Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/53de5035-84e1-44c6-9cf9-4ea0bbaa093f/0/3130332e3131302e3130302e302f32332d3233203d3e20313530393337.roa
File:                     3130332e3131302e3130302e302f32332d3233203d3e20313530393337.roa (raw, json)
Hash identifier:          QWlvcWw+MqtfsyLo2e2j057MAyn4Zw7MQ10D6boTyYA=
Subject key identifier:   AE:B4:BF:67:4E:C0:1F:67:1A:52:EB:5A:B7:25:DD:B0:0D:FB:38:D4
Certificate issuer:       /CN=E74A2346929DE84143E5DF0DD921764C285B01A2
Certificate serial:       59FA50D8BF36013C0742B6299BC743EDCFB63DB7
Authority key identifier: E7:4A:23:46:92:9D:E8:41:43:E5:DF:0D:D9:21:76:4C:28:5B:01:A2
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E74A2346929DE84143E5DF0DD921764C285B01A2.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/53de5035-84e1-44c6-9cf9-4ea0bbaa093f/0/3130332e3131302e3130302e302f32332d3233203d3e20313530393337.roa
Signing time:             Thu 10 Jul 2025 03:35:05 +0000
ROA not before:           Thu 10 Jul 2025 03:30:05 +0000
ROA not after:            Thu 09 Jul 2026 03:35:05 +0000
asID:                     150937
IP address blocks:        103.110.100.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/53de5035-84e1-44c6-9cf9-4ea0bbaa093f/0/E74A2346929DE84143E5DF0DD921764C285B01A2.crl
                          rsync://repo-rpki.idnic.net/repo/53de5035-84e1-44c6-9cf9-4ea0bbaa093f/0/E74A2346929DE84143E5DF0DD921764C285B01A2.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E74A2346929DE84143E5DF0DD921764C285B01A2.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 22 Jul 2025 19:59:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:fa:50:d8:bf:36:01:3c:07:42:b6:29:9b:c7:43:ed:cf:b6:3d:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E74A2346929DE84143E5DF0DD921764C285B01A2
        Validity
            Not Before: Jul 10 03:30:05 2025 GMT
            Not After : Jul  9 03:35:05 2026 GMT
        Subject: CN=AEB4BF674EC01F671A52EB5AB725DDB00DFB38D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:e5:41:9a:65:f2:a9:a7:7d:33:ef:e3:8f:ac:
                    1b:83:36:24:f6:11:95:e5:40:ff:c2:59:3d:ec:fa:
                    dd:b1:53:b8:b2:fd:cd:9c:f2:1f:dd:eb:07:9c:d0:
                    be:f8:79:e5:06:4e:b5:2b:04:13:6c:94:40:7c:e4:
                    b4:e4:ec:a5:23:cd:7b:27:91:89:6f:ea:e3:b6:73:
                    9d:77:1c:53:0d:27:db:d2:d3:01:56:69:91:24:f5:
                    82:7e:db:a7:0e:c5:ca:bd:d1:32:b6:36:97:ee:7b:
                    91:7d:45:ef:7b:14:dd:66:fe:52:9d:c1:4e:4c:cd:
                    30:84:e0:5c:c0:13:f3:b3:c4:a1:99:da:97:b9:55:
                    5b:b5:23:dd:9a:fd:1a:c1:86:68:05:f8:43:da:9e:
                    f5:15:96:16:7c:e5:98:ac:ba:6c:46:35:b0:7b:8a:
                    98:20:df:a2:80:00:a8:3e:df:e2:56:fe:f2:18:51:
                    c0:88:c9:34:5a:ca:8b:45:1e:72:65:df:08:9a:a9:
                    6c:14:ed:53:70:8a:40:d0:44:c2:05:e5:3b:ea:06:
                    3a:4f:33:46:d0:2a:70:8e:10:84:c6:cf:b2:ed:62:
                    7e:30:80:c9:31:c8:f9:50:99:1b:e8:8c:23:bd:e8:
                    68:98:c7:95:3f:a0:c5:1b:b4:47:e1:79:0a:24:bf:
                    5d:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:B4:BF:67:4E:C0:1F:67:1A:52:EB:5A:B7:25:DD:B0:0D:FB:38:D4
            X509v3 Authority Key Identifier:
                keyid:E7:4A:23:46:92:9D:E8:41:43:E5:DF:0D:D9:21:76:4C:28:5B:01:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/53de5035-84e1-44c6-9cf9-4ea0bbaa093f/0/E74A2346929DE84143E5DF0DD921764C285B01A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E74A2346929DE84143E5DF0DD921764C285B01A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/53de5035-84e1-44c6-9cf9-4ea0bbaa093f/0/3130332e3131302e3130302e302f32332d3233203d3e20313530393337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.110.100.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6c:28:ab:e3:cf:82:9b:22:87:35:c6:f0:bf:67:4d:7f:8c:c0:
         20:26:88:4b:1b:98:00:3d:e8:1f:24:ff:1c:00:13:45:49:39:
         af:0e:9f:b0:64:4b:94:43:96:d3:9a:f2:0a:84:64:d3:89:f8:
         ef:9f:ee:b7:7c:ae:86:de:63:79:53:9e:c9:dc:d3:49:06:0c:
         96:37:9a:34:cd:2f:92:87:06:08:42:46:44:1b:1a:78:09:16:
         21:39:af:e9:62:61:f1:6f:b7:68:ef:92:14:e2:90:d3:61:3c:
         48:94:7f:fc:b6:e6:ce:68:f2:8a:61:72:38:6e:00:76:d3:48:
         c3:e1:e4:09:2a:32:55:8c:8a:04:ee:36:81:52:a5:39:5b:4d:
         22:0d:22:1b:c7:2a:10:92:be:71:ba:b7:22:e2:3f:b4:c7:1a:
         ae:bc:d2:0b:d5:c2:2d:de:aa:27:24:a2:d4:a1:f0:53:3a:1e:
         1e:9f:c2:f4:8a:50:07:28:94:45:de:44:b7:ff:4c:27:39:2e:
         bf:00:c4:b0:9e:cc:50:d8:f0:30:d8:7e:bc:0a:95:6b:e5:64:
         b6:7c:3c:bc:43:e4:95:d1:3a:2c:18:66:1a:55:89:e3:d9:ab:
         00:8f:17:16:dd:84:5d:63:24:0e:33:92:8c:3d:0d:0f:ce:21:
         58:57:a8:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 19:21:12 2025 by rpki-client