Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/3130332e31332e3230352e302f32342d3234203d3e20313532333636.roa
File:                     3130332e31332e3230352e302f32342d3234203d3e20313532333636.roa (raw, json)
Hash identifier:          bNck8LpKpp26kW2UN16eMZ1fOvjILY8XEu10GDGQj+I=
Subject key identifier:   17:5F:1A:C6:27:1E:73:FA:8A:46:34:05:69:F4:8F:E4:3F:02:BA:64
Certificate issuer:       /CN=F7D89AF4A6B49559B90BD1A11D2262692C406D9B
Certificate serial:       75EEE2AB284E63B66EEA98558CFD6BDEB28BED10
Authority key identifier: F7:D8:9A:F4:A6:B4:95:59:B9:0B:D1:A1:1D:22:62:69:2C:40:6D:9B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F7D89AF4A6B49559B90BD1A11D2262692C406D9B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/3130332e31332e3230352e302f32342d3234203d3e20313532333636.roa
Signing time:             Fri 09 May 2025 16:00:02 +0000
ROA not before:           Fri 09 May 2025 15:55:02 +0000
ROA not after:            Fri 08 May 2026 16:00:02 +0000
asID:                     152366
IP address blocks:        103.13.205.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/F7D89AF4A6B49559B90BD1A11D2262692C406D9B.crl
                          rsync://repo-rpki.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/F7D89AF4A6B49559B90BD1A11D2262692C406D9B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F7D89AF4A6B49559B90BD1A11D2262692C406D9B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 May 2025 01:06:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:ee:e2:ab:28:4e:63:b6:6e:ea:98:55:8c:fd:6b:de:b2:8b:ed:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F7D89AF4A6B49559B90BD1A11D2262692C406D9B
        Validity
            Not Before: May  9 15:55:02 2025 GMT
            Not After : May  8 16:00:02 2026 GMT
        Subject: CN=175F1AC6271E73FA8A46340569F48FE43F02BA64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:ef:5e:1e:b4:6e:0f:a7:0e:df:9a:32:a4:07:
                    d3:ec:43:3f:cc:78:f7:4f:fd:7e:75:f2:75:3a:4d:
                    e1:35:83:01:69:cb:ce:0f:95:54:17:04:03:38:cd:
                    98:87:f2:e7:46:cf:31:be:62:f1:f0:4c:db:9e:d6:
                    4a:52:c7:fa:6b:5c:89:a0:b9:52:b8:38:b4:35:e0:
                    5c:f0:b0:c2:67:ed:7d:01:30:cf:34:a1:c8:4e:6b:
                    a8:14:99:8e:59:9a:1c:a2:3c:33:59:51:a9:92:bd:
                    ba:c0:0f:7e:3c:6e:67:30:36:e7:ab:fa:fe:d1:e0:
                    91:7a:c5:7c:e9:34:ee:76:b1:ca:6e:2b:d1:b8:f3:
                    24:15:9e:b3:e2:e1:0f:27:34:54:76:1d:50:f2:c9:
                    c3:60:64:34:16:18:54:16:45:63:57:a0:9b:b7:ef:
                    a2:7d:8b:b9:a7:c5:e5:f1:2b:14:62:b3:c6:76:59:
                    a2:37:b7:4a:e5:45:31:56:39:12:ba:b3:ff:9c:f2:
                    69:fc:d5:d7:f5:9b:6a:0e:a7:66:b0:ca:e9:ba:67:
                    54:47:b5:7a:c7:0e:bc:b8:c0:4e:bc:bf:bc:b4:6e:
                    84:bb:b4:4f:1d:e2:ab:d0:b0:8c:30:3e:e4:05:24:
                    60:08:e3:09:26:18:b5:dc:d8:71:30:02:a6:71:2d:
                    5f:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:5F:1A:C6:27:1E:73:FA:8A:46:34:05:69:F4:8F:E4:3F:02:BA:64
            X509v3 Authority Key Identifier:
