Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/134d8277-2910-4075-b937-66f943518e29/0/3130332e3138312e38302e302f32342d3234203d3e20313439373032.roa
File:                     3130332e3138312e38302e302f32342d3234203d3e20313439373032.roa (raw, json)
Hash identifier:          4tLHfUAaxrKkU1/ID8Cs3rzd8UlebdYrCEqhL3fN6eQ=
Subject key identifier:   4A:C5:99:15:9C:37:16:00:3B:73:9E:E2:BF:0D:C7:DD:AC:03:8B:ED
Certificate issuer:       /CN=D7D98B5F7BCA3741F01911488372E855D91DBF9C
Certificate serial:       0DE643534C0289A7055A63219273125332A53170
Authority key identifier: D7:D9:8B:5F:7B:CA:37:41:F0:19:11:48:83:72:E8:55:D9:1D:BF:9C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7D98B5F7BCA3741F01911488372E855D91DBF9C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/134d8277-2910-4075-b937-66f943518e29/0/3130332e3138312e38302e302f32342d3234203d3e20313439373032.roa
Signing time:             Thu 24 Jul 2025 03:00:00 +0000
ROA not before:           Thu 24 Jul 2025 02:55:00 +0000
ROA not after:            Thu 23 Jul 2026 03:00:00 +0000
asID:                     149702
IP address blocks:        103.181.80.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/134d8277-2910-4075-b937-66f943518e29/0/D7D98B5F7BCA3741F01911488372E855D91DBF9C.crl
                          rsync://repo-rpki.idnic.net/repo/134d8277-2910-4075-b937-66f943518e29/0/D7D98B5F7BCA3741F01911488372E855D91DBF9C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7D98B5F7BCA3741F01911488372E855D91DBF9C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 12 Aug 2025 00:43:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:e6:43:53:4c:02:89:a7:05:5a:63:21:92:73:12:53:32:a5:31:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7D98B5F7BCA3741F01911488372E855D91DBF9C
        Validity
            Not Before: Jul 24 02:55:00 2025 GMT
            Not After : Jul 23 03:00:00 2026 GMT
        Subject: CN=4AC599159C3716003B739EE2BF0DC7DDAC038BED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:8f:eb:43:f4:ca:48:0d:06:98:46:b4:33:29:
                    1c:dd:e3:06:bc:52:5b:15:1c:98:12:19:06:f8:83:
                    3a:40:b2:14:99:77:47:f6:03:c3:df:c2:61:63:06:
                    98:9e:c4:27:9b:4d:0a:f2:36:ee:a1:fa:33:8a:cb:
                    5d:d3:a7:81:ea:e4:c4:a8:08:d2:a8:9f:01:c0:e3:
                    e0:ac:b1:3a:c9:25:a6:97:fa:d2:27:eb:3c:ee:ca:
                    fb:f6:73:55:67:c2:73:ff:22:d8:7b:89:b8:c4:fc:
                    de:e6:0d:2d:4b:ca:59:8a:ae:fe:90:87:fd:76:2d:
                    16:99:95:5f:23:47:80:06:1d:b8:12:48:23:93:3f:
                    f3:b9:aa:aa:a4:87:f7:34:1c:a6:80:26:36:22:07:
                    18:b5:aa:b2:f1:44:0c:07:8c:aa:0c:b9:a6:4a:63:
                    1d:27:ab:2f:00:14:cc:8f:53:e3:e1:f1:79:38:84:
                    0c:9a:b3:d4:02:bb:b0:d5:b1:1c:e2:f0:68:f7:6b:
                    27:1d:ee:c3:a2:60:7c:12:8f:93:e6:0d:9f:ed:14:
                    c3:db:bc:e0:f0:61:e6:1d:cf:64:98:9e:58:9f:f9:
                    fd:b3:35:f0:fd:44:0d:85:ed:41:a0:2b:f9:0a:8c:
                    dd:f4:b8:98:47:1a:d3:33:c2:37:7e:0f:c4:8b:2e:
                    4d:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:C5:99:15:9C:37:16:00:3B:73:9E:E2:BF:0D:C7:DD:AC:03:8B:ED
            X509v3 Authority Key Identifier:
