Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/85dd4f16-570e-4c8c-a992-db89ea3bad36/0/3130332e3135372e362e302f32342d3234203d3e20313431313036.roa
File:                     3130332e3135372e362e302f32342d3234203d3e20313431313036.roa (raw, json)
Hash identifier:          2XQOc628Et0oqO8CO0VRKDq3/7F6VNJ+Q07NK/QPZuc=
Subject key identifier:   9E:E9:7D:10:95:D2:23:E3:3C:17:B1:2F:62:66:3D:5C:2C:D3:CC:AB
Certificate issuer:       /CN=B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582
Certificate serial:       641654FC365E7508C3EE044D153191498EBE8622
Authority key identifier: B2:07:7B:9B:AF:0B:F3:E5:FC:B8:45:13:B1:D7:44:5E:30:CE:65:82
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/85dd4f16-570e-4c8c-a992-db89ea3bad36/0/3130332e3135372e362e302f32342d3234203d3e20313431313036.roa
Signing time:             Thu 04 Sep 2025 06:00:00 +0000
ROA not before:           Thu 04 Sep 2025 05:55:00 +0000
ROA not after:            Thu 03 Sep 2026 06:00:00 +0000
asID:                     141106
IP address blocks:        103.157.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/85dd4f16-570e-4c8c-a992-db89ea3bad36/0/B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582.crl
                          rsync://repo-rpki.idnic.net/repo/85dd4f16-570e-4c8c-a992-db89ea3bad36/0/B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Sep 2025 19:07:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:16:54:fc:36:5e:75:08:c3:ee:04:4d:15:31:91:49:8e:be:86:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582
        Validity
            Not Before: Sep  4 05:55:00 2025 GMT
            Not After : Sep  3 06:00:00 2026 GMT
        Subject: CN=9EE97D1095D223E33C17B12F62663D5C2CD3CCAB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:09:98:b2:f6:de:2a:66:03:71:c3:73:58:55:
                    67:c9:86:15:c5:6f:2d:df:52:5b:bb:d3:b1:cf:08:
                    c8:3c:82:57:80:6d:a7:b8:df:f7:ab:32:86:43:56:
                    80:0b:e6:91:4b:59:2f:4c:58:08:3e:53:42:fa:03:
                    69:18:2f:57:71:57:95:f3:11:20:31:77:a7:80:5b:
                    97:8e:a0:50:6f:cb:ea:d6:9e:ed:75:32:85:65:98:
                    b6:40:c6:c4:05:1f:7e:39:29:41:4e:4d:4e:31:46:
                    77:ca:79:5a:73:86:ea:32:14:aa:68:03:45:1a:47:
                    fd:1f:c7:fa:2b:57:75:1c:28:1b:58:1d:60:5a:33:
                    b6:af:0c:50:77:57:10:18:36:f3:dc:b9:97:9c:1d:
                    9b:f5:f7:c6:86:32:e8:cc:a1:3a:85:18:16:32:90:
                    cc:e0:aa:86:c3:d0:f7:e1:41:c7:3a:08:4f:d3:e4:
                    d7:6a:19:60:e9:0d:aa:0c:39:de:8d:3a:c8:49:08:
                    8f:3d:26:c1:44:fc:d6:29:67:20:92:10:8b:40:b5:
                    87:bd:f0:7e:e8:68:a2:a9:d2:0a:c8:eb:a3:4f:4a:
                    c4:b3:5e:17:b2:8f:86:fb:7e:f4:66:74:f1:29:f9:
                    c5:04:e0:3d:d2:a4:97:c8:62:3d:84:0c:64:e4:e1:
                    ee:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:E9:7D:10:95:D2:23:E3:3C:17:B1:2F:62:66:3D:5C:2C:D3:CC:AB
            X509v3 Authority Key Identifier:
                keyid:B2:07:7B:9B:AF:0B:F3:E5:FC:B8:45:13:B1:D7:44:5E:30:CE:65:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/85dd4f16-570e-4c8c-a992-db89ea3bad36/0/B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/85dd4f16-570e-4c8c-a992-db89ea3bad36/0/3130332e3135372e362e302f32342d3234203d3e20313431313036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.157.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         db:b2:9f:4f:71:f5:3a:98:52:8a:1b:b1:ac:2b:9e:be:00:23:
         a9:e7:a7:3e:cd:e2:36:92:b2:c9:65:c2:9b:90:6d:4f:38:aa:
         8b:a2:de:1d:f8:ed:36:16:15:b1:57:45:7a:6a:d4:79:d2:43:
         c5:8b:38:03:30:16:78:4b:c0:d1:9d:81:bd:1a:5b:ec:25:c6:
         7f:e3:ff:27:5e:85:a7:28:ff:b4:a0:1d:f4:08:74:fb:e6:e6:
         3c:55:04:65:f3:23:03:a1:b2:10:4b:c2:fa:30:73:11:ad:c4:
         2b:e0:22:11:d6:61:a4:d5:99:fe:e3:5e:96:e7:51:60:7e:86:
         4e:32:64:f2:50:61:59:ad:c7:e3:6b:f3:01:e8:f8:c0:c5:99:
         47:2d:ab:a0:28:f1:77:67:42:d4:73:c7:25:32:bd:4e:18:14:
         78:46:a0:24:38:38:ba:89:b1:b3:23:61:51:fe:9d:16:28:19:
         01:42:4d:c8:ca:7f:47:ab:a6:8c:81:85:5f:1b:80:a2:08:c5:
         a2:90:eb:aa:f4:7e:5e:8a:78:dd:ee:7f:52:6d:81:48:63:89:
         2c:12:dd:23:44:a9:61:f7:95:06:e6:e4:3c:5b:ca:65:72:bf:
         a0:72:79:8a:26:87:b4:0b:db:82:dd:c6:98:d3:9a:ba:88:48:
         ce:97:6e:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 10:42:00 2025 by rpki-client