Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/7d6529db-9330-4e97-adf1-b0ddf1a6e599/0/3130332e3132322e392e302f32342d3234203d3e20313530393635.roa
File:                     3130332e3132322e392e302f32342d3234203d3e20313530393635.roa (raw, json)
Hash identifier:          QeU0/vEBTo6jIDTAqgbH9ossdE4o8/cj7giBqcJ2VYs=
Subject key identifier:   D4:07:F5:DC:5F:45:D2:21:A0:FD:AF:5E:28:EF:B3:A3:D6:38:1F:DD
Certificate issuer:       /CN=8B19ACE0A7391492B18BE27AC01D2A602872BFC0
Certificate serial:       243D9A1942C01BDC8F07445F5E6ACC51DB14E44C
Authority key identifier: 8B:19:AC:E0:A7:39:14:92:B1:8B:E2:7A:C0:1D:2A:60:28:72:BF:C0
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B19ACE0A7391492B18BE27AC01D2A602872BFC0.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/7d6529db-9330-4e97-adf1-b0ddf1a6e599/0/3130332e3132322e392e302f32342d3234203d3e20313530393635.roa
Signing time:             Sat 14 Jun 2025 02:00:01 +0000
ROA not before:           Sat 14 Jun 2025 01:55:01 +0000
ROA not after:            Sat 13 Jun 2026 02:00:01 +0000
asID:                     150965
IP address blocks:        103.122.9.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/7d6529db-9330-4e97-adf1-b0ddf1a6e599/0/8B19ACE0A7391492B18BE27AC01D2A602872BFC0.crl
                          rsync://repo-rpki.idnic.net/repo/7d6529db-9330-4e97-adf1-b0ddf1a6e599/0/8B19ACE0A7391492B18BE27AC01D2A602872BFC0.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B19ACE0A7391492B18BE27AC01D2A602872BFC0.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Jun 2025 16:16:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:3d:9a:19:42:c0:1b:dc:8f:07:44:5f:5e:6a:cc:51:db:14:e4:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B19ACE0A7391492B18BE27AC01D2A602872BFC0
        Validity
            Not Before: Jun 14 01:55:01 2025 GMT
            Not After : Jun 13 02:00:01 2026 GMT
        Subject: CN=D407F5DC5F45D221A0FDAF5E28EFB3A3D6381FDD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:9f:fb:24:b7:c5:3e:27:13:c7:58:8c:b4:74:
                    4d:90:b3:27:e4:6e:74:34:b2:c4:f7:9c:09:37:65:
                    3a:3d:ce:80:fa:7e:f6:cb:72:58:15:4e:77:d6:5c:
                    8b:f6:fb:40:2a:a4:61:60:45:7d:08:7a:44:d2:08:
                    1b:2c:a7:ad:9f:00:41:72:a0:a0:20:f3:ee:31:01:
                    48:c9:1d:75:9a:91:32:b2:f6:b0:8a:d6:bd:c0:70:
                    a9:f3:bf:7e:f8:db:cc:43:aa:e1:b3:79:ac:11:16:
                    83:3e:7a:68:ae:dc:86:b0:2f:f0:23:28:21:37:56:
                    f4:48:6b:16:13:87:f1:6b:a0:c5:21:27:ec:83:28:
                    9d:86:27:51:a4:c5:d4:ec:55:55:cf:da:83:7d:7b:
                    c5:a7:b0:59:6f:66:ab:f7:d8:7e:3e:28:e1:3f:ab:
                    79:57:15:c6:6f:1e:bd:62:eb:85:5c:a5:7f:f0:08:
                    3b:de:26:3d:20:01:6b:4e:80:e6:b0:39:e1:2f:ab:
                    68:56:34:4c:eb:bc:a9:f2:e9:0f:7c:6b:73:7f:22:
                    25:00:41:b1:fb:42:9a:8e:22:ad:c1:e8:17:b8:d8:
                    b9:33:dd:63:e2:51:af:2c:c6:c3:be:bd:f0:58:ec:
                    63:8d:33:07:af:56:71:3a:61:9b:da:0f:b0:79:2d:
                    f5:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:07:F5:DC:5F:45:D2:21:A0:FD:AF:5E:28:EF:B3:A3:D6:38:1F:DD
            X509v3 Authority Key Identifier:
                keyid:8B:19:AC:E0:A7:39:14:92:B1:8B:E2:7A:C0:1D:2A:60:28:72:BF:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/7d6529db-9330-4e97-adf1-b0ddf1a6e599/0/8B19ACE0A7391492B18BE27AC01D2A602872BFC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B19ACE0A7391492B18BE27AC01D2A602872BFC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7d6529db-9330-4e97-adf1-b0ddf1a6e599/0/3130332e3132322e392e302f32342d3234203d3e20313530393635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.122.9.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:1f:f6:53:c5:ea:32:5c:6d:6f:0a:c3:95:c2:7c:da:09:8a:
         41:11:c8:20:a4:2a:f4:94:ee:6b:7e:dc:26:39:6a:5d:f6:c1:
         c1:ad:3a:a3:78:3b:64:3e:ba:c8:03:92:15:37:fe:a4:2e:d0:
         f0:99:df:14:db:46:c1:f7:b2:b5:44:c1:ff:be:72:b9:3c:68:
         51:4c:64:a3:8f:84:aa:5f:0b:36:b4:0f:8d:c6:60:82:f9:95:
         53:ac:01:fa:24:af:75:17:99:78:96:14:66:1b:f6:f8:c8:35:
         69:9b:06:b5:23:f4:27:32:96:2a:ba:c8:30:c7:ce:b2:94:ce:
         09:b1:b9:c0:58:d6:cd:28:2c:35:59:37:f6:d4:fb:08:a4:10:
         3d:41:7c:21:85:fe:8f:06:87:6f:0b:d1:3c:e6:04:c3:74:d1:
         6f:e6:e2:29:ae:8f:91:cb:d7:6b:1f:d1:40:e4:35:2e:8f:b3:
         4c:cd:67:3f:e0:59:ca:06:72:3b:53:25:72:bb:c8:f2:43:f4:
         03:20:21:26:e5:a2:3a:9b:9c:32:7d:79:b2:c7:b6:95:a2:83:
         6b:3e:e5:a5:64:a3:a6:a0:13:7d:34:3e:9c:df:a3:69:b1:25:
         5f:2f:63:9c:a0:c1:65:7c:5e:55:75:58:2e:66:10:72:b6:64:
         8d:f6:63:22
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUJD2aGULAG9yPB0RfXmrMUdsU5EwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEIxOUFDRTBBNzM5MTQ5MkIxOEJFMjdBQzAxRDJBNjAy
ODcyQkZDMDAeFw0yNTA2MTQwMTU1MDFaFw0yNjA2MTMwMjAwMDFaMDMxMTAvBgNV
BAMTKEQ0MDdGNURDNUY0NUQyMjFBMEZEQUY1RTI4RUZCM0EzRDYzODFGREQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCn/skt8U+JxPHWIy0dE2Qsyfk
bnQ0ssT3nAk3ZTo9zoD6fvbLclgVTnfWXIv2+0AqpGFgRX0IekTSCBssp62fAEFy
oKAg8+4xAUjJHXWakTKy9rCK1r3AcKnzv37428xDquGzeawRFoM+emiu3IawL/Aj
KCE3VvRIaxYTh/FroMUhJ+yDKJ2GJ1GkxdTsVVXP2oN9e8WnsFlvZqv32H4+KOE/
q3lXFcZvHr1i64VcpX/wCDveJj0gAWtOgOawOeEvq2hWNEzrvKny6Q98a3N/IiUA
QbH7QpqOIq3B6Be42Lkz3WPiUa8sxsO+vfBY7GONMwevVnE6YZvaD7B5LfWnAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQU1Af13F9F0iGg/a9eKO+zo9Y4H90wHwYDVR0j
BBgwFoAUixms4Kc5FJKxi+J6wB0qYChyv8AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83
ZDY1MjlkYi05MzMwLTRlOTctYWRmMS1iMGRkZjFhNmU1OTkvMC84QjE5QUNFMEE3
MzkxNDkyQjE4QkUyN0FDMDFEMkE2MDI4NzJCRkMwLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvOEIxOUFDRTBBNzM5MTQ5MkIxOEJFMjdBQzAxRDJBNjAyODcy
QkZDMC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzdkNjUyOWRiLTkzMzAtNGU5Ny1h
ZGYxLWIwZGRmMWE2ZTU5OS8wLzMxMzAzMzJlMzEzMjMyMmUzOTJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDMxMzUzMDM5MzYzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGd6CTANBgkqhkiG
9w0BAQsFAAOCAQEAkR/2U8XqMlxtbwrDlcJ82gmKQRHIIKQq9JTua37cJjlqXfbB
wa06o3g7ZD66yAOSFTf+pC7Q8JnfFNtGwfeytUTB/75yuTxoUUxko4+Eql8LNrQP
jcZggvmVU6wB+iSvdReZeJYUZhv2+Mg1aZsGtSP0JzKWKrrIMMfOspTOCbG5wFjW
zSgsNVk39tT7CKQQPUF8IYX+jwaHbwvRPOYEw3TRb+biKa6PkcvXax/RQOQ1Lo+z
TM1nP+BZygZyO1MlcrvI8kP0AyAhJuWiOpucMn15sse2laKDaz7lpWSjpqATfTQ+
nN+jabElXy9jnKDBZXxeVXVYLmYQcrZkjfZjIg==
-----END CERTIFICATE-----
Generated at Tue Jun 17 15:44:20 2025 by rpki-client