Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/8c278747-6ac7-4f87-9b2b-21359294f034/0/3130332e38372e31382e302f32342d3234203d3e20313336303835.roa
File:                     3130332e38372e31382e302f32342d3234203d3e20313336303835.roa (raw, json)
Hash identifier:          Lj0hcqeyTQssBrCkzs3hGKwcyyQ8e4rZksVRkWRzAgo=
Subject key identifier:   6B:29:F3:6D:94:70:BD:CA:E4:6B:9B:9A:7D:D8:F3:0D:C4:7C:F0:14
Certificate issuer:       /CN=48500B00C61DA1B0EC4484E0791DBBCDDC34EA6A
Certificate serial:       3E92EC00D98A654D9CCBBE7D420272B9E0041388
Authority key identifier: 48:50:0B:00:C6:1D:A1:B0:EC:44:84:E0:79:1D:BB:CD:DC:34:EA:6A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48500B00C61DA1B0EC4484E0791DBBCDDC34EA6A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8c278747-6ac7-4f87-9b2b-21359294f034/0/3130332e38372e31382e302f32342d3234203d3e20313336303835.roa
Signing time:             Thu 02 Oct 2025 04:00:00 +0000
ROA not before:           Thu 02 Oct 2025 03:55:00 +0000
ROA not after:            Thu 01 Oct 2026 04:00:00 +0000
asID:                     136085
IP address blocks:        103.87.18.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8c278747-6ac7-4f87-9b2b-21359294f034/0/48500B00C61DA1B0EC4484E0791DBBCDDC34EA6A.crl
                          rsync://repo-rpki.idnic.net/repo/8c278747-6ac7-4f87-9b2b-21359294f034/0/48500B00C61DA1B0EC4484E0791DBBCDDC34EA6A.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48500B00C61DA1B0EC4484E0791DBBCDDC34EA6A.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Oct 2025 02:09:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:92:ec:00:d9:8a:65:4d:9c:cb:be:7d:42:02:72:b9:e0:04:13:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48500B00C61DA1B0EC4484E0791DBBCDDC34EA6A
        Validity
            Not Before: Oct  2 03:55:00 2025 GMT
            Not After : Oct  1 04:00:00 2026 GMT
        Subject: CN=6B29F36D9470BDCAE46B9B9A7DD8F30DC47CF014
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:a5:e6:c8:bd:68:87:09:36:d1:03:d6:0b:a2:
                    fa:32:bd:0a:39:11:c2:43:49:a0:7c:26:d0:a9:35:
                    75:a4:0e:4b:bd:b2:5a:8d:c8:94:f8:cb:98:aa:6c:
                    6c:85:09:8e:16:84:81:8b:ff:eb:5b:67:40:4b:97:
                    64:c5:4a:5c:71:2b:96:fd:9e:41:ba:ad:15:8f:04:
                    e7:43:a9:c6:98:87:eb:40:44:8f:31:39:04:e7:ab:
                    d8:e4:c5:77:d9:a2:05:a4:0b:d6:e0:b5:80:5e:a3:
                    59:5b:b4:c5:83:6b:3b:aa:4b:78:d4:55:bf:a7:64:
                    fa:8e:6b:bf:2d:91:7d:2c:a1:21:94:2f:36:2a:10:
                    94:e9:4a:80:14:95:af:85:df:4b:07:52:3d:e5:85:
                    c3:dd:fe:7a:6b:76:2e:c0:06:e6:ff:30:e5:e9:1d:
                    0a:d3:99:b1:80:3a:8b:3e:c6:a3:16:f0:07:a4:77:
                    84:25:f8:04:5d:42:a8:39:28:22:2b:be:9a:96:a1:
                    13:a9:2b:00:9e:72:0c:f3:9a:5e:9c:58:ec:43:7c:
                    39:f1:bc:64:30:fe:f6:de:1f:16:97:b7:14:67:9e:
                    41:31:a5:7b:0d:1e:7d:32:e6:bb:ec:cf:b6:79:c8:
                    d7:26:ab:ad:2d:de:e6:77:57:e7:6b:67:90:0a:06:
                    b3:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:29:F3:6D:94:70:BD:CA:E4:6B:9B:9A:7D:D8:F3:0D:C4:7C:F0:14
            X509v3 Authority Key Identifier:
                keyid:48:50:0B:00:C6:1D:A1:B0:EC:44:84:E0:79:1D:BB:CD:DC:34:EA:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8c278747-6ac7-4f87-9b2b-21359294f034/0/48500B00C61DA1B0EC4484E0791DBBCDDC34EA6A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48500B00C61DA1B0EC4484E0791DBBCDDC34EA6A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8c278747-6ac7-4f87-9b2b-21359294f034/0/3130332e38372e31382e302f32342d3234203d3e20313336303835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.87.18.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:cf:bd:10:fc:15:b1:35:19:49:e1:95:5f:94:bf:31:b5:05:
         da:b2:ec:16:2b:39:0b:52:c2:0c:20:8f:ca:db:f2:c2:a5:b3:
         98:9a:99:0e:93:ad:9b:ad:48:8b:ea:33:a1:66:4b:1b:cb:ed:
         86:4f:ea:cd:2b:55:91:7c:b5:39:5e:f7:9e:90:b1:c1:ab:73:
         07:3f:fb:20:23:5b:44:98:f3:bc:2e:db:28:32:b0:c1:f7:be:
         17:4d:5a:6e:7a:bb:0e:cc:78:32:de:00:45:8a:09:cf:b6:49:
         6f:a7:5e:c4:95:df:aa:1d:c9:6a:fa:2b:a4:97:2e:7a:f1:fa:
         ac:d2:97:b8:c7:aa:92:67:fe:4c:7b:5c:60:ab:fc:f8:e0:7f:
         27:9d:9c:0a:a7:6c:0a:50:39:ab:bc:02:0e:b1:30:7a:50:c5:
         7b:fc:bf:9d:ec:1a:75:b9:f6:50:4b:db:b1:8b:a7:c2:21:50:
         16:eb:f2:4c:6b:80:97:f9:a7:6c:46:68:62:5c:37:0f:f1:4f:
         a3:eb:46:24:b2:c2:a5:8f:54:b3:ee:88:e9:29:3d:9d:c3:ab:
         f8:38:18:e9:4e:85:30:15:c0:d5:e6:96:66:2e:e1:e1:d8:c5:
         4d:c5:1f:3b:18:09:aa:bd:0c:9b:4e:1a:79:66:5c:bd:3b:10:
         76:60:a0:a3
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUPpLsANmKZU2cy759QgJyueAEE4gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDg1MDBCMDBDNjFEQTFCMEVDNDQ4NEUwNzkxREJCQ0RE
QzM0RUE2QTAeFw0yNTEwMDIwMzU1MDBaFw0yNjEwMDEwNDAwMDBaMDMxMTAvBgNV
BAMTKDZCMjlGMzZEOTQ3MEJEQ0FFNDZCOUI5QTdERDhGMzBEQzQ3Q0YwMTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUpebIvWiHCTbRA9YLovoyvQo5
EcJDSaB8JtCpNXWkDku9slqNyJT4y5iqbGyFCY4WhIGL/+tbZ0BLl2TFSlxxK5b9
nkG6rRWPBOdDqcaYh+tARI8xOQTnq9jkxXfZogWkC9bgtYBeo1lbtMWDazuqS3jU
Vb+nZPqOa78tkX0soSGULzYqEJTpSoAUla+F30sHUj3lhcPd/nprdi7ABub/MOXp
HQrTmbGAOos+xqMW8Aekd4Ql+ARdQqg5KCIrvpqWoROpKwCecgzzml6cWOxDfDnx
vGQw/vbeHxaXtxRnnkExpXsNHn0y5rvsz7Z5yNcmq60t3uZ3V+drZ5AKBrM3AgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUaynzbZRwvcrka5uafdjzDcR88BQwHwYDVR0j
BBgwFoAUSFALAMYdobDsRITgeR27zdw06mowDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84
YzI3ODc0Ny02YWM3LTRmODctOWIyYi0yMTM1OTI5NGYwMzQvMC80ODUwMEIwMEM2
MURBMUIwRUM0NDg0RTA3OTFEQkJDRERDMzRFQTZBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNDg1MDBCMDBDNjFEQTFCMEVDNDQ4NEUwNzkxREJCQ0REQzM0
RUE2QS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzhjMjc4NzQ3LTZhYzctNGY4Ny05
YjJiLTIxMzU5Mjk0ZjAzNC8wLzMxMzAzMzJlMzgzNzJlMzEzODJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDMxMzMzNjMwMzgzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGdXEjANBgkqhkiG
9w0BAQsFAAOCAQEARs+9EPwVsTUZSeGVX5S/MbUF2rLsFis5C1LCDCCPytvywqWz
mJqZDpOtm61Ii+ozoWZLG8vthk/qzStVkXy1OV73npCxwatzBz/7ICNbRJjzvC7b
KDKwwfe+F01abnq7Dsx4Mt4ARYoJz7ZJb6dexJXfqh3JavorpJcuevH6rNKXuMeq
kmf+THtcYKv8+OB/J52cCqdsClA5q7wCDrEwelDFe/y/newadbn2UEvbsYunwiFQ
FuvyTGuAl/mnbEZoYlw3D/FPo+tGJLLCpY9Us+6I6Sk9ncOr+DgY6U6FMBXA1eaW
Zi7h4djFTcUfOxgJqr0Mm04aeWZcvTsQdmCgow==
-----END CERTIFICATE-----
Generated at Tue Oct 21 00:25:52 2025 by rpki-client