Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/2271806c-43d0-4646-8c8d-61117c2341a0/0/3130332e3138342e3138332e302f32342d3234203d3e20313439393631.roa
File:                     3130332e3138342e3138332e302f32342d3234203d3e20313439393631.roa (raw, json)
Hash identifier:          XOCdIAMKDMLBpRxTU+JgAZ5zHO8OEenWLT9fS6FfdlU=
Subject key identifier:   95:2A:E3:9F:8A:0B:44:33:FB:3E:22:83:66:56:93:0F:15:44:1D:6D
Certificate issuer:       /CN=619EF55758C22775EDCEBA183A59715E1452FD8B
Certificate serial:       5480917A3F56B2C90C67C5B290200401006DEB0E
Authority key identifier: 61:9E:F5:57:58:C2:27:75:ED:CE:BA:18:3A:59:71:5E:14:52:FD:8B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/619EF55758C22775EDCEBA183A59715E1452FD8B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2271806c-43d0-4646-8c8d-61117c2341a0/0/3130332e3138342e3138332e302f32342d3234203d3e20313439393631.roa
Signing time:             Thu 31 Jul 2025 05:03:09 +0000
ROA not before:           Thu 31 Jul 2025 04:58:09 +0000
ROA not after:            Thu 30 Jul 2026 05:03:09 +0000
asID:                     149961
IP address blocks:        103.184.183.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/2271806c-43d0-4646-8c8d-61117c2341a0/0/619EF55758C22775EDCEBA183A59715E1452FD8B.crl
                          rsync://repo-rpki.idnic.net/repo/2271806c-43d0-4646-8c8d-61117c2341a0/0/619EF55758C22775EDCEBA183A59715E1452FD8B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/619EF55758C22775EDCEBA183A59715E1452FD8B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 12 Aug 2025 07:37:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:80:91:7a:3f:56:b2:c9:0c:67:c5:b2:90:20:04:01:00:6d:eb:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=619EF55758C22775EDCEBA183A59715E1452FD8B
        Validity
            Not Before: Jul 31 04:58:09 2025 GMT
            Not After : Jul 30 05:03:09 2026 GMT
        Subject: CN=952AE39F8A0B4433FB3E22836656930F15441D6D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:85:14:a7:65:c1:0c:b6:0c:bc:bb:92:a5:9e:
                    28:75:81:20:72:20:9a:ed:fc:c2:ed:67:6c:a2:2f:
                    83:e4:f7:32:96:5b:b5:cd:74:92:6e:ce:02:52:b2:
                    3e:a0:91:14:0c:43:28:b3:d9:ea:14:82:85:a0:60:
                    3f:99:4a:4d:4d:34:f7:16:5a:0b:28:21:92:31:a7:
                    c9:8b:8a:01:ac:18:a5:ff:20:12:cd:cf:d1:99:98:
                    a5:34:49:32:dc:bd:0d:5f:5c:06:bc:9e:2e:02:f0:
                    ff:5a:df:5e:b0:68:fe:0e:e8:eb:d2:0b:46:97:51:
                    5e:09:1c:11:80:ca:3b:79:fc:c3:26:c4:54:0a:93:
                    ef:0e:50:4a:e0:06:3f:08:4e:e5:15:76:da:3b:05:
                    98:77:65:b9:9b:fd:90:5e:39:e7:32:93:e6:6b:8e:
                    88:68:c1:00:6c:6a:95:ad:8d:51:2c:30:01:a9:71:
                    01:94:29:61:86:50:24:0f:76:0f:34:61:9b:5c:ec:
                    20:29:e2:ab:03:53:00:20:6a:4f:2e:62:c9:0f:04:
                    1e:22:be:63:e6:32:dc:14:b0:df:1f:37:28:57:cc:
                    a9:88:03:4b:29:b6:0e:b2:d9:df:aa:e8:42:6d:a6:
                    77:7f:6e:1f:9d:19:5b:d9:28:6c:87:f4:fe:a1:db:
                    f7:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:2A:E3:9F:8A:0B:44:33:FB:3E:22:83:66:56:93:0F:15:44:1D:6D
            X509v3 Authority Key Identifier:
                keyid:61:9E:F5:57:58:C2:27:75:ED:CE:BA:18:3A:59:71:5E:14:52:FD:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2271806c-43d0-4646-8c8d-61117c2341a0/0/619EF55758C22775EDCEBA183A59715E1452FD8B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/619EF55758C22775EDCEBA183A59715E1452FD8B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2271806c-43d0-4646-8c8d-61117c2341a0/0/3130332e3138342e3138332e302f32342d3234203d3e20313439393631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.184.183.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:f7:10:7e:6e:5f:b6:66:2f:ec:ef:83:62:06:34:99:ab:73:
         00:86:b5:02:89:85:80:ea:55:4b:ea:39:1a:10:4c:a3:91:30:
         8c:c6:10:3d:3a:80:f0:d8:22:0c:e2:3b:53:8f:4b:01:7a:34:
         b3:a5:e3:5f:51:27:4f:38:12:70:2f:e7:29:79:f2:73:43:63:
         f4:c2:fe:27:18:63:4d:2a:de:6d:f7:33:32:04:9d:9c:c8:d6:
         84:1d:a7:f4:b1:01:a3:af:5e:31:6f:e9:31:63:27:a8:bc:fe:
         f0:20:ed:d2:bf:de:c0:8b:e9:a3:6d:4b:e4:0c:25:a7:83:b7:
         05:e0:35:58:51:0f:9d:0f:31:de:22:1b:5c:f9:a8:34:9d:6e:
         2e:94:f6:0e:73:43:40:7b:af:d1:cf:ff:26:b6:f7:28:de:3b:
         4b:d2:7f:b9:f8:09:b8:c1:59:0d:ef:89:a8:9f:a2:6b:90:80:
         24:84:34:3f:6b:33:39:89:d5:cd:61:8a:87:0b:0d:09:a6:88:
         95:cd:7b:11:a3:c4:86:86:59:47:99:97:2d:14:31:53:44:21:
         32:6e:6d:8e:c4:a6:7f:2d:3d:00:cd:a1:44:e6:bb:d0:15:4e:
         0f:ca:ea:cd:bc:74:d4:12:fd:7f:96:8e:46:7d:7c:4e:5c:95:
         18:7f:ff:e9
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUVICRej9WsskMZ8WykCAEAQBt6w4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjE5RUY1NTc1OEMyMjc3NUVEQ0VCQTE4M0E1OTcxNUUx
NDUyRkQ4QjAeFw0yNTA3MzEwNDU4MDlaFw0yNjA3MzAwNTAzMDlaMDMxMTAvBgNV
BAMTKDk1MkFFMzlGOEEwQjQ0MzNGQjNFMjI4MzY2NTY5MzBGMTU0NDFENkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfhRSnZcEMtgy8u5Klnih1gSBy
IJrt/MLtZ2yiL4Pk9zKWW7XNdJJuzgJSsj6gkRQMQyiz2eoUgoWgYD+ZSk1NNPcW
WgsoIZIxp8mLigGsGKX/IBLNz9GZmKU0STLcvQ1fXAa8ni4C8P9a316waP4O6OvS
C0aXUV4JHBGAyjt5/MMmxFQKk+8OUErgBj8ITuUVdto7BZh3Zbmb/ZBeOecyk+Zr
johowQBsapWtjVEsMAGpcQGUKWGGUCQPdg80YZtc7CAp4qsDUwAgak8uYskPBB4i
vmPmMtwUsN8fNyhXzKmIA0sptg6y2d+q6EJtpnd/bh+dGVvZKGyH9P6h2/e1AgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUlSrjn4oLRDP7PiKDZlaTDxVEHW0wHwYDVR0j
BBgwFoAUYZ71V1jCJ3XtzroYOllxXhRS/YswDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y
MjcxODA2Yy00M2QwLTQ2NDYtOGM4ZC02MTExN2MyMzQxYTAvMC82MTlFRjU1NzU4
QzIyNzc1RURDRUJBMTgzQTU5NzE1RTE0NTJGRDhCLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNjE5RUY1NTc1OEMyMjc3NUVEQ0VCQTE4M0E1OTcxNUUxNDUy
RkQ4Qi5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzIyNzE4MDZjLTQzZDAtNDY0Ni04
YzhkLTYxMTE3YzIzNDFhMC8wLzMxMzAzMzJlMzEzODM0MmUzMTM4MzMyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzkzOTM2MzEucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnuLcwDQYJ
KoZIhvcNAQELBQADggEBAHf3EH5uX7ZmL+zvg2IGNJmrcwCGtQKJhYDqVUvqORoQ
TKORMIzGED06gPDYIgziO1OPSwF6NLOl419RJ084EnAv5yl58nNDY/TC/icYY00q
3m33MzIEnZzI1oQdp/SxAaOvXjFv6TFjJ6i8/vAg7dK/3sCL6aNtS+QMJaeDtwXg
NVhRD50PMd4iG1z5qDSdbi6U9g5zQ0B7r9HP/ya29yjeO0vSf7n4CbjBWQ3viaif
omuQgCSEND9rMzmJ1c1hiocLDQmmiJXNexGjxIaGWUeZly0UMVNEITJubY7Epn8t
PQDNoUTmu9AVTg/K6s28dNQS/X+WjkZ9fE5clRh//+k=
-----END CERTIFICATE-----
Generated at Sun Aug 10 10:41:10 2025 by rpki-client