Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/2c909737-1564-46ca-9009-8d28a56e98ee/0/3130332e37382e34342e302f32332d3233203d3e20313336303536.roa
File:                     3130332e37382e34342e302f32332d3233203d3e20313336303536.roa (raw, json)
Hash identifier:          ybooJJfuCLWJ6Wkr2xd+dtjVGbG8gCLcuXzjWzkx1V0=
Subject key identifier:   D4:F5:64:7E:EF:E9:75:E7:40:8E:8F:A7:60:BA:91:B2:A2:05:F9:EB
Certificate issuer:       /CN=1259FE91D21610D4BA487C60C804F66EB6591CA8
Certificate serial:       1A8D67E93F1544FD70B940154F0AB346381A3E10
Authority key identifier: 12:59:FE:91:D2:16:10:D4:BA:48:7C:60:C8:04:F6:6E:B6:59:1C:A8
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1259FE91D21610D4BA487C60C804F66EB6591CA8.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2c909737-1564-46ca-9009-8d28a56e98ee/0/3130332e37382e34342e302f32332d3233203d3e20313336303536.roa
Signing time:             Fri 11 Jul 2025 05:00:00 +0000
ROA not before:           Fri 11 Jul 2025 04:55:00 +0000
ROA not after:            Fri 10 Jul 2026 05:00:00 +0000
asID:                     136056
IP address blocks:        103.78.44.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/2c909737-1564-46ca-9009-8d28a56e98ee/0/1259FE91D21610D4BA487C60C804F66EB6591CA8.crl
                          rsync://repo-rpki.idnic.net/repo/2c909737-1564-46ca-9009-8d28a56e98ee/0/1259FE91D21610D4BA487C60C804F66EB6591CA8.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1259FE91D21610D4BA487C60C804F66EB6591CA8.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Jul 2025 02:59:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:8d:67:e9:3f:15:44:fd:70:b9:40:15:4f:0a:b3:46:38:1a:3e:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1259FE91D21610D4BA487C60C804F66EB6591CA8
        Validity
            Not Before: Jul 11 04:55:00 2025 GMT
            Not After : Jul 10 05:00:00 2026 GMT
        Subject: CN=D4F5647EEFE975E7408E8FA760BA91B2A205F9EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:8e:0b:29:7d:1e:e4:08:92:04:57:c3:fc:6f:
                    6b:6c:60:42:e1:77:e8:fb:f3:df:e2:66:d5:a3:82:
                    95:af:9e:d4:94:b9:ff:9d:a5:1e:27:93:c0:1e:a5:
                    e3:0a:cb:6a:f0:da:3d:2b:b8:d0:d8:04:0a:82:45:
                    a4:cb:9c:7b:a4:f7:d2:41:39:d8:24:61:4b:38:62:
                    67:88:d0:c9:1f:a8:af:91:0d:f5:d5:d9:69:72:e3:
                    37:20:60:51:00:61:7f:4b:f4:50:00:df:53:c2:0e:
                    49:0d:08:8a:5f:d8:f0:12:26:c7:10:63:ec:5c:3c:
                    dd:e6:36:e8:3f:48:d2:3b:cc:86:d6:ec:32:1f:87:
                    16:8f:6b:35:ea:ef:9a:f1:07:ea:59:6f:e2:28:1c:
                    b1:ee:4c:80:84:e1:b3:e3:f7:a9:7d:48:b6:cd:ca:
                    2e:68:9b:fc:53:f0:b9:1c:e7:5f:31:cb:46:b5:83:
                    42:e5:29:ff:62:c7:95:0f:6e:12:83:2d:dd:6c:22:
                    d1:e3:9d:7d:92:98:7e:20:79:f4:eb:15:33:7f:1f:
                    b0:d4:e3:f9:2b:03:98:ae:82:11:7a:22:64:a5:c1:
                    33:09:8f:df:98:f1:eb:92:e7:89:d7:f7:8f:e5:db:
                    94:4c:74:c6:54:a0:3f:28:56:fc:90:7c:6b:38:8c:
                    46:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:F5:64:7E:EF:E9:75:E7:40:8E:8F:A7:60:BA:91:B2:A2:05:F9:EB
            X509v3 Authority Key Identifier:
                keyid:12:59:FE:91:D2:16:10:D4:BA:48:7C:60:C8:04:F6:6E:B6:59:1C:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2c909737-1564-46ca-9009-8d28a56e98ee/0/1259FE91D21610D4BA487C60C804F66EB6591CA8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1259FE91D21610D4BA487C60C804F66EB6591CA8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2c909737-1564-46ca-9009-8d28a56e98ee/0/3130332e37382e34342e302f32332d3233203d3e20313336303536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.78.44.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ae:40:23:f3:31:33:f1:ad:c8:54:cf:1e:2c:a9:46:4e:25:46:
         0a:3a:8b:47:59:6f:93:aa:07:28:3c:b9:d9:01:f4:fd:fd:7a:
         55:4b:ba:fd:83:fa:2c:d8:0d:f1:74:ca:58:01:82:bb:36:17:
         60:c6:2c:9c:dc:64:0c:00:a6:97:9e:fe:63:84:1a:0a:0a:96:
         df:70:a5:49:74:4e:3b:1f:82:7a:74:ca:53:ff:25:40:f4:d0:
         4d:62:eb:67:6c:32:24:54:b6:bc:78:66:97:aa:5e:ce:af:db:
         5d:a0:ee:50:37:de:a9:ae:aa:55:81:e0:1a:62:be:4a:4d:02:
         39:61:f1:3e:37:b1:b6:33:42:ea:cf:db:67:f4:5f:9b:87:df:
         0b:e3:d2:61:b5:0a:6d:d1:70:b3:53:2d:8e:e2:fa:e9:e8:27:
         48:8d:b7:93:20:6b:90:b9:ca:25:d6:12:49:38:56:4d:fe:58:
         7c:e2:53:76:3b:07:7d:3f:19:10:af:c3:15:bf:aa:eb:ce:61:
         0f:e9:a1:f1:cb:1e:5b:62:05:5c:66:43:65:09:15:c7:9b:a3:
         6f:14:27:d1:fe:bb:19:51:22:be:6c:cb:ad:58:46:3e:82:6b:
         30:a5:f7:3b:2e:e9:5b:b3:6f:d7:22:b5:ca:0d:1d:8b:3b:fe:
         fe:a6:a5:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 07:33:10 2025 by rpki-client