Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a59e5658-ab10-4297-92f4-f6a2663e54c0/0/3130332e3136302e39342e302f32342d3234203d3e20313431353739.roa
File:                     3130332e3136302e39342e302f32342d3234203d3e20313431353739.roa (raw, json)
Hash identifier:          MbvKBjhGVKXrhTAYqLQTkHHlmqfGdIcd1OSrPlpqfSU=
Subject key identifier:   E9:C1:DA:4F:90:F8:28:D2:DD:A2:9C:C5:F7:7C:7D:65:9E:6C:A9:0E
Certificate issuer:       /CN=F8F2A2C885D477DE76A5B2E75D699D5C06240751
Certificate serial:       55C65769A23C5C52CEAAA35D753C3F816DDE4FD3
Authority key identifier: F8:F2:A2:C8:85:D4:77:DE:76:A5:B2:E7:5D:69:9D:5C:06:24:07:51
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8F2A2C885D477DE76A5B2E75D699D5C06240751.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a59e5658-ab10-4297-92f4-f6a2663e54c0/0/3130332e3136302e39342e302f32342d3234203d3e20313431353739.roa
Signing time:             Sat 06 Sep 2025 04:02:26 +0000
ROA not before:           Sat 06 Sep 2025 03:57:26 +0000
ROA not after:            Sat 05 Sep 2026 04:02:26 +0000
asID:                     141579
IP address blocks:        103.160.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a59e5658-ab10-4297-92f4-f6a2663e54c0/0/F8F2A2C885D477DE76A5B2E75D699D5C06240751.crl
                          rsync://repo-rpki.idnic.net/repo/a59e5658-ab10-4297-92f4-f6a2663e54c0/0/F8F2A2C885D477DE76A5B2E75D699D5C06240751.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8F2A2C885D477DE76A5B2E75D699D5C06240751.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 21 Oct 2025 14:39:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:c6:57:69:a2:3c:5c:52:ce:aa:a3:5d:75:3c:3f:81:6d:de:4f:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F8F2A2C885D477DE76A5B2E75D699D5C06240751
        Validity
            Not Before: Sep  6 03:57:26 2025 GMT
            Not After : Sep  5 04:02:26 2026 GMT
        Subject: CN=E9C1DA4F90F828D2DDA29CC5F77C7D659E6CA90E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:b1:ad:fa:43:fa:90:66:aa:75:bf:f6:55:f3:
                    83:6a:e3:82:4c:73:06:44:f8:70:73:32:68:e0:30:
                    33:5d:fa:59:23:5f:fe:61:70:f0:1c:ac:84:ff:e4:
                    4f:8f:d9:d0:ce:1b:95:0d:7e:fb:4e:fa:08:ac:9e:
                    f1:01:80:d5:2a:da:61:a2:a1:2a:38:ab:d4:62:1e:
                    e6:7e:c2:87:66:fc:7b:ae:90:8b:fd:59:96:da:8f:
                    95:0b:95:56:51:95:c1:00:18:5a:ac:5a:ae:fa:1b:
                    6e:10:cc:50:f1:16:8c:5f:d5:4e:2b:5d:ef:f7:53:
                    cf:f5:e7:29:dd:ad:e9:3a:c1:1f:c8:1b:a7:82:5b:
                    6c:2d:6a:2c:dc:90:9b:b2:a1:4f:82:ae:2c:81:d3:
                    35:73:8c:e5:cc:7a:e0:11:b9:ae:e1:10:95:dd:84:
                    2e:1d:76:68:d2:67:a5:49:82:ec:0c:54:6d:e3:1b:
                    6f:59:a6:29:95:a1:77:d9:e8:36:b0:85:2a:4f:02:
                    f2:0e:5b:e5:85:ed:b8:58:02:cf:8b:f4:af:a4:bb:
                    19:b1:bc:90:64:78:01:d4:83:00:39:95:b1:f2:c9:
                    8b:e3:cc:99:c6:42:44:ff:81:3b:19:73:61:7d:e0:
                    c9:39:00:fd:60:46:9a:59:77:56:b4:30:c1:f8:94:
                    6f:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:C1:DA:4F:90:F8:28:D2:DD:A2:9C:C5:F7:7C:7D:65:9E:6C:A9:0E
            X509v3 Authority Key Identifier:
                keyid:F8:F2:A2:C8:85:D4:77:DE:76:A5:B2:E7:5D:69:9D:5C:06:24:07:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a59e5658-ab10-4297-92f4-f6a2663e54c0/0/F8F2A2C885D477DE76A5B2E75D699D5C06240751.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8F2A2C885D477DE76A5B2E75D699D5C06240751.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a59e5658-ab10-4297-92f4-f6a2663e54c0/0/3130332e3136302e39342e302f32342d3234203d3e20313431353739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.160.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:4d:37:2d:f1:ba:e0:c5:51:9c:11:61:75:c7:b4:84:01:8a:
         c5:6a:46:a8:da:0c:7d:d8:02:44:f8:6e:b4:21:dc:7b:6d:49:
         fe:76:49:6e:4e:4b:3b:3e:85:03:a2:bc:a3:81:5a:fe:ee:86:
         3d:59:3d:7c:14:81:88:e4:78:99:c5:d6:2b:7e:99:c8:35:be:
         1b:99:0c:d2:fa:0f:32:e9:32:b3:0b:0e:19:d9:7c:82:85:63:
         b9:b7:b7:d3:98:bb:20:c6:ed:57:d5:80:55:78:39:02:86:20:
         8e:b7:63:e5:b6:65:5b:45:86:2f:19:5c:a0:81:e1:8b:4e:7d:
         74:2a:26:dc:3d:bd:73:e5:85:01:a8:d3:01:de:65:fd:bf:3e:
         6a:4b:f0:04:f0:a7:eb:5b:45:6d:5b:72:88:5c:c5:d0:7f:30:
         59:46:5a:f4:d1:28:bc:60:bd:93:8c:02:ac:cd:e6:6c:8b:e4:
         97:77:7e:47:3b:94:1e:db:d9:2b:be:ad:06:99:ba:d3:04:37:
         2c:d2:6a:f0:c8:1d:aa:9c:76:28:b7:4f:b3:3c:8c:41:b7:35:
         92:54:2c:df:c3:dc:eb:d9:62:71:54:f5:94:a2:27:0c:fd:c0:
         80:f7:e1:33:31:43:02:44:60:b7:f5:7c:2e:40:17:bb:9e:fd:
         bd:c7:fd:12
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUVcZXaaI8XFLOqqNddTw/gW3eT9MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjhGMkEyQzg4NUQ0NzdERTc2QTVCMkU3NUQ2OTlENUMw
NjI0MDc1MTAeFw0yNTA5MDYwMzU3MjZaFw0yNjA5MDUwNDAyMjZaMDMxMTAvBgNV
BAMTKEU5QzFEQTRGOTBGODI4RDJEREEyOUNDNUY3N0M3RDY1OUU2Q0E5MEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDysa36Q/qQZqp1v/ZV84Nq44JM
cwZE+HBzMmjgMDNd+lkjX/5hcPAcrIT/5E+P2dDOG5UNfvtO+gisnvEBgNUq2mGi
oSo4q9RiHuZ+wodm/HuukIv9WZbaj5ULlVZRlcEAGFqsWq76G24QzFDxFoxf1U4r
Xe/3U8/15yndrek6wR/IG6eCW2wtaizckJuyoU+CriyB0zVzjOXMeuARua7hEJXd
hC4ddmjSZ6VJguwMVG3jG29ZpimVoXfZ6DawhSpPAvIOW+WF7bhYAs+L9K+kuxmx
vJBkeAHUgwA5lbHyyYvjzJnGQkT/gTsZc2F94Mk5AP1gRppZd1a0MMH4lG/VAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQU6cHaT5D4KNLdopzF93x9ZZ5sqQ4wHwYDVR0j
BBgwFoAU+PKiyIXUd952pbLnXWmdXAYkB1EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
NTllNTY1OC1hYjEwLTQyOTctOTJmNC1mNmEyNjYzZTU0YzAvMC9GOEYyQTJDODg1
RDQ3N0RFNzZBNUIyRTc1RDY5OUQ1QzA2MjQwNzUxLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRjhGMkEyQzg4NUQ0NzdERTc2QTVCMkU3NUQ2OTlENUMwNjI0
MDc1MS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E1OWU1NjU4LWFiMTAtNDI5Ny05
MmY0LWY2YTI2NjNlNTRjMC8wLzMxMzAzMzJlMzEzNjMwMmUzOTM0MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzNDMxMzUzNzM5LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ6BeMA0GCSqG
SIb3DQEBCwUAA4IBAQCsTTct8brgxVGcEWF1x7SEAYrFakao2gx92AJE+G60Idx7
bUn+dkluTks7PoUDoryjgVr+7oY9WT18FIGI5HiZxdYrfpnINb4bmQzS+g8y6TKz
Cw4Z2XyChWO5t7fTmLsgxu1X1YBVeDkChiCOt2PltmVbRYYvGVyggeGLTn10Kibc
Pb1z5YUBqNMB3mX9vz5qS/AE8KfrW0VtW3KIXMXQfzBZRlr00Si8YL2TjAKszeZs
i+SXd35HO5Qe29krvq0GmbrTBDcs0mrwyB2qnHYot0+zPIxBtzWSVCzfw9zr2WJx
VPWUoicM/cCA9+EzMUMCRGC39XwuQBe7nv29x/0S
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:37:12 2025 by rpki-client