Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/358c8f9f-4213-4a2a-85c3-b24b0d0b5107/0/3130332e3136322e3232302e302f32332d3233203d3e20313339393532.roa
File:                     3130332e3136322e3232302e302f32332d3233203d3e20313339393532.roa (raw, json)
Hash identifier:          UmBaN4f8daXm7YcJHiYwqui5FgHxOYUATLUGSQyoA5A=
Subject key identifier:   F1:F9:11:F6:C9:00:8D:25:E0:39:C2:DE:C9:4A:7E:67:41:8E:AE:B5
Certificate issuer:       /CN=030BE557286D3A4FE6E9AA70636EC79D178ACE1F
Certificate serial:       71A03A313DC86E41E4A0CB990AA83A27225B7F3E
Authority key identifier: 03:0B:E5:57:28:6D:3A:4F:E6:E9:AA:70:63:6E:C7:9D:17:8A:CE:1F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/030BE557286D3A4FE6E9AA70636EC79D178ACE1F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/358c8f9f-4213-4a2a-85c3-b24b0d0b5107/0/3130332e3136322e3232302e302f32332d3233203d3e20313339393532.roa
Signing time:             Thu 28 Aug 2025 02:00:01 +0000
ROA not before:           Thu 28 Aug 2025 01:55:01 +0000
ROA not after:            Thu 27 Aug 2026 02:00:01 +0000
asID:                     139952
IP address blocks:        103.162.220.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/358c8f9f-4213-4a2a-85c3-b24b0d0b5107/0/030BE557286D3A4FE6E9AA70636EC79D178ACE1F.crl
                          rsync://repo-rpki.idnic.net/repo/358c8f9f-4213-4a2a-85c3-b24b0d0b5107/0/030BE557286D3A4FE6E9AA70636EC79D178ACE1F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/030BE557286D3A4FE6E9AA70636EC79D178ACE1F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Sep 2025 14:28:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:a0:3a:31:3d:c8:6e:41:e4:a0:cb:99:0a:a8:3a:27:22:5b:7f:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=030BE557286D3A4FE6E9AA70636EC79D178ACE1F
        Validity
            Not Before: Aug 28 01:55:01 2025 GMT
            Not After : Aug 27 02:00:01 2026 GMT
        Subject: CN=F1F911F6C9008D25E039C2DEC94A7E67418EAEB5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:3b:07:2c:09:23:b8:f2:a5:f6:bf:27:f9:93:
                    67:ab:e9:6e:6b:f4:dc:d4:e2:05:56:e4:ce:ce:86:
                    66:dd:53:f4:a8:90:d1:5e:bf:06:7f:e0:b0:10:3c:
                    56:a0:fa:50:f7:46:ff:24:41:a1:79:46:ae:e2:dd:
                    2e:c1:9d:ed:fa:d6:d1:3a:28:4c:e5:2d:87:08:cc:
                    c0:a6:76:a6:d2:43:9f:12:79:5f:f6:b7:22:26:15:
                    dd:e5:14:70:ee:0c:da:bf:54:a1:0e:00:d2:c9:c5:
                    e4:55:ea:77:8f:03:3a:68:b9:b4:9b:1c:4b:f8:90:
                    ee:e2:ab:76:44:3c:bf:00:5f:1d:be:6d:43:41:a1:
                    d1:87:af:4f:08:95:09:d1:60:80:ce:f0:52:ac:23:
                    9d:f4:d9:f7:5a:b8:d2:22:bf:22:a3:e5:e8:ec:51:
                    25:a9:1f:4b:89:f5:0b:17:cb:3a:3a:7d:19:9f:c4:
                    f5:6b:f2:e4:16:48:25:1b:7b:5b:93:b8:ae:86:00:
                    e2:90:a0:6a:39:4c:02:03:5b:eb:4b:d6:29:9b:b1:
                    86:3c:e3:65:8c:c6:6d:ab:fa:48:04:e9:9d:27:56:
                    3b:a2:4d:63:6e:6a:2c:2f:35:73:91:1a:49:e2:67:
                    5a:13:fe:a1:73:9a:76:1e:69:d6:0c:10:3b:dd:22:
                    c2:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:F9:11:F6:C9:00:8D:25:E0:39:C2:DE:C9:4A:7E:67:41:8E:AE:B5
            X509v3 Authority Key Identifier:
                keyid:03:0B:E5:57:28:6D:3A:4F:E6:E9:AA:70:63:6E:C7:9D:17:8A:CE:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/358c8f9f-4213-4a2a-85c3-b24b0d0b5107/0/030BE557286D3A4FE6E9AA70636EC79D178ACE1F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/030BE557286D3A4FE6E9AA70636EC79D178ACE1F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/358c8f9f-4213-4a2a-85c3-b24b0d0b5107/0/3130332e3136322e3232302e302f32332d3233203d3e20313339393532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.162.220.0/23

    Signature Algorithm: sha256WithRSAEncryption
         18:4d:21:53:12:bd:81:f1:10:9e:93:35:aa:4a:e8:68:dd:79:
         ec:8a:41:59:09:f0:26:bd:57:89:ae:09:c7:80:d8:20:d7:54:
         2c:14:47:7e:93:22:6c:b5:58:26:1b:56:db:51:be:ff:2a:36:
         ec:ad:97:37:6c:53:5f:7c:5c:eb:e7:cc:2d:ee:5f:52:ce:89:
         2f:aa:3b:5e:ea:11:5d:32:b7:67:7c:cd:65:b7:d5:e2:ec:c0:
         f5:3a:80:d7:15:e5:45:0e:dd:fb:d2:4e:04:92:9f:eb:da:3e:
         34:d8:6a:76:b9:9c:8c:5e:08:2a:70:51:19:c0:42:eb:d5:cd:
         dc:87:c7:aa:ef:de:65:05:bf:64:4f:d0:57:64:ec:df:ec:29:
         45:e1:55:35:b3:e2:01:19:45:f1:e4:a6:17:50:d1:22:c1:48:
         1d:9f:17:85:e8:52:73:28:6c:c0:10:8c:a0:d6:2d:56:5f:96:
         a0:e3:7a:c2:d9:70:e3:1b:87:b4:1f:f5:90:58:c9:fb:d0:d9:
         8d:73:ce:22:da:c7:cd:64:b9:ba:5d:06:80:5e:1d:14:55:4c:
         c1:f3:5d:4f:d9:ab:36:dd:95:95:b7:ec:df:b4:92:a4:7d:e3:
         8f:99:e6:84:d6:51:b1:c4:c4:c5:17:d3:20:ed:dc:14:5e:eb:
         88:03:1d:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 09:32:05 2025 by rpki-client