Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c9f3c769-cfb1-4206-9f54-c0587e63ba5b/0/3130332e39302e36362e302f32342d3234203d3e20313530323635.roa
File:                     3130332e39302e36362e302f32342d3234203d3e20313530323635.roa (raw, json)
Hash identifier:          xen07zc0j+/G4arkqASOm4ZjW/rKUxr6T3lpoWHLeW0=
Subject key identifier:   8C:A6:0B:24:92:75:82:29:75:44:BE:0C:02:C0:BA:5D:28:B0:B9:FB
Certificate issuer:       /CN=5B8C3A29E90C25CBF4615124B117BE7FC013C61E
Certificate serial:       277C603F36268A9B1F10DC37D234C54E8A0F679E
Authority key identifier: 5B:8C:3A:29:E9:0C:25:CB:F4:61:51:24:B1:17:BE:7F:C0:13:C6:1E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5B8C3A29E90C25CBF4615124B117BE7FC013C61E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c9f3c769-cfb1-4206-9f54-c0587e63ba5b/0/3130332e39302e36362e302f32342d3234203d3e20313530323635.roa
Signing time:             Thu 18 Sep 2025 15:00:00 +0000
ROA not before:           Thu 18 Sep 2025 14:55:00 +0000
ROA not after:            Thu 17 Sep 2026 15:00:00 +0000
asID:                     150265
IP address blocks:        103.90.66.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c9f3c769-cfb1-4206-9f54-c0587e63ba5b/0/5B8C3A29E90C25CBF4615124B117BE7FC013C61E.crl
                          rsync://repo-rpki.idnic.net/repo/c9f3c769-cfb1-4206-9f54-c0587e63ba5b/0/5B8C3A29E90C25CBF4615124B117BE7FC013C61E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5B8C3A29E90C25CBF4615124B117BE7FC013C61E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Oct 2025 11:48:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:7c:60:3f:36:26:8a:9b:1f:10:dc:37:d2:34:c5:4e:8a:0f:67:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B8C3A29E90C25CBF4615124B117BE7FC013C61E
        Validity
            Not Before: Sep 18 14:55:00 2025 GMT
            Not After : Sep 17 15:00:00 2026 GMT
        Subject: CN=8CA60B24927582297544BE0C02C0BA5D28B0B9FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:19:44:a8:1f:51:48:a6:bf:29:1a:21:66:75:
                    9b:9e:40:a2:bb:8f:7a:71:01:8b:57:69:66:53:a6:
                    17:65:70:cd:d6:9c:c3:fa:05:11:c4:3e:16:a0:2c:
                    ba:18:aa:3b:67:79:d7:d9:e5:f9:54:aa:fc:d1:db:
                    a5:c5:26:e1:1c:65:0b:38:c9:76:da:ce:3f:62:47:
                    87:35:4b:29:b3:76:85:c5:0a:5d:f1:aa:a4:c5:16:
                    96:2a:48:05:db:29:ed:6d:af:d8:06:f2:c9:46:73:
                    19:d2:ae:cc:f3:49:9e:cc:c1:91:d0:55:25:2e:cf:
                    86:60:e7:69:f5:05:50:69:90:f7:9c:a1:2a:88:a7:
                    15:a0:4a:f3:fa:26:1f:21:70:8b:fe:6b:54:d0:55:
                    d2:d6:68:89:3d:4d:36:bf:c4:86:6f:dd:31:33:ae:
                    c2:f8:d8:52:f2:a9:d7:7b:db:a3:11:f9:a1:d8:be:
                    b3:5d:0f:31:0e:a0:69:65:1a:f0:8d:ec:eb:1a:1a:
                    f3:35:d2:35:99:f3:0b:0d:d8:eb:6d:55:91:6e:f7:
                    bd:a4:49:b2:e9:0f:ff:b3:b4:83:af:27:11:73:68:
                    55:e4:5d:3a:73:b5:d3:d0:5b:c6:f6:47:b2:c7:a1:
                    38:59:b8:fa:3b:63:ed:b6:57:c2:9b:12:36:7f:45:
                    fd:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:A6:0B:24:92:75:82:29:75:44:BE:0C:02:C0:BA:5D:28:B0:B9:FB
            X509v3 Authority Key Identifier:
