Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/fba48e4e-fc95-4acf-beac-d93a0f694421/0/3130332e3136342e3139322e302f32342d3234203d3e20313431393339.roa
File:                     3130332e3136342e3139322e302f32342d3234203d3e20313431393339.roa (raw, json)
Hash identifier:          V8FXW6i5FhDhWnneEy9JcwyRx6grWMlQZ/xTqZlJefU=
Subject key identifier:   8C:EA:E9:0C:CD:C7:84:01:70:94:FC:4C:B0:90:99:63:EF:AE:AA:32
Certificate issuer:       /CN=8659BE8500DEBB314448F1412FA1E264025A4148
Certificate serial:       74C364B3A2E3F07BA31257D66A0F4D3979E475A2
Authority key identifier: 86:59:BE:85:00:DE:BB:31:44:48:F1:41:2F:A1:E2:64:02:5A:41:48
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8659BE8500DEBB314448F1412FA1E264025A4148.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/fba48e4e-fc95-4acf-beac-d93a0f694421/0/3130332e3136342e3139322e302f32342d3234203d3e20313431393339.roa
Signing time:             Fri 01 Aug 2025 16:40:14 +0000
ROA not before:           Fri 01 Aug 2025 16:35:14 +0000
ROA not after:            Fri 31 Jul 2026 16:40:14 +0000
asID:                     141939
IP address blocks:        103.164.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/fba48e4e-fc95-4acf-beac-d93a0f694421/0/8659BE8500DEBB314448F1412FA1E264025A4148.crl
                          rsync://repo-rpki.idnic.net/repo/fba48e4e-fc95-4acf-beac-d93a0f694421/0/8659BE8500DEBB314448F1412FA1E264025A4148.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8659BE8500DEBB314448F1412FA1E264025A4148.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 09 Aug 2025 03:46:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:c3:64:b3:a2:e3:f0:7b:a3:12:57:d6:6a:0f:4d:39:79:e4:75:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8659BE8500DEBB314448F1412FA1E264025A4148
        Validity
            Not Before: Aug  1 16:35:14 2025 GMT
            Not After : Jul 31 16:40:14 2026 GMT
        Subject: CN=8CEAE90CCDC784017094FC4CB0909963EFAEAA32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:e2:b4:d0:e2:68:b3:dd:9a:5b:06:c7:ad:6b:
                    bb:e9:e8:64:10:7b:3f:87:fd:ca:31:e5:00:b8:b7:
                    ea:5d:94:3c:43:c2:83:53:43:07:f9:3f:6a:12:4e:
                    c6:31:75:20:d0:c5:b4:e4:64:b0:8b:ee:95:b4:51:
                    97:bb:6a:a9:3a:ca:c0:fb:a6:d0:5d:92:02:f4:eb:
                    b0:da:73:22:71:ee:fe:f2:17:b9:40:51:12:b2:b1:
                    08:73:70:22:8b:c0:59:e0:33:63:42:c0:e9:4e:6c:
                    57:19:08:31:c3:6e:0b:13:0a:08:66:90:48:d8:43:
                    eb:39:5e:6a:37:78:c9:0d:6f:e3:cb:3b:e2:a6:01:
                    e4:6c:f5:37:6a:93:b7:73:ff:20:6f:aa:f6:e2:e1:
                    d4:59:b6:13:e4:59:0b:ea:e5:34:d2:86:24:f9:b2:
                    9a:51:12:ad:f8:1a:22:a9:a8:fe:5a:cd:9e:43:47:
                    12:56:3d:60:b6:57:73:c1:b8:9e:6a:ba:c8:d6:ab:
                    1d:9f:6f:3c:9a:5e:b5:d8:1f:d5:ae:b9:99:0b:8a:
                    bb:b5:6a:bb:c8:7f:30:f8:86:36:e4:a0:46:b2:ca:
                    57:19:44:08:f6:6e:90:e2:4f:c0:f5:02:8b:76:d6:
                    fd:db:cd:12:a5:af:00:ab:4e:56:98:04:42:91:3a:
                    5b:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:EA:E9:0C:CD:C7:84:01:70:94:FC:4C:B0:90:99:63:EF:AE:AA:32
            X509v3 Authority Key Identifier:
