Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/f73ab79d-00d5-49cb-ac10-3bd4f2386bc6/0/3130332e3134302e37392e302f32342d3234203d3e203438343635.roa
File:                     3130332e3134302e37392e302f32342d3234203d3e203438343635.roa (raw, json)
Hash identifier:          DkleJkN5W2PyaQBgkh3h9+A6EIKYUBI0XIE9LsGOkEE=
Subject key identifier:   3B:17:EF:97:13:4E:55:8D:12:D7:91:9E:DB:76:D3:C1:E8:72:40:A2
Certificate issuer:       /CN=45795CE411027C6961B89E9C0FBDB9B73BD61C39
Certificate serial:       183043FDE63DFEFFA5E54B9DAEA8CF8F1D96793E
Authority key identifier: 45:79:5C:E4:11:02:7C:69:61:B8:9E:9C:0F:BD:B9:B7:3B:D6:1C:39
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45795CE411027C6961B89E9C0FBDB9B73BD61C39.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f73ab79d-00d5-49cb-ac10-3bd4f2386bc6/0/3130332e3134302e37392e302f32342d3234203d3e203438343635.roa
Signing time:             Mon 16 Jun 2025 04:02:21 +0000
ROA not before:           Mon 16 Jun 2025 03:57:21 +0000
ROA not after:            Mon 15 Jun 2026 04:02:21 +0000
asID:                     48465
IP address blocks:        103.140.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/f73ab79d-00d5-49cb-ac10-3bd4f2386bc6/0/45795CE411027C6961B89E9C0FBDB9B73BD61C39.crl
                          rsync://repo-rpki.idnic.net/repo/f73ab79d-00d5-49cb-ac10-3bd4f2386bc6/0/45795CE411027C6961B89E9C0FBDB9B73BD61C39.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45795CE411027C6961B89E9C0FBDB9B73BD61C39.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Jun 2025 07:35:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:30:43:fd:e6:3d:fe:ff:a5:e5:4b:9d:ae:a8:cf:8f:1d:96:79:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45795CE411027C6961B89E9C0FBDB9B73BD61C39
        Validity
            Not Before: Jun 16 03:57:21 2025 GMT
            Not After : Jun 15 04:02:21 2026 GMT
        Subject: CN=3B17EF97134E558D12D7919EDB76D3C1E87240A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:ad:04:66:4f:ba:cd:71:70:b8:d7:30:66:e7:
                    67:38:01:42:f6:74:57:37:8f:26:d3:7a:31:fc:01:
                    f2:8d:50:d1:98:9d:ca:c7:14:e0:ea:a1:da:27:a1:
                    05:d3:30:f3:01:00:06:43:58:83:d5:42:0d:ed:f4:
                    75:4b:81:56:a7:4d:c6:99:00:79:2a:d3:0b:36:99:
                    bd:ad:4f:70:22:6a:2e:26:00:02:a7:32:e6:c0:25:
                    dd:f7:46:60:37:3b:29:d5:c8:72:05:f7:d1:f1:80:
                    55:df:7b:4a:25:c0:7e:6c:0b:d2:8a:ea:2a:44:90:
                    9e:9a:be:0e:39:16:68:69:3a:43:70:d2:fd:ed:7f:
                    95:0e:33:b2:01:10:f0:c5:84:a6:fe:91:e4:87:1e:
                    db:10:66:56:bd:8a:87:fb:15:96:1f:14:90:42:fe:
                    80:65:8b:95:96:1a:28:c6:2c:92:63:6a:04:fd:8f:
                    7c:12:e0:4b:d6:5d:9e:cb:2e:c4:ee:70:30:3d:46:
                    cf:96:e1:9f:47:1e:a3:2e:db:2e:83:78:9d:6e:bb:
                    ec:ee:0e:ea:64:b5:56:30:f7:85:cb:9a:1b:8f:3c:
                    43:d2:b6:f1:70:3d:01:41:29:4b:04:f0:80:f0:89:
                    22:82:cc:7c:06:40:b9:b4:6f:ef:f5:1c:8e:bd:89:
                    ef:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:17:EF:97:13:4E:55:8D:12:D7:91:9E:DB:76:D3:C1:E8:72:40:A2
            X509v3 Authority Key Identifier:
