Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e17bd502-42c2-400d-a2ad-d1754365a45d/0/3130332e3130362e3231362e302f32342d3234203d3e20313337333239.roa
File:                     3130332e3130362e3231362e302f32342d3234203d3e20313337333239.roa (raw, json)
Hash identifier:          iXT6UN+/y7TpwDVLtWSqY1anfK2nC6SOVMT2pIsEPoE=
Subject key identifier:   38:05:8F:DD:2D:9B:9E:C6:51:40:F0:F8:DD:73:10:52:C3:06:60:4C
Certificate issuer:       /CN=19093F7761A9E337D03405604750BFD4ADC2121E
Certificate serial:       1231830F155A40757A00E5B96EA2AB4A50870CF6
Authority key identifier: 19:09:3F:77:61:A9:E3:37:D0:34:05:60:47:50:BF:D4:AD:C2:12:1E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19093F7761A9E337D03405604750BFD4ADC2121E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e17bd502-42c2-400d-a2ad-d1754365a45d/0/3130332e3130362e3231362e302f32342d3234203d3e20313337333239.roa
Signing time:             Wed 06 Aug 2025 18:00:02 +0000
ROA not before:           Wed 06 Aug 2025 17:55:02 +0000
ROA not after:            Wed 05 Aug 2026 18:00:02 +0000
asID:                     137329
IP address blocks:        103.106.216.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e17bd502-42c2-400d-a2ad-d1754365a45d/0/19093F7761A9E337D03405604750BFD4ADC2121E.crl
                          rsync://repo-rpki.idnic.net/repo/e17bd502-42c2-400d-a2ad-d1754365a45d/0/19093F7761A9E337D03405604750BFD4ADC2121E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19093F7761A9E337D03405604750BFD4ADC2121E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Aug 2025 20:24:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:31:83:0f:15:5a:40:75:7a:00:e5:b9:6e:a2:ab:4a:50:87:0c:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19093F7761A9E337D03405604750BFD4ADC2121E
        Validity
            Not Before: Aug  6 17:55:02 2025 GMT
            Not After : Aug  5 18:00:02 2026 GMT
        Subject: CN=38058FDD2D9B9EC65140F0F8DD731052C306604C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:34:27:7d:28:49:1e:f3:8f:50:0b:65:2a:7d:
                    72:f5:bf:a5:62:00:01:24:5c:9a:5a:34:b7:37:39:
                    65:4a:12:36:16:11:a9:0f:75:c2:8c:38:fd:96:e4:
                    7f:93:8e:b8:a2:da:0d:ec:0f:ad:4f:b3:21:50:cc:
                    f5:7b:c9:dc:26:07:48:2b:39:49:7d:69:0b:a7:8c:
                    c1:62:4c:40:a4:a5:77:26:44:bb:e8:45:2c:04:2d:
                    d6:8c:df:ec:a5:f3:d3:fd:57:eb:35:6b:c7:24:d8:
                    a1:23:20:c0:d8:5e:73:ad:b6:f0:1c:63:a1:32:e2:
                    0d:95:c7:0d:26:2c:00:23:06:49:a8:2e:3e:d8:88:
                    09:5d:6e:08:8d:5c:0a:c2:a6:91:74:78:90:19:2b:
                    97:47:6f:e6:47:e0:0a:05:8f:79:01:8e:b7:81:67:
                    f7:b4:16:21:f3:41:24:98:b2:c8:c8:88:6f:6a:1e:
                    b3:ae:ad:8f:ba:9d:c0:9c:c7:fa:03:ae:f7:3c:78:
                    cf:c4:46:9d:54:3d:63:31:b5:39:6a:52:90:a3:c1:
                    40:12:c1:44:63:3d:2d:2d:ad:91:48:9a:a9:f1:ae:
                    1c:33:ad:ef:ec:a2:9a:c5:f8:47:aa:1c:ea:c6:54:
                    f9:91:a9:bd:36:67:bd:2c:f1:0e:ff:2d:ce:60:45:
                    22:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:05:8F:DD:2D:9B:9E:C6:51:40:F0:F8:DD:73:10:52:C3:06:60:4C
            X509v3 Authority Key Identifier:
