Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS138077.roa
File:                     AS138077.roa (raw, json)
Hash identifier:          UCKJSKJmy3GTNoD6eukTDBVtLCZcmNucvTYninmm0cE=
Subject key identifier:   98:F0:4E:70:3D:CB:DF:02:D3:61:CF:C0:E7:01:CC:C4:C6:B1:B6:48
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       6E689D49C787683D2EB09AECE2CCD12ADF644C0D
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS138077.roa
Signing time:             Fri 04 Jul 2025 04:24:54 +0000
ROA not before:           Fri 04 Jul 2025 04:19:54 +0000
ROA not after:            Fri 03 Jul 2026 04:24:54 +0000
asID:                     138077
IP address blocks:        103.7.187.0/24 maxlen: 24
                          103.52.2.0/23 maxlen: 24
                          103.87.70.0/23 maxlen: 24
                          103.137.38.0/23 maxlen: 24
                          103.140.20.0/23 maxlen: 24
                          103.160.54.0/23 maxlen: 24
                          103.160.154.0/23 maxlen: 24
                          103.169.204.0/23 maxlen: 24
                          117.103.116.0/23 maxlen: 24
                          202.56.172.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Jul 2025 00:11:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:68:9d:49:c7:87:68:3d:2e:b0:9a:ec:e2:cc:d1:2a:df:64:4c:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jul  4 04:19:54 2025 GMT
            Not After : Jul  3 04:24:54 2026 GMT
        Subject: CN=98F04E703DCBDF02D361CFC0E701CCC4C6B1B648
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:1e:f3:f9:a8:79:26:92:07:18:28:8f:2b:bf:
                    58:1a:d8:e5:61:fe:c9:1d:b1:5f:94:ea:a3:cd:df:
                    82:cb:7f:e5:b9:a0:7c:d1:e5:17:85:df:e4:5b:f4:
                    79:8b:05:83:8a:3a:f9:9f:6c:cb:e5:17:9d:39:12:
                    cb:af:05:12:e2:90:7d:9e:74:df:35:f9:7b:5a:d0:
                    fa:8f:f1:28:2c:1b:5f:0d:3e:21:5e:e5:30:8f:2f:
                    e6:e0:43:4f:e1:3c:91:94:3f:ea:28:e1:b4:68:c4:
                    19:ed:39:4a:a0:dc:3c:98:e8:01:18:d5:1c:e9:fc:
                    10:7f:32:84:7e:22:c0:79:72:7c:77:c2:cf:a1:96:
                    a0:5d:de:7a:aa:e9:03:90:08:5d:af:64:77:64:9f:
                    54:e8:f5:9f:c6:6e:2a:31:4b:84:4b:0a:85:32:41:
                    26:3a:41:b0:ed:b3:c1:28:01:24:ba:9d:4d:90:4b:
                    f9:d9:5e:56:76:ec:f5:23:e0:19:02:11:69:b2:ed:
                    83:c1:bc:21:e0:c5:cc:c4:7b:fb:7d:1c:76:e9:35:
                    49:ab:e8:77:c1:8d:44:e2:76:0f:0b:80:49:c9:5e:
                    9a:2e:f9:dd:d7:2f:a7:76:aa:b4:a7:15:bf:47:e7:
                    dc:2c:01:29:4c:bd:96:ae:3e:35:35:d6:83:a3:1f:
                    40:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:F0:4E:70:3D:CB:DF:02:D3:61:CF:C0:E7:01:CC:C4:C6:B1:B6:48
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS138077.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.7.187.0/24
                  103.52.2.0/23
                  103.87.70.0/23
                  103.137.38.0/23
                  103.140.20.0/23
                  103.160.54.0/23
                  103.160.154.0/23
                  103.169.204.0/23
                  117.103.116.0/23
                  202.56.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         38:99:7b:07:30:2d:3b:5b:e7:bd:5c:75:ca:2b:ef:ba:c8:00:
         22:86:08:a3:c3:dd:1e:cc:73:3e:80:41:65:6e:c4:5e:1c:68:
         ad:98:ec:e4:99:f0:41:49:9a:aa:b8:54:a7:50:3b:a0:cc:59:
         bc:d9:5e:bd:b1:02:23:33:01:89:96:10:9d:4f:4b:b0:09:9e:
         29:70:bb:11:b6:6b:53:38:12:b5:2d:d8:e7:79:7f:9a:e4:06:
         96:6e:6f:44:40:1a:1b:06:1c:6f:ee:8d:56:9c:4e:51:e6:e1:
         69:d3:c2:55:0d:e7:af:1d:18:52:87:f0:6b:60:c1:bc:bb:f0:
         65:41:ec:21:f5:7b:87:6e:3d:37:fe:3c:8a:b8:f2:8d:65:a5:
         4b:58:04:9a:94:41:37:98:e9:e8:cf:65:60:db:b5:9f:a4:da:
         c4:30:52:15:be:e7:24:2c:0b:8b:ba:67:c5:a9:f4:dd:b3:a3:
         29:c7:f9:9d:c3:b7:e4:0c:0e:e7:88:ed:0d:09:d6:4e:01:49:
         bb:b2:d9:cc:4d:a6:16:64:75:e7:3c:59:9e:ae:d6:de:66:77:
         15:89:8e:10:15:89:df:c1:42:09:b0:e6:8b:b9:1a:c7:47:a6:
         c8:b4:b5:6a:6d:c3:e6:99:72:3b:c5:79:72:c4:3e:18:c4:75:
         75:e5:98:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 23:56:38 2025 by rpki-client