Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e517fe98-8f58-497f-be57-8665a7a04bb0/0/3130332e3136312e3136342e302f32332d3233203d3e20313431363231.roa
File:                     3130332e3136312e3136342e302f32332d3233203d3e20313431363231.roa (raw, json)
Hash identifier:          mgkxr/SuMyMsRvRjiMcUueP3vdh3ZYSiC7xct6qMuK4=
Subject key identifier:   53:08:DA:F0:17:3A:36:24:B5:C1:2A:13:1C:F5:B1:D8:40:1A:37:51
Certificate issuer:       /CN=77776250E47CDCAE9263AB4AF8FA40A1391792EA
Certificate serial:       576093CEA315CFEDE5EB3D91767486BF0A5FD243
Authority key identifier: 77:77:62:50:E4:7C:DC:AE:92:63:AB:4A:F8:FA:40:A1:39:17:92:EA
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/77776250E47CDCAE9263AB4AF8FA40A1391792EA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e517fe98-8f58-497f-be57-8665a7a04bb0/0/3130332e3136312e3136342e302f32332d3233203d3e20313431363231.roa
Signing time:             Tue 10 Jun 2025 11:00:00 +0000
ROA not before:           Tue 10 Jun 2025 10:55:00 +0000
ROA not after:            Tue 09 Jun 2026 11:00:00 +0000
asID:                     141621
IP address blocks:        103.161.164.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e517fe98-8f58-497f-be57-8665a7a04bb0/0/77776250E47CDCAE9263AB4AF8FA40A1391792EA.crl
                          rsync://repo-rpki.idnic.net/repo/e517fe98-8f58-497f-be57-8665a7a04bb0/0/77776250E47CDCAE9263AB4AF8FA40A1391792EA.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/77776250E47CDCAE9263AB4AF8FA40A1391792EA.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 18 Jun 2025 15:28:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:60:93:ce:a3:15:cf:ed:e5:eb:3d:91:76:74:86:bf:0a:5f:d2:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77776250E47CDCAE9263AB4AF8FA40A1391792EA
        Validity
            Not Before: Jun 10 10:55:00 2025 GMT
            Not After : Jun  9 11:00:00 2026 GMT
        Subject: CN=5308DAF0173A3624B5C12A131CF5B1D8401A3751
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:43:2c:a7:bb:1b:e5:b6:0e:93:ce:95:cb:63:
                    2f:57:19:84:ef:0b:7d:eb:f2:f3:0b:e6:2c:69:64:
                    5d:cc:d8:40:09:95:ea:d3:9e:f4:fa:60:42:1a:7d:
                    5b:8c:b0:39:35:25:da:d6:67:86:9f:db:6d:c9:bb:
                    43:e0:ac:9a:fb:45:4d:ee:5d:51:df:36:6c:e8:da:
                    71:3b:43:ef:69:c8:9d:b8:9d:ea:bd:7c:dd:35:0a:
                    71:2d:a7:58:7c:b2:0f:07:73:bd:38:37:a6:0c:3b:
                    21:17:df:3e:a2:a4:41:05:38:1f:de:2d:30:42:b8:
                    b2:01:86:cf:39:f8:55:1e:cd:8a:c3:2c:60:82:45:
                    cd:67:e4:06:fa:b2:ec:b3:23:05:2b:86:0e:30:0d:
                    6c:1c:6c:db:55:28:07:a7:a4:10:08:da:32:a5:85:
                    7b:d6:96:9c:9b:9c:8f:3f:fe:01:24:91:5e:79:2d:
                    43:b1:7d:98:fd:71:3e:b1:eb:ee:b4:25:14:f2:65:
                    e5:dc:13:9b:06:0e:fa:f8:b2:4c:ec:ae:c7:d3:f5:
                    ac:1e:03:4e:d7:41:ee:9b:fd:40:ec:32:f0:13:22:
                    d7:d4:a5:f8:e8:4a:3e:9a:7f:b1:06:6e:81:18:6d:
                    71:8f:0c:10:91:e0:0c:78:fb:82:76:c6:f0:89:e0:
                    45:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:08:DA:F0:17:3A:36:24:B5:C1:2A:13:1C:F5:B1:D8:40:1A:37:51
            X509v3 Authority Key Identifier:
                keyid:77:77:62:50:E4:7C:DC:AE:92:63:AB:4A:F8:FA:40:A1:39:17:92:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e517fe98-8f58-497f-be57-8665a7a04bb0/0/77776250E47CDCAE9263AB4AF8FA40A1391792EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/77776250E47CDCAE9263AB4AF8FA40A1391792EA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e517fe98-8f58-497f-be57-8665a7a04bb0/0/3130332e3136312e3136342e302f32332d3233203d3e20313431363231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.161.164.0/23

    Signature Algorithm: sha256WithRSAEncryption
         96:81:bb:3a:13:bf:54:ed:66:d9:da:66:dd:bb:d6:bd:40:f7:
         77:5e:a3:0e:fa:df:89:53:ac:8c:f7:e5:72:7d:7e:1f:d1:00:
         2d:49:b5:26:45:44:94:b1:f9:9d:d2:92:92:3b:d5:00:f5:6c:
         7b:3f:20:00:eb:86:5d:2b:1e:df:7d:1a:65:f3:de:dd:cd:ce:
         3c:e9:1f:06:e6:fc:be:2e:4e:81:6a:70:5f:c9:dd:4b:34:d1:
         de:f6:d2:1c:e7:c5:05:61:52:84:83:82:34:dc:62:13:67:29:
         00:6e:1a:4d:08:23:21:07:a4:27:f9:23:74:a8:10:36:8c:e1:
         ae:33:36:a7:54:39:89:7d:93:3a:2b:01:65:5b:c5:37:87:cd:
         ba:5e:4d:c6:d3:01:73:26:8c:79:98:be:8d:2d:6d:6d:57:fb:
         cb:8a:91:b3:ef:12:0c:f0:07:3d:2e:35:5d:83:ad:0f:a1:b8:
         a9:94:4e:95:bd:60:ac:a1:86:ab:3e:0d:7d:40:f7:33:a0:8e:
         b9:32:7f:a3:98:85:68:77:cb:f3:03:07:4f:f7:3b:ab:50:8e:
         46:8a:05:25:8c:83:b9:77:bf:1e:b3:04:e6:85:79:2d:de:b1:
         ae:a3:9f:bf:fd:25:95:65:36:c6:08:1e:0a:cf:72:6e:9b:7c:
         4a:dd:38:51
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUV2CTzqMVz+3l6z2RdnSGvwpf0kMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzc3NzYyNTBFNDdDRENBRTkyNjNBQjRBRjhGQTQwQTEz
OTE3OTJFQTAeFw0yNTA2MTAxMDU1MDBaFw0yNjA2MDkxMTAwMDBaMDMxMTAvBgNV
BAMTKDUzMDhEQUYwMTczQTM2MjRCNUMxMkExMzFDRjVCMUQ4NDAxQTM3NTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/Qyynuxvltg6TzpXLYy9XGYTv
C33r8vML5ixpZF3M2EAJlerTnvT6YEIafVuMsDk1JdrWZ4af223Ju0PgrJr7RU3u
XVHfNmzo2nE7Q+9pyJ24neq9fN01CnEtp1h8sg8Hc704N6YMOyEX3z6ipEEFOB/e
LTBCuLIBhs85+FUezYrDLGCCRc1n5Ab6suyzIwUrhg4wDWwcbNtVKAenpBAI2jKl
hXvWlpybnI8//gEkkV55LUOxfZj9cT6x6+60JRTyZeXcE5sGDvr4skzsrsfT9awe
A07XQe6b/UDsMvATItfUpfjoSj6af7EGboEYbXGPDBCR4Ax4+4J2xvCJ4EXLAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUUwja8Bc6NiS1wSoTHPWx2EAaN1EwHwYDVR0j
BBgwFoAUd3diUOR83K6SY6tK+PpAoTkXkuowDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l
NTE3ZmU5OC04ZjU4LTQ5N2YtYmU1Ny04NjY1YTdhMDRiYjAvMC83Nzc3NjI1MEU0
N0NEQ0FFOTI2M0FCNEFGOEZBNDBBMTM5MTc5MkVBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNzc3NzYyNTBFNDdDRENBRTkyNjNBQjRBRjhGQTQwQTEzOTE3
OTJFQS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2U1MTdmZTk4LThmNTgtNDk3Zi1i
ZTU3LTg2NjVhN2EwNGJiMC8wLzMxMzAzMzJlMzEzNjMxMmUzMTM2MzQyZTMwMmYz
MjMzMmQzMjMzMjAzZDNlMjAzMTM0MzEzNjMyMzEucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnoaQwDQYJ
KoZIhvcNAQELBQADggEBAJaBuzoTv1TtZtnaZt271r1A93deow7634lTrIz35XJ9
fh/RAC1JtSZFRJSx+Z3SkpI71QD1bHs/IADrhl0rHt99GmXz3t3NzjzpHwbm/L4u
ToFqcF/J3Us00d720hznxQVhUoSDgjTcYhNnKQBuGk0IIyEHpCf5I3SoEDaM4a4z
NqdUOYl9kzorAWVbxTeHzbpeTcbTAXMmjHmYvo0tbW1X+8uKkbPvEgzwBz0uNV2D
rQ+huKmUTpW9YKyhhqs+DX1A9zOgjrkyf6OYhWh3y/MDB0/3O6tQjkaKBSWMg7l3
vx6zBOaFeS3esa6jn7/9JZVlNsYIHgrPcm6bfErdOFE=
-----END CERTIFICATE-----
Generated at Mon Jun 16 12:18:42 2025 by rpki-client