                keyid:45:79:5C:E4:11:02:7C:69:61:B8:9E:9C:0F:BD:B9:B7:3B:D6:1C:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f73ab79d-00d5-49cb-ac10-3bd4f2386bc6/0/45795CE411027C6961B89E9C0FBDB9B73BD61C39.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45795CE411027C6961B89E9C0FBDB9B73BD61C39.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f73ab79d-00d5-49cb-ac10-3bd4f2386bc6/0/3130332e3134302e37392e302f32342d3234203d3e203438343635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.140.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:da:55:55:dc:2e:cb:56:b1:5c:0b:78:c4:9c:3f:d5:b3:d4:
         d4:90:95:49:77:16:0e:40:00:c9:6c:cb:3f:6b:96:c8:e9:12:
         57:38:13:60:02:74:8e:61:33:d3:f9:c2:df:22:9a:c4:18:75:
         c8:90:fb:ee:6d:4e:48:b7:82:3f:65:6d:e9:13:6c:45:0e:ef:
         43:29:02:a6:56:40:68:94:19:d6:14:b6:92:ad:0e:03:c9:56:
         55:41:04:2b:41:7d:6d:a0:60:78:f4:f0:ad:54:ec:12:74:c8:
         63:09:b7:25:85:dc:0a:fc:c0:3b:13:ca:76:66:b4:f2:c2:df:
         35:c2:48:79:c7:9b:eb:f8:a3:b5:1c:83:da:76:ed:fc:b4:e3:
         f3:c8:6f:8e:2b:20:f0:97:bb:94:91:68:d5:76:bc:57:bc:fc:
         7b:b2:f3:13:ad:21:3a:b4:48:bc:99:22:e6:e6:7f:07:33:32:
         0a:10:4e:17:9d:d0:8d:a6:51:df:e1:dd:43:ba:85:b5:06:23:
         53:41:a1:b4:d8:30:b9:b7:ce:86:f0:bc:27:21:84:6e:75:29:
         2d:24:be:ba:1b:5d:2e:db:81:ad:16:cb:44:65:aa:38:d6:1f:
         60:09:39:9c:70:42:af:97:9e:6b:7b:cd:8e:87:8e:2e:b6:86:
         33:72:58:4b
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUGDBD/eY9/v+l5UudrqjPjx2WeT4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDU3OTVDRTQxMTAyN0M2OTYxQjg5RTlDMEZCREI5Qjcz
QkQ2MUMzOTAeFw0yNTA2MTYwMzU3MjFaFw0yNjA2MTUwNDAyMjFaMDMxMTAvBgNV
BAMTKDNCMTdFRjk3MTM0RTU1OEQxMkQ3OTE5RURCNzZEM0MxRTg3MjQwQTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDzrQRmT7rNcXC41zBm52c4AUL2
dFc3jybTejH8AfKNUNGYncrHFODqodonoQXTMPMBAAZDWIPVQg3t9HVLgVanTcaZ
AHkq0ws2mb2tT3Aiai4mAAKnMubAJd33RmA3OynVyHIF99HxgFXfe0olwH5sC9KK
6ipEkJ6avg45FmhpOkNw0v3tf5UOM7IBEPDFhKb+keSHHtsQZla9iof7FZYfFJBC
/oBli5WWGijGLJJjagT9j3wS4EvWXZ7LLsTucDA9Rs+W4Z9HHqMu2y6DeJ1uu+zu
DupktVYw94XLmhuPPEPStvFwPQFBKUsE8IDwiSKCzHwGQLm0b+/1HI69ie8BAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUOxfvlxNOVY0S15Ge23bTwehyQKIwHwYDVR0j
BBgwFoAURXlc5BECfGlhuJ6cD725tzvWHDkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m
NzNhYjc5ZC0wMGQ1LTQ5Y2ItYWMxMC0zYmQ0ZjIzODZiYzYvMC80NTc5NUNFNDEx
MDI3QzY5NjFCODlFOUMwRkJEQjlCNzNCRDYxQzM5LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNDU3OTVDRTQxMTAyN0M2OTYxQjg5RTlDMEZCREI5QjczQkQ2
MUMzOS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Y3M2FiNzlkLTAwZDUtNDljYi1h
YzEwLTNiZDRmMjM4NmJjNi8wLzMxMzAzMzJlMzEzNDMwMmUzNzM5MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzQzODM0MzYzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGeMTzANBgkqhkiG
9w0BAQsFAAOCAQEAENpVVdwuy1axXAt4xJw/1bPU1JCVSXcWDkAAyWzLP2uWyOkS
VzgTYAJ0jmEz0/nC3yKaxBh1yJD77m1OSLeCP2Vt6RNsRQ7vQykCplZAaJQZ1hS2
kq0OA8lWVUEEK0F9baBgePTwrVTsEnTIYwm3JYXcCvzAOxPKdma08sLfNcJIeceb
6/ijtRyD2nbt/LTj88hvjisg8Je7lJFo1Xa8V7z8e7LzE60hOrRIvJki5uZ/BzMy
ChBOF53QjaZR3+HdQ7qFtQYjU0GhtNgwubfOhvC8JyGEbnUpLSS+uhtdLtuBrRbL
RGWqONYfYAk5nHBCr5eea3vNjoeOLraGM3JYSw==
-----END CERTIFICATE-----
Generated at Mon Jun 16 12:16:56 2025 by rpki-client