Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/04fd4bc2-41d4-42e6-a7ff-59493885126a/0/3130332e31342e3131302e302f32332d3234203d3e203536323333.roa
File:                     3130332e31342e3131302e302f32332d3234203d3e203536323333.roa (raw, json)
Hash identifier:          tDRK/Vdz8u2hhC9LdyJ4AT+BwDcg/REr12fUhDIA9Bo=
Subject key identifier:   7B:3C:43:BC:01:01:F6:B1:C7:82:EB:34:F8:DE:08:9F:42:DE:54:33
Certificate issuer:       /CN=DF1CEA0313DA7500D70AE089169B4BBEE54CA859
Certificate serial:       0982D336C27CFAC227E25D89049A57C916BECECA
Authority key identifier: DF:1C:EA:03:13:DA:75:00:D7:0A:E0:89:16:9B:4B:BE:E5:4C:A8:59
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF1CEA0313DA7500D70AE089169B4BBEE54CA859.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/04fd4bc2-41d4-42e6-a7ff-59493885126a/0/3130332e31342e3131302e302f32332d3234203d3e203536323333.roa
Signing time:             Mon 09 Jun 2025 11:00:02 +0000
ROA not before:           Mon 09 Jun 2025 10:55:02 +0000
ROA not after:            Mon 08 Jun 2026 11:00:02 +0000
asID:                     56233
IP address blocks:        103.14.110.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/04fd4bc2-41d4-42e6-a7ff-59493885126a/0/DF1CEA0313DA7500D70AE089169B4BBEE54CA859.crl
                          rsync://repo-rpki.idnic.net/repo/04fd4bc2-41d4-42e6-a7ff-59493885126a/0/DF1CEA0313DA7500D70AE089169B4BBEE54CA859.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF1CEA0313DA7500D70AE089169B4BBEE54CA859.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 17 Jun 2025 12:47:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:82:d3:36:c2:7c:fa:c2:27:e2:5d:89:04:9a:57:c9:16:be:ce:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DF1CEA0313DA7500D70AE089169B4BBEE54CA859
        Validity
            Not Before: Jun  9 10:55:02 2025 GMT
            Not After : Jun  8 11:00:02 2026 GMT
        Subject: CN=7B3C43BC0101F6B1C782EB34F8DE089F42DE5433
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:93:9c:a2:0f:81:ea:20:0d:52:00:08:3e:27:
                    93:a4:ec:6b:3b:19:ac:f4:82:ec:f2:5f:c4:5c:be:
                    19:c0:f0:2c:71:b3:4b:64:df:1e:1b:69:b5:a6:12:
                    55:06:0a:90:62:d5:7b:3e:ef:f8:f9:10:74:00:44:
                    73:f2:d5:38:63:12:68:90:c5:8e:76:de:86:20:5c:
                    7a:06:04:f1:9b:71:39:1d:36:8a:7e:51:9c:9a:dd:
                    1c:47:f5:f4:4c:02:bc:39:15:27:c4:47:b2:15:c2:
                    21:36:54:1c:90:d0:52:4c:1e:af:60:83:e9:f2:ce:
                    28:5c:01:5f:8c:47:a9:bc:14:9f:0e:e4:c4:4a:c0:
                    0a:02:34:a7:9c:0a:e9:e1:c2:25:17:fc:77:83:ec:
                    a4:7a:54:31:d2:f9:a9:1d:de:33:14:70:85:49:70:
                    e2:c1:bf:8e:d3:2e:ea:bb:97:79:88:ee:3c:62:30:
                    41:43:27:56:f9:3d:67:a5:27:23:4b:0f:a7:45:91:
                    ea:49:41:96:ce:26:7a:ac:da:f1:0f:54:13:fc:1c:
                    ea:e6:7b:df:51:ac:54:c9:a6:09:19:7b:6e:f1:af:
                    b2:b8:1a:68:8e:43:0e:00:c1:bc:bb:64:f9:82:8b:
                    b0:2d:d7:1f:42:3f:99:b1:36:1c:00:61:ec:f5:ae:
                    c0:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:3C:43:BC:01:01:F6:B1:C7:82:EB:34:F8:DE:08:9F:42:DE:54:33
            X509v3 Authority Key Identifier:
