Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/2050dcc3-84dd-4595-ba2c-bc69989692f1/0/3130332e3138352e34332e302f32342d3234203d3e20313333333630.roa
File:                     3130332e3138352e34332e302f32342d3234203d3e20313333333630.roa (raw, json)
Hash identifier:          pZz62m1gD3j25rkNtr+ZrpUFopI0lVMRASTdO0j7bx0=
Subject key identifier:   7A:A2:63:FB:47:B4:A3:F2:F1:1F:74:A8:1E:AA:1B:BA:5B:E1:6D:79
Certificate issuer:       /CN=D7C76122426491B81F84E5A824E4ABEB8582BAC4
Certificate serial:       3A01BA4010CE29F0422A4B3EF22AF11C1277AB97
Authority key identifier: D7:C7:61:22:42:64:91:B8:1F:84:E5:A8:24:E4:AB:EB:85:82:BA:C4
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7C76122426491B81F84E5A824E4ABEB8582BAC4.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2050dcc3-84dd-4595-ba2c-bc69989692f1/0/3130332e3138352e34332e302f32342d3234203d3e20313333333630.roa
Signing time:             Tue 15 Jul 2025 03:27:11 +0000
ROA not before:           Tue 15 Jul 2025 03:22:11 +0000
ROA not after:            Tue 14 Jul 2026 03:27:11 +0000
asID:                     133360
IP address blocks:        103.185.43.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/2050dcc3-84dd-4595-ba2c-bc69989692f1/0/D7C76122426491B81F84E5A824E4ABEB8582BAC4.crl
                          rsync://repo-rpki.idnic.net/repo/2050dcc3-84dd-4595-ba2c-bc69989692f1/0/D7C76122426491B81F84E5A824E4ABEB8582BAC4.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7C76122426491B81F84E5A824E4ABEB8582BAC4.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Jul 2025 14:56:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:01:ba:40:10:ce:29:f0:42:2a:4b:3e:f2:2a:f1:1c:12:77:ab:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7C76122426491B81F84E5A824E4ABEB8582BAC4
        Validity
            Not Before: Jul 15 03:22:11 2025 GMT
            Not After : Jul 14 03:27:11 2026 GMT
        Subject: CN=7AA263FB47B4A3F2F11F74A81EAA1BBA5BE16D79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b9:63:65:71:43:f0:a7:d5:cb:ba:5a:b9:6b:
                    ef:e1:a4:72:68:ca:27:2c:f6:e3:ad:86:82:b3:50:
                    d8:b2:ee:f5:f3:43:44:5f:15:93:5d:bf:59:0b:90:
                    d5:22:dd:dc:65:10:1e:0f:83:5f:e2:75:5c:95:10:
                    3f:cc:26:27:04:93:eb:0a:a4:1b:fb:7a:dc:2f:aa:
                    65:f2:0e:08:c5:4f:87:bc:70:7b:3b:af:6d:f7:49:
                    f6:2e:b6:35:09:33:4a:0a:75:55:c0:86:46:92:1b:
                    63:af:1e:e2:18:e4:5e:dd:99:4c:f7:ac:6e:eb:bd:
                    57:2c:65:7f:a0:a8:cb:8b:a1:17:9d:d9:19:5c:6b:
                    79:6c:a4:f0:aa:43:60:2f:f0:e5:ed:a9:9f:51:45:
                    e9:e0:14:26:f3:63:e5:59:2f:7f:b4:05:19:4a:45:
                    ec:04:19:0a:ee:40:f3:36:c6:75:26:ca:cf:d7:5a:
                    45:13:ab:25:61:82:ae:80:34:12:6d:8c:4b:54:2d:
                    27:6e:19:12:5e:1f:50:da:1c:77:1f:23:e5:30:cb:
                    cb:95:e3:92:df:83:ac:f7:36:d3:cd:d0:66:ce:d1:
                    0c:49:f4:82:db:97:87:b4:9a:db:e2:27:68:03:d8:
                    59:28:ce:8d:fe:62:61:96:96:78:99:f2:5a:af:49:
                    6e:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:A2:63:FB:47:B4:A3:F2:F1:1F:74:A8:1E:AA:1B:BA:5B:E1:6D:79
            X509v3 Authority Key Identifier:
                keyid:D7:C7:61:22:42:64:91:B8:1F:84:E5:A8:24:E4:AB:EB:85:82:BA:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2050dcc3-84dd-4595-ba2c-bc69989692f1/0/D7C76122426491B81F84E5A824E4ABEB8582BAC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7C76122426491B81F84E5A824E4ABEB8582BAC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2050dcc3-84dd-4595-ba2c-bc69989692f1/0/3130332e3138352e34332e302f32342d3234203d3e20313333333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.185.43.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:1e:29:3a:59:a5:a7:3f:5b:38:8f:0d:55:72:96:3f:fd:a1:
         8e:25:0f:73:f8:9c:0b:9d:e6:e2:11:61:94:a1:00:6e:59:be:
         a9:3f:a5:e2:e6:02:64:c9:50:de:ae:ed:d2:df:8f:70:dc:30:
         4c:03:ad:0a:75:b5:23:e9:aa:9e:8a:24:ea:cb:90:da:7a:fe:
         e8:c4:95:f7:8f:df:37:0a:2b:d5:12:a3:8c:ed:8d:fc:d0:ce:
         b7:2d:76:3f:b3:6e:cb:62:09:70:cf:90:65:2b:5d:8b:ed:84:
         56:5a:77:94:ce:17:b2:29:ea:9f:44:a9:06:de:1c:19:50:ed:
         79:d7:d6:53:2b:20:fe:fa:50:b1:8c:91:ab:64:f1:c6:cf:55:
         c4:61:fd:77:a6:10:27:04:fa:20:99:b2:7f:b4:23:03:b0:f1:
         4a:ab:9f:98:cd:d3:03:55:6a:38:cb:e6:bc:e4:78:a0:07:87:
         f1:33:ba:ad:45:1e:93:6e:7a:23:99:68:3b:32:53:cd:9e:9e:
         02:4a:f9:07:07:2e:a4:67:68:86:82:c5:18:d5:65:d8:9b:8f:
         14:26:f5:59:86:73:84:6d:5f:ba:86:7a:14:b5:91:ec:93:6a:
         10:70:ea:a8:2c:f8:fe:b6:93:dc:41:9e:25:54:d0:e2:f3:3b:
         8b:f1:af:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 04:37:02 2025 by rpki-client