Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c64f0ffa-e031-4ee1-bf0f-64bacfcf2942/0/3130332e3136322e3232332e302f32342d3234203d3e203438343635.roa
File:                     3130332e3136322e3232332e302f32342d3234203d3e203438343635.roa (raw, json)
Hash identifier:          4c0IK//t9QV9eDZcRuS2szDSLoJBAnWIV4hCGmSoEiE=
Subject key identifier:   CC:1E:E5:FC:FE:40:80:D9:B7:29:9C:0B:3A:C4:81:B0:11:CB:81:04
Certificate issuer:       /CN=E44D4DE701D932713536A084F76894A6B0473F5E
Certificate serial:       26E2C07D01273A7E77781993F76AC424B06FA035
Authority key identifier: E4:4D:4D:E7:01:D9:32:71:35:36:A0:84:F7:68:94:A6:B0:47:3F:5E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E44D4DE701D932713536A084F76894A6B0473F5E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c64f0ffa-e031-4ee1-bf0f-64bacfcf2942/0/3130332e3136322e3232332e302f32342d3234203d3e203438343635.roa
Signing time:             Mon 16 Jun 2025 04:01:11 +0000
ROA not before:           Mon 16 Jun 2025 03:56:11 +0000
ROA not after:            Mon 15 Jun 2026 04:01:11 +0000
asID:                     48465
IP address blocks:        103.162.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c64f0ffa-e031-4ee1-bf0f-64bacfcf2942/0/E44D4DE701D932713536A084F76894A6B0473F5E.crl
                          rsync://repo-rpki.idnic.net/repo/c64f0ffa-e031-4ee1-bf0f-64bacfcf2942/0/E44D4DE701D932713536A084F76894A6B0473F5E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E44D4DE701D932713536A084F76894A6B0473F5E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Jun 2025 06:57:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:e2:c0:7d:01:27:3a:7e:77:78:19:93:f7:6a:c4:24:b0:6f:a0:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E44D4DE701D932713536A084F76894A6B0473F5E
        Validity
            Not Before: Jun 16 03:56:11 2025 GMT
            Not After : Jun 15 04:01:11 2026 GMT
        Subject: CN=CC1EE5FCFE4080D9B7299C0B3AC481B011CB8104
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:31:67:27:ef:14:4f:9a:5e:e8:40:77:d9:bb:
                    f2:a5:de:38:8c:e2:ff:04:11:79:f9:fe:b2:37:51:
                    5a:97:87:7b:49:64:a0:7e:19:51:73:09:07:4c:28:
                    f9:84:ca:c4:72:b6:fa:e5:c7:79:7c:75:2f:47:6c:
                    e1:87:6f:00:c3:7f:07:12:b4:f0:1d:99:08:12:ed:
                    cd:6b:81:25:17:16:7d:c3:48:9e:06:45:eb:07:a0:
                    c3:b0:41:56:96:59:a7:7e:ee:c6:1f:49:45:33:04:
                    12:9e:4e:63:f2:af:41:b8:24:4f:57:31:4d:30:52:
                    ce:e6:17:a7:b0:11:80:59:31:fc:a9:1a:85:2a:a2:
                    64:3b:e6:f6:88:a6:a5:dc:db:36:07:13:f6:b0:60:
                    2c:e5:85:ee:da:d9:e4:8b:48:5d:bf:75:10:2a:a2:
                    8a:11:d5:c0:3b:47:82:4f:03:ae:20:80:a5:d5:be:
                    3e:0a:6e:08:ae:6e:af:cb:af:87:c4:cb:67:18:0f:
                    22:ba:24:d0:0e:38:3e:c4:b7:f6:fd:67:46:7f:2c:
                    34:7c:f8:5e:fb:55:b4:cc:56:97:56:96:07:96:6f:
                    17:4f:ff:c7:54:a5:5f:99:ff:0a:72:1b:7a:79:82:
                    82:c3:83:39:3d:1f:12:0a:03:c2:06:56:b3:fd:4d:
                    d8:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:1E:E5:FC:FE:40:80:D9:B7:29:9C:0B:3A:C4:81:B0:11:CB:81:04
            X509v3 Authority Key Identifier:
                keyid:E4:4D:4D:E7:01:D9:32:71:35:36:A0:84:F7:68:94:A6:B0:47:3F:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c64f0ffa-e031-4ee1-bf0f-64bacfcf2942/0/E44D4DE701D932713536A084F76894A6B0473F5E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E44D4DE701D932713536A084F76894A6B0473F5E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c64f0ffa-e031-4ee1-bf0f-64bacfcf2942/0/3130332e3136322e3232332e302f32342d3234203d3e203438343635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.162.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:d3:d4:ec:6f:f1:97:1f:2f:95:f2:55:99:00:69:d6:61:a4:
         ec:82:33:8c:4c:d5:87:8d:7a:4b:c4:dc:19:25:a7:c0:96:a0:
         f5:46:13:b3:b1:20:48:da:ba:56:23:79:b7:d3:15:9d:2a:a8:
         c6:b8:78:f3:e3:22:97:6d:ca:a3:f3:03:e9:0b:66:41:fd:35:
         7e:26:9c:fc:ed:b1:33:ba:03:f4:bf:dc:2e:7a:d8:91:b2:18:
         da:5b:d2:2a:32:35:01:ad:d0:c9:10:b1:6d:64:eb:15:7f:e1:
         a3:ec:f8:3f:fb:9c:6e:a5:0b:ce:9a:8d:45:c9:07:5b:73:6e:
         10:a1:86:87:9c:c8:80:4f:33:2e:b4:68:d1:1f:b6:82:35:0c:
         89:97:f7:9c:67:ea:f7:a9:1b:c5:e3:ea:ce:7b:80:5b:b3:fc:
         36:f3:b9:90:d6:91:db:6f:3f:03:eb:e0:24:b0:f0:b5:c7:1b:
         0f:9c:b8:b4:a9:f1:aa:bb:61:54:fd:7c:14:a1:ac:ae:cf:32:
         e4:f1:e0:f1:1c:85:4a:65:0e:b6:1a:03:0a:65:0e:37:d3:ba:
         6a:26:25:5c:f8:20:78:d6:2f:59:62:f3:3d:16:ee:92:7e:c2:
         77:4b:72:6c:e7:0b:6c:01:36:1f:41:11:79:8b:cd:36:a4:ab:
         38:14:8a:dc
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUJuLAfQEnOn53eBmT92rEJLBvoDUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTQ0RDRERTcwMUQ5MzI3MTM1MzZBMDg0Rjc2ODk0QTZC
MDQ3M0Y1RTAeFw0yNTA2MTYwMzU2MTFaFw0yNjA2MTUwNDAxMTFaMDMxMTAvBgNV
BAMTKENDMUVFNUZDRkU0MDgwRDlCNzI5OUMwQjNBQzQ4MUIwMTFDQjgxMDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzMWcn7xRPml7oQHfZu/Kl3jiM
4v8EEXn5/rI3UVqXh3tJZKB+GVFzCQdMKPmEysRytvrlx3l8dS9HbOGHbwDDfwcS
tPAdmQgS7c1rgSUXFn3DSJ4GResHoMOwQVaWWad+7sYfSUUzBBKeTmPyr0G4JE9X
MU0wUs7mF6ewEYBZMfypGoUqomQ75vaIpqXc2zYHE/awYCzlhe7a2eSLSF2/dRAq
oooR1cA7R4JPA64ggKXVvj4Kbgiubq/Lr4fEy2cYDyK6JNAOOD7Et/b9Z0Z/LDR8
+F77VbTMVpdWlgeWbxdP/8dUpV+Z/wpyG3p5goLDgzk9HxIKA8IGVrP9TdjfAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUzB7l/P5AgNm3KZwLOsSBsBHLgQQwHwYDVR0j
BBgwFoAU5E1N5wHZMnE1NqCE92iUprBHP14wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j
NjRmMGZmYS1lMDMxLTRlZTEtYmYwZi02NGJhY2ZjZjI5NDIvMC9FNDRENERFNzAx
RDkzMjcxMzUzNkEwODRGNzY4OTRBNkIwNDczRjVFLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRTQ0RDRERTcwMUQ5MzI3MTM1MzZBMDg0Rjc2ODk0QTZCMDQ3
M0Y1RS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2M2NGYwZmZhLWUwMzEtNGVlMS1i
ZjBmLTY0YmFjZmNmMjk0Mi8wLzMxMzAzMzJlMzEzNjMyMmUzMjMyMzMyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzNDM4MzQzNjM1LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ6LfMA0GCSqG
SIb3DQEBCwUAA4IBAQBN09Tsb/GXHy+V8lWZAGnWYaTsgjOMTNWHjXpLxNwZJafA
lqD1RhOzsSBI2rpWI3m30xWdKqjGuHjz4yKXbcqj8wPpC2ZB/TV+Jpz87bEzugP0
v9wuetiRshjaW9IqMjUBrdDJELFtZOsVf+Gj7Pg/+5xupQvOmo1FyQdbc24QoYaH
nMiATzMutGjRH7aCNQyJl/ecZ+r3qRvF4+rOe4Bbs/w287mQ1pHbbz8D6+AksPC1
xxsPnLi0qfGqu2FU/XwUoayuzzLk8eDxHIVKZQ62GgMKZQ4307pqJiVc+CB41i9Z
YvM9Fu6SfsJ3S3Js5wtsATYfQRF5i802pKs4FIrc
-----END CERTIFICATE-----
Generated at Mon Jun 16 11:20:06 2025 by rpki-client