Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/10e88774-844f-4616-8bd0-dc313928730c/0/3130332e38352e3131362e302f32332d3234203d3e203633383734.roa
File:                     3130332e38352e3131362e302f32332d3234203d3e203633383734.roa (raw, json)
Hash identifier:          2xWbB4/mYqrmplHY/8MyqkPKEZcXvKjkESzZID4DGlk=
Subject key identifier:   27:78:1C:96:7D:AD:E4:AE:7C:AD:53:62:DF:51:41:62:57:EF:24:0E
Certificate issuer:       /CN=A551C9C9991E20FF99C2A748CB7665B2DE0D2F0C
Certificate serial:       5C58BEFF5D93BE9B7504591832EF26E9D132E377
Authority key identifier: A5:51:C9:C9:99:1E:20:FF:99:C2:A7:48:CB:76:65:B2:DE:0D:2F:0C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A551C9C9991E20FF99C2A748CB7665B2DE0D2F0C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/10e88774-844f-4616-8bd0-dc313928730c/0/3130332e38352e3131362e302f32332d3234203d3e203633383734.roa
Signing time:             Thu 03 Jul 2025 06:00:00 +0000
ROA not before:           Thu 03 Jul 2025 05:55:00 +0000
ROA not after:            Thu 02 Jul 2026 06:00:00 +0000
asID:                     63874
IP address blocks:        103.85.116.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/10e88774-844f-4616-8bd0-dc313928730c/0/A551C9C9991E20FF99C2A748CB7665B2DE0D2F0C.crl
                          rsync://repo-rpki.idnic.net/repo/10e88774-844f-4616-8bd0-dc313928730c/0/A551C9C9991E20FF99C2A748CB7665B2DE0D2F0C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A551C9C9991E20FF99C2A748CB7665B2DE0D2F0C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 11 Aug 2025 18:49:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:58:be:ff:5d:93:be:9b:75:04:59:18:32:ef:26:e9:d1:32:e3:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A551C9C9991E20FF99C2A748CB7665B2DE0D2F0C
        Validity
            Not Before: Jul  3 05:55:00 2025 GMT
            Not After : Jul  2 06:00:00 2026 GMT
        Subject: CN=27781C967DADE4AE7CAD5362DF51416257EF240E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:63:5a:e6:55:2b:3a:75:a0:45:9d:f3:d9:f4:
                    5b:b0:39:b6:61:d1:c7:4f:0e:ab:72:44:94:86:cf:
                    05:81:8b:be:9a:26:c6:dd:44:e8:0b:20:35:a6:70:
                    45:ea:4d:b0:22:7f:6e:68:ca:90:85:62:27:52:b5:
                    15:fc:40:78:f3:fa:5b:e6:de:d8:85:62:33:48:89:
                    46:fd:16:1c:21:06:6c:9d:8c:5f:17:74:8b:86:22:
                    1b:3f:93:ac:11:ee:cf:59:b1:46:77:cc:52:18:9f:
                    91:b6:f6:42:90:03:27:0a:f9:52:87:6f:f9:9d:b0:
                    99:2c:c6:98:0b:6f:ea:d3:4e:ee:bd:d5:65:a2:4d:
                    76:d8:40:8c:d4:d5:0e:e6:3d:cb:d4:72:b5:43:54:
                    03:a8:4a:5c:b7:6b:a0:5e:03:a4:72:7c:a6:bd:92:
                    c6:1b:d9:f0:6c:b7:63:5c:24:41:03:04:65:4f:a0:
                    e4:82:32:f9:80:17:e7:f9:a2:24:e0:55:2a:a0:89:
                    f1:37:9f:62:bf:76:ce:d6:47:80:b0:bf:58:d6:e0:
                    2a:38:3a:a5:b7:4d:f6:20:54:d1:9f:71:06:d4:04:
                    f7:5a:9f:ee:02:3c:85:1c:00:ae:20:f7:25:9b:f3:
                    43:82:c8:60:15:3b:bf:c4:56:c1:e4:4b:95:aa:25:
                    6e:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:78:1C:96:7D:AD:E4:AE:7C:AD:53:62:DF:51:41:62:57:EF:24:0E
            X509v3 Authority Key Identifier:
