Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/4a099adf-7e12-4e83-95c2-dd7f77494788/0/3130332e3136302e34312e302f32342d3234203d3e20313431353936.roa
File:                     3130332e3136302e34312e302f32342d3234203d3e20313431353936.roa (raw, json)
Hash identifier:          hTOnvJY78aaZJU0V/ewFlrDahpGLWlt1kXeTr26Q6jE=
Subject key identifier:   2E:A3:5E:10:74:65:12:7B:00:16:9B:75:CD:22:4A:B2:B7:4F:30:E3
Certificate issuer:       /CN=3703AC4154F05B1E642F31DEF71A238407E82D59
Certificate serial:       44F2E4E9EB5EDF009128CAC62A3E45A42F6A878C
Authority key identifier: 37:03:AC:41:54:F0:5B:1E:64:2F:31:DE:F7:1A:23:84:07:E8:2D:59
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3703AC4154F05B1E642F31DEF71A238407E82D59.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/4a099adf-7e12-4e83-95c2-dd7f77494788/0/3130332e3136302e34312e302f32342d3234203d3e20313431353936.roa
Signing time:             Wed 03 Sep 2025 06:00:01 +0000
ROA not before:           Wed 03 Sep 2025 05:55:01 +0000
ROA not after:            Wed 02 Sep 2026 06:00:01 +0000
asID:                     141596
IP address blocks:        103.160.41.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/4a099adf-7e12-4e83-95c2-dd7f77494788/0/3703AC4154F05B1E642F31DEF71A238407E82D59.crl
                          rsync://repo-rpki.idnic.net/repo/4a099adf-7e12-4e83-95c2-dd7f77494788/0/3703AC4154F05B1E642F31DEF71A238407E82D59.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3703AC4154F05B1E642F31DEF71A238407E82D59.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Sep 2025 06:44:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:f2:e4:e9:eb:5e:df:00:91:28:ca:c6:2a:3e:45:a4:2f:6a:87:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3703AC4154F05B1E642F31DEF71A238407E82D59
        Validity
            Not Before: Sep  3 05:55:01 2025 GMT
            Not After : Sep  2 06:00:01 2026 GMT
        Subject: CN=2EA35E107465127B00169B75CD224AB2B74F30E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:94:66:75:87:5e:48:8c:49:99:28:23:4d:12:
                    d9:52:a7:de:8c:eb:06:5c:fe:36:28:6f:78:7e:5c:
                    b8:3d:2d:29:bd:dc:9f:9b:89:6c:d9:c1:80:71:ef:
                    db:cc:4b:32:b7:e2:4a:1c:c3:ec:6c:36:39:17:6e:
                    94:5d:aa:d4:f6:97:e9:cd:22:23:14:c8:34:17:dd:
                    3c:17:8a:61:1c:a1:6b:94:31:69:19:ae:93:f6:65:
                    39:6c:55:54:b8:e0:c8:cd:64:27:b0:f6:04:93:cd:
                    85:d2:74:5f:51:4f:53:ab:3e:e7:77:4f:0e:0b:92:
                    52:a9:8b:47:ff:1c:41:84:9b:f0:18:dd:6d:da:7a:
                    72:86:e1:b7:f2:d1:4c:b6:82:c7:5a:f1:6b:2b:f6:
                    1c:ff:5a:64:81:dd:91:28:51:e7:a9:d4:7f:29:58:
                    62:46:36:50:d5:db:5f:95:7d:ea:4d:1d:91:36:00:
                    f0:2e:74:28:47:14:17:72:a0:ea:b9:6d:0e:9e:67:
                    f5:fe:1f:f3:e9:c3:e3:8d:b9:a3:0c:b3:81:e5:d9:
                    fc:53:a9:a3:38:52:a4:d1:85:cb:5f:74:5b:3c:70:
                    5b:db:05:7d:22:ad:5b:09:3e:f5:45:a9:56:61:78:
                    0e:f6:e3:e2:1b:fd:e4:e3:58:61:3f:bd:ca:6d:53:
                    52:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:A3:5E:10:74:65:12:7B:00:16:9B:75:CD:22:4A:B2:B7:4F:30:E3
            X509v3 Authority Key Identifier:
                keyid:37:03:AC:41:54:F0:5B:1E:64:2F:31:DE:F7:1A:23:84:07:E8:2D:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/4a099adf-7e12-4e83-95c2-dd7f77494788/0/3703AC4154F05B1E642F31DEF71A238407E82D59.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3703AC4154F05B1E642F31DEF71A238407E82D59.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4a099adf-7e12-4e83-95c2-dd7f77494788/0/3130332e3136302e34312e302f32342d3234203d3e20313431353936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.160.41.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:94:16:39:65:a0:c2:ec:72:ec:22:18:37:43:fb:f2:a2:fa:
         4f:31:b2:33:3d:50:6b:8e:b9:85:c0:4b:84:c0:fb:d5:df:d6:
         13:ed:44:81:2f:2b:d1:23:e2:f1:a5:45:c4:ac:39:95:78:b4:
         f4:90:6e:f4:8f:a9:88:84:6d:2f:d5:d5:97:d5:e1:c9:76:42:
         4e:e0:03:a4:39:ce:17:31:38:72:79:23:8c:06:ab:e2:3f:cd:
         62:37:5c:4d:59:d5:f8:3f:b3:3e:5b:c8:21:52:c2:7b:0b:1f:
         79:a7:84:53:f9:8f:0f:32:cc:c8:fc:04:b3:37:7d:6f:7e:68:
         a4:db:4e:fa:09:48:94:26:e1:1a:26:6a:67:a5:8e:aa:79:1a:
         a4:e9:f0:12:cf:26:62:49:60:6f:37:01:2e:c5:73:a4:f3:b8:
         df:a7:f0:bb:f8:5a:ef:a8:a5:0b:ed:ac:91:07:d2:3a:49:51:
         9c:11:d9:a3:cc:44:12:73:d9:44:78:04:5a:fe:8a:2f:47:aa:
         95:dc:c8:91:00:2a:8c:aa:c0:a6:44:82:b1:84:5a:8d:66:51:
         ed:99:a1:e3:73:9d:fa:97:0e:54:bf:3c:b7:ec:43:b8:d0:86:
         58:98:7d:27:22:42:b7:ca:cc:af:cd:4c:e4:28:d8:34:2d:62:
         57:94:50:cf
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIURPLk6ete3wCRKMrGKj5FpC9qh4wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzcwM0FDNDE1NEYwNUIxRTY0MkYzMURFRjcxQTIzODQw
N0U4MkQ1OTAeFw0yNTA5MDMwNTU1MDFaFw0yNjA5MDIwNjAwMDFaMDMxMTAvBgNV
BAMTKDJFQTM1RTEwNzQ2NTEyN0IwMDE2OUI3NUNEMjI0QUIyQjc0RjMwRTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVlGZ1h15IjEmZKCNNEtlSp96M
6wZc/jYob3h+XLg9LSm93J+biWzZwYBx79vMSzK34kocw+xsNjkXbpRdqtT2l+nN
IiMUyDQX3TwXimEcoWuUMWkZrpP2ZTlsVVS44MjNZCew9gSTzYXSdF9RT1OrPud3
Tw4LklKpi0f/HEGEm/AY3W3aenKG4bfy0Uy2gsda8Wsr9hz/WmSB3ZEoUeep1H8p
WGJGNlDV21+VfepNHZE2APAudChHFBdyoOq5bQ6eZ/X+H/Ppw+ONuaMMs4Hl2fxT
qaM4UqTRhctfdFs8cFvbBX0irVsJPvVFqVZheA724+Ib/eTjWGE/vcptU1JpAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQULqNeEHRlEnsAFpt1zSJKsrdPMOMwHwYDVR0j
BBgwFoAUNwOsQVTwWx5kLzHe9xojhAfoLVkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80
YTA5OWFkZi03ZTEyLTRlODMtOTVjMi1kZDdmNzc0OTQ3ODgvMC8zNzAzQUM0MTU0
RjA1QjFFNjQyRjMxREVGNzFBMjM4NDA3RTgyRDU5LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMzcwM0FDNDE1NEYwNUIxRTY0MkYzMURFRjcxQTIzODQwN0U4
MkQ1OS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzRhMDk5YWRmLTdlMTItNGU4My05
NWMyLWRkN2Y3NzQ5NDc4OC8wLzMxMzAzMzJlMzEzNjMwMmUzNDMxMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzNDMxMzUzOTM2LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ6ApMA0GCSqG
SIb3DQEBCwUAA4IBAQBrlBY5ZaDC7HLsIhg3Q/vyovpPMbIzPVBrjrmFwEuEwPvV
39YT7USBLyvRI+LxpUXErDmVeLT0kG70j6mIhG0v1dWX1eHJdkJO4AOkOc4XMThy
eSOMBqviP81iN1xNWdX4P7M+W8ghUsJ7Cx95p4RT+Y8PMszI/ASzN31vfmik2076
CUiUJuEaJmpnpY6qeRqk6fASzyZiSWBvNwEuxXOk87jfp/C7+FrvqKUL7ayRB9I6
SVGcEdmjzEQSc9lEeARa/oovR6qV3MiRACqMqsCmRIKxhFqNZlHtmaHjc536lw5U
vzy37EO40IZYmH0nIkK3ysyvzUzkKNg0LWJXlFDP
-----END CERTIFICATE-----
Generated at Sun Sep 7 16:24:44 2025 by rpki-client