Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/1831eeb4-f357-45a7-9265-428b007a0270/0/3130332e3138392e3230372e302f32342d3234203d3e2039333431.roa
File:                     3130332e3138392e3230372e302f32342d3234203d3e2039333431.roa (raw, json)
Hash identifier:          VeN/bGOYLWRy+rz86CsEUNPZS6zxON2N9UHaLIP5nig=
Subject key identifier:   2A:EC:15:96:46:05:D7:3E:52:CD:E5:CD:E5:AD:17:B4:40:D2:D0:66
Certificate issuer:       /CN=69945C3869B3E429D4B0AECEDF9999EA5DAEE429
Certificate serial:       618E787C7263AA35CB701D0A022F099F154BA90E
Authority key identifier: 69:94:5C:38:69:B3:E4:29:D4:B0:AE:CE:DF:99:99:EA:5D:AE:E4:29
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69945C3869B3E429D4B0AECEDF9999EA5DAEE429.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/1831eeb4-f357-45a7-9265-428b007a0270/0/3130332e3138392e3230372e302f32342d3234203d3e2039333431.roa
Signing time:             Wed 02 Apr 2025 07:00:00 +0000
ROA not before:           Wed 02 Apr 2025 06:55:00 +0000
ROA not after:            Wed 01 Apr 2026 07:00:00 +0000
asID:                     9341
IP address blocks:        103.189.207.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/1831eeb4-f357-45a7-9265-428b007a0270/0/69945C3869B3E429D4B0AECEDF9999EA5DAEE429.crl
                          rsync://repo-rpki.idnic.net/repo/1831eeb4-f357-45a7-9265-428b007a0270/0/69945C3869B3E429D4B0AECEDF9999EA5DAEE429.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69945C3869B3E429D4B0AECEDF9999EA5DAEE429.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Apr 2025 13:32:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:8e:78:7c:72:63:aa:35:cb:70:1d:0a:02:2f:09:9f:15:4b:a9:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69945C3869B3E429D4B0AECEDF9999EA5DAEE429
        Validity
            Not Before: Apr  2 06:55:00 2025 GMT
            Not After : Apr  1 07:00:00 2026 GMT
        Subject: CN=2AEC15964605D73E52CDE5CDE5AD17B440D2D066
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:7b:1d:89:9c:eb:7b:f0:d3:b0:a7:69:62:f1:
                    b8:54:d3:36:f9:d7:6e:be:ef:0f:0a:9b:fb:67:a4:
                    ca:11:98:28:61:52:4f:76:8b:61:e7:1a:ea:1f:6e:
                    83:04:c2:ba:11:9d:40:12:54:f8:31:c2:af:bf:ca:
                    8f:c5:c5:8f:e5:26:6b:65:26:c9:6c:f1:8d:32:6a:
                    8b:32:e4:a6:70:6c:ce:24:56:34:08:c7:a9:66:a5:
                    85:89:d6:77:06:bf:a5:e3:fe:3b:8e:87:2a:f6:20:
                    c1:88:cc:49:ea:aa:77:b3:92:69:ba:00:fe:60:35:
                    54:bf:23:2c:b5:5b:e1:79:ce:b2:e2:3e:97:c9:bc:
                    7c:1d:20:b6:06:ac:be:c2:09:04:66:7a:af:9f:83:
                    96:77:f5:24:f2:3d:ec:b1:56:a8:28:33:2d:00:50:
                    00:88:a8:fd:df:1c:60:96:21:5c:04:50:8c:8b:c0:
                    54:18:ae:30:df:d3:df:bc:cd:fd:4b:07:92:9b:63:
                    57:d7:cf:2d:9c:fe:ea:6e:83:82:46:ad:70:99:18:
                    fe:67:e0:63:d4:91:75:08:0e:80:38:88:0a:dc:d2:
                    f1:79:58:92:75:e7:fb:8e:05:26:4a:86:e2:9d:df:
                    3d:e4:c0:d3:61:53:4e:c2:c5:ea:a1:bd:43:fd:63:
                    41:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:EC:15:96:46:05:D7:3E:52:CD:E5:CD:E5:AD:17:B4:40:D2:D0:66
            X509v3 Authority Key Identifier:
                keyid:69:94:5C:38:69:B3:E4:29:D4:B0:AE:CE:DF:99:99:EA:5D:AE:E4:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/1831eeb4-f357-45a7-9265-428b007a0270/0/69945C3869B3E429D4B0AECEDF9999EA5DAEE429.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69945C3869B3E429D4B0AECEDF9999EA5DAEE429.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1831eeb4-f357-45a7-9265-428b007a0270/0/3130332e3138392e3230372e302f32342d3234203d3e2039333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.189.207.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:ef:7d:d1:ae:dd:2d:c3:72:0f:2b:81:f7:41:de:ba:3d:80:
         04:77:41:47:a2:a4:5d:bd:4d:e2:2b:f4:24:ae:b4:d0:55:c2:
         4c:64:b1:34:16:a3:19:c5:c3:68:cc:d3:27:54:b9:1d:dd:8c:
         6f:19:cc:b6:f1:79:7d:4a:c5:76:3a:40:3f:1b:72:5f:42:04:
         f6:f9:1b:53:e1:7c:69:51:4a:d2:e0:28:68:14:c5:80:a7:e8:
         ba:e9:38:ee:e9:bd:7f:44:96:e1:c9:42:92:27:44:11:fb:06:
         0a:ec:a1:00:29:9a:c8:61:0d:b3:d3:74:26:e2:60:9d:c0:9e:
         3d:96:1e:c2:53:87:30:c8:18:a1:50:a0:c8:60:12:0c:bc:5b:
         c9:d3:30:51:19:f4:ff:4a:31:19:df:2e:37:29:bf:d2:1e:e9:
         23:a4:37:18:76:d0:c0:14:26:59:45:ff:a7:57:be:76:8d:d7:
         0e:1b:4f:06:9d:a0:36:21:05:75:a1:89:6a:b0:f3:09:43:a9:
         8e:bd:b4:07:4b:84:c3:72:7d:40:99:45:d4:5f:38:6d:c3:7e:
         fd:da:e5:8c:a9:19:6c:db:46:4d:cc:27:50:d5:bf:0a:4d:32:
         3b:22:a6:f3:e6:db:95:70:48:52:26:62:b0:0a:81:99:9a:78:
         5c:0a:3b:d0
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUYY54fHJjqjXLcB0KAi8JnxVLqQ4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjk5NDVDMzg2OUIzRTQyOUQ0QjBBRUNFREY5OTk5RUE1
REFFRTQyOTAeFw0yNTA0MDIwNjU1MDBaFw0yNjA0MDEwNzAwMDBaMDMxMTAvBgNV
BAMTKDJBRUMxNTk2NDYwNUQ3M0U1MkNERTVDREU1QUQxN0I0NDBEMkQwNjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2ex2JnOt78NOwp2li8bhU0zb5
126+7w8Km/tnpMoRmChhUk92i2HnGuofboMEwroRnUASVPgxwq+/yo/FxY/lJmtl
Jsls8Y0yaosy5KZwbM4kVjQIx6lmpYWJ1ncGv6Xj/juOhyr2IMGIzEnqqnezkmm6
AP5gNVS/Iyy1W+F5zrLiPpfJvHwdILYGrL7CCQRmeq+fg5Z39STyPeyxVqgoMy0A
UACIqP3fHGCWIVwEUIyLwFQYrjDf09+8zf1LB5KbY1fXzy2c/upug4JGrXCZGP5n
4GPUkXUIDoA4iArc0vF5WJJ15/uOBSZKhuKd3z3kwNNhU07CxeqhvUP9Y0FbAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUKuwVlkYF1z5SzeXN5a0XtEDS0GYwHwYDVR0j
BBgwFoAUaZRcOGmz5CnUsK7O35mZ6l2u5CkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x
ODMxZWViNC1mMzU3LTQ1YTctOTI2NS00MjhiMDA3YTAyNzAvMC82OTk0NUMzODY5
QjNFNDI5RDRCMEFFQ0VERjk5OTlFQTVEQUVFNDI5LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNjk5NDVDMzg2OUIzRTQyOUQ0QjBBRUNFREY5OTk5RUE1REFF
RTQyOS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzE4MzFlZWI0LWYzNTctNDVhNy05
MjY1LTQyOGIwMDdhMDI3MC8wLzMxMzAzMzJlMzEzODM5MmUzMjMwMzcyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzOTMzMzQzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGe9zzANBgkqhkiG
9w0BAQsFAAOCAQEATu990a7dLcNyDyuB90Heuj2ABHdBR6KkXb1N4iv0JK600FXC
TGSxNBajGcXDaMzTJ1S5Hd2MbxnMtvF5fUrFdjpAPxtyX0IE9vkbU+F8aVFK0uAo
aBTFgKfouuk47um9f0SW4clCkidEEfsGCuyhACmayGENs9N0JuJgncCePZYewlOH
MMgYoVCgyGASDLxbydMwURn0/0oxGd8uNym/0h7pI6Q3GHbQwBQmWUX/p1e+do3X
DhtPBp2gNiEFdaGJarDzCUOpjr20B0uEw3J9QJlF1F84bcN+/drljKkZbNtGTcwn
UNW/Ck0yOyKm8+bblXBIUiZisAqBmZp4XAo70A==
-----END CERTIFICATE-----
Generated at Sat Apr 26 15:01:14 2025 by rpki-client