                keyid:DF:1C:EA:03:13:DA:75:00:D7:0A:E0:89:16:9B:4B:BE:E5:4C:A8:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/04fd4bc2-41d4-42e6-a7ff-59493885126a/0/DF1CEA0313DA7500D70AE089169B4BBEE54CA859.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF1CEA0313DA7500D70AE089169B4BBEE54CA859.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/04fd4bc2-41d4-42e6-a7ff-59493885126a/0/3130332e31342e3131302e302f32332d3234203d3e203536323333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.14.110.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ba:e9:6d:3f:a3:e5:a1:7d:8f:59:3e:21:d2:13:ef:4b:59:9f:
         3e:da:07:19:f9:9d:eb:8e:d4:48:91:e5:b2:a6:bb:b4:50:27:
         d9:20:96:2f:a8:76:de:0f:86:42:57:a0:78:40:ac:78:e8:63:
         ad:de:5c:14:b2:1f:fa:ee:92:2d:73:fe:bc:df:f3:aa:a9:82:
         41:9e:17:64:1a:f3:6d:0d:51:10:8f:56:dd:2f:03:ea:18:b5:
         6e:eb:1e:28:8a:42:e3:a9:b6:f4:b3:36:96:4b:88:ea:4d:0a:
         fa:78:4f:0b:90:30:d0:a4:bd:84:03:27:31:02:d3:8c:5a:70:
         a1:11:62:9f:50:98:05:2e:c4:8e:25:c6:09:e6:3d:25:7d:5b:
         e9:3e:13:ff:45:dd:13:f6:27:23:65:04:3e:c6:cb:57:30:4b:
         87:29:85:e1:67:4c:cf:fe:fb:99:37:12:a7:02:31:26:37:c0:
         eb:af:6b:74:27:95:7d:a4:4c:81:77:9e:23:f0:db:a1:86:77:
         a2:e7:c1:55:c9:54:24:50:bb:af:45:2e:44:ab:2c:27:93:67:
         1f:ae:8a:f1:ef:fd:30:97:4e:57:cf:a2:d8:bc:00:01:97:25:
         6a:7a:7f:50:63:89:cc:d5:dd:c7:00:97:8f:74:4c:e8:58:d3:
         c5:aa:fd:e2
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUCYLTNsJ8+sIn4l2JBJpXyRa+zsowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREYxQ0VBMDMxM0RBNzUwMEQ3MEFFMDg5MTY5QjRCQkVF
NTRDQTg1OTAeFw0yNTA2MDkxMDU1MDJaFw0yNjA2MDgxMTAwMDJaMDMxMTAvBgNV
BAMTKDdCM0M0M0JDMDEwMUY2QjFDNzgyRUIzNEY4REUwODlGNDJERTU0MzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKk5yiD4HqIA1SAAg+J5Ok7Gs7
Gaz0guzyX8RcvhnA8Cxxs0tk3x4babWmElUGCpBi1Xs+7/j5EHQARHPy1ThjEmiQ
xY523oYgXHoGBPGbcTkdNop+UZya3RxH9fRMArw5FSfER7IVwiE2VByQ0FJMHq9g
g+nyzihcAV+MR6m8FJ8O5MRKwAoCNKecCunhwiUX/HeD7KR6VDHS+akd3jMUcIVJ
cOLBv47TLuq7l3mI7jxiMEFDJ1b5PWelJyNLD6dFkepJQZbOJnqs2vEPVBP8HOrm
e99RrFTJpgkZe27xr7K4GmiOQw4Awby7ZPmCi7At1x9CP5mxNhwAYez1rsBdAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUezxDvAEB9rHHgus0+N4In0LeVDMwHwYDVR0j
BBgwFoAU3xzqAxPadQDXCuCJFptLvuVMqFkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w
NGZkNGJjMi00MWQ0LTQyZTYtYTdmZi01OTQ5Mzg4NTEyNmEvMC9ERjFDRUEwMzEz
REE3NTAwRDcwQUUwODkxNjlCNEJCRUU1NENBODU5LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvREYxQ0VBMDMxM0RBNzUwMEQ3MEFFMDg5MTY5QjRCQkVFNTRD
QTg1OS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzA0ZmQ0YmMyLTQxZDQtNDJlNi1h
N2ZmLTU5NDkzODg1MTI2YS8wLzMxMzAzMzJlMzEzNDJlMzEzMTMwMmUzMDJmMzIz
MzJkMzIzNDIwM2QzZTIwMzUzNjMyMzMzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAWcObjANBgkqhkiG
9w0BAQsFAAOCAQEAuultP6PloX2PWT4h0hPvS1mfPtoHGfmd647USJHlsqa7tFAn
2SCWL6h23g+GQlegeECseOhjrd5cFLIf+u6SLXP+vN/zqqmCQZ4XZBrzbQ1REI9W
3S8D6hi1buseKIpC46m29LM2lkuI6k0K+nhPC5Aw0KS9hAMnMQLTjFpwoRFin1CY
BS7EjiXGCeY9JX1b6T4T/0XdE/YnI2UEPsbLVzBLhymF4WdMz/77mTcSpwIxJjfA
669rdCeVfaRMgXeeI/DboYZ3oufBVclUJFC7r0UuRKssJ5NnH66K8e/9MJdOV8+i
2LwAAZclanp/UGOJzNXdxwCXj3RM6FjTxar94g==
-----END CERTIFICATE-----
Generated at Mon Jun 16 05:49:58 2025 by rpki-client