Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/26c060fb-e936-4a23-bbe2-94457bf709bf/0/3130332e37382e3135382e302f32342d3234203d3e20313530323438.roa
File:                     3130332e37382e3135382e302f32342d3234203d3e20313530323438.roa (raw, json)
Hash identifier:          /cB/UKxImbPCeH1Tv0z/T2nqJMV32d3EX5C9M3ekCEM=
Subject key identifier:   DF:65:D7:99:98:81:96:39:5D:1F:8D:07:91:4B:64:3F:8D:FA:72:B9
Certificate issuer:       /CN=69BB542D91A8CC754EA322384139641D17704D60
Certificate serial:       4632AB5F7748B3AFB5C8BE9B4FB1D64CE3613B54
Authority key identifier: 69:BB:54:2D:91:A8:CC:75:4E:A3:22:38:41:39:64:1D:17:70:4D:60
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69BB542D91A8CC754EA322384139641D17704D60.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/26c060fb-e936-4a23-bbe2-94457bf709bf/0/3130332e37382e3135382e302f32342d3234203d3e20313530323438.roa
Signing time:             Wed 17 Sep 2025 13:00:01 +0000
ROA not before:           Wed 17 Sep 2025 12:55:01 +0000
ROA not after:            Wed 16 Sep 2026 13:00:01 +0000
asID:                     150248
IP address blocks:        103.78.158.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/26c060fb-e936-4a23-bbe2-94457bf709bf/0/69BB542D91A8CC754EA322384139641D17704D60.crl
                          rsync://repo-rpki.idnic.net/repo/26c060fb-e936-4a23-bbe2-94457bf709bf/0/69BB542D91A8CC754EA322384139641D17704D60.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69BB542D91A8CC754EA322384139641D17704D60.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Oct 2025 11:48:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:32:ab:5f:77:48:b3:af:b5:c8:be:9b:4f:b1:d6:4c:e3:61:3b:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69BB542D91A8CC754EA322384139641D17704D60
        Validity
            Not Before: Sep 17 12:55:01 2025 GMT
            Not After : Sep 16 13:00:01 2026 GMT
        Subject: CN=DF65D799988196395D1F8D07914B643F8DFA72B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:99:ce:72:0e:da:85:8e:1d:48:8f:46:8e:1b:
                    c0:a8:64:ee:9e:3e:4b:a3:71:41:97:af:9c:96:82:
                    20:df:3c:34:5a:af:19:e1:3a:f2:7e:93:24:49:36:
                    fa:9f:29:61:3c:4f:07:1d:5a:71:ef:c8:81:b5:be:
                    34:8c:21:70:12:17:62:47:73:36:ab:e4:4a:f7:91:
                    60:01:09:59:e6:1e:18:c5:d8:eb:b3:09:3e:eb:14:
                    71:87:11:fe:35:c1:31:ef:45:d9:ab:a0:e9:d9:a4:
                    f1:5c:37:e1:93:ba:0e:30:e2:95:69:4d:6d:41:93:
                    aa:1f:5e:99:2d:80:30:e9:c0:93:2a:42:8e:b2:f8:
                    fa:48:97:0a:60:5d:91:68:b7:29:b4:99:15:a3:0a:
                    3c:90:3a:64:48:c0:83:fd:a6:45:f8:6a:07:ee:74:
                    f4:06:f4:2b:c7:36:66:5c:88:94:c5:50:c7:70:ec:
                    03:dd:9a:ce:01:17:ba:28:ba:b7:1e:0b:85:9e:e8:
                    34:6b:b7:26:82:f9:28:34:b5:a1:78:57:ba:4f:a5:
                    0d:fc:5a:21:a8:65:01:97:dc:9a:f9:de:76:b4:aa:
                    95:6c:b9:6f:d7:5c:66:2a:1f:0d:45:7c:d4:33:f8:
                    33:24:99:7b:7a:f1:bb:69:8d:bc:08:cf:c5:ea:e8:
                    44:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:65:D7:99:98:81:96:39:5D:1F:8D:07:91:4B:64:3F:8D:FA:72:B9
            X509v3 Authority Key Identifier:
                keyid:69:BB:54:2D:91:A8:CC:75:4E:A3:22:38:41:39:64:1D:17:70:4D:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/26c060fb-e936-4a23-bbe2-94457bf709bf/0/69BB542D91A8CC754EA322384139641D17704D60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69BB542D91A8CC754EA322384139641D17704D60.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/26c060fb-e936-4a23-bbe2-94457bf709bf/0/3130332e37382e3135382e302f32342d3234203d3e20313530323438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.78.158.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:63:4f:03:aa:54:02:25:1e:5d:c3:3a:00:40:8a:4e:57:9e:
         f6:f2:17:fb:3b:fe:88:55:02:f8:8d:8d:bf:c5:77:a4:cc:e8:
         20:15:fe:2f:88:fe:d0:91:75:60:be:19:f9:a3:c1:70:ef:1e:
         29:99:ec:9f:5b:0f:70:af:af:03:22:2e:18:6e:42:75:1b:9e:
         e4:d7:e6:a0:c5:fb:2e:93:f4:cb:b0:81:e7:3a:f9:7a:0a:ae:
         73:60:77:e3:87:8e:ab:1b:0c:5f:14:b4:f6:29:46:f8:ca:f6:
         e5:d9:93:c6:13:be:2d:f8:25:dc:01:b5:6f:ad:27:d1:a5:0d:
         22:f4:b7:9a:fc:9a:e8:3b:6d:ab:fc:55:aa:cf:b6:0d:34:3f:
         31:17:ba:9b:81:e3:c1:b6:b1:5a:2e:02:62:df:a1:b5:79:54:
         00:8f:c4:b9:c3:48:c1:08:72:64:3f:89:f3:4b:a3:1a:bb:ea:
         1c:22:99:3f:e4:49:6e:74:5c:e5:eb:11:71:c4:1e:af:70:30:
         4e:e1:56:43:e3:46:0e:4c:80:30:84:d2:e0:73:a0:67:9d:13:
         15:cf:9a:70:0a:b0:59:c9:e0:76:bf:dd:6a:21:23:c8:ea:f7:
         4a:60:49:33:93:d6:e2:c2:f1:ad:5d:e8:34:13:17:3b:8d:8e:
         71:80:6b:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 00:13:32 2025 by rpki-client