                keyid:F7:D8:9A:F4:A6:B4:95:59:B9:0B:D1:A1:1D:22:62:69:2C:40:6D:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/F7D89AF4A6B49559B90BD1A11D2262692C406D9B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F7D89AF4A6B49559B90BD1A11D2262692C406D9B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/3130332e31332e3230352e302f32342d3234203d3e20313532333636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.13.205.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:9a:af:f7:67:34:41:18:c1:a3:54:03:f2:98:48:cd:dd:92:
         c2:4d:ee:6f:9d:ce:e7:44:7a:2e:fe:62:59:de:37:06:1f:51:
         ce:b5:ca:e8:83:e1:cb:0c:3d:2c:25:04:51:1d:30:c2:5a:c4:
         74:71:10:be:2f:1c:6e:5a:8e:68:ac:f9:3f:9b:84:59:fd:6d:
         1c:3f:8c:86:c7:84:f5:36:04:ac:d2:95:f8:5c:7b:07:06:9c:
         29:76:0f:5b:9f:b2:b3:59:84:87:3f:39:ea:2d:35:63:ce:e3:
         3d:3a:df:51:67:71:cc:1d:7c:15:bd:34:97:a4:38:7b:7a:f2:
         28:e2:fe:df:1b:83:d8:41:3c:9c:97:90:b7:e2:74:64:84:e1:
         8d:a8:c8:ee:56:37:81:54:af:a0:86:ae:f4:9e:67:99:df:36:
         25:50:22:92:62:99:b9:e7:be:71:e7:38:90:6c:5f:ee:d4:f8:
         6d:d6:37:88:9c:e0:9b:4d:16:29:73:5c:cc:7f:9d:7f:99:3d:
         a3:1e:98:f2:99:c1:3c:e5:ae:7b:14:6c:8b:cb:95:5f:51:9a:
         90:1f:4e:bb:28:94:90:aa:9c:32:37:1d:62:1c:25:5d:eb:c8:
         d0:7e:cf:d2:08:bf:fc:e7:6b:5f:b6:ea:45:02:d1:ca:30:bc:
         09:6b:cc:2e
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUde7iqyhOY7Zu6phVjP1r3rKL7RAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjdEODlBRjRBNkI0OTU1OUI5MEJEMUExMUQyMjYyNjky
QzQwNkQ5QjAeFw0yNTA1MDkxNTU1MDJaFw0yNjA1MDgxNjAwMDJaMDMxMTAvBgNV
BAMTKDE3NUYxQUM2MjcxRTczRkE4QTQ2MzQwNTY5RjQ4RkU0M0YwMkJBNjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD3714etG4Ppw7fmjKkB9PsQz/M
ePdP/X518nU6TeE1gwFpy84PlVQXBAM4zZiH8udGzzG+YvHwTNue1kpSx/prXImg
uVK4OLQ14FzwsMJn7X0BMM80ochOa6gUmY5ZmhyiPDNZUamSvbrAD348bmcwNuer
+v7R4JF6xXzpNO52scpuK9G48yQVnrPi4Q8nNFR2HVDyycNgZDQWGFQWRWNXoJu3
76J9i7mnxeXxKxRis8Z2WaI3t0rlRTFWORK6s/+c8mn81df1m2oOp2awyum6Z1RH
tXrHDry4wE68v7y0boS7tE8d4qvQsIwwPuQFJGAI4wkmGLXc2HEwAqZxLV99AgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUF18axicec/qKRjQFafSP5D8CumQwHwYDVR0j
BBgwFoAU99ia9Ka0lVm5C9GhHSJiaSxAbZswDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82
ZmM5MDk2Yy0yOGRjLTQ0ZTQtYjRjZi05NmQ2MzFiNzNhYzAvMC9GN0Q4OUFGNEE2
QjQ5NTU5QjkwQkQxQTExRDIyNjI2OTJDNDA2RDlCLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRjdEODlBRjRBNkI0OTU1OUI5MEJEMUExMUQyMjYyNjkyQzQw
NkQ5Qi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzZmYzkwOTZjLTI4ZGMtNDRlNC1i
NGNmLTk2ZDYzMWI3M2FjMC8wLzMxMzAzMzJlMzEzMzJlMzIzMDM1MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzNTMyMzMzNjM2LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZw3NMA0GCSqG
SIb3DQEBCwUAA4IBAQBxmq/3ZzRBGMGjVAPymEjN3ZLCTe5vnc7nRHou/mJZ3jcG
H1HOtcrog+HLDD0sJQRRHTDCWsR0cRC+LxxuWo5orPk/m4RZ/W0cP4yGx4T1NgSs
0pX4XHsHBpwpdg9bn7KzWYSHPznqLTVjzuM9Ot9RZ3HMHXwVvTSXpDh7evIo4v7f
G4PYQTycl5C34nRkhOGNqMjuVjeBVK+ghq70nmeZ3zYlUCKSYpm5575x5ziQbF/u
1Pht1jeInOCbTRYpc1zMf51/mT2jHpjymcE85a57FGyLy5VfUZqQH067KJSQqpwy
Nx1iHCVd68jQfs/SCL/852tftupFAtHKMLwJa8wu
-----END CERTIFICATE-----
Generated at Fri May 9 20:52:58 2025 by rpki-client