Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/95ec6cf8-9655-4379-bf36-37271438d03a/0/3130332e36312e31362e302f32332d3233203d3e20313530353039.roa
File:                     3130332e36312e31362e302f32332d3233203d3e20313530353039.roa (raw, json)
Hash identifier:          PphyhzafZc8USb+ULqaNnnRbeA397pdQzPJ0fXA6bSA=
Subject key identifier:   14:48:F0:77:F7:EC:4B:F9:3F:46:88:33:7F:84:4D:8D:A0:87:B1:9E
Certificate issuer:       /CN=7CA2524C6D82550B5D21C13182BD9CC0214433F4
Certificate serial:       7F73FE9A418688DF6CA375172CF7F0A3853370B0
Authority key identifier: 7C:A2:52:4C:6D:82:55:0B:5D:21:C1:31:82:BD:9C:C0:21:44:33:F4
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CA2524C6D82550B5D21C13182BD9CC0214433F4.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/95ec6cf8-9655-4379-bf36-37271438d03a/0/3130332e36312e31362e302f32332d3233203d3e20313530353039.roa
Signing time:             Thu 05 Jun 2025 11:20:28 +0000
ROA not before:           Thu 05 Jun 2025 11:15:28 +0000
ROA not after:            Thu 04 Jun 2026 11:20:28 +0000
asID:                     150509
IP address blocks:        103.61.16.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/95ec6cf8-9655-4379-bf36-37271438d03a/0/7CA2524C6D82550B5D21C13182BD9CC0214433F4.crl
                          rsync://repo-rpki.idnic.net/repo/95ec6cf8-9655-4379-bf36-37271438d03a/0/7CA2524C6D82550B5D21C13182BD9CC0214433F4.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CA2524C6D82550B5D21C13182BD9CC0214433F4.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 08 Jul 2025 21:44:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:73:fe:9a:41:86:88:df:6c:a3:75:17:2c:f7:f0:a3:85:33:70:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CA2524C6D82550B5D21C13182BD9CC0214433F4
        Validity
            Not Before: Jun  5 11:15:28 2025 GMT
            Not After : Jun  4 11:20:28 2026 GMT
        Subject: CN=1448F077F7EC4BF93F4688337F844D8DA087B19E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:01:57:02:f0:ba:f5:cb:92:e2:e1:72:a7:29:
                    ec:e9:92:58:7d:fc:e9:6a:29:fd:73:bb:88:1c:a7:
                    90:6a:6a:cc:e9:c9:47:8f:13:3d:34:31:74:60:7c:
                    16:03:f9:72:f6:80:0d:bc:e2:ea:18:86:bc:dc:1c:
                    74:f2:a2:fd:f5:a8:58:89:ba:22:4b:99:77:72:b9:
                    f7:1f:62:c7:da:4a:ed:5f:d0:cd:d6:a5:32:3d:ed:
                    37:1a:b5:b8:fe:1f:8c:95:09:93:5b:2a:09:cb:ee:
                    b0:2f:d2:90:60:35:9d:62:eb:93:36:56:78:64:69:
                    7a:e6:51:05:9b:95:a8:89:e3:e6:ea:1f:11:3b:3f:
                    33:cf:95:68:9f:9b:3e:da:05:ca:29:01:79:1d:88:
                    dc:c5:b4:b1:9f:9e:23:68:56:56:cc:f6:2b:a6:f8:
                    08:b0:fd:1d:68:de:0f:2b:3e:c4:1d:32:a8:f7:5c:
                    1f:38:bf:51:c2:6a:23:0b:17:4b:01:a6:95:74:cd:
                    b8:02:75:f9:98:4a:60:ae:f2:ea:22:e9:3e:c0:5d:
                    0a:79:50:9c:41:4d:37:51:e9:ad:9a:e4:dc:ad:a5:
                    a2:3c:cb:e7:b9:ac:fa:31:02:c3:89:02:ec:0a:1a:
                    0e:d1:bc:80:09:0b:72:3e:75:2c:92:b6:fb:4e:60:
                    35:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:48:F0:77:F7:EC:4B:F9:3F:46:88:33:7F:84:4D:8D:A0:87:B1:9E
            X509v3 Authority Key Identifier:
                keyid:7C:A2:52:4C:6D:82:55:0B:5D:21:C1:31:82:BD:9C:C0:21:44:33:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/95ec6cf8-9655-4379-bf36-37271438d03a/0/7CA2524C6D82550B5D21C13182BD9CC0214433F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CA2524C6D82550B5D21C13182BD9CC0214433F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/95ec6cf8-9655-4379-bf36-37271438d03a/0/3130332e36312e31362e302f32332d3233203d3e20313530353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.61.16.0/23

    Signature Algorithm: sha256WithRSAEncryption
         d1:bc:9c:3a:36:0d:29:fc:7a:ce:9b:27:b9:4a:c3:fc:d4:dc:
         68:67:47:b7:4a:bd:07:18:11:10:51:e6:0e:1e:ee:45:ec:af:
         bc:53:4d:fd:f3:58:33:9b:51:f2:a5:ca:24:5a:6a:d6:3e:e0:
         69:2c:61:1d:7e:5a:7c:fd:3e:bc:96:e4:15:28:2c:90:b8:12:
         21:fa:cd:0a:cf:17:96:e3:88:b6:00:06:42:fb:88:04:c1:ee:
         08:8c:4c:5e:ba:0e:12:b1:6f:ba:d2:d9:7c:75:76:15:b9:39:
         b3:ef:6a:39:f7:03:76:60:36:2d:54:ac:f9:b5:30:65:84:26:
         22:91:59:89:30:2b:9d:92:68:d5:7f:dc:d4:14:37:bd:54:88:
         c4:6b:cb:77:10:f2:c7:d3:d6:e6:d8:32:21:0f:c1:c7:e5:64:
         11:de:f2:2f:5b:87:8c:39:7f:5a:d1:8d:88:1b:5e:32:8f:ac:
         03:48:cc:83:be:08:32:e5:18:c7:1b:1d:ba:32:99:a8:bf:03:
         bb:d0:89:43:67:f5:32:9d:8e:dd:75:98:9b:41:e8:5d:1b:85:
         f3:a4:04:78:fc:6a:41:4b:2c:52:80:8b:82:eb:d0:19:19:90:
         c0:24:14:03:7f:a9:45:67:dc:68:30:ec:89:13:20:8d:26:af:
         6e:31:f9:a1
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUf3P+mkGGiN9so3UXLPfwo4UzcLAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NBMjUyNEM2RDgyNTUwQjVEMjFDMTMxODJCRDlDQzAy
MTQ0MzNGNDAeFw0yNTA2MDUxMTE1MjhaFw0yNjA2MDQxMTIwMjhaMDMxMTAvBgNV
BAMTKDE0NDhGMDc3RjdFQzRCRjkzRjQ2ODgzMzdGODQ0RDhEQTA4N0IxOUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPAVcC8Lr1y5Li4XKnKezpklh9
/OlqKf1zu4gcp5BqaszpyUePEz00MXRgfBYD+XL2gA284uoYhrzcHHTyov31qFiJ
uiJLmXdyufcfYsfaSu1f0M3WpTI97Tcatbj+H4yVCZNbKgnL7rAv0pBgNZ1i65M2
VnhkaXrmUQWblaiJ4+bqHxE7PzPPlWifmz7aBcopAXkdiNzFtLGfniNoVlbM9ium
+Aiw/R1o3g8rPsQdMqj3XB84v1HCaiMLF0sBppV0zbgCdfmYSmCu8uoi6T7AXQp5
UJxBTTdR6a2a5NytpaI8y+e5rPoxAsOJAuwKGg7RvIAJC3I+dSyStvtOYDV5AgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUFEjwd/fsS/k/Rogzf4RNjaCHsZ4wHwYDVR0j
BBgwFoAUfKJSTG2CVQtdIcExgr2cwCFEM/QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85
NWVjNmNmOC05NjU1LTQzNzktYmYzNi0zNzI3MTQzOGQwM2EvMC83Q0EyNTI0QzZE
ODI1NTBCNUQyMUMxMzE4MkJEOUNDMDIxNDQzM0Y0LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvN0NBMjUyNEM2RDgyNTUwQjVEMjFDMTMxODJCRDlDQzAyMTQ0
MzNGNC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzk1ZWM2Y2Y4LTk2NTUtNDM3OS1i
ZjM2LTM3MjcxNDM4ZDAzYS8wLzMxMzAzMzJlMzYzMTJlMzEzNjJlMzAyZjMyMzMy
ZDMyMzMyMDNkM2UyMDMxMzUzMDM1MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAWc9EDANBgkqhkiG
9w0BAQsFAAOCAQEA0bycOjYNKfx6zpsnuUrD/NTcaGdHt0q9BxgREFHmDh7uReyv
vFNN/fNYM5tR8qXKJFpq1j7gaSxhHX5afP0+vJbkFSgskLgSIfrNCs8XluOItgAG
QvuIBMHuCIxMXroOErFvutLZfHV2Fbk5s+9qOfcDdmA2LVSs+bUwZYQmIpFZiTAr
nZJo1X/c1BQ3vVSIxGvLdxDyx9PW5tgyIQ/Bx+VkEd7yL1uHjDl/WtGNiBteMo+s
A0jMg74IMuUYxxsdujKZqL8Du9CJQ2f1Mp2O3XWYm0HoXRuF86QEePxqQUssUoCL
guvQGRmQwCQUA3+pRWfcaDDsiRMgjSavbjH5oQ==
-----END CERTIFICATE-----
Generated at Sun Jul 6 09:25:36 2025 by rpki-client