Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/1127eafd-a674-4437-abf1-e550dec137fa/0/3130332e3131312e3134302e302f32342d3234203d3e20313431343631.roa
File:                     3130332e3131312e3134302e302f32342d3234203d3e20313431343631.roa (raw, json)
Hash identifier:          bDyPI2WVo6BjRMZp12OHCZAGn1tdLEQqcz47No/uxaA=
Subject key identifier:   B4:9E:26:C7:B0:2F:38:71:2F:2C:49:1F:5F:01:36:65:6F:B6:89:C5
Certificate issuer:       /CN=EBA04070CA27E646C332039E07557734C6732ED2
Certificate serial:       3D97F1DA9D809FE39376AB9088A36A1072409F24
Authority key identifier: EB:A0:40:70:CA:27:E6:46:C3:32:03:9E:07:55:77:34:C6:73:2E:D2
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EBA04070CA27E646C332039E07557734C6732ED2.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/1127eafd-a674-4437-abf1-e550dec137fa/0/3130332e3131312e3134302e302f32342d3234203d3e20313431343631.roa
Signing time:             Sun 24 Aug 2025 03:00:01 +0000
ROA not before:           Sun 24 Aug 2025 02:55:01 +0000
ROA not after:            Sun 23 Aug 2026 03:00:01 +0000
asID:                     141461
IP address blocks:        103.111.140.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/1127eafd-a674-4437-abf1-e550dec137fa/0/EBA04070CA27E646C332039E07557734C6732ED2.crl
                          rsync://repo-rpki.idnic.net/repo/1127eafd-a674-4437-abf1-e550dec137fa/0/EBA04070CA27E646C332039E07557734C6732ED2.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EBA04070CA27E646C332039E07557734C6732ED2.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Aug 2025 08:45:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:97:f1:da:9d:80:9f:e3:93:76:ab:90:88:a3:6a:10:72:40:9f:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EBA04070CA27E646C332039E07557734C6732ED2
        Validity
            Not Before: Aug 24 02:55:01 2025 GMT
            Not After : Aug 23 03:00:01 2026 GMT
        Subject: CN=B49E26C7B02F38712F2C491F5F0136656FB689C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:14:47:15:63:94:d3:6a:ee:68:2e:6a:03:ab:
                    8b:e1:ca:f6:cf:13:ba:ce:0e:26:f6:00:fa:da:71:
                    e1:6a:81:1e:b8:d5:6e:fb:f5:ba:8a:e1:1e:3a:6d:
                    45:4b:a3:87:6d:98:e7:68:a0:e0:cf:bb:f5:55:17:
                    c1:8e:f1:be:4c:01:43:40:f4:da:aa:0f:9b:d5:1c:
                    2a:9a:0e:9a:bd:81:ce:21:93:ad:63:e7:46:55:b7:
                    cd:34:8a:b9:30:a7:41:70:29:57:42:83:40:67:48:
                    2a:69:36:59:43:61:72:28:f1:24:e1:16:ea:4c:31:
                    3f:42:3e:f8:8e:2d:a1:09:d0:ee:71:9b:a4:d8:2b:
                    7e:7f:20:8f:4e:48:01:cc:7c:c9:7f:0e:b4:9a:25:
                    63:fd:31:9c:58:bf:69:72:ee:d9:71:e2:01:f5:61:
                    05:04:6b:00:93:7e:5c:82:b4:ae:97:68:c6:38:71:
                    dc:67:54:02:92:82:6c:6a:3f:59:dc:0d:2f:e0:89:
                    e3:37:31:07:9b:1f:49:49:24:3e:f2:21:17:c1:8f:
                    be:57:55:ff:0b:82:9c:ba:b7:37:2c:dd:ca:0a:aa:
                    30:aa:52:2a:17:4e:b7:b5:ef:19:4a:da:68:4f:22:
                    87:9d:f9:91:20:cb:b3:b0:ab:aa:71:7a:a6:a8:7a:
                    2b:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:9E:26:C7:B0:2F:38:71:2F:2C:49:1F:5F:01:36:65:6F:B6:89:C5
            X509v3 Authority Key Identifier:
                keyid:EB:A0:40:70:CA:27:E6:46:C3:32:03:9E:07:55:77:34:C6:73:2E:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/1127eafd-a674-4437-abf1-e550dec137fa/0/EBA04070CA27E646C332039E07557734C6732ED2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EBA04070CA27E646C332039E07557734C6732ED2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1127eafd-a674-4437-abf1-e550dec137fa/0/3130332e3131312e3134302e302f32342d3234203d3e20313431343631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.111.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:01:fc:97:6c:a1:23:b0:17:a2:34:53:d9:71:bd:68:74:b8:
         7d:8e:b0:bc:f1:15:10:35:5a:ef:0b:86:51:3a:0d:65:2a:c3:
         0e:12:c5:6f:d0:78:53:0a:02:0d:8e:bc:67:b9:e7:8c:46:3a:
         ab:01:ee:02:7e:4b:81:6c:86:79:e0:4e:96:a1:af:2b:b3:98:
         9e:bf:13:7f:1d:e1:45:40:e2:f5:66:9c:b3:f2:81:13:3f:75:
         9e:cf:43:bd:d0:c0:0e:ad:c6:61:2e:80:ed:24:98:ba:9a:a1:
         26:43:d3:50:18:c7:b3:bd:f0:21:08:6f:10:ed:cd:4f:04:03:
         a6:07:d1:a3:3b:b1:51:2b:60:bc:f5:6d:3c:53:9d:b3:d3:41:
         f3:9d:6b:da:cc:04:63:c0:9e:23:ab:a5:f1:c0:9d:77:0a:73:
         05:91:53:86:bc:cc:1d:2b:7b:57:2c:d4:1b:b1:14:57:50:4b:
         b8:57:97:b9:e4:56:d2:53:12:0c:92:fe:95:c2:7f:87:48:9d:
         64:24:db:d3:0a:ec:0d:cd:f1:ce:54:c5:19:33:68:fd:65:f1:
         9a:64:1d:ad:33:d4:8c:e8:ef:f0:bc:63:2f:e4:f6:ff:d7:a8:
         a8:da:68:19:e7:9b:d6:4b:c1:b4:60:b1:27:5c:22:35:a0:2b:
         ae:40:f8:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 09:02:56 2025 by rpki-client