Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/5e314858-b33a-4b65-9a55-dce41e223873/0/3130332e3139302e36312e302f32342d3234203d3e20313439393031.roa
File:                     3130332e3139302e36312e302f32342d3234203d3e20313439393031.roa (raw, json)
Hash identifier:          Ykg6X7TmWGcN3xNxQzs8nCjH8QlPm6F3Uq9zQ4bEBTI=
Subject key identifier:   1C:80:12:C3:F7:DA:2E:E5:B6:53:70:A5:ED:AB:65:4E:D2:50:5C:E6
Certificate issuer:       /CN=3BA5C10190ADC96EE34EB4A6D054457022CBDEE9
Certificate serial:       5EA37ED636FA240D7A92D4FC7E1CC61D621A7E85
Authority key identifier: 3B:A5:C1:01:90:AD:C9:6E:E3:4E:B4:A6:D0:54:45:70:22:CB:DE:E9
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3BA5C10190ADC96EE34EB4A6D054457022CBDEE9.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5e314858-b33a-4b65-9a55-dce41e223873/0/3130332e3139302e36312e302f32342d3234203d3e20313439393031.roa
Signing time:             Wed 14 May 2025 04:00:00 +0000
ROA not before:           Wed 14 May 2025 03:55:00 +0000
ROA not after:            Wed 13 May 2026 04:00:00 +0000
asID:                     149901
IP address blocks:        103.190.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/5e314858-b33a-4b65-9a55-dce41e223873/0/3BA5C10190ADC96EE34EB4A6D054457022CBDEE9.crl
                          rsync://repo-rpki.idnic.net/repo/5e314858-b33a-4b65-9a55-dce41e223873/0/3BA5C10190ADC96EE34EB4A6D054457022CBDEE9.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3BA5C10190ADC96EE34EB4A6D054457022CBDEE9.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 20 Jun 2025 07:56:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:a3:7e:d6:36:fa:24:0d:7a:92:d4:fc:7e:1c:c6:1d:62:1a:7e:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3BA5C10190ADC96EE34EB4A6D054457022CBDEE9
        Validity
            Not Before: May 14 03:55:00 2025 GMT
            Not After : May 13 04:00:00 2026 GMT
        Subject: CN=1C8012C3F7DA2EE5B65370A5EDAB654ED2505CE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:47:f2:82:2c:06:f3:69:42:3c:d2:24:f5:5e:
                    8a:e5:9c:13:7f:1d:b9:47:d7:e6:8d:ed:4c:70:9a:
                    b0:58:ef:4f:59:be:d7:85:da:31:05:46:b0:de:35:
                    c3:85:c5:bc:1c:52:4c:bd:f5:49:e7:4f:36:01:3a:
                    83:8b:c1:4e:be:bb:2f:29:a8:1d:c9:c4:fd:b7:43:
                    9c:07:59:7c:5e:f2:55:50:ad:4e:0f:14:39:c8:d3:
                    00:c1:92:25:42:d2:84:c3:0a:bd:ea:56:83:70:6a:
                    3d:03:05:11:62:f0:20:d0:d2:51:6c:1e:10:21:a0:
                    2c:eb:6a:27:38:21:5e:cc:fd:7e:2c:4c:85:9e:a3:
                    88:e8:85:3b:34:ce:f8:7d:cb:23:29:ce:83:41:26:
                    56:5e:09:d0:59:6a:c7:4c:28:09:93:9a:0c:21:3c:
                    d2:dd:a2:59:df:b9:b7:3e:f2:6d:c8:69:c5:03:88:
                    26:1f:01:ce:57:9a:9f:bd:a9:26:3d:9d:1f:cd:80:
                    8e:c0:2b:b8:1a:32:c3:a0:00:f8:ea:c7:b9:02:50:
                    fd:a3:90:e3:57:a0:b9:e3:d5:93:d1:18:7f:15:ac:
                    3d:84:50:48:4e:84:b0:27:a1:70:6f:98:d4:b8:71:
                    b9:68:e1:d3:42:99:b7:91:8e:ed:a3:47:5d:47:d6:
                    21:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:80:12:C3:F7:DA:2E:E5:B6:53:70:A5:ED:AB:65:4E:D2:50:5C:E6
            X509v3 Authority Key Identifier:
