Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3130312e3132382e36342e302f32332d3233203d3e20313335343738.roa
File:                     3130312e3132382e36342e302f32332d3233203d3e20313335343738.roa (raw, json)
Hash identifier:          JkjpDdCJgWVzuOY12ir6Ikn51I2tzcRUREV5wqezCEs=
Subject key identifier:   61:94:80:09:69:2F:9B:F2:25:95:7B:6B:64:00:8D:E8:FB:B1:B8:39
Certificate issuer:       /CN=7E2CF346D5DE840DC0EE944C918EDC5137D6998A
Certificate serial:       6F1EB881379E1764343B807049E28C0B2B23917E
Authority key identifier: 7E:2C:F3:46:D5:DE:84:0D:C0:EE:94:4C:91:8E:DC:51:37:D6:99:8A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3130312e3132382e36342e302f32332d3233203d3e20313335343738.roa
Signing time:             Thu 16 Oct 2025 01:13:09 +0000
ROA not before:           Thu 16 Oct 2025 01:08:09 +0000
ROA not after:            Thu 15 Oct 2026 01:13:09 +0000
asID:                     135478
IP address blocks:        101.128.64.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.crl
                          rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 19 Oct 2025 10:59:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:1e:b8:81:37:9e:17:64:34:3b:80:70:49:e2:8c:0b:2b:23:91:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7E2CF346D5DE840DC0EE944C918EDC5137D6998A
        Validity
            Not Before: Oct 16 01:08:09 2025 GMT
            Not After : Oct 15 01:13:09 2026 GMT
        Subject: CN=61948009692F9BF225957B6B64008DE8FBB1B839
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:ab:8d:4f:d9:fa:eb:40:38:db:38:f8:31:e7:
                    9f:c6:81:e0:de:e9:74:40:c6:33:0e:99:07:78:a5:
                    30:80:36:6b:fe:81:f1:29:3b:9c:77:c4:91:b4:8f:
                    3f:0f:b2:c6:4c:6f:1a:e1:d8:ca:a4:ac:12:69:a8:
                    40:8e:e5:e0:93:0c:8e:75:38:91:90:d9:80:a5:84:
                    58:3e:67:fd:e0:88:bd:f1:a5:94:12:bf:ef:0e:e7:
                    18:43:82:51:aa:26:38:7c:bb:8b:a7:fc:41:93:20:
                    85:17:3a:ba:23:8b:3d:4b:a1:9c:f5:c8:8e:24:d6:
                    17:e2:59:53:b8:5f:33:ec:57:3f:80:f3:2f:49:dc:
                    f8:34:a3:89:c2:0f:b0:10:87:0e:0b:77:6f:29:82:
                    cc:f3:6d:bc:5a:49:8b:90:05:21:39:a7:8d:03:b8:
                    97:1c:64:14:f5:de:8c:78:d3:1c:a3:44:0e:a3:c8:
                    ba:52:65:9a:44:cb:dc:ef:6d:77:84:cb:ab:6c:73:
                    75:7a:0c:88:3f:4e:89:c0:75:79:9a:5c:e2:c8:46:
                    a4:a7:e2:57:e3:dc:f9:64:37:48:2d:86:f9:ca:8a:
                    b1:a8:2e:98:26:11:5e:5c:40:49:b5:1e:e9:ab:17:
                    c2:ad:83:5d:da:a5:b5:3e:cf:ad:f6:ab:68:eb:fa:
                    42:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:94:80:09:69:2F:9B:F2:25:95:7B:6B:64:00:8D:E8:FB:B1:B8:39
            X509v3 Authority Key Identifier:
                keyid:7E:2C:F3:46:D5:DE:84:0D:C0:EE:94:4C:91:8E:DC:51:37:D6:99:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3130312e3132382e36342e302f32332d3233203d3e20313335343738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.128.64.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a5:b2:54:9d:5b:63:92:ef:08:68:aa:1e:fe:36:18:45:dc:89:
         f9:a0:5d:77:4e:12:e1:5d:c4:de:6f:a1:fb:a4:bd:f0:f7:38:
         38:03:ef:37:0f:48:af:c9:4b:2a:10:fd:7b:14:4a:4f:b1:be:
         98:ff:0a:1b:15:94:ff:5a:49:1a:02:68:59:83:f1:3d:b5:79:
         72:72:23:b4:1c:75:bf:e2:9f:6a:d2:f0:c4:63:8b:f8:d1:45:
         74:3c:62:1d:e8:c9:f7:11:20:34:69:54:12:16:f4:9e:82:54:
         2f:fe:44:06:32:87:f5:d3:04:56:e6:3f:05:da:78:76:e9:ce:
         77:c9:c9:97:f6:68:35:ee:fe:0b:1d:72:7c:22:28:d6:8a:90:
         aa:7f:24:d2:67:fc:c5:31:c2:b7:3e:a7:b2:ad:75:49:69:be:
         2d:bb:2c:7d:7d:89:fd:17:92:4d:68:33:4a:9d:f0:b7:c0:76:
         e5:c7:4f:a1:da:dc:e3:08:87:d6:e0:e1:d3:c7:9e:1b:7a:22:
         1f:84:47:b1:39:f7:d3:be:cc:89:15:9f:3a:44:f3:1a:46:4d:
         7a:61:fe:2f:27:78:98:8d:85:5d:41:7b:9e:66:17:74:50:a2:
         0d:a5:a5:84:e6:99:d3:15:99:50:12:35:cf:6b:6d:e6:7b:75:
         8e:17:76:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 16 08:30:39 2025 by rpki-client