Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/758db87b-16cd-437a-a5b5-08cb35da97f0/0/3130332e3138372e3131322e302f32332d3234203d3e20313439373230.roa
File:                     3130332e3138372e3131322e302f32332d3234203d3e20313439373230.roa (raw, json)
Hash identifier:          tJd9lCwOT2E5aUEAYGLVk9Vox9W7mUTKc82A3hANFMo=
Subject key identifier:   6A:03:3C:D6:68:ED:85:4E:1B:80:4D:E7:38:2C:FD:24:A3:92:C7:6B
Certificate issuer:       /CN=8CBCE2EE006256C9A6207949314A7D1FCC415B5A
Certificate serial:       6EA42F8B384630FE43E250D0A9125AB507A90292
Authority key identifier: 8C:BC:E2:EE:00:62:56:C9:A6:20:79:49:31:4A:7D:1F:CC:41:5B:5A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CBCE2EE006256C9A6207949314A7D1FCC415B5A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/758db87b-16cd-437a-a5b5-08cb35da97f0/0/3130332e3138372e3131322e302f32332d3234203d3e20313439373230.roa
Signing time:             Tue 24 Jun 2025 19:00:00 +0000
ROA not before:           Tue 24 Jun 2025 18:55:00 +0000
ROA not after:            Tue 23 Jun 2026 19:00:00 +0000
asID:                     149720
IP address blocks:        103.187.112.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/758db87b-16cd-437a-a5b5-08cb35da97f0/0/8CBCE2EE006256C9A6207949314A7D1FCC415B5A.crl
                          rsync://repo-rpki.idnic.net/repo/758db87b-16cd-437a-a5b5-08cb35da97f0/0/8CBCE2EE006256C9A6207949314A7D1FCC415B5A.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CBCE2EE006256C9A6207949314A7D1FCC415B5A.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 02 Jul 2025 07:23:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:a4:2f:8b:38:46:30:fe:43:e2:50:d0:a9:12:5a:b5:07:a9:02:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8CBCE2EE006256C9A6207949314A7D1FCC415B5A
        Validity
            Not Before: Jun 24 18:55:00 2025 GMT
            Not After : Jun 23 19:00:00 2026 GMT
        Subject: CN=6A033CD668ED854E1B804DE7382CFD24A392C76B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ac:a1:10:76:5a:ad:de:de:7a:ca:4e:4a:0e:
                    43:b1:36:2b:83:ef:9c:08:fe:d4:f6:9e:a7:27:62:
                    be:b4:1c:e6:87:02:1c:38:94:6e:17:18:6d:20:6d:
                    3c:1c:4a:b9:75:6f:ec:51:0a:4e:5d:e7:02:35:2f:
                    57:44:e2:c4:aa:42:31:97:3f:e8:33:2a:91:a4:33:
                    d2:1d:e1:67:53:bb:06:9e:bc:55:d6:3f:73:c2:4e:
                    66:7c:e8:cf:64:67:41:b3:2f:c0:78:95:39:89:10:
                    d6:f7:f0:20:b1:76:10:b7:be:11:ea:4c:8a:cc:24:
                    85:90:d4:8f:8e:cc:87:f1:c7:06:15:6e:75:b4:3f:
                    77:87:a8:78:94:36:3b:b6:34:a2:b4:75:11:58:f8:
                    06:82:e4:2f:36:e2:85:7d:b4:28:58:99:9c:b0:de:
                    27:c1:ad:d4:7f:6d:6b:21:08:ee:70:c0:e5:8f:bb:
                    2e:7c:10:b6:ab:7c:06:68:58:91:fa:69:8a:3a:41:
                    f5:0a:70:e3:5b:29:7d:ce:46:68:10:e3:1c:e8:9b:
                    a9:f1:17:c6:47:ab:19:61:18:d1:3d:97:d4:30:cf:
                    9f:49:13:20:6f:87:14:5d:ae:bc:bf:4d:bb:68:d1:
                    56:9c:04:a2:72:cf:d8:2a:ca:8f:2d:0d:27:00:96:
                    c3:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:03:3C:D6:68:ED:85:4E:1B:80:4D:E7:38:2C:FD:24:A3:92:C7:6B
            X509v3 Authority Key Identifier:
                keyid:8C:BC:E2:EE:00:62:56:C9:A6:20:79:49:31:4A:7D:1F:CC:41:5B:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/758db87b-16cd-437a-a5b5-08cb35da97f0/0/8CBCE2EE006256C9A6207949314A7D1FCC415B5A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CBCE2EE006256C9A6207949314A7D1FCC415B5A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/758db87b-16cd-437a-a5b5-08cb35da97f0/0/3130332e3138372e3131322e302f32332d3234203d3e20313439373230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.187.112.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b4:45:df:96:fd:2d:d7:e6:49:7f:05:62:c8:23:89:fd:31:c1:
         de:d7:f1:f3:8e:7a:e6:ff:1a:86:02:5b:f8:69:a1:c4:ca:1e:
         35:2f:5d:0e:24:a0:37:b6:57:bf:31:bf:b6:5a:f9:6b:58:ae:
         22:d1:1b:7b:7e:47:f3:92:c2:99:26:72:1e:50:d0:2a:9f:db:
         b0:a6:fb:13:ff:84:76:f7:25:d6:8f:9b:0d:08:46:d1:e2:04:
         47:8b:c4:92:ec:53:bf:5a:c0:9d:f7:e2:c4:3f:0f:5b:0f:4f:
         b4:0c:63:0c:29:1b:b2:94:d0:e0:bb:4d:fe:63:ad:5b:96:52:
         0c:04:1b:6d:f2:86:63:b5:44:f7:53:ad:10:dc:0b:2a:7b:eb:
         bb:f3:20:4f:ff:18:5d:9b:26:4a:76:97:fb:75:4a:04:7e:4e:
         53:fd:30:7b:f6:a3:94:8c:bc:d4:17:d2:d9:21:a4:60:7e:4d:
         86:1b:5a:b9:ac:c3:8d:5b:72:8b:39:b0:d0:6d:85:0d:a6:fa:
         17:55:ee:a2:57:40:fc:bf:c0:5c:0c:f5:4b:0c:97:94:63:05:
         d6:7c:ea:ed:b9:1d:fe:b7:68:ff:4a:df:a2:bd:72:52:fa:54:
         cd:2b:de:c2:af:09:c3:e7:e8:9d:95:71:54:52:61:3b:69:f5:
         39:e4:2e:ea
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUbqQvizhGMP5D4lDQqRJatQepApIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOENCQ0UyRUUwMDYyNTZDOUE2MjA3OTQ5MzE0QTdEMUZD
QzQxNUI1QTAeFw0yNTA2MjQxODU1MDBaFw0yNjA2MjMxOTAwMDBaMDMxMTAvBgNV
BAMTKDZBMDMzQ0Q2NjhFRDg1NEUxQjgwNERFNzM4MkNGRDI0QTM5MkM3NkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwrKEQdlqt3t56yk5KDkOxNiuD
75wI/tT2nqcnYr60HOaHAhw4lG4XGG0gbTwcSrl1b+xRCk5d5wI1L1dE4sSqQjGX
P+gzKpGkM9Id4WdTuwaevFXWP3PCTmZ86M9kZ0GzL8B4lTmJENb38CCxdhC3vhHq
TIrMJIWQ1I+OzIfxxwYVbnW0P3eHqHiUNju2NKK0dRFY+AaC5C824oV9tChYmZyw
3ifBrdR/bWshCO5wwOWPuy58ELarfAZoWJH6aYo6QfUKcONbKX3ORmgQ4xzom6nx
F8ZHqxlhGNE9l9Qwz59JEyBvhxRdrry/Tbto0VacBKJyz9gqyo8tDScAlsP/AgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUagM81mjthU4bgE3nOCz9JKOSx2swHwYDVR0j
BBgwFoAUjLzi7gBiVsmmIHlJMUp9H8xBW1owDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83
NThkYjg3Yi0xNmNkLTQzN2EtYTViNS0wOGNiMzVkYTk3ZjAvMC84Q0JDRTJFRTAw
NjI1NkM5QTYyMDc5NDkzMTRBN0QxRkNDNDE1QjVBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvOENCQ0UyRUUwMDYyNTZDOUE2MjA3OTQ5MzE0QTdEMUZDQzQx
NUI1QS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzc1OGRiODdiLTE2Y2QtNDM3YS1h
NWI1LTA4Y2IzNWRhOTdmMC8wLzMxMzAzMzJlMzEzODM3MmUzMTMxMzIyZTMwMmYz
MjMzMmQzMjM0MjAzZDNlMjAzMTM0MzkzNzMyMzAucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnu3AwDQYJ
KoZIhvcNAQELBQADggEBALRF35b9LdfmSX8FYsgjif0xwd7X8fOOeub/GoYCW/hp
ocTKHjUvXQ4koDe2V78xv7Za+WtYriLRG3t+R/OSwpkmch5Q0Cqf27Cm+xP/hHb3
JdaPmw0IRtHiBEeLxJLsU79awJ334sQ/D1sPT7QMYwwpG7KU0OC7Tf5jrVuWUgwE
G23yhmO1RPdTrRDcCyp767vzIE//GF2bJkp2l/t1SgR+TlP9MHv2o5SMvNQX0tkh
pGB+TYYbWrmsw41bcos5sNBthQ2m+hdV7qJXQPy/wFwM9UsMl5RjBdZ86u25Hf63
aP9K36K9clL6VM0r3sKvCcPn6J2VcVRSYTtp9TnkLuo=
-----END CERTIFICATE-----
Generated at Mon Jun 30 01:03:20 2025 by rpki-client