Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e86e46ec-df5c-4b4d-a30e-10b2c688c2fc/0/3130332e3132302e36352e302f32342d3234203d3e20313337333733.roa
File:                     3130332e3132302e36352e302f32342d3234203d3e20313337333733.roa (raw, json)
Hash identifier:          /QE3JbQC9fGdo5sebo5tYuWfdXhEXpRAxCPxewOPZfY=
Subject key identifier:   AB:DC:1F:E8:3A:F3:5C:2B:7B:AF:FE:CF:A9:7D:AB:77:18:79:5E:F3
Certificate issuer:       /CN=6B647F696A9BB5C718605E8922BEF1BEE566F94E
Certificate serial:       7B1704C58975FDC17AB9814E52436993B97EEA8B
Authority key identifier: 6B:64:7F:69:6A:9B:B5:C7:18:60:5E:89:22:BE:F1:BE:E5:66:F9:4E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B647F696A9BB5C718605E8922BEF1BEE566F94E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e86e46ec-df5c-4b4d-a30e-10b2c688c2fc/0/3130332e3132302e36352e302f32342d3234203d3e20313337333733.roa
Signing time:             Tue 26 Aug 2025 11:34:37 +0000
ROA not before:           Tue 26 Aug 2025 11:29:37 +0000
ROA not after:            Tue 25 Aug 2026 11:34:37 +0000
asID:                     137373
IP address blocks:        103.120.65.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e86e46ec-df5c-4b4d-a30e-10b2c688c2fc/0/6B647F696A9BB5C718605E8922BEF1BEE566F94E.crl
                          rsync://repo-rpki.idnic.net/repo/e86e46ec-df5c-4b4d-a30e-10b2c688c2fc/0/6B647F696A9BB5C718605E8922BEF1BEE566F94E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B647F696A9BB5C718605E8922BEF1BEE566F94E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 22 Sep 2025 05:06:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:17:04:c5:89:75:fd:c1:7a:b9:81:4e:52:43:69:93:b9:7e:ea:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B647F696A9BB5C718605E8922BEF1BEE566F94E
        Validity
            Not Before: Aug 26 11:29:37 2025 GMT
            Not After : Aug 25 11:34:37 2026 GMT
        Subject: CN=ABDC1FE83AF35C2B7BAFFECFA97DAB7718795EF3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:da:2d:a4:67:be:53:17:e9:fc:00:95:11:52:
                    b2:4e:5f:da:19:b6:5a:7f:24:8e:4c:50:9a:a7:a8:
                    1f:45:e3:8e:a5:ed:62:0f:c0:50:1c:d1:ef:e5:2a:
                    51:ed:1a:d7:9c:5f:7e:8a:a4:c5:05:b3:de:52:63:
                    ff:7a:6f:35:f5:c8:5b:a9:01:db:59:79:1d:02:af:
                    e2:bd:d5:b6:8b:96:54:bd:75:df:57:3f:d6:6d:a9:
                    fb:46:ed:d5:b5:a2:a4:ec:8c:bb:92:1d:fd:fa:a7:
                    0e:8b:47:aa:25:d4:bd:5d:55:68:b9:d7:6f:f1:6d:
                    26:00:8a:5a:1a:07:0c:34:38:9d:8b:12:15:69:93:
                    8f:16:99:f4:7f:4f:0b:5c:2b:c3:63:64:bd:e9:55:
                    18:f6:87:a4:41:aa:bc:44:4d:46:89:45:8a:7b:b7:
                    41:82:24:c5:ac:62:42:97:a4:f2:b4:48:99:27:18:
                    aa:fe:6e:b7:7d:48:0a:6d:7d:4e:47:4e:e7:37:4b:
                    43:a9:2c:ab:0b:1a:39:a5:9a:1b:07:e3:82:87:97:
                    24:f8:aa:0e:c9:bb:ee:df:69:a7:68:05:58:29:c9:
                    a4:8e:39:e1:f6:9e:5b:28:83:bb:c4:d1:cf:9b:65:
                    e3:bc:95:e6:45:ed:87:2b:64:62:52:d7:14:97:9c:
                    65:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:DC:1F:E8:3A:F3:5C:2B:7B:AF:FE:CF:A9:7D:AB:77:18:79:5E:F3
            X509v3 Authority Key Identifier:
                keyid:6B:64:7F:69:6A:9B:B5:C7:18:60:5E:89:22:BE:F1:BE:E5:66:F9:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e86e46ec-df5c-4b4d-a30e-10b2c688c2fc/0/6B647F696A9BB5C718605E8922BEF1BEE566F94E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B647F696A9BB5C718605E8922BEF1BEE566F94E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e86e46ec-df5c-4b4d-a30e-10b2c688c2fc/0/3130332e3132302e36352e302f32342d3234203d3e20313337333733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.120.65.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:ed:b0:a8:42:aa:df:4b:56:44:4f:e1:20:9b:06:b2:7d:7c:
         15:28:21:2d:d8:76:6f:3c:77:8d:71:e1:b5:fa:33:f3:67:a8:
         0d:a5:41:9f:02:73:b5:62:2c:ec:bc:86:d0:f2:36:a2:6e:d9:
         a1:b1:b5:c9:ce:ae:b9:a7:e6:b1:4f:40:64:16:0f:58:fd:5a:
         7b:bc:8d:bc:8e:5c:0e:ec:45:be:7e:d5:b6:7e:49:be:d4:e2:
         14:bb:50:09:f5:a6:c9:94:4c:a5:af:ba:c4:d5:28:ca:55:ef:
         a1:24:5f:74:50:73:2a:7e:1e:3d:38:b5:29:22:f2:2f:8e:9b:
         b2:ab:3e:54:0d:6d:21:d8:ff:8d:eb:5a:93:23:85:c8:ca:46:
         6b:98:8c:e7:33:80:2e:43:a7:22:86:c4:aa:c6:da:27:2a:60:
         41:0b:a3:fa:41:e2:9e:1e:1f:6f:5e:94:b7:46:15:b7:96:fd:
         64:52:88:09:c9:92:0e:20:9c:50:89:7f:1b:9b:73:ea:97:07:
         5c:30:36:ad:4f:a7:10:5c:09:f0:6d:4a:60:03:38:f5:5d:4f:
         90:73:cf:64:53:0d:b5:2a:78:a1:77:fd:10:31:cf:8b:33:d2:
         44:c1:20:93:b6:a0:96:0a:54:1c:d6:fd:c6:0b:d1:2e:88:08:
         c5:65:55:94
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUexcExYl1/cF6uYFOUkNpk7l+6oswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkI2NDdGNjk2QTlCQjVDNzE4NjA1RTg5MjJCRUYxQkVF
NTY2Rjk0RTAeFw0yNTA4MjYxMTI5MzdaFw0yNjA4MjUxMTM0MzdaMDMxMTAvBgNV
BAMTKEFCREMxRkU4M0FGMzVDMkI3QkFGRkVDRkE5N0RBQjc3MTg3OTVFRjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx2i2kZ75TF+n8AJURUrJOX9oZ
tlp/JI5MUJqnqB9F446l7WIPwFAc0e/lKlHtGtecX36KpMUFs95SY/96bzX1yFup
AdtZeR0Cr+K91baLllS9dd9XP9ZtqftG7dW1oqTsjLuSHf36pw6LR6ol1L1dVWi5
12/xbSYAiloaBww0OJ2LEhVpk48WmfR/TwtcK8NjZL3pVRj2h6RBqrxETUaJRYp7
t0GCJMWsYkKXpPK0SJknGKr+brd9SAptfU5HTuc3S0OpLKsLGjmlmhsH44KHlyT4
qg7Ju+7faadoBVgpyaSOOeH2nlsog7vE0c+bZeO8leZF7YcrZGJS1xSXnGW7AgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUq9wf6DrzXCt7r/7PqX2rdxh5XvMwHwYDVR0j
BBgwFoAUa2R/aWqbtccYYF6JIr7xvuVm+U4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l
ODZlNDZlYy1kZjVjLTRiNGQtYTMwZS0xMGIyYzY4OGMyZmMvMC82QjY0N0Y2OTZB
OUJCNUM3MTg2MDVFODkyMkJFRjFCRUU1NjZGOTRFLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNkI2NDdGNjk2QTlCQjVDNzE4NjA1RTg5MjJCRUYxQkVFNTY2
Rjk0RS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2U4NmU0NmVjLWRmNWMtNGI0ZC1h
MzBlLTEwYjJjNjg4YzJmYy8wLzMxMzAzMzJlMzEzMjMwMmUzNjM1MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzMzM3MzMzNzMzLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ3hBMA0GCSqG
SIb3DQEBCwUAA4IBAQAA7bCoQqrfS1ZET+EgmwayfXwVKCEt2HZvPHeNceG1+jPz
Z6gNpUGfAnO1YizsvIbQ8jaibtmhsbXJzq65p+axT0BkFg9Y/Vp7vI28jlwO7EW+
ftW2fkm+1OIUu1AJ9abJlEylr7rE1SjKVe+hJF90UHMqfh49OLUpIvIvjpuyqz5U
DW0h2P+N61qTI4XIykZrmIznM4AuQ6cihsSqxtonKmBBC6P6QeKeHh9vXpS3RhW3
lv1kUogJyZIOIJxQiX8bm3PqlwdcMDatT6cQXAnwbUpgAzj1XU+Qc89kUw21Knih
d/0QMc+LM9JEwSCTtqCWClQc1v3GC9EuiAjFZVWU
-----END CERTIFICATE-----
Generated at Fri Sep 19 14:28:10 2025 by rpki-client