Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/2a97bcf4-e1aa-47d6-bde6-2e667b9d6134/0/3130332e3130302e3234372e302f32342d3234203d3e20313336383432.roa
File:                     3130332e3130302e3234372e302f32342d3234203d3e20313336383432.roa (raw, json)
Hash identifier:          7kcdJn0kEx4MlESTLNrz7h+lfGYcQSPT5Qkc5rykWNw=
Subject key identifier:   0C:23:59:21:21:97:B6:C1:24:B0:B1:D9:60:81:D3:70:D9:F2:58:AC
Certificate issuer:       /CN=A08B1B14AA5B6512424EDF8650A984942F27A4EF
Certificate serial:       7F9D0EF5340AE3D4FB7B5C4D43F111EE5B455E90
Authority key identifier: A0:8B:1B:14:AA:5B:65:12:42:4E:DF:86:50:A9:84:94:2F:27:A4:EF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A08B1B14AA5B6512424EDF8650A984942F27A4EF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2a97bcf4-e1aa-47d6-bde6-2e667b9d6134/0/3130332e3130302e3234372e302f32342d3234203d3e20313336383432.roa
Signing time:             Fri 15 Aug 2025 08:00:23 +0000
ROA not before:           Fri 15 Aug 2025 07:55:23 +0000
ROA not after:            Fri 14 Aug 2026 08:00:23 +0000
asID:                     136842
IP address blocks:        103.100.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/2a97bcf4-e1aa-47d6-bde6-2e667b9d6134/0/A08B1B14AA5B6512424EDF8650A984942F27A4EF.crl
                          rsync://repo-rpki.idnic.net/repo/2a97bcf4-e1aa-47d6-bde6-2e667b9d6134/0/A08B1B14AA5B6512424EDF8650A984942F27A4EF.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A08B1B14AA5B6512424EDF8650A984942F27A4EF.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Aug 2025 09:03:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:9d:0e:f5:34:0a:e3:d4:fb:7b:5c:4d:43:f1:11:ee:5b:45:5e:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A08B1B14AA5B6512424EDF8650A984942F27A4EF
        Validity
            Not Before: Aug 15 07:55:23 2025 GMT
            Not After : Aug 14 08:00:23 2026 GMT
        Subject: CN=0C2359212197B6C124B0B1D96081D370D9F258AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:8e:d4:8a:b8:77:e6:b1:3f:2a:88:ca:2e:af:
                    e2:a2:ba:d8:ac:57:2f:3f:d8:b0:1f:38:24:bf:ca:
                    fb:b1:a5:5c:cf:41:7a:2a:ba:29:86:a0:e9:a3:2a:
                    3e:e1:c1:bb:1a:9f:86:30:36:74:3a:39:fb:af:3e:
                    61:9e:f5:ab:3a:f3:67:84:d5:6a:33:18:0f:10:27:
                    45:84:9b:d9:b7:ea:2d:5b:15:c9:c3:c3:d8:05:83:
                    5a:2e:7b:36:29:13:10:88:be:4a:4f:40:b3:a6:bb:
                    e0:5e:65:b5:9d:d5:65:1c:70:30:0f:44:08:74:e5:
                    f9:57:b5:de:ec:62:4b:f9:27:64:51:67:4f:cc:cb:
                    92:a8:ae:e1:db:74:04:eb:89:42:46:5e:f9:8f:09:
                    41:80:1a:c9:dc:29:5e:ed:72:ad:8c:83:ed:ef:cc:
                    40:ee:f1:a5:11:3b:d1:21:45:f0:81:52:9f:57:8f:
                    e6:65:0e:52:8f:6c:8d:d4:6d:d0:ec:61:e5:df:1c:
                    06:8f:eb:5b:20:f7:da:47:0b:65:3b:dc:b2:4b:4c:
                    09:1d:4e:e0:90:8b:91:67:fe:6e:ed:a9:32:a1:a2:
                    af:47:ed:3b:1d:96:e7:8f:ed:85:fb:3f:39:cd:1f:
                    c4:db:d4:16:1c:19:66:d3:5f:5b:0d:ae:c0:7c:85:
                    4f:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:23:59:21:21:97:B6:C1:24:B0:B1:D9:60:81:D3:70:D9:F2:58:AC
            X509v3 Authority Key Identifier:
                keyid:A0:8B:1B:14:AA:5B:65:12:42:4E:DF:86:50:A9:84:94:2F:27:A4:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2a97bcf4-e1aa-47d6-bde6-2e667b9d6134/0/A08B1B14AA5B6512424EDF8650A984942F27A4EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A08B1B14AA5B6512424EDF8650A984942F27A4EF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2a97bcf4-e1aa-47d6-bde6-2e667b9d6134/0/3130332e3130302e3234372e302f32342d3234203d3e20313336383432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.100.247.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:20:5d:25:88:1f:8e:9f:33:d5:d9:bd:40:77:54:49:01:f1:
         b0:8e:44:a1:97:19:28:f5:3b:0f:63:47:d1:b1:c5:ed:c7:04:
         f1:7d:33:11:ca:e9:8a:31:fb:cb:96:61:f3:dc:9b:14:02:0d:
         4c:b4:d1:5c:5e:a3:0c:74:29:ff:5e:e0:f9:cb:ae:b1:93:4c:
         f3:45:ab:00:b8:e8:b9:43:49:f9:87:dd:11:58:29:ad:05:7e:
         48:48:14:88:c3:32:00:ff:24:39:2b:56:fb:c0:64:ee:4b:c3:
         cb:90:dc:8f:de:67:b9:d4:a6:a9:9c:0d:5f:12:92:52:23:85:
         c7:d6:55:86:17:1e:ed:dc:f4:58:6e:c5:9a:cd:09:3b:39:7d:
         c1:af:95:f2:65:a8:1b:13:75:06:87:bc:d5:db:52:86:5a:d5:
         8e:89:a6:6b:c5:0e:d6:c1:3a:01:87:ec:31:c6:f0:2e:4f:5e:
         68:95:76:b7:13:f1:ba:7d:be:b0:8a:54:a3:2e:18:81:06:46:
         07:1a:3a:37:6a:8d:be:75:a0:41:38:fd:15:51:3c:bd:16:a8:
         db:64:b6:ba:75:90:71:0e:96:ed:44:5d:d6:f1:4b:53:7a:bb:
         7c:1d:dc:28:f9:d8:04:02:ad:d8:a8:21:2c:0e:98:bb:8f:47:
         90:c9:d8:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:47:01 2025 by rpki-client