                keyid:86:59:BE:85:00:DE:BB:31:44:48:F1:41:2F:A1:E2:64:02:5A:41:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/fba48e4e-fc95-4acf-beac-d93a0f694421/0/8659BE8500DEBB314448F1412FA1E264025A4148.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8659BE8500DEBB314448F1412FA1E264025A4148.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fba48e4e-fc95-4acf-beac-d93a0f694421/0/3130332e3136342e3139322e302f32342d3234203d3e20313431393339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.164.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c2:d8:99:8a:ce:f2:53:14:94:19:b5:ee:90:26:43:58:09:28:
         90:e0:77:4f:01:ec:61:44:0e:55:5b:5a:cd:36:94:a8:97:8b:
         04:3a:80:ce:fb:c7:ac:83:b3:29:8b:16:7d:2d:ec:3a:da:32:
         c1:b0:96:05:00:20:13:d5:c5:e1:26:71:9d:ce:69:58:91:5d:
         38:0f:3e:46:4b:a9:1a:0f:dc:8e:20:27:f2:28:02:d0:d5:39:
         8e:a5:95:69:05:56:c5:93:a2:da:4a:0a:5e:99:ec:c0:5e:a8:
         32:cc:37:d0:46:c0:e2:d7:87:66:bf:c8:a0:30:4e:04:61:20:
         74:73:3b:8d:38:38:61:7a:25:67:11:08:f4:14:fe:d5:e8:7c:
         48:b6:24:34:94:69:b6:b1:a0:7e:9f:e3:90:40:a0:29:78:3c:
         96:d9:34:fd:5f:32:ae:4a:4d:ef:45:a8:2f:8e:83:a1:b7:34:
         de:a9:66:17:ec:c5:ca:af:7f:0d:84:2b:cb:7f:06:5d:4d:f2:
         80:2b:90:8f:d3:a5:28:e4:91:2d:6e:f1:c8:43:6e:8e:18:74:
         6f:f5:cc:73:f2:a6:ec:7a:98:53:aa:90:17:89:c2:d7:b5:c1:
         7b:58:c6:fb:40:91:58:d1:18:af:1b:a0:1d:a6:75:d2:0c:79:
         2d:90:57:ca
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUdMNks6Lj8HujElfWag9NOXnkdaIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODY1OUJFODUwMERFQkIzMTQ0NDhGMTQxMkZBMUUyNjQw
MjVBNDE0ODAeFw0yNTA4MDExNjM1MTRaFw0yNjA3MzExNjQwMTRaMDMxMTAvBgNV
BAMTKDhDRUFFOTBDQ0RDNzg0MDE3MDk0RkM0Q0IwOTA5OTYzRUZBRUFBMzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC4rTQ4miz3ZpbBseta7vp6GQQ
ez+H/cox5QC4t+pdlDxDwoNTQwf5P2oSTsYxdSDQxbTkZLCL7pW0UZe7aqk6ysD7
ptBdkgL067DacyJx7v7yF7lAURKysQhzcCKLwFngM2NCwOlObFcZCDHDbgsTCghm
kEjYQ+s5Xmo3eMkNb+PLO+KmAeRs9Tdqk7dz/yBvqvbi4dRZthPkWQvq5TTShiT5
sppREq34GiKpqP5azZ5DRxJWPWC2V3PBuJ5qusjWqx2fbzyaXrXYH9WuuZkLiru1
arvIfzD4hjbkoEayylcZRAj2bpDiT8D1Aot21v3bzRKlrwCrTlaYBEKROlvdAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUjOrpDM3HhAFwlPxMsJCZY++uqjIwHwYDVR0j
BBgwFoAUhlm+hQDeuzFESPFBL6HiZAJaQUgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m
YmE0OGU0ZS1mYzk1LTRhY2YtYmVhYy1kOTNhMGY2OTQ0MjEvMC84NjU5QkU4NTAw
REVCQjMxNDQ0OEYxNDEyRkExRTI2NDAyNUE0MTQ4LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvODY1OUJFODUwMERFQkIzMTQ0NDhGMTQxMkZBMUUyNjQwMjVB
NDE0OC5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2ZiYTQ4ZTRlLWZjOTUtNGFjZi1i
ZWFjLWQ5M2EwZjY5NDQyMS8wLzMxMzAzMzJlMzEzNjM0MmUzMTM5MzIyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzEzOTMzMzkucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnpMAwDQYJ
KoZIhvcNAQELBQADggEBAMLYmYrO8lMUlBm17pAmQ1gJKJDgd08B7GFEDlVbWs02
lKiXiwQ6gM77x6yDsymLFn0t7DraMsGwlgUAIBPVxeEmcZ3OaViRXTgPPkZLqRoP
3I4gJ/IoAtDVOY6llWkFVsWTotpKCl6Z7MBeqDLMN9BGwOLXh2a/yKAwTgRhIHRz
O404OGF6JWcRCPQU/tXofEi2JDSUabaxoH6f45BAoCl4PJbZNP1fMq5KTe9FqC+O
g6G3NN6pZhfsxcqvfw2EK8t/Bl1N8oArkI/TpSjkkS1u8chDbo4YdG/1zHPypux6
mFOqkBeJwte1wXtYxvtAkVjRGK8boB2mddIMeS2QV8o=
-----END CERTIFICATE-----
Generated at Thu Aug 7 23:56:29 2025 by rpki-client