                keyid:19:09:3F:77:61:A9:E3:37:D0:34:05:60:47:50:BF:D4:AD:C2:12:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e17bd502-42c2-400d-a2ad-d1754365a45d/0/19093F7761A9E337D03405604750BFD4ADC2121E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19093F7761A9E337D03405604750BFD4ADC2121E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e17bd502-42c2-400d-a2ad-d1754365a45d/0/3130332e3130362e3231362e302f32342d3234203d3e20313337333239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.106.216.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c7:20:db:40:e2:4f:b6:1c:82:e6:cd:f3:ff:be:68:fa:14:ea:
         cd:8b:24:88:39:21:3c:1b:cc:1c:2f:38:0a:92:78:ff:2b:2f:
         7f:83:6f:d1:3b:a6:7e:83:a2:50:7a:7b:63:10:f1:db:f6:fd:
         f4:d0:40:cb:b5:84:77:6b:d1:92:3c:a4:08:2a:ca:11:36:29:
         9a:42:1e:3e:b9:f0:3f:61:a8:42:7d:d4:fc:02:e8:d9:a4:56:
         da:8a:f3:c2:19:6c:67:1b:8f:2a:46:44:0f:59:e0:05:3b:c7:
         e4:82:70:02:8b:3a:d0:47:5e:c5:23:6f:df:2b:5f:97:91:6a:
         5e:5c:5e:2e:c0:eb:88:3f:32:80:a5:ef:62:89:f2:e5:21:d4:
         d9:c7:91:44:ae:95:f0:89:4a:8c:25:58:3e:2c:3e:3e:9a:56:
         fc:d7:a4:e2:03:ad:f6:d2:cd:8c:b6:9a:ed:b8:4f:e3:50:d0:
         95:4e:91:aa:ee:e1:47:f2:15:6f:6f:0b:0d:90:03:ba:9d:b2:
         5a:4c:8d:4e:04:ee:10:ee:9e:85:62:f7:01:7d:de:95:45:05:
         84:75:c1:83:6c:d9:8a:21:8c:f7:d6:9f:1f:f3:80:e3:7c:95:
         fb:ac:97:15:3a:22:2f:73:06:b4:7b:71:84:f8:a9:3c:14:ba:
         07:d7:de:de
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUEjGDDxVaQHV6AOW5bqKrSlCHDPYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTkwOTNGNzc2MUE5RTMzN0QwMzQwNTYwNDc1MEJGRDRB
REMyMTIxRTAeFw0yNTA4MDYxNzU1MDJaFw0yNjA4MDUxODAwMDJaMDMxMTAvBgNV
BAMTKDM4MDU4RkREMkQ5QjlFQzY1MTQwRjBGOERENzMxMDUyQzMwNjYwNEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDINCd9KEke849QC2UqfXL1v6Vi
AAEkXJpaNLc3OWVKEjYWEakPdcKMOP2W5H+Tjrii2g3sD61PsyFQzPV7ydwmB0gr
OUl9aQunjMFiTECkpXcmRLvoRSwELdaM3+yl89P9V+s1a8ck2KEjIMDYXnOttvAc
Y6Ey4g2Vxw0mLAAjBkmoLj7YiAldbgiNXArCppF0eJAZK5dHb+ZH4AoFj3kBjreB
Z/e0FiHzQSSYssjIiG9qHrOurY+6ncCcx/oDrvc8eM/ERp1UPWMxtTlqUpCjwUAS
wURjPS0trZFImqnxrhwzre/soprF+EeqHOrGVPmRqb02Z70s8Q7/Lc5gRSL9AgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUOAWP3S2bnsZRQPD43XMQUsMGYEwwHwYDVR0j
BBgwFoAUGQk/d2Gp4zfQNAVgR1C/1K3CEh4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l
MTdiZDUwMi00MmMyLTQwMGQtYTJhZC1kMTc1NDM2NWE0NWQvMC8xOTA5M0Y3NzYx
QTlFMzM3RDAzNDA1NjA0NzUwQkZENEFEQzIxMjFFLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMTkwOTNGNzc2MUE5RTMzN0QwMzQwNTYwNDc1MEJGRDRBREMy
MTIxRS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2UxN2JkNTAyLTQyYzItNDAwZC1h
MmFkLWQxNzU0MzY1YTQ1ZC8wLzMxMzAzMzJlMzEzMDM2MmUzMjMxMzYyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzczMzMyMzkucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnatgwDQYJ
KoZIhvcNAQELBQADggEBAMcg20DiT7YcgubN8/++aPoU6s2LJIg5ITwbzBwvOAqS
eP8rL3+Db9E7pn6DolB6e2MQ8dv2/fTQQMu1hHdr0ZI8pAgqyhE2KZpCHj658D9h
qEJ91PwC6NmkVtqK88IZbGcbjypGRA9Z4AU7x+SCcAKLOtBHXsUjb98rX5eRal5c
Xi7A64g/MoCl72KJ8uUh1NnHkUSulfCJSowlWD4sPj6aVvzXpOIDrfbSzYy2mu24
T+NQ0JVOkaru4UfyFW9vCw2QA7qdslpMjU4E7hDunoVi9wF93pVFBYR1wYNs2Yoh
jPfWnx/zgON8lfuslxU6Ii9zBrR7cYT4qTwUugfX3t4=
-----END CERTIFICATE-----
Generated at Sat Aug 23 21:00:28 2025 by rpki-client