Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/d93eb8f6-bb6c-4ea7-86df-b243c5164d22/0/3130332e3232392e3136302e302f32322d3234203d3e203539323838.roa
File:                     3130332e3232392e3136302e302f32322d3234203d3e203539323838.roa (raw, json)
Hash identifier:          i48IqlSbYMMK+v7SGCXzplkE2cHzSzt1Yn2nChsSsLc=
Subject key identifier:   9E:7C:74:A1:50:F7:61:AE:0F:29:7D:A2:F0:BC:69:DD:38:4C:50:CB
Certificate issuer:       /CN=B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D
Certificate serial:       660B36AC808895974E7D13E670FBC71D3D8E8523
Authority key identifier: B1:1A:6E:BA:7C:0F:02:09:30:47:3F:B7:FA:FC:2D:9C:97:E4:98:2D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d93eb8f6-bb6c-4ea7-86df-b243c5164d22/0/3130332e3232392e3136302e302f32322d3234203d3e203539323838.roa
Signing time:             Fri 25 Jul 2025 18:02:21 +0000
ROA not before:           Fri 25 Jul 2025 17:57:21 +0000
ROA not after:            Fri 24 Jul 2026 18:02:21 +0000
asID:                     59288
IP address blocks:        103.229.160.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d93eb8f6-bb6c-4ea7-86df-b243c5164d22/0/B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D.crl
                          rsync://repo-rpki.idnic.net/repo/d93eb8f6-bb6c-4ea7-86df-b243c5164d22/0/B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 09 Aug 2025 13:39:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:0b:36:ac:80:88:95:97:4e:7d:13:e6:70:fb:c7:1d:3d:8e:85:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D
        Validity
            Not Before: Jul 25 17:57:21 2025 GMT
            Not After : Jul 24 18:02:21 2026 GMT
        Subject: CN=9E7C74A150F761AE0F297DA2F0BC69DD384C50CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:f9:33:8a:44:ef:a6:b9:9d:66:7d:26:5b:12:
                    69:c8:3c:e1:14:df:a1:89:87:e2:d7:02:10:41:26:
                    4d:b6:78:5d:58:29:47:cb:6d:d9:3c:63:8e:2c:da:
                    e8:d4:98:7a:8a:c6:a2:b5:f1:bf:86:db:45:f4:f4:
                    93:af:79:b1:c0:fa:99:19:5b:12:23:9d:90:a1:99:
                    fe:73:75:05:fc:62:a3:94:07:01:17:c9:97:01:da:
                    0c:7e:43:68:86:9c:59:eb:b5:69:b3:e9:a9:06:24:
                    74:c8:bc:6e:ec:d2:1e:93:1e:03:8b:94:b1:41:bd:
                    6a:cd:b4:7b:6f:53:57:cf:24:ec:d4:78:b4:16:57:
                    c9:df:25:20:17:89:c0:aa:30:0c:e3:81:ed:35:9a:
                    1c:d5:b0:48:fa:88:15:3c:1e:b4:57:09:e9:a8:69:
                    9b:7e:db:44:18:95:1c:c3:03:74:8c:fe:b2:41:01:
                    15:6b:87:85:aa:05:13:97:bf:54:b8:24:76:64:17:
                    60:0f:2a:57:b6:86:9e:62:f3:e9:78:1c:cd:81:98:
                    e0:da:a6:f0:52:eb:97:2a:2e:c0:55:5e:15:26:c3:
                    86:40:72:37:f7:0f:0a:da:c7:97:65:20:2e:61:e8:
                    27:01:f0:96:fa:17:eb:72:23:5d:db:e5:d3:18:75:
                    2b:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:7C:74:A1:50:F7:61:AE:0F:29:7D:A2:F0:BC:69:DD:38:4C:50:CB
            X509v3 Authority Key Identifier:
                keyid:B1:1A:6E:BA:7C:0F:02:09:30:47:3F:B7:FA:FC:2D:9C:97:E4:98:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d93eb8f6-bb6c-4ea7-86df-b243c5164d22/0/B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d93eb8f6-bb6c-4ea7-86df-b243c5164d22/0/3130332e3232392e3136302e302f32322d3234203d3e203539323838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.229.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b2:99:69:80:42:59:c0:90:60:8c:0a:0a:40:eb:ca:4e:38:11:
         ca:61:60:51:37:5e:0d:c1:2d:c2:38:8d:bd:c0:01:82:d8:df:
         aa:6f:73:1f:93:3a:fe:7b:8e:da:9a:73:0a:c5:29:8f:9e:25:
         9e:c8:1a:e7:67:53:57:ea:04:d2:fa:72:cd:c1:22:1e:5b:0a:
         a8:f7:b5:7c:e8:aa:70:41:8b:38:8c:86:91:c1:5e:50:61:11:
         fa:fa:71:a5:22:35:07:19:28:1a:54:e5:12:cf:a1:50:15:20:
         a8:c8:ea:1b:ab:7c:5a:46:82:0f:b2:fc:d1:58:6d:f2:81:b1:
         bf:30:bf:6e:27:5e:cc:3c:44:88:e3:5d:90:c1:8b:21:40:41:
         2b:51:d2:93:1c:85:ba:03:55:e3:58:f1:f2:ca:6e:29:f8:69:
         2d:a8:ea:a5:c6:04:4c:a9:ef:10:c0:ab:a4:d2:65:ff:f3:61:
         b3:10:3c:fa:1d:41:db:2a:d9:e2:c2:77:17:cd:87:4b:18:fb:
         cf:9a:59:38:38:10:77:ad:c7:9c:cc:a8:0f:6a:d3:0f:73:8f:
         0b:38:7e:b8:50:77:85:d2:38:b5:8f:de:58:6f:86:e5:0e:d7:
         36:10:7d:03:d2:94:2d:5b:47:d7:39:b8:15:16:55:f4:b9:5c:
         b7:91:b8:8c
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUZgs2rICIlZdOfRPmcPvHHT2OhSMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjExQTZFQkE3QzBGMDIwOTMwNDczRkI3RkFGQzJEOUM5
N0U0OTgyRDAeFw0yNTA3MjUxNzU3MjFaFw0yNjA3MjQxODAyMjFaMDMxMTAvBgNV
BAMTKDlFN0M3NEExNTBGNzYxQUUwRjI5N0RBMkYwQkM2OUREMzg0QzUwQ0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn+TOKRO+muZ1mfSZbEmnIPOEU
36GJh+LXAhBBJk22eF1YKUfLbdk8Y44s2ujUmHqKxqK18b+G20X09JOvebHA+pkZ
WxIjnZChmf5zdQX8YqOUBwEXyZcB2gx+Q2iGnFnrtWmz6akGJHTIvG7s0h6THgOL
lLFBvWrNtHtvU1fPJOzUeLQWV8nfJSAXicCqMAzjge01mhzVsEj6iBU8HrRXCemo
aZt+20QYlRzDA3SM/rJBARVrh4WqBROXv1S4JHZkF2APKle2hp5i8+l4HM2BmODa
pvBS65cqLsBVXhUmw4ZAcjf3Dwrax5dlIC5h6CcB8Jb6F+tyI13b5dMYdStJAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUnnx0oVD3Ya4PKX2i8Lxp3ThMUMswHwYDVR0j
BBgwFoAUsRpuunwPAgkwRz+3+vwtnJfkmC0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k
OTNlYjhmNi1iYjZjLTRlYTctODZkZi1iMjQzYzUxNjRkMjIvMC9CMTFBNkVCQTdD
MEYwMjA5MzA0NzNGQjdGQUZDMkQ5Qzk3RTQ5ODJELmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQjExQTZFQkE3QzBGMDIwOTMwNDczRkI3RkFGQzJEOUM5N0U0
OTgyRC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Q5M2ViOGY2LWJiNmMtNGVhNy04
NmRmLWIyNDNjNTE2NGQyMi8wLzMxMzAzMzJlMzIzMjM5MmUzMTM2MzAyZTMwMmYz
MjMyMmQzMjM0MjAzZDNlMjAzNTM5MzIzODM4LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCZ+WgMA0GCSqG
SIb3DQEBCwUAA4IBAQCymWmAQlnAkGCMCgpA68pOOBHKYWBRN14NwS3COI29wAGC
2N+qb3Mfkzr+e47amnMKxSmPniWeyBrnZ1NX6gTS+nLNwSIeWwqo97V86KpwQYs4
jIaRwV5QYRH6+nGlIjUHGSgaVOUSz6FQFSCoyOobq3xaRoIPsvzRWG3ygbG/ML9u
J17MPESI412QwYshQEErUdKTHIW6A1XjWPHyym4p+GktqOqlxgRMqe8QwKuk0mX/
82GzEDz6HUHbKtniwncXzYdLGPvPmlk4OBB3rceczKgPatMPc48LOH64UHeF0ji1
j95Yb4blDtc2EH0D0pQtW0fXObgVFlX0uVy3kbiM
-----END CERTIFICATE-----
Generated at Thu Aug 7 20:24:42 2025 by rpki-client