                keyid:D7:D9:8B:5F:7B:CA:37:41:F0:19:11:48:83:72:E8:55:D9:1D:BF:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/134d8277-2910-4075-b937-66f943518e29/0/D7D98B5F7BCA3741F01911488372E855D91DBF9C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7D98B5F7BCA3741F01911488372E855D91DBF9C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/134d8277-2910-4075-b937-66f943518e29/0/3130332e3138312e38302e302f32342d3234203d3e20313439373032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.181.80.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:0f:72:10:74:87:81:87:ca:54:38:d1:6e:49:a3:d0:3d:fe:
         98:b1:f6:3f:d9:bb:c7:b5:4b:01:f6:42:67:73:e8:a4:f1:34:
         db:44:88:01:9c:73:de:bb:c6:11:27:ff:73:ae:f2:00:6a:71:
         76:bd:1f:97:86:9f:02:c8:a6:0c:5d:d0:ea:5b:df:d2:fe:fc:
         c1:e9:3a:7c:47:9c:59:60:a3:e3:c2:a3:6a:9f:7c:86:ed:aa:
         b8:a5:24:69:10:e8:30:ea:b1:37:b1:89:d4:bd:52:e1:72:e4:
         fb:51:3b:f6:2b:7f:53:ec:ce:45:d1:d9:ad:5b:7e:6e:df:9c:
         a4:cf:ef:f0:0a:8d:ff:61:ee:82:2b:13:bb:45:44:a3:2a:0b:
         48:fc:2b:b9:f0:ad:6e:28:41:5b:1d:b6:38:05:e6:0a:b0:cc:
         b8:36:34:21:08:8e:0c:23:4d:ef:45:be:3e:5d:98:11:3f:93:
         16:f9:f1:e6:46:4d:c4:f8:22:db:ed:75:bf:c9:51:a3:92:fa:
         70:bd:3f:23:8c:9b:04:d0:0f:5a:f3:1b:3d:c7:2f:5b:d4:48:
         af:59:b3:46:9f:4a:a8:6f:c6:c5:fe:c7:09:eb:c9:aa:0e:9a:
         41:91:b5:a8:53:8f:56:85:1c:43:cf:02:28:21:81:cf:2f:2e:
         6a:01:c0:c8
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUDeZDU0wCiacFWmMhknMSUzKlMXAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDdEOThCNUY3QkNBMzc0MUYwMTkxMTQ4ODM3MkU4NTVE
OTFEQkY5QzAeFw0yNTA3MjQwMjU1MDBaFw0yNjA3MjMwMzAwMDBaMDMxMTAvBgNV
BAMTKDRBQzU5OTE1OUMzNzE2MDAzQjczOUVFMkJGMERDN0REQUMwMzhCRUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwj+tD9MpIDQaYRrQzKRzd4wa8
UlsVHJgSGQb4gzpAshSZd0f2A8PfwmFjBpiexCebTQryNu6h+jOKy13Tp4Hq5MSo
CNKonwHA4+CssTrJJaaX+tIn6zzuyvv2c1VnwnP/Ith7ibjE/N7mDS1LylmKrv6Q
h/12LRaZlV8jR4AGHbgSSCOTP/O5qqqkh/c0HKaAJjYiBxi1qrLxRAwHjKoMuaZK
Yx0nqy8AFMyPU+Ph8Xk4hAyas9QCu7DVsRzi8Gj3aycd7sOiYHwSj5PmDZ/tFMPb
vODwYeYdz2SYnlif+f2zNfD9RA2F7UGgK/kKjN30uJhHGtMzwjd+D8SLLk2JAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUSsWZFZw3FgA7c57ivw3H3awDi+0wHwYDVR0j
BBgwFoAU19mLX3vKN0HwGRFIg3LoVdkdv5wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x
MzRkODI3Ny0yOTEwLTQwNzUtYjkzNy02NmY5NDM1MThlMjkvMC9EN0Q5OEI1RjdC
Q0EzNzQxRjAxOTExNDg4MzcyRTg1NUQ5MURCRjlDLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRDdEOThCNUY3QkNBMzc0MUYwMTkxMTQ4ODM3MkU4NTVEOTFE
QkY5Qy5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzEzNGQ4Mjc3LTI5MTAtNDA3NS1i
OTM3LTY2Zjk0MzUxOGUyOS8wLzMxMzAzMzJlMzEzODMxMmUzODMwMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzNDM5MzczMDMyLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ7VQMA0GCSqG
SIb3DQEBCwUAA4IBAQBVD3IQdIeBh8pUONFuSaPQPf6YsfY/2bvHtUsB9kJnc+ik
8TTbRIgBnHPeu8YRJ/9zrvIAanF2vR+Xhp8CyKYMXdDqW9/S/vzB6Tp8R5xZYKPj
wqNqn3yG7aq4pSRpEOgw6rE3sYnUvVLhcuT7UTv2K39T7M5F0dmtW35u35ykz+/w
Co3/Ye6CKxO7RUSjKgtI/Cu58K1uKEFbHbY4BeYKsMy4NjQhCI4MI03vRb4+XZgR
P5MW+fHmRk3E+CLb7XW/yVGjkvpwvT8jjJsE0A9a8xs9xy9b1EivWbNGn0qob8bF
/scJ68mqDppBkbWoU49WhRxDzwIoIYHPLy5qAcDI
-----END CERTIFICATE-----
Generated at Sun Aug 10 05:34:15 2025 by rpki-client