Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/3130332e34312e3230342e302f32342d3234203d3e203538333937.roa
File:                     3130332e34312e3230342e302f32342d3234203d3e203538333937.roa (raw, json)
Hash identifier:          28AwtI6PlstTWzWDAVfpiiifxdaL8P6FvCfZnLUiyFM=
Subject key identifier:   08:E6:8F:1A:AE:50:3A:B9:33:8D:51:98:86:A3:B9:95:B9:27:7A:CC
Certificate issuer:       /CN=C69005BB7BA468A10A32CE44E9C4CE78538998AE
Certificate serial:       26CDBE60B7F9C27233B7A3690B33DC7A96D02DE0
Authority key identifier: C6:90:05:BB:7B:A4:68:A1:0A:32:CE:44:E9:C4:CE:78:53:89:98:AE
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C69005BB7BA468A10A32CE44E9C4CE78538998AE.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/3130332e34312e3230342e302f32342d3234203d3e203538333937.roa
Signing time:             Fri 10 Oct 2025 21:00:01 +0000
ROA not before:           Fri 10 Oct 2025 20:55:01 +0000
ROA not after:            Fri 09 Oct 2026 21:00:01 +0000
asID:                     58397
IP address blocks:        103.41.204.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/C69005BB7BA468A10A32CE44E9C4CE78538998AE.crl
                          rsync://repo-rpki.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/C69005BB7BA468A10A32CE44E9C4CE78538998AE.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C69005BB7BA468A10A32CE44E9C4CE78538998AE.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Oct 2025 11:48:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:cd:be:60:b7:f9:c2:72:33:b7:a3:69:0b:33:dc:7a:96:d0:2d:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C69005BB7BA468A10A32CE44E9C4CE78538998AE
        Validity
            Not Before: Oct 10 20:55:01 2025 GMT
            Not After : Oct  9 21:00:01 2026 GMT
        Subject: CN=08E68F1AAE503AB9338D519886A3B995B9277ACC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ee:17:f1:08:36:d8:e3:36:e1:b8:fe:6a:95:
                    34:32:cf:22:17:b1:ec:a2:2b:b1:64:40:74:fa:b7:
                    0c:79:68:b5:80:42:d9:a9:5c:c6:81:51:15:05:59:
                    3f:42:a1:17:72:74:86:cc:71:28:70:46:f0:e4:ff:
                    7f:ac:f0:92:6f:7a:1a:cd:f8:63:2d:86:2b:7a:ff:
                    b6:50:35:27:1d:73:0e:22:0f:71:7c:22:d2:22:ad:
                    c9:9e:65:ad:5a:72:f3:e6:a5:c4:cf:37:7c:8c:f3:
                    cf:b8:79:2e:b8:16:d3:02:95:01:23:c9:de:f6:d3:
                    c4:b6:e9:8b:34:db:1a:f4:6a:d5:c4:b3:12:b9:a4:
                    e9:cb:d8:9c:db:94:ad:ce:53:24:d4:fe:86:dd:00:
                    f7:8c:85:d5:55:e6:56:19:ff:33:40:3d:b2:6c:02:
                    59:64:c9:48:3f:50:1b:7a:7a:38:7b:63:65:bb:43:
                    29:07:c2:fa:b8:ac:01:9b:42:10:f6:63:fc:9a:d7:
                    3e:fc:20:5d:68:d8:37:67:6e:50:a3:87:cd:1a:fa:
                    e8:68:47:08:9c:27:f5:54:15:2c:34:4a:7b:38:69:
                    57:84:2a:09:5a:87:0e:31:a8:b7:6c:73:12:d5:70:
                    dc:4c:b6:46:f4:ba:7a:7d:fc:6b:e3:66:bd:0e:9e:
                    70:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:E6:8F:1A:AE:50:3A:B9:33:8D:51:98:86:A3:B9:95:B9:27:7A:CC
            X509v3 Authority Key Identifier:
