Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/b8993a93-5889-4e02-9e95-769cb89e0035/0/3130332e3139342e34372e302f32342d3234203d3e20313439393731.roa
File:                     3130332e3139342e34372e302f32342d3234203d3e20313439393731.roa (raw, json)
Hash identifier:          d3zROfULZz8QCuCni0sAhbO20KSsId2kpNYmr15j0jM=
Subject key identifier:   71:1D:1A:B0:C5:50:5D:C6:A1:9A:18:67:BB:CB:62:B2:7A:81:41:DD
Certificate issuer:       /CN=4F679A207D2588B709C82CDAB000736182F881E1
Certificate serial:       5F3E0525143173130E3B98C0EA05EB03A25E6968
Authority key identifier: 4F:67:9A:20:7D:25:88:B7:09:C8:2C:DA:B0:00:73:61:82:F8:81:E1
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F679A207D2588B709C82CDAB000736182F881E1.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/b8993a93-5889-4e02-9e95-769cb89e0035/0/3130332e3139342e34372e302f32342d3234203d3e20313439393731.roa
Signing time:             Thu 08 May 2025 05:38:21 +0000
ROA not before:           Thu 08 May 2025 05:33:21 +0000
ROA not after:            Thu 07 May 2026 05:38:21 +0000
asID:                     149971
IP address blocks:        103.194.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/b8993a93-5889-4e02-9e95-769cb89e0035/0/4F679A207D2588B709C82CDAB000736182F881E1.crl
                          rsync://repo-rpki.idnic.net/repo/b8993a93-5889-4e02-9e95-769cb89e0035/0/4F679A207D2588B709C82CDAB000736182F881E1.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F679A207D2588B709C82CDAB000736182F881E1.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 15 May 2025 20:09:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:3e:05:25:14:31:73:13:0e:3b:98:c0:ea:05:eb:03:a2:5e:69:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F679A207D2588B709C82CDAB000736182F881E1
        Validity
            Not Before: May  8 05:33:21 2025 GMT
            Not After : May  7 05:38:21 2026 GMT
        Subject: CN=711D1AB0C5505DC6A19A1867BBCB62B27A8141DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:b2:65:4a:90:89:9c:69:c2:e3:13:13:37:d2:
                    f6:cb:38:51:68:54:70:d8:d3:37:7d:93:6b:91:63:
                    32:22:a6:85:18:f7:14:d5:bc:11:63:a9:4a:fa:59:
                    bd:89:13:67:da:40:41:ed:f7:eb:57:af:bd:8d:8f:
                    66:4a:c8:de:15:ee:9f:f3:7b:a5:ca:f2:58:54:81:
                    13:37:0a:4b:9c:42:10:29:3b:70:e8:69:18:b5:cc:
                    0e:f3:1a:cb:6e:08:cf:19:ce:bc:6e:e9:c4:f6:2b:
                    d8:ec:43:3e:e9:e7:98:38:70:15:2b:fd:90:86:18:
                    92:65:0f:d3:c6:e9:97:a8:7b:d3:ed:52:ac:1c:f3:
                    78:71:09:5a:93:9b:67:8e:77:79:c4:eb:e6:78:51:
                    43:28:58:2b:76:ba:05:81:b6:71:fe:4f:8c:6d:3d:
                    00:05:b1:ec:f6:ba:09:2e:14:bc:cd:6c:ab:d9:99:
                    fe:b6:d4:20:23:f0:8d:7f:b8:8a:2e:50:f3:d6:5c:
                    35:ad:48:07:62:54:7b:5a:1a:a8:06:9a:60:f2:62:
                    0f:6b:c7:d2:d8:37:1f:15:df:eb:bf:d9:88:78:f4:
                    b4:a2:58:bd:fc:51:db:58:04:cb:68:ea:5a:1f:cc:
                    19:23:e7:1a:39:de:5e:96:53:85:a1:8d:f9:9f:fd:
                    8d:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:1D:1A:B0:C5:50:5D:C6:A1:9A:18:67:BB:CB:62:B2:7A:81:41:DD
            X509v3 Authority Key Identifier:
                keyid:4F:67:9A:20:7D:25:88:B7:09:C8:2C:DA:B0:00:73:61:82:F8:81:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/b8993a93-5889-4e02-9e95-769cb89e0035/0/4F679A207D2588B709C82CDAB000736182F881E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F679A207D2588B709C82CDAB000736182F881E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b8993a93-5889-4e02-9e95-769cb89e0035/0/3130332e3139342e34372e302f32342d3234203d3e20313439393731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.194.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:f0:d1:08:25:37:0e:5e:e8:d1:71:de:ae:35:5f:b0:a3:6c:
         87:78:95:a0:55:31:02:86:32:d1:3a:35:14:3f:72:28:7a:8e:
         6a:62:f3:2c:1b:cb:c7:23:c8:cd:89:71:cf:44:ca:0a:ea:a0:
         c8:df:ca:50:67:ca:2b:35:83:85:de:d1:82:7c:dd:b9:95:a9:
         65:33:02:cb:aa:b6:1a:4d:63:80:ab:56:5c:8b:47:c8:49:f6:
         36:fc:70:34:5d:77:a0:5b:38:c6:15:b9:c7:55:00:81:ce:b2:
         a7:2b:45:be:8b:a5:3e:8f:67:95:91:7a:d4:68:2a:f4:e0:09:
         9a:c5:41:d0:75:e4:63:d7:93:1b:d0:47:b5:e4:47:4b:6a:2d:
         c4:e4:a2:66:d0:f2:c3:31:d6:9b:cf:05:c3:ef:ff:57:d2:1d:
         75:d6:31:e4:cd:54:b7:b8:20:fe:5c:5b:04:e4:b1:08:cc:8d:
         d5:b9:b4:31:e0:ce:b5:a4:a2:02:24:60:19:f6:4d:68:fd:69:
         cb:f3:85:0b:45:92:10:d2:a2:7c:be:e4:47:53:fa:4d:b1:88:
         cd:cc:1b:1f:a7:75:fc:a9:77:1d:7e:da:f7:98:77:02:1a:74:
         39:7d:ef:34:3f:96:1d:a1:3a:60:66:c7:ec:d9:d6:ff:b5:65:
         08:67:ab:54
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUXz4FJRQxcxMOO5jA6gXrA6JeaWgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEY2NzlBMjA3RDI1ODhCNzA5QzgyQ0RBQjAwMDczNjE4
MkY4ODFFMTAeFw0yNTA1MDgwNTMzMjFaFw0yNjA1MDcwNTM4MjFaMDMxMTAvBgNV
BAMTKDcxMUQxQUIwQzU1MDVEQzZBMTlBMTg2N0JCQ0I2MkIyN0E4MTQxREQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQsmVKkImcacLjExM30vbLOFFo
VHDY0zd9k2uRYzIipoUY9xTVvBFjqUr6Wb2JE2faQEHt9+tXr72Nj2ZKyN4V7p/z
e6XK8lhUgRM3CkucQhApO3DoaRi1zA7zGstuCM8Zzrxu6cT2K9jsQz7p55g4cBUr
/ZCGGJJlD9PG6Zeoe9PtUqwc83hxCVqTm2eOd3nE6+Z4UUMoWCt2ugWBtnH+T4xt
PQAFsez2ugkuFLzNbKvZmf621CAj8I1/uIouUPPWXDWtSAdiVHtaGqgGmmDyYg9r
x9LYNx8V3+u/2Yh49LSiWL38UdtYBMto6lofzBkj5xo53l6WU4Whjfmf/Y3jAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUcR0asMVQXcahmhhnu8tisnqBQd0wHwYDVR0j
BBgwFoAUT2eaIH0liLcJyCzasABzYYL4geEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i
ODk5M2E5My01ODg5LTRlMDItOWU5NS03NjljYjg5ZTAwMzUvMC80RjY3OUEyMDdE
MjU4OEI3MDlDODJDREFCMDAwNzM2MTgyRjg4MUUxLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNEY2NzlBMjA3RDI1ODhCNzA5QzgyQ0RBQjAwMDczNjE4MkY4
ODFFMS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2I4OTkzYTkzLTU4ODktNGUwMi05
ZTk1LTc2OWNiODllMDAzNS8wLzMxMzAzMzJlMzEzOTM0MmUzNDM3MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzNDM5MzkzNzMxLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ8IvMA0GCSqG
SIb3DQEBCwUAA4IBAQAf8NEIJTcOXujRcd6uNV+wo2yHeJWgVTEChjLROjUUP3Io
eo5qYvMsG8vHI8jNiXHPRMoK6qDI38pQZ8orNYOF3tGCfN25lallMwLLqrYaTWOA
q1Zci0fISfY2/HA0XXegWzjGFbnHVQCBzrKnK0W+i6U+j2eVkXrUaCr04AmaxUHQ
deRj15Mb0Ee15EdLai3E5KJm0PLDMdabzwXD7/9X0h111jHkzVS3uCD+XFsE5LEI
zI3VubQx4M61pKICJGAZ9k1o/WnL84ULRZIQ0qJ8vuRHU/pNsYjNzBsfp3X8qXcd
ftr3mHcCGnQ5fe80P5YdoTpgZsfs2db/tWUIZ6tU
-----END CERTIFICATE-----
Generated at Mon May 12 23:04:57 2025 by rpki-client