Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/b42aa0a9-4588-4f87-ab89-f3b9dc6107b6/0/3130332e3134362e3132382e302f32332d3233203d3e20313430303238.roa
File:                     3130332e3134362e3132382e302f32332d3233203d3e20313430303238.roa (raw, json)
Hash identifier:          yKK3Hq8hEk1LGbPgkhx2NEZ4T23a1BRrLBg1d7QrEfc=
Subject key identifier:   B2:75:DF:EC:90:D7:7F:91:90:78:0A:C3:BB:21:44:44:0E:31:36:BE
Certificate issuer:       /CN=D51CE7B1B9196EF73BFF65318453095C925ECF91
Certificate serial:       79DD7C48CAC60D52385DC5EE664359D86ED9A9CC
Authority key identifier: D5:1C:E7:B1:B9:19:6E:F7:3B:FF:65:31:84:53:09:5C:92:5E:CF:91
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D51CE7B1B9196EF73BFF65318453095C925ECF91.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/b42aa0a9-4588-4f87-ab89-f3b9dc6107b6/0/3130332e3134362e3132382e302f32332d3233203d3e20313430303238.roa
Signing time:             Thu 24 Jul 2025 08:00:01 +0000
ROA not before:           Thu 24 Jul 2025 07:55:01 +0000
ROA not after:            Thu 23 Jul 2026 08:00:01 +0000
asID:                     140028
IP address blocks:        103.146.128.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/b42aa0a9-4588-4f87-ab89-f3b9dc6107b6/0/D51CE7B1B9196EF73BFF65318453095C925ECF91.crl
                          rsync://repo-rpki.idnic.net/repo/b42aa0a9-4588-4f87-ab89-f3b9dc6107b6/0/D51CE7B1B9196EF73BFF65318453095C925ECF91.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D51CE7B1B9196EF73BFF65318453095C925ECF91.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Jul 2025 10:58:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:dd:7c:48:ca:c6:0d:52:38:5d:c5:ee:66:43:59:d8:6e:d9:a9:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D51CE7B1B9196EF73BFF65318453095C925ECF91
        Validity
            Not Before: Jul 24 07:55:01 2025 GMT
            Not After : Jul 23 08:00:01 2026 GMT
        Subject: CN=B275DFEC90D77F9190780AC3BB2144440E3136BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:47:8a:b6:39:4f:16:86:e7:b5:43:2b:bb:4e:
                    d9:5e:d2:42:06:c6:4e:25:d5:23:bf:7f:1f:38:cf:
                    8f:43:36:c4:14:29:d4:fc:ce:ae:e0:a4:8f:10:f6:
                    87:d4:28:7c:44:10:92:8d:98:c7:92:c4:ee:f1:7a:
                    46:6e:91:ee:06:9a:ce:c1:47:39:8c:3d:d3:70:3f:
                    b8:1b:05:b5:c1:63:e3:82:4a:5d:6a:47:36:f7:63:
                    1b:8e:92:df:54:92:80:ef:a4:d8:91:23:af:7e:09:
                    12:b2:bb:df:55:fd:b5:fa:91:ce:a7:09:b2:f5:19:
                    f8:fb:ad:c0:73:bc:ce:c6:8f:78:95:56:03:03:50:
                    01:a3:1e:73:46:e4:9a:d2:ea:ac:83:d6:72:90:94:
                    b5:06:f0:c8:45:e8:73:0b:4c:ce:1c:bd:45:67:c7:
                    76:06:9c:de:75:0e:78:95:97:3b:a6:ad:e7:08:74:
                    4b:b5:0a:99:02:fe:2b:ab:7b:72:9e:39:81:93:2a:
                    a2:f8:0f:31:8f:d8:26:71:b2:a9:fd:c6:2e:15:79:
                    a0:21:d8:0a:d7:ca:10:05:7b:21:be:b0:c8:e5:55:
                    02:46:dc:7c:38:01:94:23:63:b3:61:d3:4d:98:e1:
                    f6:92:49:79:78:a4:d4:a6:69:61:39:0d:2c:1f:83:
                    37:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:75:DF:EC:90:D7:7F:91:90:78:0A:C3:BB:21:44:44:0E:31:36:BE
            X509v3 Authority Key Identifier:
                keyid:D5:1C:E7:B1:B9:19:6E:F7:3B:FF:65:31:84:53:09:5C:92:5E:CF:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/b42aa0a9-4588-4f87-ab89-f3b9dc6107b6/0/D51CE7B1B9196EF73BFF65318453095C925ECF91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D51CE7B1B9196EF73BFF65318453095C925ECF91.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b42aa0a9-4588-4f87-ab89-f3b9dc6107b6/0/3130332e3134362e3132382e302f32332d3233203d3e20313430303238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.146.128.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c7:f5:93:fe:16:e9:3f:87:06:09:6f:20:d5:78:6f:e3:71:60:
         5f:91:30:05:13:2f:9d:ef:33:9d:05:e9:52:77:8d:bd:7a:99:
         4b:9c:f0:66:a7:c0:e4:52:1a:9d:c2:56:eb:eb:86:ef:0e:2f:
         1e:fa:08:67:08:24:03:dd:d3:b3:33:88:cb:50:c2:a0:2a:41:
         7b:02:d2:15:01:89:27:b8:66:79:a6:07:44:2b:ed:8b:d3:e6:
         37:79:20:18:e1:09:2b:46:3f:dc:f1:87:ee:69:2a:29:83:aa:
         5e:0b:ce:45:e4:75:6b:70:bc:de:bb:2e:47:5b:ca:a8:f4:d1:
         1f:93:a8:16:69:be:c5:03:b6:c6:7b:b7:5f:2e:ac:9a:cc:0d:
         ce:09:aa:9b:bb:e9:36:e6:f7:67:a3:7b:c3:f9:18:92:a2:0d:
         15:48:c2:62:9c:b8:cd:75:47:b0:ca:2f:fd:2a:53:ed:03:eb:
         93:c7:ea:8b:6c:64:5b:51:85:71:2e:12:7e:2c:f2:5d:ef:b2:
         89:cd:fa:31:bd:00:fe:21:28:8d:27:88:7c:d0:0b:70:96:23:
         bd:7e:de:b2:58:dd:c3:2f:58:8d:e3:fa:80:fa:c4:b5:1f:41:
         95:76:1a:3d:3c:77:cd:3f:ab:d0:13:ea:48:56:fe:2d:86:68:
         1f:9c:a5:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 13:24:39 2025 by rpki-client