                keyid:3B:A5:C1:01:90:AD:C9:6E:E3:4E:B4:A6:D0:54:45:70:22:CB:DE:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5e314858-b33a-4b65-9a55-dce41e223873/0/3BA5C10190ADC96EE34EB4A6D054457022CBDEE9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3BA5C10190ADC96EE34EB4A6D054457022CBDEE9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5e314858-b33a-4b65-9a55-dce41e223873/0/3130332e3139302e36312e302f32342d3234203d3e20313439393031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.190.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:f2:c3:62:d0:7c:eb:ad:87:63:5f:e3:5a:9f:88:f1:6b:a7:
         de:1f:5a:22:67:61:5b:db:b9:c0:91:b9:b9:8c:79:4f:43:2e:
         f8:60:f3:ab:59:4e:d8:1f:e8:b2:34:19:9b:ad:2b:3d:72:20:
         42:c7:9b:db:ed:68:19:1c:5a:31:90:f9:55:b8:a5:ef:56:8d:
         09:b4:67:41:01:75:c9:3f:6f:48:75:00:ea:d7:c0:a4:77:d9:
         3a:09:c6:b0:b8:8e:09:4f:5b:55:cb:fa:2a:6e:59:a4:c2:c6:
         e1:f9:19:d6:49:f4:21:eb:9b:3f:5b:47:26:25:c4:6f:e3:d1:
         94:9c:fa:bf:e0:f8:15:e6:b3:7e:93:57:5c:d0:31:1b:f9:36:
         3b:b7:e5:f3:91:46:2f:87:85:f0:bd:96:6a:79:0a:74:26:d1:
         c2:45:6b:c4:be:cf:c2:aa:f4:e5:7f:2f:98:e1:21:f8:1b:9e:
         1a:83:4e:dc:54:ef:24:ce:a0:96:4c:bf:16:2f:fd:0b:98:dd:
         4e:c4:98:40:74:2b:2d:b9:d8:9b:c1:d9:18:b8:49:7a:8e:a8:
         46:01:fe:e7:2b:72:38:13:2d:c3:39:e8:ee:74:61:09:92:10:
         1b:2f:d6:0a:41:0b:3a:21:2b:5a:8f:0b:f9:f3:b4:8e:23:f4:
         cc:d9:d4:be
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUXqN+1jb6JA16ktT8fhzGHWIafoUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0JBNUMxMDE5MEFEQzk2RUUzNEVCNEE2RDA1NDQ1NzAy
MkNCREVFOTAeFw0yNTA1MTQwMzU1MDBaFw0yNjA1MTMwNDAwMDBaMDMxMTAvBgNV
BAMTKDFDODAxMkMzRjdEQTJFRTVCNjUzNzBBNUVEQUI2NTRFRDI1MDVDRTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyR/KCLAbzaUI80iT1XorlnBN/
HblH1+aN7UxwmrBY709ZvteF2jEFRrDeNcOFxbwcUky99UnnTzYBOoOLwU6+uy8p
qB3JxP23Q5wHWXxe8lVQrU4PFDnI0wDBkiVC0oTDCr3qVoNwaj0DBRFi8CDQ0lFs
HhAhoCzraic4IV7M/X4sTIWeo4johTs0zvh9yyMpzoNBJlZeCdBZasdMKAmTmgwh
PNLdolnfubc+8m3IacUDiCYfAc5Xmp+9qSY9nR/NgI7AK7gaMsOgAPjqx7kCUP2j
kONXoLnj1ZPRGH8VrD2EUEhOhLAnoXBvmNS4cblo4dNCmbeRju2jR11H1iErAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUHIASw/faLuW2U3Cl7atlTtJQXOYwHwYDVR0j
BBgwFoAUO6XBAZCtyW7jTrSm0FRFcCLL3ukwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81
ZTMxNDg1OC1iMzNhLTRiNjUtOWE1NS1kY2U0MWUyMjM4NzMvMC8zQkE1QzEwMTkw
QURDOTZFRTM0RUI0QTZEMDU0NDU3MDIyQ0JERUU5LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvM0JBNUMxMDE5MEFEQzk2RUUzNEVCNEE2RDA1NDQ1NzAyMkNC
REVFOS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzVlMzE0ODU4LWIzM2EtNGI2NS05
YTU1LWRjZTQxZTIyMzg3My8wLzMxMzAzMzJlMzEzOTMwMmUzNjMxMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzNDM5MzkzMDMxLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ749MA0GCSqG
SIb3DQEBCwUAA4IBAQAu8sNi0HzrrYdjX+Nan4jxa6feH1oiZ2Fb27nAkbm5jHlP
Qy74YPOrWU7YH+iyNBmbrSs9ciBCx5vb7WgZHFoxkPlVuKXvVo0JtGdBAXXJP29I
dQDq18Ckd9k6CcawuI4JT1tVy/oqblmkwsbh+RnWSfQh65s/W0cmJcRv49GUnPq/
4PgV5rN+k1dc0DEb+TY7t+XzkUYvh4XwvZZqeQp0JtHCRWvEvs/CqvTlfy+Y4SH4
G54ag07cVO8kzqCWTL8WL/0LmN1OxJhAdCstudibwdkYuEl6jqhGAf7nK3I4Ey3D
OejudGEJkhAbL9YKQQs6IStajwv587SOI/TM2dS+
-----END CERTIFICATE-----
Generated at Tue Jun 17 21:27:36 2025 by rpki-client