Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/3130332e332e3231332e302f32342d3234203d3e203338313439.roa
File:                     3130332e332e3231332e302f32342d3234203d3e203338313439.roa (raw, json)
Hash identifier:          f7FOJnMyBZ4XNlHdy991ZxwGJQehkmOcfk+LL3+U5Fs=
Subject key identifier:   EF:F7:74:E9:42:4C:F9:85:88:9D:6A:B9:05:40:D5:8D:61:C2:B3:25
Certificate issuer:       /CN=5058CBC5AF21280546887DEF6CFA4341A8F99150
Certificate serial:       4837345A6B02349C22AD9EC6AFD1656A176B6949
Authority key identifier: 50:58:CB:C5:AF:21:28:05:46:88:7D:EF:6C:FA:43:41:A8:F9:91:50
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5058CBC5AF21280546887DEF6CFA4341A8F99150.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/3130332e332e3231332e302f32342d3234203d3e203338313439.roa
Signing time:             Tue 19 Aug 2025 01:00:01 +0000
ROA not before:           Tue 19 Aug 2025 00:55:01 +0000
ROA not after:            Tue 18 Aug 2026 01:00:01 +0000
asID:                     38149
IP address blocks:        103.3.213.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/5058CBC5AF21280546887DEF6CFA4341A8F99150.crl
                          rsync://repo-rpki.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/5058CBC5AF21280546887DEF6CFA4341A8F99150.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5058CBC5AF21280546887DEF6CFA4341A8F99150.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Aug 2025 06:13:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:37:34:5a:6b:02:34:9c:22:ad:9e:c6:af:d1:65:6a:17:6b:69:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5058CBC5AF21280546887DEF6CFA4341A8F99150
        Validity
            Not Before: Aug 19 00:55:01 2025 GMT
            Not After : Aug 18 01:00:01 2026 GMT
        Subject: CN=EFF774E9424CF985889D6AB90540D58D61C2B325
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:bd:45:1b:6f:66:32:f7:07:6e:e2:85:c1:30:
                    59:1e:73:53:c0:18:c8:d5:93:d1:67:7a:0d:49:ba:
                    08:e7:95:df:bd:99:4d:6b:e9:fe:aa:5a:00:48:ba:
                    64:e9:98:87:e7:e9:12:41:e3:2b:b3:2e:c2:5a:09:
                    3e:1a:fa:f0:2a:b4:5f:76:ef:79:8b:80:81:c1:dc:
                    0e:61:77:c8:6c:cf:2e:91:9b:df:27:34:d5:a8:30:
                    f4:1b:9e:0c:e4:6f:df:15:c1:81:b4:18:b4:3f:89:
                    e1:de:a4:0d:a0:13:dc:fb:f3:e6:f7:79:5a:f9:8c:
                    7e:97:94:ad:05:7e:86:1d:5b:84:1a:90:e4:d2:7a:
                    75:24:d0:45:b7:74:84:a9:66:4b:24:f5:c0:29:95:
                    b9:c1:40:10:0a:c3:60:ec:9c:78:15:0b:31:94:6a:
                    59:1a:36:7f:bf:11:42:96:4c:86:ca:64:3c:86:99:
                    8d:9d:60:6d:74:8d:fe:a9:b1:d4:5f:49:0d:f1:6d:
                    1a:ab:bd:03:10:5a:54:86:40:5e:98:b0:63:22:35:
                    ab:7d:55:87:ca:24:89:11:ab:29:50:32:1f:c3:81:
                    d3:71:70:d1:46:fb:6b:88:9a:e9:f9:46:f4:2d:40:
                    d4:8d:05:23:04:e2:83:1a:a8:92:c2:0d:ef:e0:f9:
                    dd:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:F7:74:E9:42:4C:F9:85:88:9D:6A:B9:05:40:D5:8D:61:C2:B3:25
            X509v3 Authority Key Identifier:
