Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/1192021e-3904-4115-af5e-3edb713baa14/0/3130332e3136392e3134382e302f32332d3233203d3e20313432333339.roa
File:                     3130332e3136392e3134382e302f32332d3233203d3e20313432333339.roa (raw, json)
Hash identifier:          gJAqHQjFUTPg0AFGSgF8qhY2vJwwNEihrQ5zJgvbzfU=
Subject key identifier:   C6:73:6E:D6:7E:C5:20:50:54:B9:70:AA:4F:AC:D1:5A:C7:5B:8E:9D
Certificate issuer:       /CN=C24FD85D1F493383773D253EBB38BED908305E45
Certificate serial:       0E0A617FA4736C5D723112D715BFF0B6C7F0F1BB
Authority key identifier: C2:4F:D8:5D:1F:49:33:83:77:3D:25:3E:BB:38:BE:D9:08:30:5E:45
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C24FD85D1F493383773D253EBB38BED908305E45.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/1192021e-3904-4115-af5e-3edb713baa14/0/3130332e3136392e3134382e302f32332d3233203d3e20313432333339.roa
Signing time:             Wed 23 Jul 2025 15:00:00 +0000
ROA not before:           Wed 23 Jul 2025 14:55:00 +0000
ROA not after:            Wed 22 Jul 2026 15:00:00 +0000
asID:                     142339
IP address blocks:        103.169.148.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/1192021e-3904-4115-af5e-3edb713baa14/0/C24FD85D1F493383773D253EBB38BED908305E45.crl
                          rsync://repo-rpki.idnic.net/repo/1192021e-3904-4115-af5e-3edb713baa14/0/C24FD85D1F493383773D253EBB38BED908305E45.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C24FD85D1F493383773D253EBB38BED908305E45.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Aug 2025 19:52:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:0a:61:7f:a4:73:6c:5d:72:31:12:d7:15:bf:f0:b6:c7:f0:f1:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C24FD85D1F493383773D253EBB38BED908305E45
        Validity
            Not Before: Jul 23 14:55:00 2025 GMT
            Not After : Jul 22 15:00:00 2026 GMT
        Subject: CN=C6736ED67EC5205054B970AA4FACD15AC75B8E9D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:cf:33:63:05:26:68:1b:75:a9:33:b3:63:b4:
                    b2:6e:dc:0d:9b:7f:35:dd:d4:ab:89:d5:93:5d:2f:
                    fb:1d:05:f9:4e:48:b3:ad:fa:f4:f9:66:5b:f3:20:
                    5e:d1:0a:2c:9b:1e:f7:b4:fd:9f:1f:8c:ae:b8:8e:
                    78:11:30:c5:69:de:11:26:9e:74:56:0b:52:81:73:
                    1e:3b:7b:73:e8:11:b4:2c:d3:6b:7d:f8:70:df:93:
                    5f:bf:3d:81:37:5e:f6:61:5d:5a:8c:30:b6:58:e6:
                    3e:11:08:10:5a:7b:c0:2c:32:a5:5b:2c:66:64:93:
                    e0:68:5f:66:72:4e:c6:3c:b5:0a:90:6b:94:88:20:
                    4a:19:5e:96:87:3c:84:09:5b:30:e7:fc:68:b7:ab:
                    9e:2c:8f:8d:a1:59:57:7c:b6:62:07:88:fa:f9:e1:
                    a4:05:72:93:54:b9:26:da:17:c6:e9:79:1e:56:ca:
                    18:74:c8:12:18:8a:86:c9:a4:c2:4d:91:e2:87:35:
                    0c:86:e3:93:c8:62:9e:95:57:13:d7:a8:fe:81:46:
                    a9:77:83:ac:c1:78:dc:ea:e9:8a:27:88:f1:bb:ae:
                    86:7e:95:48:f6:c8:c6:ad:83:e8:5f:2c:95:d0:4f:
                    36:0f:87:19:47:7d:61:e8:f5:5d:cd:80:5c:ea:a2:
                    e3:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:73:6E:D6:7E:C5:20:50:54:B9:70:AA:4F:AC:D1:5A:C7:5B:8E:9D
            X509v3 Authority Key Identifier:
                keyid:C2:4F:D8:5D:1F:49:33:83:77:3D:25:3E:BB:38:BE:D9:08:30:5E:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/1192021e-3904-4115-af5e-3edb713baa14/0/C24FD85D1F493383773D253EBB38BED908305E45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C24FD85D1F493383773D253EBB38BED908305E45.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1192021e-3904-4115-af5e-3edb713baa14/0/3130332e3136392e3134382e302f32332d3233203d3e20313432333339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.169.148.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3f:94:7c:0c:c0:01:e5:2c:e0:f9:87:ea:96:4d:d0:44:5e:b2:
         48:a1:7c:23:7a:0c:d7:dd:c3:e1:77:eb:2d:17:2c:1b:12:5f:
         a7:e5:9d:88:4c:1e:75:e6:9e:15:7c:26:d0:0c:d3:74:2e:51:
         6e:1e:1d:f3:dc:45:27:d9:c6:86:ea:e0:f8:93:23:f8:e5:4f:
         c0:d3:d9:fc:4f:b3:92:92:4d:83:60:18:54:b1:bc:de:df:7b:
         e8:94:98:49:33:ea:8c:47:b9:2b:c9:0a:f6:29:64:f7:b5:1d:
         be:85:da:ac:76:5a:f7:2e:a0:2f:ff:9e:4b:0f:dd:66:46:6a:
         b7:16:aa:58:ff:1f:9a:c3:b1:83:ce:09:f3:06:c0:73:06:5a:
         82:60:ef:73:fd:da:4f:9a:47:9a:0f:a7:07:87:9c:aa:f0:0c:
         33:ad:29:d5:02:84:01:f9:fa:4f:e4:4f:6c:93:a5:6e:06:71:
         c6:37:e4:ac:5b:a7:49:6f:6f:3c:a8:54:57:d9:0d:c4:33:5a:
         e9:57:d2:05:eb:a6:38:f9:cd:2a:88:81:01:d8:69:8f:b1:b7:
         67:d2:32:7a:d6:8e:6f:e2:16:0f:59:75:07:5a:2e:74:0f:c3:
         e5:fd:7a:d7:25:93:62:49:59:82:78:cf:d6:78:78:f2:87:b5:
         f2:37:61:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:25:23 2025 by rpki-client