Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/3130332e38332e3134332e302f32342d3234203d3e203338313635.roa
File:                     3130332e38332e3134332e302f32342d3234203d3e203338313635.roa (raw, json)
Hash identifier:          5/Vk9ibz6GaA77jjrzanXuO4lmlO7SM+SJb6IP98QWc=
Subject key identifier:   13:B3:39:B8:F3:37:59:DA:0A:0F:3C:99:8C:12:92:A0:68:B9:37:C3
Certificate issuer:       /CN=F2C22414BF08FC08B0AEBF44FAF85A85979D1053
Certificate serial:       1EB566197D01A91D7812A41DCB77F41E9810D17F
Authority key identifier: F2:C2:24:14:BF:08:FC:08:B0:AE:BF:44:FA:F8:5A:85:97:9D:10:53
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2C22414BF08FC08B0AEBF44FAF85A85979D1053.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/3130332e38332e3134332e302f32342d3234203d3e203338313635.roa
Signing time:             Mon 02 Jun 2025 01:03:26 +0000
ROA not before:           Mon 02 Jun 2025 00:58:26 +0000
ROA not after:            Mon 01 Jun 2026 01:03:26 +0000
asID:                     38165
IP address blocks:        103.83.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/F2C22414BF08FC08B0AEBF44FAF85A85979D1053.crl
                          rsync://repo-rpki.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/F2C22414BF08FC08B0AEBF44FAF85A85979D1053.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2C22414BF08FC08B0AEBF44FAF85A85979D1053.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 17 Jun 2025 12:31:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:b5:66:19:7d:01:a9:1d:78:12:a4:1d:cb:77:f4:1e:98:10:d1:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F2C22414BF08FC08B0AEBF44FAF85A85979D1053
        Validity
            Not Before: Jun  2 00:58:26 2025 GMT
            Not After : Jun  1 01:03:26 2026 GMT
        Subject: CN=13B339B8F33759DA0A0F3C998C1292A068B937C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:66:72:5a:6c:2e:88:db:93:3c:99:fd:5c:99:
                    de:16:1f:a1:56:66:0f:6c:94:37:5c:13:65:60:cf:
                    8a:30:c9:25:d3:6c:6b:86:85:4c:4a:3a:59:2a:67:
                    81:f1:79:eb:b2:0d:dc:ec:b2:c5:0b:da:b9:bb:89:
                    3c:49:b8:f7:3e:3a:07:97:04:b2:b6:85:ff:e1:8f:
                    8a:c0:e9:ea:dd:1d:1a:24:b2:11:56:38:8a:60:7f:
                    40:74:62:4f:37:3b:5e:85:69:36:64:09:72:f2:16:
                    ec:77:ec:22:00:2d:8f:b1:4c:37:89:32:4e:63:b8:
                    56:5b:1b:30:6a:0c:e2:6f:9a:7b:53:f8:2b:0b:10:
                    40:10:4b:05:06:ef:07:a8:d3:94:9b:3a:68:75:e6:
                    19:33:7c:61:39:cb:d3:e5:6a:c8:de:d7:42:b2:c8:
                    6f:91:fd:fe:a5:fc:49:43:c2:86:f8:37:4e:e9:cb:
                    26:26:a3:94:0e:5c:c4:bb:4e:de:ee:60:ed:91:0f:
                    da:ef:c0:76:13:19:cb:14:36:7d:a9:fc:f3:05:c1:
                    35:3a:17:a5:40:a1:2e:34:c0:48:dc:ce:6e:30:49:
                    36:35:ad:a8:73:8f:35:3f:d7:a0:1f:8a:4e:3f:ed:
                    fe:36:15:1b:5b:35:9f:c4:16:52:95:1a:55:52:db:
                    d2:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:B3:39:B8:F3:37:59:DA:0A:0F:3C:99:8C:12:92:A0:68:B9:37:C3
            X509v3 Authority Key Identifier:
                keyid:F2:C2:24:14:BF:08:FC:08:B0:AE:BF:44:FA:F8:5A:85:97:9D:10:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/F2C22414BF08FC08B0AEBF44FAF85A85979D1053.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2C22414BF08FC08B0AEBF44FAF85A85979D1053.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/3130332e38332e3134332e302f32342d3234203d3e203338313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.83.143.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:5a:bd:e1:73:f7:f3:7f:8a:db:40:a4:06:5e:c2:78:61:85:
         9f:54:c5:6c:7f:79:80:73:9f:5c:09:40:c0:98:b0:62:7f:e4:
         5f:6a:6f:89:bd:d5:70:9f:c2:6d:30:0d:c6:cb:8f:e8:ea:17:
         9c:15:dd:7f:18:8c:48:18:1c:f1:71:48:dc:72:91:02:92:f7:
         35:a1:8b:cb:4c:d8:a7:2f:86:9c:ca:f2:5b:75:db:84:e2:bb:
         76:e2:e7:83:66:23:96:26:60:8d:c3:16:0a:cb:0e:3b:7c:40:
         b4:c7:48:78:f9:64:70:9e:b0:aa:62:8d:8d:e2:78:37:c4:fd:
         91:d8:64:be:10:80:0f:e3:4d:d5:df:de:54:d9:ce:55:ac:17:
         67:99:f6:11:bb:ec:33:8a:8e:c1:eb:1b:64:38:fb:06:1f:cf:
         07:ae:d3:3c:59:10:c2:16:7a:0e:8c:9d:af:b4:6c:98:ab:a6:
         f1:da:ea:02:f9:37:4e:29:38:86:8f:a1:5b:39:d2:5a:0a:50:
         7c:11:d1:66:c0:54:54:d1:49:89:8e:9e:cf:21:a3:c6:d5:5c:
         1e:e8:1b:da:af:96:bb:27:b6:80:cb:01:a3:46:2b:11:e1:9e:
         a5:7e:2c:8f:a6:97:79:8a:70:c5:89:25:04:1f:c1:0c:61:f9:
         ba:ec:86:4f
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUHrVmGX0BqR14EqQdy3f0HpgQ0X8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjJDMjI0MTRCRjA4RkMwOEIwQUVCRjQ0RkFGODVBODU5
NzlEMTA1MzAeFw0yNTA2MDIwMDU4MjZaFw0yNjA2MDEwMTAzMjZaMDMxMTAvBgNV
BAMTKDEzQjMzOUI4RjMzNzU5REEwQTBGM0M5OThDMTI5MkEwNjhCOTM3QzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjZnJabC6I25M8mf1cmd4WH6FW
Zg9slDdcE2Vgz4owySXTbGuGhUxKOlkqZ4HxeeuyDdzsssUL2rm7iTxJuPc+OgeX
BLK2hf/hj4rA6erdHRokshFWOIpgf0B0Yk83O16FaTZkCXLyFux37CIALY+xTDeJ
Mk5juFZbGzBqDOJvmntT+CsLEEAQSwUG7weo05SbOmh15hkzfGE5y9Plasje10Ky
yG+R/f6l/ElDwob4N07pyyYmo5QOXMS7Tt7uYO2RD9rvwHYTGcsUNn2p/PMFwTU6
F6VAoS40wEjczm4wSTY1rahzjzU/16Afik4/7f42FRtbNZ/EFlKVGlVS29LHAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUE7M5uPM3WdoKDzyZjBKSoGi5N8MwHwYDVR0j
BBgwFoAU8sIkFL8I/Aiwrr9E+vhahZedEFMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m
NzQ0OGMxMS1mOGQzLTQ1N2QtOGUyMi04NDg4N2FiMjJhMzAvMC9GMkMyMjQxNEJG
MDhGQzA4QjBBRUJGNDRGQUY4NUE4NTk3OUQxMDUzLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRjJDMjI0MTRCRjA4RkMwOEIwQUVCRjQ0RkFGODVBODU5NzlE
MTA1My5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Y3NDQ4YzExLWY4ZDMtNDU3ZC04
ZTIyLTg0ODg3YWIyMmEzMC8wLzMxMzAzMzJlMzgzMzJlMzEzNDMzMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzMzODMxMzYzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGdTjzANBgkqhkiG
9w0BAQsFAAOCAQEADVq94XP383+K20CkBl7CeGGFn1TFbH95gHOfXAlAwJiwYn/k
X2pvib3VcJ/CbTANxsuP6OoXnBXdfxiMSBgc8XFI3HKRApL3NaGLy0zYpy+GnMry
W3XbhOK7duLng2YjliZgjcMWCssOO3xAtMdIePlkcJ6wqmKNjeJ4N8T9kdhkvhCA
D+NN1d/eVNnOVawXZ5n2EbvsM4qOwesbZDj7Bh/PB67TPFkQwhZ6Doydr7RsmKum
8drqAvk3Tik4ho+hWznSWgpQfBHRZsBUVNFJiY6ezyGjxtVcHugb2q+Wuye2gMsB
o0YrEeGepX4sj6aXeYpwxYklBB/BDGH5uuyGTw==
-----END CERTIFICATE-----
Generated at Mon Jun 16 07:44:16 2025 by rpki-client