Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/26652000-1f2c-4791-81b4-d4457cef1270/0/3130332e3134372e37322e302f32332d3234203d3e20313339393531.roa
File:                     3130332e3134372e37322e302f32332d3234203d3e20313339393531.roa (raw, json)
Hash identifier:          00o5kwNuKSJ5PpNjUI86eyQMeGSOAboXshPfZ04uCOQ=
Subject key identifier:   7B:7F:0C:D0:9C:32:D3:D2:0A:7E:D3:32:A9:AA:B3:31:F5:E1:63:9A
Certificate issuer:       /CN=7D52713C0D26932DC1EECC75CB0C11784C9B0592
Certificate serial:       09D0C504DC754FD13A97716CD326ED0D5DEE0B1B
Authority key identifier: 7D:52:71:3C:0D:26:93:2D:C1:EE:CC:75:CB:0C:11:78:4C:9B:05:92
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D52713C0D26932DC1EECC75CB0C11784C9B0592.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/26652000-1f2c-4791-81b4-d4457cef1270/0/3130332e3134372e37322e302f32332d3234203d3e20313339393531.roa
Signing time:             Fri 29 Aug 2025 04:00:01 +0000
ROA not before:           Fri 29 Aug 2025 03:55:01 +0000
ROA not after:            Fri 28 Aug 2026 04:00:01 +0000
asID:                     139951
IP address blocks:        103.147.72.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/26652000-1f2c-4791-81b4-d4457cef1270/0/7D52713C0D26932DC1EECC75CB0C11784C9B0592.crl
                          rsync://repo-rpki.idnic.net/repo/26652000-1f2c-4791-81b4-d4457cef1270/0/7D52713C0D26932DC1EECC75CB0C11784C9B0592.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D52713C0D26932DC1EECC75CB0C11784C9B0592.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Oct 2025 04:43:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:d0:c5:04:dc:75:4f:d1:3a:97:71:6c:d3:26:ed:0d:5d:ee:0b:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D52713C0D26932DC1EECC75CB0C11784C9B0592
        Validity
            Not Before: Aug 29 03:55:01 2025 GMT
            Not After : Aug 28 04:00:01 2026 GMT
        Subject: CN=7B7F0CD09C32D3D20A7ED332A9AAB331F5E1639A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:db:1a:17:36:3d:64:81:ac:ae:56:ee:17:63:
                    c4:b6:22:6a:28:9c:0b:54:2a:79:c1:1e:ab:0a:52:
                    1e:fe:54:d2:83:2b:fe:44:84:21:95:9d:ca:9f:19:
                    90:54:57:71:ad:4c:bf:7e:c7:5b:62:04:d7:a3:74:
                    49:a7:45:34:fc:c4:43:0e:e9:22:38:b2:55:01:39:
                    ca:49:59:b1:90:2a:65:64:6e:1e:28:33:52:97:20:
                    bb:6a:60:8c:cc:1e:42:8a:41:6d:8a:78:ab:c3:d7:
                    8d:41:ab:e7:8f:b5:9d:4a:46:a9:6e:cf:46:58:a1:
                    c1:06:79:b0:d8:21:cf:02:a8:81:ed:62:2e:78:6f:
                    6f:85:ec:9d:5c:89:8d:71:57:cb:80:d8:3c:94:cb:
                    fa:0b:f4:a6:6b:ed:65:bd:c8:04:aa:e1:54:10:87:
                    e6:2f:a0:2a:8e:86:7f:ea:9f:5c:ff:e7:7f:e9:7f:
                    3c:51:f3:14:58:7d:a4:2f:c0:5e:7c:77:44:61:e5:
                    64:b1:dd:26:00:21:89:3c:00:19:fe:94:2b:63:08:
                    a5:7b:87:5f:f1:8a:4c:4d:55:fa:0e:c1:13:e6:94:
                    02:eb:d3:98:e4:c5:b5:60:30:01:c5:e2:07:99:31:
                    64:b7:af:11:bc:ad:28:83:4f:c4:f9:8c:7f:aa:2f:
                    da:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:7F:0C:D0:9C:32:D3:D2:0A:7E:D3:32:A9:AA:B3:31:F5:E1:63:9A
            X509v3 Authority Key Identifier:
                keyid:7D:52:71:3C:0D:26:93:2D:C1:EE:CC:75:CB:0C:11:78:4C:9B:05:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/26652000-1f2c-4791-81b4-d4457cef1270/0/7D52713C0D26932DC1EECC75CB0C11784C9B0592.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D52713C0D26932DC1EECC75CB0C11784C9B0592.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/26652000-1f2c-4791-81b4-d4457cef1270/0/3130332e3134372e37322e302f32332d3234203d3e20313339393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.147.72.0/23

    Signature Algorithm: sha256WithRSAEncryption
         44:a6:c8:03:36:5a:75:12:b6:db:0c:71:7d:16:2d:b8:a4:78:
         fa:64:7e:e6:8e:9b:70:d8:1a:89:d4:34:47:85:20:12:cd:9c:
         03:53:c5:f3:b7:e7:49:09:47:20:18:3c:a5:58:e1:2b:82:ee:
         06:1d:0b:f3:f2:e0:0c:02:5f:e5:cd:26:35:ec:d7:8e:f0:a5:
         00:c8:69:ee:25:4b:04:3e:49:56:1f:cb:1f:08:06:16:3e:d0:
         38:85:1e:32:ad:92:78:ec:dd:04:dc:c7:80:81:d4:ea:a0:00:
         4c:4d:c1:b4:91:59:54:16:c9:f3:6d:e5:b1:3c:78:48:47:9c:
         e8:b3:5b:ec:9a:42:df:19:57:89:1d:f9:33:5a:89:b5:ad:63:
         1d:e1:62:c5:d7:d8:9c:26:80:de:e4:3b:8a:46:b1:d0:c0:fb:
         2c:24:d4:0c:7a:e4:56:6e:5c:b6:f8:21:af:8e:f7:5b:62:a0:
         52:8b:55:b2:8d:38:e6:a8:9d:cd:18:06:6f:65:bc:56:86:6f:
         32:04:64:ef:9a:d5:a4:7e:c9:4d:a5:b8:67:c3:19:e4:17:6e:
         4e:8d:fd:c3:e2:a5:4a:b4:99:82:84:20:7b:02:7d:bf:e4:5b:
         13:e4:70:29:30:6a:56:eb:40:4c:4e:84:21:ad:81:00:ce:d8:
         19:90:dc:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:23:59 2025 by rpki-client