Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/ed49d49b-daea-48c0-8d77-13738b745772/0/3130332e3134322e38382e302f32332d3233203d3e20313339333638.roa
File:                     3130332e3134322e38382e302f32332d3233203d3e20313339333638.roa (raw, json)
Hash identifier:          Kd6yFUn57xVcXoTM88DEShXXV1IKo3OmzgfM17lNe74=
Subject key identifier:   B3:12:64:BB:0D:3B:8F:D3:47:88:C7:74:7C:B1:52:46:11:B7:6E:C2
Certificate issuer:       /CN=6E77582BC25A225D744F9E7A58CA279875307F2F
Certificate serial:       16828CDD1EC6459D891F3EB72D8A2B0DE052E88D
Authority key identifier: 6E:77:58:2B:C2:5A:22:5D:74:4F:9E:7A:58:CA:27:98:75:30:7F:2F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6E77582BC25A225D744F9E7A58CA279875307F2F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ed49d49b-daea-48c0-8d77-13738b745772/0/3130332e3134322e38382e302f32332d3233203d3e20313339333638.roa
Signing time:             Wed 09 Jul 2025 04:03:18 +0000
ROA not before:           Wed 09 Jul 2025 03:58:18 +0000
ROA not after:            Wed 08 Jul 2026 04:03:18 +0000
asID:                     139368
IP address blocks:        103.142.88.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ed49d49b-daea-48c0-8d77-13738b745772/0/6E77582BC25A225D744F9E7A58CA279875307F2F.crl
                          rsync://repo-rpki.idnic.net/repo/ed49d49b-daea-48c0-8d77-13738b745772/0/6E77582BC25A225D744F9E7A58CA279875307F2F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6E77582BC25A225D744F9E7A58CA279875307F2F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 25 Jul 2025 19:57:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:82:8c:dd:1e:c6:45:9d:89:1f:3e:b7:2d:8a:2b:0d:e0:52:e8:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6E77582BC25A225D744F9E7A58CA279875307F2F
        Validity
            Not Before: Jul  9 03:58:18 2025 GMT
            Not After : Jul  8 04:03:18 2026 GMT
        Subject: CN=B31264BB0D3B8FD34788C7747CB1524611B76EC2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:7d:e9:27:3d:20:c6:62:ce:2b:e8:bc:45:a3:
                    f0:d0:c9:99:32:30:e6:a0:fc:56:3d:f3:09:fa:24:
                    b5:6b:d5:46:12:c1:a7:cc:ac:ce:17:11:f5:01:bb:
                    aa:36:0b:20:a5:51:c8:9c:52:61:e8:95:25:15:cb:
                    c5:6e:e6:14:db:1c:b7:34:b2:12:20:9e:b2:5e:02:
                    41:44:96:3e:71:7f:6c:e3:12:b8:b0:5e:52:ae:59:
                    7c:f4:04:42:9c:be:f5:90:34:02:6a:17:c8:b5:3c:
                    ac:35:4e:3e:72:8f:58:49:ec:fd:81:19:40:0d:46:
                    68:3f:9e:0d:94:04:86:45:8e:e2:ea:37:aa:3c:a0:
                    67:54:74:09:82:af:aa:b9:d5:d0:d9:c7:fd:52:25:
                    c0:ed:05:ff:fb:0f:bb:6c:2c:84:2f:c1:86:94:a9:
                    83:ea:d9:0c:00:6f:31:1a:4e:35:02:0c:9c:13:84:
                    6e:bb:e2:78:ab:39:3d:33:73:d0:da:6f:17:e4:1a:
                    3e:ce:e6:ff:39:36:c3:f7:ff:1a:5b:40:2a:05:ef:
                    bf:36:66:5d:de:8d:a5:70:78:07:f5:dd:2d:1b:60:
                    a5:bd:ea:07:79:8f:c6:c4:4a:13:8f:8f:a4:73:8c:
                    0c:34:e9:17:8a:9a:a8:b6:0c:a4:e9:33:b3:f3:71:
                    b1:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:12:64:BB:0D:3B:8F:D3:47:88:C7:74:7C:B1:52:46:11:B7:6E:C2
            X509v3 Authority Key Identifier:
                keyid:6E:77:58:2B:C2:5A:22:5D:74:4F:9E:7A:58:CA:27:98:75:30:7F:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ed49d49b-daea-48c0-8d77-13738b745772/0/6E77582BC25A225D744F9E7A58CA279875307F2F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6E77582BC25A225D744F9E7A58CA279875307F2F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ed49d49b-daea-48c0-8d77-13738b745772/0/3130332e3134322e38382e302f32332d3233203d3e20313339333638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.142.88.0/23

    Signature Algorithm: sha256WithRSAEncryption
         69:66:c2:95:84:3e:cf:77:25:d0:72:85:c8:f5:47:0b:d7:c5:
         5d:5a:b4:5e:7e:b9:79:fd:01:90:3b:9b:ae:ff:7c:fb:a9:45:
         ab:53:03:f9:b9:ca:83:77:7c:e8:13:e5:4c:f3:09:d4:ab:2c:
         f7:e0:21:d5:4c:ae:d9:3c:14:36:07:a5:1f:81:e1:3f:f9:a7:
         2b:6e:fb:d9:18:41:31:f4:73:48:02:8e:99:f9:34:82:49:9f:
         cd:3d:9c:dc:fe:08:f0:47:9f:c8:55:44:82:fd:ed:f7:2e:a5:
         0d:37:ee:80:e9:55:94:03:42:f1:a1:71:82:e7:7f:48:63:27:
         6c:78:94:d9:7e:a4:60:a0:d4:a6:d6:5b:32:80:00:df:82:ff:
         69:bb:48:ac:f9:99:72:db:ce:b5:52:cf:d6:63:90:41:ff:b2:
         40:31:c0:d0:57:31:23:09:f1:4e:3c:62:66:6d:83:ef:59:bf:
         29:1a:ee:79:83:a1:64:4d:83:e1:50:bb:cf:e0:7d:b9:ca:1f:
         a8:cf:a1:b1:f2:ad:60:cf:f0:d9:97:4f:f2:94:69:7e:11:1b:
         06:a5:f0:97:e2:39:fe:e9:ab:41:6f:05:4c:51:43:7d:72:b5:
         2d:f6:e7:d3:78:cb:96:20:7f:ad:f5:a3:e6:0b:40:9a:2c:e6:
         e3:4a:fa:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 20:22:25 2025 by rpki-client