                keyid:A5:51:C9:C9:99:1E:20:FF:99:C2:A7:48:CB:76:65:B2:DE:0D:2F:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/10e88774-844f-4616-8bd0-dc313928730c/0/A551C9C9991E20FF99C2A748CB7665B2DE0D2F0C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A551C9C9991E20FF99C2A748CB7665B2DE0D2F0C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/10e88774-844f-4616-8bd0-dc313928730c/0/3130332e38352e3131362e302f32332d3234203d3e203633383734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.85.116.0/23

    Signature Algorithm: sha256WithRSAEncryption
         e4:a9:26:e1:91:d9:28:94:36:d2:16:6a:e9:f9:36:b0:54:a6:
         f5:aa:60:fc:3f:de:16:fa:e8:63:83:6f:2b:8d:0b:d2:5f:a6:
         1a:93:5a:84:b3:95:e8:8c:b8:20:21:e6:f4:11:dd:0d:84:8c:
         d2:eb:a3:07:24:7c:c9:ca:68:88:cd:12:8f:60:62:98:26:41:
         8d:08:bf:f2:48:d0:db:38:ad:a7:67:3c:ab:fc:99:19:ae:b2:
         08:11:31:bc:46:57:81:d8:37:bb:b2:02:1e:48:b0:9d:a6:07:
         cf:90:cd:ad:0c:f2:a5:7d:b6:fa:60:53:1e:a8:96:62:2c:b0:
         0b:79:f3:02:6b:6c:45:93:41:92:8f:25:65:f3:cc:f6:89:da:
         0e:41:64:88:12:40:67:d2:bf:a3:15:a4:0f:51:36:86:df:39:
         c0:5f:59:2b:df:08:e2:42:d9:5d:45:ad:e7:53:cf:6b:e6:4d:
         07:a6:b0:0f:1d:78:c0:b2:6f:de:57:e3:8e:6c:9c:35:a0:7d:
         d3:c4:31:46:aa:d6:06:1e:49:fa:7a:73:48:6e:68:0c:17:76:
         ef:d2:e4:b7:92:7e:ee:b2:30:23:dc:7d:5b:85:17:b0:06:0a:
         70:03:a9:cb:b3:b8:43:77:50:52:08:db:98:fb:b4:9b:35:da:
         f5:d9:fc:3d
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUXFi+/12Tvpt1BFkYMu8m6dEy43cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTU1MUM5Qzk5OTFFMjBGRjk5QzJBNzQ4Q0I3NjY1QjJE
RTBEMkYwQzAeFw0yNTA3MDMwNTU1MDBaFw0yNjA3MDIwNjAwMDBaMDMxMTAvBgNV
BAMTKDI3NzgxQzk2N0RBREU0QUU3Q0FENTM2MkRGNTE0MTYyNTdFRjI0MEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnY1rmVSs6daBFnfPZ9FuwObZh
0cdPDqtyRJSGzwWBi76aJsbdROgLIDWmcEXqTbAif25oypCFYidStRX8QHjz+lvm
3tiFYjNIiUb9FhwhBmydjF8XdIuGIhs/k6wR7s9ZsUZ3zFIYn5G29kKQAycK+VKH
b/mdsJksxpgLb+rTTu691WWiTXbYQIzU1Q7mPcvUcrVDVAOoSly3a6BeA6RyfKa9
ksYb2fBst2NcJEEDBGVPoOSCMvmAF+f5oiTgVSqgifE3n2K/ds7WR4Cwv1jW4Co4
OqW3TfYgVNGfcQbUBPdan+4CPIUcAK4g9yWb80OCyGAVO7/EVsHkS5WqJW53AgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUJ3gcln2t5K58rVNi31FBYlfvJA4wHwYDVR0j
BBgwFoAUpVHJyZkeIP+ZwqdIy3Zlst4NLwwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x
MGU4ODc3NC04NDRmLTQ2MTYtOGJkMC1kYzMxMzkyODczMGMvMC9BNTUxQzlDOTk5
MUUyMEZGOTlDMkE3NDhDQjc2NjVCMkRFMEQyRjBDLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQTU1MUM5Qzk5OTFFMjBGRjk5QzJBNzQ4Q0I3NjY1QjJERTBE
MkYwQy5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzEwZTg4Nzc0LTg0NGYtNDYxNi04
YmQwLWRjMzEzOTI4NzMwYy8wLzMxMzAzMzJlMzgzNTJlMzEzMTM2MmUzMDJmMzIz
MzJkMzIzNDIwM2QzZTIwMzYzMzM4MzczNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAWdVdDANBgkqhkiG
9w0BAQsFAAOCAQEA5Kkm4ZHZKJQ20hZq6fk2sFSm9apg/D/eFvroY4NvK40L0l+m
GpNahLOV6Iy4ICHm9BHdDYSM0uujByR8ycpoiM0Sj2BimCZBjQi/8kjQ2zitp2c8
q/yZGa6yCBExvEZXgdg3u7ICHkiwnaYHz5DNrQzypX22+mBTHqiWYiywC3nzAmts
RZNBko8lZfPM9onaDkFkiBJAZ9K/oxWkD1E2ht85wF9ZK98I4kLZXUWt51PPa+ZN
B6awDx14wLJv3lfjjmycNaB908QxRqrWBh5J+npzSG5oDBd279Lkt5J+7rIwI9x9
W4UXsAYKcAOpy7O4Q3dQUgjbmPu0mzXa9dn8PQ==
-----END CERTIFICATE-----
Generated at Sun Aug 10 05:38:47 2025 by rpki-client