                keyid:C6:90:05:BB:7B:A4:68:A1:0A:32:CE:44:E9:C4:CE:78:53:89:98:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/C69005BB7BA468A10A32CE44E9C4CE78538998AE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C69005BB7BA468A10A32CE44E9C4CE78538998AE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/3130332e34312e3230342e302f32342d3234203d3e203538333937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.41.204.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:60:4b:6f:b8:53:28:06:2a:63:ff:b2:90:b8:f4:8c:f6:d7:
         2d:6c:65:5f:91:7c:03:53:b9:04:51:77:b6:3b:d3:7a:30:0b:
         79:a6:af:6c:23:db:a8:c2:2e:09:41:97:a7:39:cd:1a:b3:ad:
         e0:35:92:c6:1b:86:d6:81:be:f6:cc:00:aa:6b:2c:0c:a1:60:
         6c:76:e5:c0:73:58:da:33:74:ff:7c:24:d5:3b:98:e4:93:2d:
         11:36:80:29:1e:d8:88:61:3c:cc:2f:9c:7f:e4:68:dc:28:17:
         bf:e5:82:c2:dc:fe:9a:59:a6:fe:28:ab:53:10:78:34:8b:5b:
         d9:08:10:0f:eb:48:9c:f0:85:4f:f1:a5:6c:aa:ae:dc:e3:e7:
         2b:e0:f1:76:cb:9a:42:b7:43:ba:28:1c:0c:fe:8f:a1:87:8b:
         3b:38:97:c7:65:df:84:12:d1:7b:33:5a:ad:5a:32:5d:74:b8:
         a5:11:e0:dd:63:8e:b3:82:81:9e:fa:41:e5:c5:d0:42:9b:96:
         f2:52:41:9f:ed:56:4c:18:11:93:c6:7f:31:4c:59:15:b3:de:
         a5:d8:42:80:a2:ba:23:56:4e:db:4f:99:91:55:2f:16:6c:b2:
         34:4e:cb:19:96:7a:ec:06:cc:64:60:fa:58:c9:d5:b1:7a:02:
         b4:03:38:a5
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUJs2+YLf5wnIzt6NpCzPcepbQLeAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzY5MDA1QkI3QkE0NjhBMTBBMzJDRTQ0RTlDNENFNzg1
Mzg5OThBRTAeFw0yNTEwMTAyMDU1MDFaFw0yNjEwMDkyMTAwMDFaMDMxMTAvBgNV
BAMTKDA4RTY4RjFBQUU1MDNBQjkzMzhENTE5ODg2QTNCOTk1QjkyNzdBQ0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC87hfxCDbY4zbhuP5qlTQyzyIX
seyiK7FkQHT6twx5aLWAQtmpXMaBURUFWT9CoRdydIbMcShwRvDk/3+s8JJvehrN
+GMthit6/7ZQNScdcw4iD3F8ItIircmeZa1acvPmpcTPN3yM88+4eS64FtMClQEj
yd7208S26Ys02xr0atXEsxK5pOnL2JzblK3OUyTU/obdAPeMhdVV5lYZ/zNAPbJs
AllkyUg/UBt6ejh7Y2W7QykHwvq4rAGbQhD2Y/ya1z78IF1o2DdnblCjh80a+uho
RwicJ/VUFSw0Sns4aVeEKglahw4xqLdscxLVcNxMtkb0unp9/GvjZr0OnnAfAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUCOaPGq5QOrkzjVGYhqO5lbkneswwHwYDVR0j
BBgwFoAUxpAFu3ukaKEKMs5E6cTOeFOJmK4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k
YjhiYTQ1ZS1mNWRhLTQ1ODEtYmZlNS1jMTYxNmMzMGVmYWIvMC9DNjkwMDVCQjdC
QTQ2OEExMEEzMkNFNDRFOUM0Q0U3ODUzODk5OEFFLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQzY5MDA1QkI3QkE0NjhBMTBBMzJDRTQ0RTlDNENFNzg1Mzg5
OThBRS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2RiOGJhNDVlLWY1ZGEtNDU4MS1i
ZmU1LWMxNjE2YzMwZWZhYi8wLzMxMzAzMzJlMzQzMTJlMzIzMDM0MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzUzODMzMzkzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGcpzDANBgkqhkiG
9w0BAQsFAAOCAQEAR2BLb7hTKAYqY/+ykLj0jPbXLWxlX5F8A1O5BFF3tjvTejAL
eaavbCPbqMIuCUGXpznNGrOt4DWSxhuG1oG+9swAqmssDKFgbHblwHNY2jN0/3wk
1TuY5JMtETaAKR7YiGE8zC+cf+Ro3CgXv+WCwtz+mlmm/iirUxB4NItb2QgQD+tI
nPCFT/GlbKqu3OPnK+DxdsuaQrdDuigcDP6PoYeLOziXx2XfhBLRezNarVoyXXS4
pRHg3WOOs4KBnvpB5cXQQpuW8lJBn+1WTBgRk8Z/MUxZFbPepdhCgKK6I1ZO20+Z
kVUvFmyyNE7LGZZ67AbMZGD6WMnVsXoCtAM4pQ==
-----END CERTIFICATE-----
Generated at Tue Oct 21 01:57:52 2025 by rpki-client