Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/3130332e31392e3137372e302f32342d3234203d3e20313332363437.roa
File:                     3130332e31392e3137372e302f32342d3234203d3e20313332363437.roa (raw, json)
Hash identifier:          eUTXj0qM9U0VlVIo2698+rxVfkNrjLXS73ArKqTPZHc=
Subject key identifier:   31:FF:FE:B2:AE:FE:A4:0A:0F:4F:8D:D9:CE:CA:E7:C5:88:F1:8E:DC
Certificate issuer:       /CN=EC9D9872A710FE713DC62241D587703BDF7DC1D6
Certificate serial:       1DA00BE547B36F5A0FAB1A17F007870D9069ED
Authority key identifier: EC:9D:98:72:A7:10:FE:71:3D:C6:22:41:D5:87:70:3B:DF:7D:C1:D6
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC9D9872A710FE713DC62241D587703BDF7DC1D6.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/3130332e31392e3137372e302f32342d3234203d3e20313332363437.roa
Signing time:             Mon 22 Sep 2025 02:45:31 +0000
ROA not before:           Mon 22 Sep 2025 02:40:31 +0000
ROA not after:            Mon 21 Sep 2026 02:45:31 +0000
asID:                     132647
IP address blocks:        103.19.177.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/EC9D9872A710FE713DC62241D587703BDF7DC1D6.crl
                          rsync://repo-rpki.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/EC9D9872A710FE713DC62241D587703BDF7DC1D6.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC9D9872A710FE713DC62241D587703BDF7DC1D6.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Oct 2025 06:40:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:a0:0b:e5:47:b3:6f:5a:0f:ab:1a:17:f0:07:87:0d:90:69:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC9D9872A710FE713DC62241D587703BDF7DC1D6
        Validity
            Not Before: Sep 22 02:40:31 2025 GMT
            Not After : Sep 21 02:45:31 2026 GMT
        Subject: CN=31FFFEB2AEFEA40A0F4F8DD9CECAE7C588F18EDC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:cc:72:92:1a:b7:75:b3:33:e4:06:02:d0:b7:
                    f8:ba:6c:77:b7:a3:a6:0a:3c:7d:56:22:28:05:43:
                    15:d7:da:29:de:7b:0f:c2:ea:13:3e:ad:09:39:7e:
                    a3:84:02:d2:25:d3:a6:12:ad:e1:6b:c4:51:79:48:
                    b7:cf:c1:f9:cb:a6:f0:99:bb:76:07:28:30:f5:2d:
                    81:5d:85:45:a3:66:5c:ff:39:a5:5c:6b:9d:60:8a:
                    64:d7:1b:a6:10:a7:95:de:41:d2:3e:b6:b6:5c:5f:
                    ef:c1:a6:97:54:0a:82:be:93:93:b7:10:2b:6c:07:
                    52:bf:2e:4c:42:03:4e:f4:e7:3c:aa:99:55:18:32:
                    61:85:79:92:94:e7:0e:ae:32:b2:bc:f8:ca:e3:e0:
                    4b:0b:52:9b:d3:c2:79:5b:d0:a2:7d:f7:76:ba:e4:
                    00:7c:ae:1b:e6:5a:11:a0:fc:ec:7c:7f:de:d5:f2:
                    8a:12:0f:37:de:a5:15:e4:fc:ed:05:b0:02:c0:7a:
                    9c:7d:aa:b2:b7:db:a2:c7:3b:c5:70:4b:99:ce:d9:
                    f9:0c:78:ca:d3:be:c2:0a:38:71:de:d3:fb:21:66:
                    3f:34:be:cf:cf:ad:a1:fe:77:fa:a7:fb:14:d8:58:
                    96:04:70:1f:68:9b:99:2b:10:3c:77:d6:65:e9:2a:
                    6d:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:FF:FE:B2:AE:FE:A4:0A:0F:4F:8D:D9:CE:CA:E7:C5:88:F1:8E:DC
            X509v3 Authority Key Identifier:
                keyid:EC:9D:98:72:A7:10:FE:71:3D:C6:22:41:D5:87:70:3B:DF:7D:C1:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/EC9D9872A710FE713DC62241D587703BDF7DC1D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC9D9872A710FE713DC62241D587703BDF7DC1D6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/3130332e31392e3137372e302f32342d3234203d3e20313332363437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.19.177.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:8b:eb:a6:69:b6:f2:c4:94:bd:d6:f7:a3:d4:89:05:13:b6:
         19:9a:22:88:5c:76:70:ee:c3:2b:81:99:b1:ef:a2:fc:9a:69:
         37:30:1f:07:0e:09:79:8e:38:46:47:6d:50:1a:0f:72:0e:d5:
         98:fc:da:ba:f5:d8:55:1b:27:15:0c:77:d4:16:18:33:58:e9:
         33:e4:ab:49:9e:1d:d2:25:19:76:f0:dd:ab:80:1b:db:4b:0d:
         0a:49:67:0a:12:6c:f3:f5:35:64:58:0f:6c:b3:7a:3b:e7:b8:
         24:35:c5:0b:f0:b7:6b:1a:3b:63:a0:89:65:b2:7e:3e:bf:b8:
         b6:12:35:f2:a9:2b:9e:c3:f1:0d:37:b9:51:9f:f7:c6:2b:6f:
         28:13:44:ea:81:fa:25:ab:46:80:17:87:b1:18:48:3f:0b:70:
         45:04:8b:c7:42:66:66:73:78:c5:72:29:3e:93:e4:4b:db:ee:
         1f:b2:e2:30:06:40:21:f5:8c:e6:70:1c:e4:56:0c:8f:eb:d3:
         b4:85:9f:d5:70:e5:9c:a8:ce:91:e2:fa:a9:d0:ac:81:ae:3c:
         91:4b:42:dd:d6:3f:9e:3c:64:3a:57:9e:e6:27:7b:05:0a:91:
         84:bd:37:3f:8c:f1:b0:58:26:aa:66:f7:84:f7:54:05:19:e1:
         df:f2:a7:66
-----BEGIN CERTIFICATE-----
MIIFKTCCBBGgAwIBAgITHaAL5Uezb1oPqxoX8AeHDZBp7TANBgkqhkiG9w0BAQsF
ADAzMTEwLwYDVQQDEyhFQzlEOTg3MkE3MTBGRTcxM0RDNjIyNDFENTg3NzAzQkRG
N0RDMUQ2MB4XDTI1MDkyMjAyNDAzMVoXDTI2MDkyMTAyNDUzMVowMzExMC8GA1UE
AxMoMzFGRkZFQjJBRUZFQTQwQTBGNEY4REQ5Q0VDQUU3QzU4OEYxOEVEQzCCASIw
DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALvMcpIat3WzM+QGAtC3+Lpsd7ej
pgo8fVYiKAVDFdfaKd57D8LqEz6tCTl+o4QC0iXTphKt4WvEUXlIt8/B+cum8Jm7
dgcoMPUtgV2FRaNmXP85pVxrnWCKZNcbphCnld5B0j62tlxf78Gml1QKgr6Tk7cQ
K2wHUr8uTEIDTvTnPKqZVRgyYYV5kpTnDq4ysrz4yuPgSwtSm9PCeVvQon33drrk
AHyuG+ZaEaD87Hx/3tXyihIPN96lFeT87QWwAsB6nH2qsrfbosc7xXBLmc7Z+Qx4
ytO+wgo4cd7T+yFmPzS+z8+tof53+qf7FNhYlgRwH2ibmSsQPHfWZekqbQ0CAwEA
AaOCAjQwggIwMB0GA1UdDgQWBBQx//6yrv6kCg9PjdnOyufFiPGO3DAfBgNVHSME
GDAWgBTsnZhypxD+cT3GIkHVh3A7333B1jAOBgNVHQ8BAf8EBAMCB4AwgYUGA1Ud
HwR+MHwweqB4oHaGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E2
NjE3ZDhjLWQxNTQtNDYxZS1iY2NhLWI2NmQyNjdjZmZjNy8wL0VDOUQ5ODcyQTcx
MEZFNzEzREM2MjI0MUQ1ODc3MDNCREY3REMxRDYuY3JsMHQGCCsGAQUFBwEBBGgw
ZjBkBggrBgEFBQcwAoZYcnN5bmM6Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8v
SUROSUMtSUQvMi9FQzlEOTg3MkE3MTBGRTcxM0RDNjIyNDFENTg3NzAzQkRGN0RD
MUQ2LmNlcjCBpAYIKwYBBQUHAQsEgZcwgZQwgZEGCCsGAQUFBzALhoGEcnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTY2MTdkOGMtZDE1NC00NjFlLWJj
Y2EtYjY2ZDI2N2NmZmM3LzAvMzEzMDMzMmUzMTM5MmUzMTM3MzcyZTMwMmYzMjM0
MmQzMjM0MjAzZDNlMjAzMTMzMzIzNjM0Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYI
KwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnE7EwDQYJKoZI
hvcNAQELBQADggEBAIGL66ZptvLElL3W96PUiQUTthmaIohcdnDuwyuBmbHvovya
aTcwHwcOCXmOOEZHbVAaD3IO1Zj82rr12FUbJxUMd9QWGDNY6TPkq0meHdIlGXbw
3auAG9tLDQpJZwoSbPP1NWRYD2yzejvnuCQ1xQvwt2saO2OgiWWyfj6/uLYSNfKp
K57D8Q03uVGf98YrbygTROqB+iWrRoAXh7EYSD8LcEUEi8dCZmZzeMVyKT6T5Evb
7h+y4jAGQCH1jOZwHORWDI/r07SFn9Vw5ZyozpHi+qnQrIGuPJFLQt3WP548ZDpX
nuYnewUKkYS9Nz+M8bBYJqpm94T3VAUZ4d/yp2Y=
-----END CERTIFICATE-----
Generated at Sun Oct 19 19:51:21 2025 by rpki-client