Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3130332e32362e342e302f32332d3234203d3e2039333431.roa
File:                     3130332e32362e342e302f32332d3234203d3e2039333431.roa (raw, json)
Hash identifier:          ATyD/ozP89z/M/P26xfHg9yQ39SUBPTVF0bdpB/3taQ=
Subject key identifier:   8F:D8:BF:4A:55:D0:FC:F7:16:B0:38:A1:61:4B:C8:B5:F6:0E:C4:C4
Certificate issuer:       /CN=61566F205F7037962069571320603B274357CC6D
Certificate serial:       1660290C1747464A927BBD2566FCB65412A6EE4A
Authority key identifier: 61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3130332e32362e342e302f32332d3234203d3e2039333431.roa
Signing time:             Wed 09 Jul 2025 00:00:01 +0000
ROA not before:           Tue 08 Jul 2025 23:55:01 +0000
ROA not after:            Wed 08 Jul 2026 00:00:01 +0000
asID:                     9341
IP address blocks:        103.26.4.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.crl
                          rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 23 Jul 2025 08:39:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:60:29:0c:17:47:46:4a:92:7b:bd:25:66:fc:b6:54:12:a6:ee:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61566F205F7037962069571320603B274357CC6D
        Validity
            Not Before: Jul  8 23:55:01 2025 GMT
            Not After : Jul  8 00:00:01 2026 GMT
        Subject: CN=8FD8BF4A55D0FCF716B038A1614BC8B5F60EC4C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:70:82:84:6c:28:94:14:ae:e3:47:52:b3:ca:
                    54:49:f5:6e:11:97:25:95:a8:a0:06:60:9c:6b:d5:
                    5e:e4:e8:50:54:62:ad:4a:68:8c:a8:c0:9c:ee:56:
                    42:76:1b:46:a4:a0:6e:b1:bb:06:4a:8d:61:a1:e1:
                    d0:85:ec:a5:7d:2f:0a:21:be:9e:1f:59:29:78:33:
                    1c:45:06:75:1c:97:ae:2d:77:56:f0:c3:0d:c3:50:
                    0c:b3:6e:53:95:76:ac:70:67:f0:6b:0e:0c:eb:9d:
                    be:14:c1:2f:5d:20:6b:a8:e4:0c:76:45:95:63:3d:
                    53:95:09:41:98:bb:c3:88:64:75:96:92:0a:02:6f:
                    6f:3f:ab:a1:d4:dc:ec:0c:60:4a:8e:b9:5e:af:6f:
                    26:df:8d:b9:e9:06:7a:d8:0b:20:8f:bf:43:3b:e3:
                    38:bd:d4:83:5b:b4:78:e9:14:4f:ae:b1:da:81:fe:
                    65:f5:07:4f:40:53:1f:bb:ba:de:3d:28:d8:1f:ed:
                    b9:bc:7e:21:0b:6e:d5:26:8a:ca:05:0a:00:5c:90:
                    d6:12:1c:49:c8:0d:27:5a:f2:95:56:84:65:0f:58:
                    39:8b:81:ea:8c:96:ec:a9:55:d2:b6:c6:d1:b5:31:
                    68:64:73:fd:c9:8f:e2:25:39:3e:c9:c3:cd:2f:28:
                    36:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:D8:BF:4A:55:D0:FC:F7:16:B0:38:A1:61:4B:C8:B5:F6:0E:C4:C4
            X509v3 Authority Key Identifier:
                keyid:61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3130332e32362e342e302f32332d3234203d3e2039333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.26.4.0/23

    Signature Algorithm: sha256WithRSAEncryption
         17:01:45:32:8d:c8:c4:3f:64:0f:fe:e8:4e:e3:ce:ba:d5:60:
         c0:8c:11:39:bf:f3:60:49:1c:9d:e2:7c:41:1b:7b:af:1d:3c:
         81:9b:1b:d2:18:be:44:ab:11:c6:07:92:2b:0c:c2:c4:31:3e:
         61:a2:ea:a3:88:9c:7b:1f:65:03:51:a8:6e:99:77:46:6e:4d:
         ba:a1:ef:b4:10:19:55:3c:03:94:69:ae:e9:71:d4:8f:ed:04:
         7d:46:79:69:47:5d:8b:8f:c4:af:df:6b:da:5f:0d:c3:7c:33:
         90:ab:3f:24:89:96:dd:c4:a6:91:34:0e:57:0a:43:11:58:35:
         b5:b4:9d:6e:80:bd:12:70:0a:a5:54:7b:95:f7:34:29:02:79:
         c2:2f:30:90:3f:72:38:95:fe:10:59:e8:b7:ec:b6:35:49:26:
         9d:92:81:95:53:7e:6b:42:00:f1:2a:50:10:17:a3:34:93:cb:
         19:ae:da:04:59:77:22:ae:c4:fa:9f:45:c3:d4:45:6c:59:a7:
         bd:11:93:7c:8f:36:26:98:e6:2c:ea:9f:6d:d9:d1:f7:a5:11:
         77:0a:15:8b:83:57:90:bd:5e:be:f9:02:1f:d0:64:d3:3a:1f:
         01:0d:4e:13:ca:b7:27:f9:29:f2:20:b4:7a:59:cb:c4:e2:0b:
         53:33:fb:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 18:09:07 2025 by rpki-client