Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/19c27621-e297-4100-971a-1c6967c52b1b/0/3130332e3137392e38392e302f32342d3234203d3e20313439333432.roa
File:                     3130332e3137392e38392e302f32342d3234203d3e20313439333432.roa (raw, json)
Hash identifier:          ZLFPPPuherxliEdNrwnbiAo9KOCnKvgNjSLpmHcBAG0=
Subject key identifier:   54:C1:E5:7C:48:C5:4F:A6:7F:E7:3B:89:80:B0:12:72:8C:6F:C6:4F
Certificate issuer:       /CN=73A2C069A3B2EBAC75ECB373F398B5602B55A6FD
Certificate serial:       0A9A86A910E3C81CA29AE7AD4C2380899B5EDC01
Authority key identifier: 73:A2:C0:69:A3:B2:EB:AC:75:EC:B3:73:F3:98:B5:60:2B:55:A6:FD
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/73A2C069A3B2EBAC75ECB373F398B5602B55A6FD.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/19c27621-e297-4100-971a-1c6967c52b1b/0/3130332e3137392e38392e302f32342d3234203d3e20313439333432.roa
Signing time:             Sun 28 Sep 2025 15:00:00 +0000
ROA not before:           Sun 28 Sep 2025 14:55:00 +0000
ROA not after:            Sun 27 Sep 2026 15:00:00 +0000
asID:                     149342
IP address blocks:        103.179.89.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/19c27621-e297-4100-971a-1c6967c52b1b/0/73A2C069A3B2EBAC75ECB373F398B5602B55A6FD.crl
                          rsync://repo-rpki.idnic.net/repo/19c27621-e297-4100-971a-1c6967c52b1b/0/73A2C069A3B2EBAC75ECB373F398B5602B55A6FD.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/73A2C069A3B2EBAC75ECB373F398B5602B55A6FD.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Oct 2025 07:47:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:9a:86:a9:10:e3:c8:1c:a2:9a:e7:ad:4c:23:80:89:9b:5e:dc:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73A2C069A3B2EBAC75ECB373F398B5602B55A6FD
        Validity
            Not Before: Sep 28 14:55:00 2025 GMT
            Not After : Sep 27 15:00:00 2026 GMT
        Subject: CN=54C1E57C48C54FA67FE73B8980B012728C6FC64F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:8c:c4:d4:c3:98:fa:08:a7:83:cd:af:3d:93:
                    2d:89:91:42:75:89:2f:7c:12:4e:bd:3b:11:7c:71:
                    08:0d:f3:ca:0e:24:f3:a7:32:9c:ea:d7:f2:67:fa:
                    e0:08:01:b9:25:96:90:3e:6e:32:f5:a3:ab:12:58:
                    99:37:59:39:0d:bf:a9:e8:72:8e:99:02:11:d5:a9:
                    71:d3:dd:9c:1e:ea:08:63:ac:be:cd:a0:f5:64:d3:
                    f2:b1:39:df:51:ed:fe:24:6c:37:fe:67:5a:70:e4:
                    d8:ec:22:0a:2b:cc:2f:00:d2:06:9d:12:69:6a:6c:
                    3d:86:07:2f:a9:70:f8:99:25:99:a8:8d:c9:59:a8:
                    87:45:79:89:8b:94:fa:32:fc:56:26:97:8f:a9:e6:
                    62:13:0a:26:f3:92:37:8f:09:70:c5:76:92:a4:0e:
                    74:ec:b3:60:7f:35:3a:6f:7b:17:3b:a7:44:8b:54:
                    b0:98:ea:4b:c2:5d:dc:de:62:f5:3e:7d:d4:b0:bf:
                    b8:ae:ea:d6:f9:a1:d5:cd:59:54:fc:fe:1c:c0:e4:
                    ea:a9:11:e6:30:50:2b:e2:ea:2d:36:a2:1a:aa:55:
                    c0:b6:81:45:be:83:7d:c2:11:1f:47:d2:b1:c6:86:
                    c5:ad:3b:ae:1f:0a:87:0c:0b:f0:fb:1c:79:46:bf:
                    42:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:C1:E5:7C:48:C5:4F:A6:7F:E7:3B:89:80:B0:12:72:8C:6F:C6:4F
            X509v3 Authority Key Identifier:
                keyid:73:A2:C0:69:A3:B2:EB:AC:75:EC:B3:73:F3:98:B5:60:2B:55:A6:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/19c27621-e297-4100-971a-1c6967c52b1b/0/73A2C069A3B2EBAC75ECB373F398B5602B55A6FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/73A2C069A3B2EBAC75ECB373F398B5602B55A6FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/19c27621-e297-4100-971a-1c6967c52b1b/0/3130332e3137392e38392e302f32342d3234203d3e20313439333432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.179.89.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:4c:01:94:39:5c:0a:af:8d:17:fc:4b:22:42:5f:73:a6:4e:
         4e:bb:b7:b0:15:54:2f:e4:ad:fa:43:02:8e:c8:66:01:f2:b6:
         22:96:8f:f5:23:e4:d5:f2:b7:2a:bd:88:ab:bb:77:da:3a:e2:
         8a:40:01:8c:18:2c:d2:56:76:09:93:01:2a:2e:33:15:7e:2d:
         29:22:32:34:a1:8a:c5:c0:a8:97:12:24:3c:a2:3e:93:ac:be:
         75:3f:a0:14:71:07:0a:2b:8b:de:72:82:79:ee:db:b8:c3:23:
         6f:fc:b0:2f:ea:42:76:c8:ae:4e:f4:be:2d:8f:20:be:0d:6b:
         5f:4c:72:54:c5:68:a5:f9:5f:91:89:0c:c4:6a:1b:32:29:54:
         97:70:c9:13:78:5f:6a:be:01:17:f9:4a:f0:1d:55:f8:17:31:
         8d:88:5a:72:ff:b3:32:22:3d:50:e5:4e:f5:b0:c2:25:7a:2a:
         70:41:bb:30:a1:5e:e0:51:35:69:bf:8e:5b:89:e2:89:9b:cf:
         e7:19:ea:9f:36:59:a0:fc:7b:aa:e6:c6:5b:07:89:77:57:59:
         e2:ba:a0:8f:54:75:51:71:20:d7:39:8f:18:64:9d:c8:d1:31:
         fc:69:8d:ca:ad:5f:26:f0:22:e6:8f:28:41:03:3f:2e:bf:5b:
         a8:0a:32:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:53:44 2025 by rpki-client