA0GCSqG
SIb3DQEBCwUAA4IBAQCnVA0sAZ4qqvWbKYU0QjfxH2ZWUhcU+E6dAknKubKJJGpO
8k/vVKW53yICHzomHiyU7oIOeRI+E/sDONpZglKh4wGwKJB0qKXmZqSqm0KUZ20b
CXcEnpVq0pvtEhBAQijyHzlfgI4Fw2YCeGai0omgr1A/nYQvKO0cLHhVfve9bkQS
ANUx0H3P7OMS2mSvKzQbuyTZQsa3PXZIchh+W6Ykxp52ckR2rtoHRL+kkW7znULs
zBvVFbRLKLYwfd6/fIEN+pNfHOu81lpgfCY8ZNcM03QgPDHEZ67QNz5BC7js7NMm
up4a9zkRgCDgJCTmgxw+9CwnB5wTm8JSLTELqj6X
-----END CERTIFICATE-----
Generated at Tue May 13 01:58:07 2025 by rpki-client