                keyid:50:58:CB:C5:AF:21:28:05:46:88:7D:EF:6C:FA:43:41:A8:F9:91:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/5058CBC5AF21280546887DEF6CFA4341A8F99150.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5058CBC5AF21280546887DEF6CFA4341A8F99150.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/3130332e332e3231332e302f32342d3234203d3e203338313439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.3.213.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:34:97:70:1c:08:64:72:fb:cf:e1:30:dc:7b:d7:d4:8c:25:
         0d:71:c2:c5:fd:ee:b6:13:77:29:1d:93:91:73:9d:39:7b:c7:
         1b:22:71:7e:13:98:31:04:bf:e0:a5:58:b5:2d:5a:4a:83:8d:
         18:f5:57:1e:86:3c:4f:76:8e:8a:d3:1d:5e:0c:67:88:d9:26:
         73:a1:16:c0:65:3c:4a:90:63:35:24:e8:26:c2:ec:23:42:72:
         43:32:01:d2:5e:ab:56:1b:38:e5:7c:5f:47:c0:26:b7:5f:5b:
         5a:82:72:2f:b9:97:4d:70:07:06:a6:8b:13:08:73:6d:06:a8:
         d7:11:5a:7b:a2:46:41:5a:2e:5c:d9:2f:e0:85:b2:e1:1b:f5:
         f4:e4:54:c9:31:da:af:50:79:2d:2b:16:e6:d0:57:3c:25:61:
         74:58:0f:1b:cd:cb:e0:7f:8d:a0:32:90:b4:4d:e7:4e:2c:ad:
         4c:2b:43:6d:fc:90:9c:0f:6f:d9:d3:f8:e7:33:d4:f8:c7:44:
         46:03:a7:b2:9a:bd:d1:fe:84:f8:11:05:7c:c8:70:52:e9:75:
         3f:24:56:50:bc:c5:94:09:ef:ef:c5:7d:cb:d4:3c:19:aa:3a:
         b4:e0:16:57:cd:81:18:d8:19:63:df:87:bb:98:9f:61:48:81:
         0b:4f:02:40
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUSDc0WmsCNJwirZ7Gr9FlahdraUkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTA1OENCQzVBRjIxMjgwNTQ2ODg3REVGNkNGQTQzNDFB
OEY5OTE1MDAeFw0yNTA4MTkwMDU1MDFaFw0yNjA4MTgwMTAwMDFaMDMxMTAvBgNV
BAMTKEVGRjc3NEU5NDI0Q0Y5ODU4ODlENkFCOTA1NDBENThENjFDMkIzMjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMvUUbb2Yy9wdu4oXBMFkec1PA
GMjVk9Fneg1Jugjnld+9mU1r6f6qWgBIumTpmIfn6RJB4yuzLsJaCT4a+vAqtF92
73mLgIHB3A5hd8hszy6Rm98nNNWoMPQbngzkb98VwYG0GLQ/ieHepA2gE9z78+b3
eVr5jH6XlK0FfoYdW4QakOTSenUk0EW3dISpZksk9cAplbnBQBAKw2DsnHgVCzGU
alkaNn+/EUKWTIbKZDyGmY2dYG10jf6psdRfSQ3xbRqrvQMQWlSGQF6YsGMiNat9
VYfKJIkRqylQMh/DgdNxcNFG+2uImun5RvQtQNSNBSME4oMaqJLCDe/g+d1LAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQU7/d06UJM+YWInWq5BUDVjWHCsyUwHwYDVR0j
BBgwFoAUUFjLxa8hKAVGiH3vbPpDQaj5kVAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k
OGUzYjM5Yy1kYTExLTQ1ZWUtYWFiMy01Y2IxNGVjNDQ3MGMvMC81MDU4Q0JDNUFG
MjEyODA1NDY4ODdERUY2Q0ZBNDM0MUE4Rjk5MTUwLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNTA1OENCQzVBRjIxMjgwNTQ2ODg3REVGNkNGQTQzNDFBOEY5
OTE1MC5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Q4ZTNiMzljLWRhMTEtNDVlZS1h
YWIzLTVjYjE0ZWM0NDcwYy8wLzMxMzAzMzJlMzMyZTMyMzEzMzJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDMzMzgzMTM0Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnA9UwDQYJKoZIhvcN
AQELBQADggEBABg0l3AcCGRy+8/hMNx719SMJQ1xwsX97rYTdykdk5FznTl7xxsi
cX4TmDEEv+ClWLUtWkqDjRj1Vx6GPE92jorTHV4MZ4jZJnOhFsBlPEqQYzUk6CbC
7CNCckMyAdJeq1YbOOV8X0fAJrdfW1qCci+5l01wBwamixMIc20GqNcRWnuiRkFa
LlzZL+CFsuEb9fTkVMkx2q9QeS0rFubQVzwlYXRYDxvNy+B/jaAykLRN504srUwr
Q238kJwPb9nT+Ocz1PjHREYDp7KavdH+hPgRBXzIcFLpdT8kVlC8xZQJ7+/FfcvU
PBmqOrTgFlfNgRjYGWPfh7uYn2FIgQtPAkA=
-----END CERTIFICATE-----
Generated at Sun Aug 24 07:34:34 2025 by rpki-client