Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/398eeb38-7746-4899-9a10-7980f8b90532/0/3130332e3137322e39362e302f32342d3234203d3e20313437303736.roa
File:                     3130332e3137322e39362e302f32342d3234203d3e20313437303736.roa (raw, json)
Hash identifier:          FzTv12UM/2i3EnGYSLbw7ffZNNwkSLTinstojsz6igs=
Subject key identifier:   07:44:28:72:7F:00:80:B9:23:BD:9E:81:69:E6:23:EC:AE:32:15:63
Certificate issuer:       /CN=25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3
Certificate serial:       7D99ECA1C9FFC3F37BF8AD14C7D3B6F62C21055D
Authority key identifier: 25:DF:F1:C9:9D:CD:F1:9F:3A:4B:9E:D3:6F:D3:3B:AA:50:1B:87:E3
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/398eeb38-7746-4899-9a10-7980f8b90532/0/3130332e3137322e39362e302f32342d3234203d3e20313437303736.roa
Signing time:             Mon 02 Jun 2025 04:00:02 +0000
ROA not before:           Mon 02 Jun 2025 03:55:02 +0000
ROA not after:            Mon 01 Jun 2026 04:00:02 +0000
asID:                     147076
IP address blocks:        103.172.96.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/398eeb38-7746-4899-9a10-7980f8b90532/0/25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3.crl
                          rsync://repo-rpki.idnic.net/repo/398eeb38-7746-4899-9a10-7980f8b90532/0/25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 11 Jun 2025 02:27:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:99:ec:a1:c9:ff:c3:f3:7b:f8:ad:14:c7:d3:b6:f6:2c:21:05:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3
        Validity
            Not Before: Jun  2 03:55:02 2025 GMT
            Not After : Jun  1 04:00:02 2026 GMT
        Subject: CN=074428727F0080B923BD9E8169E623ECAE321563
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:e6:e9:b4:76:e6:75:9b:16:30:21:d0:bb:d9:
                    d0:23:7d:4e:06:bd:fe:ab:c7:23:e8:93:ef:30:b3:
                    94:ac:75:64:d3:a4:06:ce:cb:3b:3c:fc:64:15:40:
                    7a:63:04:21:60:bc:c6:d5:e8:85:ad:c7:a5:07:37:
                    1d:f7:78:ad:74:0d:73:d1:8a:49:7a:23:53:ba:32:
                    a7:52:75:f9:c5:8c:34:8b:ed:23:e3:af:f4:e2:e6:
                    35:0f:4f:28:4e:4d:17:f9:96:62:9e:97:0c:6a:63:
                    36:e7:9f:9f:32:c2:e9:b3:dc:15:a4:71:f2:e7:fb:
                    3f:b8:01:22:f7:2a:a2:d2:7e:91:28:4b:da:7d:bd:
                    f7:ed:08:da:00:4a:c1:e8:d3:2f:31:e9:ee:4f:aa:
                    bf:6e:b3:fd:55:5f:fd:ec:e2:fd:90:20:59:50:0a:
                    35:31:83:b9:0a:cb:d7:e0:10:3b:c0:a7:b2:6a:3f:
                    ad:ca:7d:4a:1b:e8:da:f3:29:3a:18:75:58:b1:d1:
                    87:82:b4:fb:a4:f8:77:de:a1:48:43:b9:f5:dc:4a:
                    12:57:1a:e6:0e:c5:3d:d3:1f:9e:f7:41:37:24:94:
                    c6:e9:3f:c1:73:52:18:49:85:0f:56:86:9a:06:c0:
                    f5:35:75:8a:89:17:29:9f:cb:9e:9f:2d:a2:90:41:
                    97:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:44:28:72:7F:00:80:B9:23:BD:9E:81:69:E6:23:EC:AE:32:15:63
            X509v3 Authority Key Identifier:
                keyid:25:DF:F1:C9:9D:CD:F1:9F:3A:4B:9E:D3:6F:D3:3B:AA:50:1B:87:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/398eeb38-7746-4899-9a10-7980f8b90532/0/25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/398eeb38-7746-4899-9a10-7980f8b90532/0/3130332e3137322e39362e302f32342d3234203d3e20313437303736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.172.96.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:7b:76:55:7b:8c:8b:95:d4:1b:64:97:4a:85:e3:93:65:59:
         fb:db:bf:dc:bc:62:2f:7d:41:62:1c:ef:3c:3d:40:9b:35:58:
         56:4f:30:35:a0:d1:ff:01:b9:50:c6:df:c4:87:c5:c5:a0:2e:
         0c:07:24:e9:1b:5f:d0:78:ee:e1:e3:0b:9f:14:20:9f:16:d8:
         94:15:b6:3a:71:c1:c3:02:6e:43:58:96:e3:38:b7:e1:dd:3e:
         7a:26:4e:86:ef:2f:c8:cf:af:7c:80:e3:a8:09:41:b8:52:22:
         b4:49:3f:c3:40:49:7c:73:bf:e6:ab:e4:86:ba:04:db:26:51:
         86:51:c4:ef:93:26:50:1f:89:48:c8:f7:28:7e:58:07:f7:da:
         50:e2:a1:97:de:1a:17:f3:6d:b9:b3:03:a6:8e:2d:4b:34:18:
         97:d8:13:c9:e7:f3:5c:32:d4:01:f5:de:7f:ea:ee:8a:16:4d:
         fe:b8:be:16:82:7c:27:b5:a7:cd:54:66:11:e4:50:ee:1c:df:
         a6:0b:55:76:83:23:b0:5e:08:42:9b:aa:06:a7:4d:78:f3:1d:
         1e:d9:08:94:3f:0a:f8:9a:16:cb:dd:b5:1e:38:b9:ed:01:2e:
         3c:8e:11:63:ad:e3:b3:32:0c:76:66:3d:3f:a6:b4:f3:18:34:
         83:d3:48:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 01:08:57 2025 by rpki-client