Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/5b64a78c-dd4c-4c9d-bcf0-6de6cdb925b0/0/3130332e3231322e3137392e302f32342d3234203d3e2039333431.roa
File:                     3130332e3231322e3137392e302f32342d3234203d3e2039333431.roa (raw, json)
Hash identifier:          Y6FVrv8+kgK0K+g5zRAWYyaW8dIXM4ilb/pbLuxnf+I=
Subject key identifier:   2D:8E:E5:8B:96:5D:5F:10:30:E8:3F:08:3E:B4:DF:9B:B5:02:04:39
Certificate issuer:       /CN=385CADA9D59B15B5F48DCBA1C80B7EDAC282D804
Certificate serial:       74C91076FE953E92365F53AA35972E5E0720026F
Authority key identifier: 38:5C:AD:A9:D5:9B:15:B5:F4:8D:CB:A1:C8:0B:7E:DA:C2:82:D8:04
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/385CADA9D59B15B5F48DCBA1C80B7EDAC282D804.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5b64a78c-dd4c-4c9d-bcf0-6de6cdb925b0/0/3130332e3231322e3137392e302f32342d3234203d3e2039333431.roa
Signing time:             Fri 08 Aug 2025 09:00:00 +0000
ROA not before:           Fri 08 Aug 2025 08:55:00 +0000
ROA not after:            Fri 07 Aug 2026 09:00:00 +0000
asID:                     9341
IP address blocks:        103.212.179.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/5b64a78c-dd4c-4c9d-bcf0-6de6cdb925b0/0/385CADA9D59B15B5F48DCBA1C80B7EDAC282D804.crl
                          rsync://repo-rpki.idnic.net/repo/5b64a78c-dd4c-4c9d-bcf0-6de6cdb925b0/0/385CADA9D59B15B5F48DCBA1C80B7EDAC282D804.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/385CADA9D59B15B5F48DCBA1C80B7EDAC282D804.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Aug 2025 03:34:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:c9:10:76:fe:95:3e:92:36:5f:53:aa:35:97:2e:5e:07:20:02:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=385CADA9D59B15B5F48DCBA1C80B7EDAC282D804
        Validity
            Not Before: Aug  8 08:55:00 2025 GMT
            Not After : Aug  7 09:00:00 2026 GMT
        Subject: CN=2D8EE58B965D5F1030E83F083EB4DF9BB5020439
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:05:ec:62:c1:16:ec:4f:a2:08:64:5d:4d:4a:
                    f4:7f:ce:5e:b2:f8:e9:6d:b6:0f:32:17:08:22:aa:
                    3f:b0:73:c9:f2:7c:13:91:ec:11:22:d1:91:56:00:
                    a6:68:91:58:39:0e:2e:ad:7f:87:bc:ea:fb:47:47:
                    00:78:e7:67:61:44:79:07:fe:19:c1:00:77:ff:ea:
                    ae:b3:5e:de:7f:77:57:ee:02:13:ba:51:0b:60:ea:
                    13:05:5f:c1:b7:17:cb:50:fb:b8:6d:fe:2a:ae:66:
                    b2:08:a4:ec:9c:1b:93:f8:f4:57:74:3e:0a:2c:77:
                    62:5a:ef:28:14:76:4c:3d:52:5c:64:84:b2:6a:71:
                    ac:c7:73:d2:9e:66:75:30:0b:09:59:a7:fa:f3:84:
                    39:4a:b2:72:bf:1e:d7:93:c5:e7:f4:64:ff:14:42:
                    b6:51:88:f1:e6:79:89:4d:75:c0:2a:4a:c7:b6:bb:
                    e2:e2:d0:15:33:8a:75:48:75:8e:2e:fc:50:de:75:
                    e0:60:bc:a1:62:a4:76:87:bf:bc:7f:77:e8:21:b2:
                    c9:fc:e1:da:33:6c:4f:24:e1:7c:79:48:8c:09:e9:
                    3b:b8:7d:03:48:a1:8d:6e:49:a7:cc:b8:df:0a:10:
                    b4:b3:3c:4c:dd:69:f6:59:dc:64:b9:30:37:92:4d:
                    c4:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:8E:E5:8B:96:5D:5F:10:30:E8:3F:08:3E:B4:DF:9B:B5:02:04:39
            X509v3 Authority Key Identifier:
                keyid:38:5C:AD:A9:D5:9B:15:B5:F4:8D:CB:A1:C8:0B:7E:DA:C2:82:D8:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5b64a78c-dd4c-4c9d-bcf0-6de6cdb925b0/0/385CADA9D59B15B5F48DCBA1C80B7EDAC282D804.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/385CADA9D59B15B5F48DCBA1C80B7EDAC282D804.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5b64a78c-dd4c-4c9d-bcf0-6de6cdb925b0/0/3130332e3231322e3137392e302f32342d3234203d3e2039333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.212.179.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:50:09:63:37:b0:02:ab:9d:ec:2b:e3:2f:86:bf:e6:73:1b:
         9b:b9:ba:e1:fe:e7:38:40:82:10:a3:be:85:21:27:39:88:0f:
         17:76:e3:26:db:a9:bc:85:50:d8:d0:8c:35:e3:5a:32:89:3d:
         ba:14:74:da:cd:e1:7c:e1:74:c0:92:58:b2:17:de:00:d3:8d:
         8a:22:d1:59:58:83:0b:74:19:31:59:85:19:aa:c3:0b:42:24:
         c8:94:c7:85:f1:a6:83:99:1c:17:c9:b9:54:ae:c9:6d:40:1a:
         e7:5e:9a:7e:cf:5e:97:22:45:59:c6:88:40:11:8b:bd:6e:46:
         a5:fd:8b:42:c4:ce:85:42:7e:26:02:dc:c6:1c:90:6a:3d:9b:
         a4:a9:7f:ed:86:12:ae:a8:c1:18:af:b1:6e:04:ba:29:ce:38:
         ef:06:7d:7f:0d:96:fa:fc:56:de:c8:75:67:34:e1:54:59:71:
         b6:b3:ca:9f:1c:21:ca:68:aa:6a:ef:37:3e:df:92:1d:20:cc:
         38:83:9b:d3:ef:1f:5d:88:35:3b:80:f7:58:81:c9:79:20:18:
         39:76:1d:dd:3f:1c:fd:69:5e:aa:b1:86:88:d9:39:6e:48:73:
         33:9d:fe:d8:65:eb:c7:1a:e8:b4:c3:be:22:e5:21:97:ae:d3:
         b1:e7:b9:82
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUdMkQdv6VPpI2X1OqNZcuXgcgAm8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzg1Q0FEQTlENTlCMTVCNUY0OERDQkExQzgwQjdFREFD
MjgyRDgwNDAeFw0yNTA4MDgwODU1MDBaFw0yNjA4MDcwOTAwMDBaMDMxMTAvBgNV
BAMTKDJEOEVFNThCOTY1RDVGMTAzMEU4M0YwODNFQjRERjlCQjUwMjA0MzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVBexiwRbsT6IIZF1NSvR/zl6y
+Olttg8yFwgiqj+wc8nyfBOR7BEi0ZFWAKZokVg5Di6tf4e86vtHRwB452dhRHkH
/hnBAHf/6q6zXt5/d1fuAhO6UQtg6hMFX8G3F8tQ+7ht/iquZrIIpOycG5P49Fd0
Pgosd2Ja7ygUdkw9UlxkhLJqcazHc9KeZnUwCwlZp/rzhDlKsnK/HteTxef0ZP8U
QrZRiPHmeYlNdcAqSse2u+Li0BUzinVIdY4u/FDedeBgvKFipHaHv7x/d+ghssn8
4dozbE8k4Xx5SIwJ6Tu4fQNIoY1uSafMuN8KELSzPEzdafZZ3GS5MDeSTcTHAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQULY7li5ZdXxAw6D8IPrTfm7UCBDkwHwYDVR0j
BBgwFoAUOFytqdWbFbX0jcuhyAt+2sKC2AQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81
YjY0YTc4Yy1kZDRjLTRjOWQtYmNmMC02ZGU2Y2RiOTI1YjAvMC8zODVDQURBOUQ1
OUIxNUI1RjQ4RENCQTFDODBCN0VEQUMyODJEODA0LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMzg1Q0FEQTlENTlCMTVCNUY0OERDQkExQzgwQjdFREFDMjgy
RDgwNC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzViNjRhNzhjLWRkNGMtNGM5ZC1i
Y2YwLTZkZTZjZGI5MjViMC8wLzMxMzAzMzJlMzIzMTMyMmUzMTM3MzkyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzOTMzMzQzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGfUszANBgkqhkiG
9w0BAQsFAAOCAQEAmFAJYzewAqud7CvjL4a/5nMbm7m64f7nOECCEKO+hSEnOYgP
F3bjJtupvIVQ2NCMNeNaMok9uhR02s3hfOF0wJJYshfeANONiiLRWViDC3QZMVmF
GarDC0IkyJTHhfGmg5kcF8m5VK7JbUAa516afs9elyJFWcaIQBGLvW5Gpf2LQsTO
hUJ+JgLcxhyQaj2bpKl/7YYSrqjBGK+xbgS6Kc447wZ9fw2W+vxW3sh1ZzThVFlx
trPKnxwhymiqau83Pt+SHSDMOIOb0+8fXYg1O4D3WIHJeSAYOXYd3T8c/WleqrGG
iNk5bkhzM53+2GXrxxrotMO+IuUhl67Tsee5gg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 17:40:20 2025 by rpki-client