Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/8d03af01-f239-4a1f-81cd-4106bebb2a22/0/3130332e3234302e3131312e302f32342d3234203d3e203538383139.roa
File:                     3130332e3234302e3131312e302f32342d3234203d3e203538383139.roa (raw, json)
Hash identifier:          LrqOLogV2pqJm1JD+jgGDFnoqudanN5BU7ote6ngSrk=
Subject key identifier:   F4:67:AC:24:0C:9B:A6:F1:EB:E4:EA:A6:7A:33:1D:F5:81:06:DF:09
Certificate issuer:       /CN=F8DF40E4C95F9EBF81453870736995E91BBB92F7
Certificate serial:       71ECC715CA294B3EB3D7B2F048468A4B4B6DB6D0
Authority key identifier: F8:DF:40:E4:C9:5F:9E:BF:81:45:38:70:73:69:95:E9:1B:BB:92:F7
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8DF40E4C95F9EBF81453870736995E91BBB92F7.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8d03af01-f239-4a1f-81cd-4106bebb2a22/0/3130332e3234302e3131312e302f32342d3234203d3e203538383139.roa
Signing time:             Thu 09 Oct 2025 12:02:26 +0000
ROA not before:           Thu 09 Oct 2025 11:57:26 +0000
ROA not after:            Thu 08 Oct 2026 12:02:26 +0000
asID:                     58819
IP address blocks:        103.240.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8d03af01-f239-4a1f-81cd-4106bebb2a22/0/F8DF40E4C95F9EBF81453870736995E91BBB92F7.crl
                          rsync://repo-rpki.idnic.net/repo/8d03af01-f239-4a1f-81cd-4106bebb2a22/0/F8DF40E4C95F9EBF81453870736995E91BBB92F7.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8DF40E4C95F9EBF81453870736995E91BBB92F7.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 21 Oct 2025 15:33:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:ec:c7:15:ca:29:4b:3e:b3:d7:b2:f0:48:46:8a:4b:4b:6d:b6:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F8DF40E4C95F9EBF81453870736995E91BBB92F7
        Validity
            Not Before: Oct  9 11:57:26 2025 GMT
            Not After : Oct  8 12:02:26 2026 GMT
        Subject: CN=F467AC240C9BA6F1EBE4EAA67A331DF58106DF09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:eb:33:c1:48:d7:0e:36:49:06:65:24:2a:69:
                    d8:8b:f0:72:3b:d3:76:8c:a4:77:a0:6f:32:dc:3b:
                    64:cd:71:c1:bc:9e:55:c1:0a:16:d6:05:89:66:98:
                    05:06:ec:4c:ef:40:05:18:d7:10:98:f8:c3:b1:ab:
                    ea:06:6f:7f:b0:18:c4:5f:60:42:21:ff:5e:0d:02:
                    10:46:0f:06:5b:66:66:7b:51:4e:78:d2:e2:37:64:
                    c8:3c:73:fa:e2:c7:18:1b:61:2d:b2:97:e3:23:1b:
                    cc:45:68:e4:1f:ad:dd:d2:a4:a0:2a:9d:5e:14:c5:
                    1d:47:a8:f7:0d:48:65:97:6a:2e:ef:71:09:cb:e8:
                    f0:53:dd:94:3f:18:43:94:d2:62:cb:a8:a3:b2:b4:
                    d3:b4:f6:0d:bb:8b:8f:c8:a3:e2:0c:33:eb:b1:ec:
                    b8:33:56:67:35:47:87:68:3c:77:3b:bb:44:75:cd:
                    af:aa:3d:89:87:20:b7:14:7b:4a:87:05:b5:73:f3:
                    d2:f3:63:2e:69:06:b5:fd:27:5a:dd:96:2a:a1:84:
                    bd:65:51:8d:72:70:ca:ab:c7:d3:f7:01:b9:56:e5:
                    42:95:4d:6b:d6:a1:58:f4:e1:b2:b4:82:c9:fd:ea:
                    61:a4:d2:ba:44:69:aa:af:dd:cb:bd:e7:70:f3:fb:
                    81:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:67:AC:24:0C:9B:A6:F1:EB:E4:EA:A6:7A:33:1D:F5:81:06:DF:09
            X509v3 Authority Key Identifier:
                keyid:F8:DF:40:E4:C9:5F:9E:BF:81:45:38:70:73:69:95:E9:1B:BB:92:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8d03af01-f239-4a1f-81cd-4106bebb2a22/0/F8DF40E4C95F9EBF81453870736995E91BBB92F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8DF40E4C95F9EBF81453870736995E91BBB92F7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d03af01-f239-4a1f-81cd-4106bebb2a22/0/3130332e3234302e3131312e302f32342d3234203d3e203538383139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.240.111.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:16:9a:86:89:82:b7:82:2e:71:00:ab:38:bf:70:72:16:29:
         08:2a:83:8c:22:cb:6e:d6:ad:29:2c:18:95:b8:09:de:f8:98:
         b5:49:5e:5f:be:fb:58:d0:d3:96:66:cf:93:3b:e2:11:17:53:
         47:4a:86:0b:ce:2c:f4:66:a3:10:fb:3c:68:2b:fe:fb:a0:24:
         2c:b0:6b:6a:77:10:f9:90:80:32:ca:22:fb:5c:2b:e2:12:53:
         1e:07:c2:df:ad:ab:c0:4c:1b:b2:8e:24:8b:19:4c:6d:72:f3:
         6f:a6:16:c4:1e:ee:55:8e:24:bd:fb:1b:77:d2:ae:c0:52:5f:
         43:d0:87:4d:6e:0e:79:47:4b:18:af:8b:bd:e4:c3:1c:43:27:
         fd:e1:5b:2d:f8:ad:b0:bd:72:d2:b1:28:3c:42:3f:17:19:d9:
         2a:44:00:85:cb:30:db:96:00:61:57:23:01:2e:78:b2:a5:66:
         42:fc:86:ba:0a:b5:c6:33:78:62:a1:db:1e:05:07:da:04:88:
         b2:86:4a:df:59:25:11:2c:66:f1:cb:f7:72:78:43:78:2a:28:
         e9:c4:3d:f5:b4:ce:05:ca:ee:76:93:62:8b:28:12:69:e2:c6:
         e1:84:e4:9b:10:4b:1b:d1:5e:18:26:bf:12:84:94:0a:7e:c7:
         22:90:9a:22
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUcezHFcopSz6z17LwSEaKS0ttttAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjhERjQwRTRDOTVGOUVCRjgxNDUzODcwNzM2OTk1RTkx
QkJCOTJGNzAeFw0yNTEwMDkxMTU3MjZaFw0yNjEwMDgxMjAyMjZaMDMxMTAvBgNV
BAMTKEY0NjdBQzI0MEM5QkE2RjFFQkU0RUFBNjdBMzMxREY1ODEwNkRGMDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDa6zPBSNcONkkGZSQqadiL8HI7
03aMpHegbzLcO2TNccG8nlXBChbWBYlmmAUG7EzvQAUY1xCY+MOxq+oGb3+wGMRf
YEIh/14NAhBGDwZbZmZ7UU540uI3ZMg8c/rixxgbYS2yl+MjG8xFaOQfrd3SpKAq
nV4UxR1HqPcNSGWXai7vcQnL6PBT3ZQ/GEOU0mLLqKOytNO09g27i4/Io+IMM+ux
7LgzVmc1R4doPHc7u0R1za+qPYmHILcUe0qHBbVz89LzYy5pBrX9J1rdliqhhL1l
UY1ycMqrx9P3AblW5UKVTWvWoVj04bK0gsn96mGk0rpEaaqv3cu953Dz+4EfAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQU9GesJAybpvHr5OqmejMd9YEG3wkwHwYDVR0j
BBgwFoAU+N9A5Mlfnr+BRThwc2mV6Ru7kvcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84
ZDAzYWYwMS1mMjM5LTRhMWYtODFjZC00MTA2YmViYjJhMjIvMC9GOERGNDBFNEM5
NUY5RUJGODE0NTM4NzA3MzY5OTVFOTFCQkI5MkY3LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRjhERjQwRTRDOTVGOUVCRjgxNDUzODcwNzM2OTk1RTkxQkJC
OTJGNy5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzhkMDNhZjAxLWYyMzktNGExZi04
MWNkLTQxMDZiZWJiMmEyMi8wLzMxMzAzMzJlMzIzNDMwMmUzMTMxMzEyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzNTM4MzgzMTM5LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ/BvMA0GCSqG
SIb3DQEBCwUAA4IBAQA+FpqGiYK3gi5xAKs4v3ByFikIKoOMIstu1q0pLBiVuAne
+Ji1SV5fvvtY0NOWZs+TO+IRF1NHSoYLziz0ZqMQ+zxoK/77oCQssGtqdxD5kIAy
yiL7XCviElMeB8LfravATBuyjiSLGUxtcvNvphbEHu5VjiS9+xt30q7AUl9D0IdN
bg55R0sYr4u95MMcQyf94Vst+K2wvXLSsSg8Qj8XGdkqRACFyzDblgBhVyMBLniy
pWZC/Ia6CrXGM3hiodseBQfaBIiyhkrfWSURLGbxy/dyeEN4KijpxD31tM4Fyu52
k2KLKBJp4sbhhOSbEEsb0V4YJr8ShJQKfscikJoi
-----END CERTIFICATE-----
Generated at Mon Oct 20 09:34:03 2025 by rpki-client