                keyid:5B:8C:3A:29:E9:0C:25:CB:F4:61:51:24:B1:17:BE:7F:C0:13:C6:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c9f3c769-cfb1-4206-9f54-c0587e63ba5b/0/5B8C3A29E90C25CBF4615124B117BE7FC013C61E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5B8C3A29E90C25CBF4615124B117BE7FC013C61E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c9f3c769-cfb1-4206-9f54-c0587e63ba5b/0/3130332e39302e36362e302f32342d3234203d3e20313530323635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.90.66.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:46:8c:04:e0:07:70:31:67:ce:c6:24:95:8b:5d:ca:75:09:
         58:06:c1:f6:9e:68:82:38:3f:3d:ec:ee:3f:82:54:95:45:2e:
         8f:31:b6:11:90:cf:b1:fa:92:cc:6b:b3:4c:a4:28:c6:76:af:
         7d:e8:d9:97:cf:a7:8c:0a:52:01:13:df:c9:13:26:d4:2f:69:
         e0:b4:fd:6f:10:03:14:b4:00:46:44:5a:c0:7a:29:53:9b:47:
         7c:16:88:8e:aa:40:74:20:d1:72:da:38:d4:72:ed:cc:0e:7e:
         9b:8d:4b:04:79:be:e6:ed:97:d0:ef:f1:7e:1b:bb:2e:72:4e:
         45:e2:1d:15:0d:d7:78:31:28:df:68:1f:a2:7b:87:1b:ba:af:
         e3:6f:f8:56:87:6a:f3:fc:12:b2:be:57:69:4d:94:c4:6e:90:
         9c:b1:4c:fa:ca:30:97:24:75:6a:0f:d3:22:46:7b:9e:73:a5:
         77:35:3b:b3:2c:95:75:a0:b7:ea:6b:82:a8:70:43:6f:e0:10:
         77:c1:99:a9:39:78:8b:21:12:14:27:50:a4:8a:1f:04:35:08:
         25:b1:1b:c7:a3:72:4d:02:9d:30:db:55:3f:9d:27:9a:cf:fa:
         47:d8:bf:9c:82:71:8a:ed:92:7b:d9:8a:f9:03:2a:57:02:66:
         e7:2d:90:58
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUJ3xgPzYmipsfENw30jTFTooPZ54wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUI4QzNBMjlFOTBDMjVDQkY0NjE1MTI0QjExN0JFN0ZD
MDEzQzYxRTAeFw0yNTA5MTgxNDU1MDBaFw0yNjA5MTcxNTAwMDBaMDMxMTAvBgNV
BAMTKDhDQTYwQjI0OTI3NTgyMjk3NTQ0QkUwQzAyQzBCQTVEMjhCMEI5RkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFGUSoH1FIpr8pGiFmdZueQKK7
j3pxAYtXaWZTphdlcM3WnMP6BRHEPhagLLoYqjtnedfZ5flUqvzR26XFJuEcZQs4
yXbazj9iR4c1SymzdoXFCl3xqqTFFpYqSAXbKe1tr9gG8slGcxnSrszzSZ7MwZHQ
VSUuz4Zg52n1BVBpkPecoSqIpxWgSvP6Jh8hcIv+a1TQVdLWaIk9TTa/xIZv3TEz
rsL42FLyqdd726MR+aHYvrNdDzEOoGllGvCN7OsaGvM10jWZ8wsN2OttVZFu972k
SbLpD/+ztIOvJxFzaFXkXTpztdPQW8b2R7LHoThZuPo7Y+22V8KbEjZ/Rf1vAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUjKYLJJJ1gil1RL4MAsC6XSiwufswHwYDVR0j
BBgwFoAUW4w6KekMJcv0YVEksRe+f8ATxh4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j
OWYzYzc2OS1jZmIxLTQyMDYtOWY1NC1jMDU4N2U2M2JhNWIvMC81QjhDM0EyOUU5
MEMyNUNCRjQ2MTUxMjRCMTE3QkU3RkMwMTNDNjFFLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNUI4QzNBMjlFOTBDMjVDQkY0NjE1MTI0QjExN0JFN0ZDMDEz
QzYxRS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2M5ZjNjNzY5LWNmYjEtNDIwNi05
ZjU0LWMwNTg3ZTYzYmE1Yi8wLzMxMzAzMzJlMzkzMDJlMzYzNjJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDMxMzUzMDMyMzYzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGdaQjANBgkqhkiG
9w0BAQsFAAOCAQEAakaMBOAHcDFnzsYklYtdynUJWAbB9p5ogjg/PezuP4JUlUUu
jzG2EZDPsfqSzGuzTKQoxnavfejZl8+njApSARPfyRMm1C9p4LT9bxADFLQARkRa
wHopU5tHfBaIjqpAdCDRcto41HLtzA5+m41LBHm+5u2X0O/xfhu7LnJOReIdFQ3X
eDEo32gfonuHG7qv42/4Vodq8/wSsr5XaU2UxG6QnLFM+sowlyR1ag/TIkZ7nnOl
dzU7syyVdaC36muCqHBDb+AQd8GZqTl4iyESFCdQpIofBDUIJbEbx6NyTQKdMNtV
P50nms/6R9i/nIJxiu2Se9mK+QMqVwJm5y2QWA==
-----END CERTIFICATE-----
Generated at Mon Oct 20 16:55:19 2025 by rpki-client