Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/3130332e3133352e37342e302f32342d3234203d3e203436303236.roa
File:                     3130332e3133352e37342e302f32342d3234203d3e203436303236.roa (raw, json)
Hash identifier:          qZ2majG5cGcPiPcNAPu4jGy/H5NlD9ILAfwhNapK3KI=
Subject key identifier:   36:90:06:81:78:85:DF:A8:05:E6:9D:0A:CB:44:12:09:46:B4:91:C1
Certificate issuer:       /CN=F8C19A8F8CB0DDC85D1C8E55638FB43584903E17
Certificate serial:       29AB44011038CBB1F4854FEB583BE35AF1344F92
Authority key identifier: F8:C1:9A:8F:8C:B0:DD:C8:5D:1C:8E:55:63:8F:B4:35:84:90:3E:17
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/3130332e3133352e37342e302f32342d3234203d3e203436303236.roa
Signing time:             Mon 02 Jun 2025 01:02:36 +0000
ROA not before:           Mon 02 Jun 2025 00:57:36 +0000
ROA not after:            Mon 01 Jun 2026 01:02:36 +0000
asID:                     46026
IP address blocks:        103.135.74.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.crl
                          rsync://repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 18 Jun 2025 16:29:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:ab:44:01:10:38:cb:b1:f4:85:4f:eb:58:3b:e3:5a:f1:34:4f:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F8C19A8F8CB0DDC85D1C8E55638FB43584903E17
        Validity
            Not Before: Jun  2 00:57:36 2025 GMT
            Not After : Jun  1 01:02:36 2026 GMT
        Subject: CN=369006817885DFA805E69D0ACB44120946B491C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:48:51:76:ba:82:59:db:d7:c4:36:5d:ac:d8:
                    62:b2:98:cd:38:3e:f4:6c:be:81:28:14:17:d0:4f:
                    8d:ea:3f:17:18:44:a4:ad:cf:50:5e:5d:d9:96:93:
                    39:a0:02:52:e1:07:c8:10:27:c0:7f:ce:71:99:b8:
                    de:2f:57:66:b3:e2:4e:58:2f:b3:4b:61:7d:df:33:
                    ea:f0:82:86:90:d4:e7:9c:3e:4c:3f:f2:c7:31:d1:
                    86:b2:25:a6:1a:8c:11:4a:51:2d:ef:c1:36:6b:62:
                    d3:61:d5:c0:48:2a:8a:34:3a:c6:fa:2a:4f:d9:37:
                    a7:c4:0b:86:f7:e7:6a:5b:26:5e:79:e9:58:5b:23:
                    f0:57:71:82:88:bf:c7:b5:74:a7:62:8e:bd:b8:ca:
                    14:3c:ce:98:03:51:fb:30:e5:a8:02:c7:a3:6b:27:
                    bf:aa:42:eb:32:5c:67:19:e6:db:29:5e:e2:74:42:
                    2a:20:32:ec:4f:f2:a8:18:8a:4c:32:ad:67:ee:90:
                    8a:f9:aa:be:44:c3:ff:9f:4a:04:50:21:e5:63:f6:
                    44:3a:fc:51:1b:db:e6:1d:4d:a1:4b:66:02:0b:4d:
                    55:19:e4:5b:6c:0b:b3:bd:d6:cd:67:17:c7:53:f2:
                    42:cc:fa:41:30:66:7a:36:8e:19:30:0b:e2:fb:ce:
                    4b:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:90:06:81:78:85:DF:A8:05:E6:9D:0A:CB:44:12:09:46:B4:91:C1
            X509v3 Authority Key Identifier:
                keyid:F8:C1:9A:8F:8C:B0:DD:C8:5D:1C:8E:55:63:8F:B4:35:84:90:3E:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/3130332e3133352e37342e302f32342d3234203d3e203436303236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.135.74.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:49:c7:c3:37:ee:08:f6:75:dd:69:b1:7d:e9:9c:11:16:a6:
         61:41:da:3d:7b:ed:48:b4:bd:74:c5:67:10:94:1d:f1:e0:6a:
         6f:74:eb:e3:df:62:57:8c:f6:63:93:9e:9c:63:c9:f4:7a:73:
         e7:35:e4:fd:df:40:ff:72:8f:68:fe:77:cf:6c:cc:1d:f0:b7:
         b8:c6:43:e3:05:fa:3a:74:d7:38:8e:d2:7a:cf:34:96:2c:af:
         14:25:51:5a:42:96:c8:7d:84:d4:cb:a2:59:23:c2:fc:ae:06:
         6e:37:76:f1:41:bf:b3:0b:35:81:05:a0:90:d7:9b:1e:fe:fc:
         48:06:8b:e4:79:7d:e7:af:ff:ce:63:72:2a:75:b8:fc:78:71:
         2e:26:15:54:12:21:ce:58:4a:3a:fe:df:9e:a1:d7:c9:84:19:
         dd:e3:3b:23:45:03:50:e1:a1:8f:0c:38:ec:48:89:11:25:43:
         0c:bc:c5:b0:7e:a2:11:9b:f6:98:d7:bb:eb:8a:68:00:d5:c2:
         08:5e:d2:40:f8:1e:f5:ce:77:dc:17:c3:0c:48:84:bb:47:c3:
         32:f4:11:d0:ca:70:71:27:dd:2d:1f:ca:bd:e6:27:5d:fe:d9:
         eb:f4:bd:b9:26:6c:cb:8f:b8:25:c3:ee:c2:9d:62:e5:eb:69:
         9b:33:61:78
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUKatEARA4y7H0hU/rWDvjWvE0T5IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjhDMTlBOEY4Q0IwRERDODVEMUM4RTU1NjM4RkI0MzU4
NDkwM0UxNzAeFw0yNTA2MDIwMDU3MzZaFw0yNjA2MDEwMTAyMzZaMDMxMTAvBgNV
BAMTKDM2OTAwNjgxNzg4NURGQTgwNUU2OUQwQUNCNDQxMjA5NDZCNDkxQzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoSFF2uoJZ29fENl2s2GKymM04
PvRsvoEoFBfQT43qPxcYRKStz1BeXdmWkzmgAlLhB8gQJ8B/znGZuN4vV2az4k5Y
L7NLYX3fM+rwgoaQ1OecPkw/8scx0YayJaYajBFKUS3vwTZrYtNh1cBIKoo0Osb6
Kk/ZN6fEC4b352pbJl556VhbI/BXcYKIv8e1dKdijr24yhQ8zpgDUfsw5agCx6Nr
J7+qQusyXGcZ5tspXuJ0QiogMuxP8qgYikwyrWfukIr5qr5Ew/+fSgRQIeVj9kQ6
/FEb2+YdTaFLZgILTVUZ5FtsC7O91s1nF8dT8kLM+kEwZno2jhkwC+L7zktPAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUNpAGgXiF36gF5p0Ky0QSCUa0kcEwHwYDVR0j
BBgwFoAU+MGaj4yw3chdHI5VY4+0NYSQPhcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x
ZmY0ZWJjZC0yOWNmLTRlZWMtYTkyYS1kMTEzNmY1Zjk5MzYvMC9GOEMxOUE4RjhD
QjBEREM4NUQxQzhFNTU2MzhGQjQzNTg0OTAzRTE3LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRjhDMTlBOEY4Q0IwRERDODVEMUM4RTU1NjM4RkI0MzU4NDkw
M0UxNy5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzFmZjRlYmNkLTI5Y2YtNGVlYy1h
OTJhLWQxMTM2ZjVmOTkzNi8wLzMxMzAzMzJlMzEzMzM1MmUzNzM0MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzQzNjMwMzIzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGeHSjANBgkqhkiG
9w0BAQsFAAOCAQEARknHwzfuCPZ13WmxfemcERamYUHaPXvtSLS9dMVnEJQd8eBq
b3Tr499iV4z2Y5OenGPJ9Hpz5zXk/d9A/3KPaP53z2zMHfC3uMZD4wX6OnTXOI7S
es80liyvFCVRWkKWyH2E1MuiWSPC/K4Gbjd28UG/sws1gQWgkNebHv78SAaL5Hl9
56//zmNyKnW4/HhxLiYVVBIhzlhKOv7fnqHXyYQZ3eM7I0UDUOGhjww47EiJESVD
DLzFsH6iEZv2mNe764poANXCCF7SQPge9c533BfDDEiEu0fDMvQR0MpwcSfdLR/K
veYnXf7Z6/S9uSZsy4+4JcPuwp1i5etpmzNheA==
-----END CERTIFICATE-----
Generated at Mon Jun 16 12:31:52 2025 by rpki-client