Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/2bc65b8c-39e9-478d-8742-c535b61bae59/0/3130332e3135372e32342e302f32342d3234203d3e20313431313035.roa
File:                     3130332e3135372e32342e302f32342d3234203d3e20313431313035.roa (raw, json)
Hash identifier:          FVu5gfgONBZ7sWK+LAVs/QfdHmaFroCRqFvOUkdZviM=
Subject key identifier:   CB:B2:2E:EC:78:29:21:F1:2E:16:FA:F0:94:C8:C5:EF:7C:28:C2:23
Certificate issuer:       /CN=82EE517606C76902159E8886F875EF96B0327C72
Certificate serial:       5B0A79E75576586D9E6DB68278838E56A59D9ADF
Authority key identifier: 82:EE:51:76:06:C7:69:02:15:9E:88:86:F8:75:EF:96:B0:32:7C:72
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82EE517606C76902159E8886F875EF96B0327C72.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2bc65b8c-39e9-478d-8742-c535b61bae59/0/3130332e3135372e32342e302f32342d3234203d3e20313431313035.roa
Signing time:             Thu 11 Sep 2025 12:00:01 +0000
ROA not before:           Thu 11 Sep 2025 11:55:01 +0000
ROA not after:            Thu 10 Sep 2026 12:00:01 +0000
asID:                     141105
IP address blocks:        103.157.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/2bc65b8c-39e9-478d-8742-c535b61bae59/0/82EE517606C76902159E8886F875EF96B0327C72.crl
                          rsync://repo-rpki.idnic.net/repo/2bc65b8c-39e9-478d-8742-c535b61bae59/0/82EE517606C76902159E8886F875EF96B0327C72.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82EE517606C76902159E8886F875EF96B0327C72.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Oct 2025 11:48:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:0a:79:e7:55:76:58:6d:9e:6d:b6:82:78:83:8e:56:a5:9d:9a:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82EE517606C76902159E8886F875EF96B0327C72
        Validity
            Not Before: Sep 11 11:55:01 2025 GMT
            Not After : Sep 10 12:00:01 2026 GMT
        Subject: CN=CBB22EEC782921F12E16FAF094C8C5EF7C28C223
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:76:f9:7c:21:43:5a:01:b6:7e:ae:93:4a:a3:
                    13:15:ff:b8:b3:69:3e:db:65:9e:50:34:92:7b:cf:
                    e0:32:c3:cb:12:69:4e:2c:ba:8a:6b:55:51:f7:04:
                    ad:16:cc:e4:6f:fa:7c:b3:95:4c:36:11:7e:a6:6c:
                    64:4c:3b:a6:b6:a3:59:53:18:4a:cb:24:ec:8a:eb:
                    7a:45:ba:37:8e:a7:3c:96:35:cd:78:3c:2c:ae:37:
                    09:32:76:3b:9a:0a:d4:b1:a1:2d:f1:b1:47:91:78:
                    15:31:48:fd:0b:aa:18:e7:6c:3d:53:44:ed:62:ba:
                    e7:83:6f:d8:46:6d:55:b1:a5:a2:5a:dd:52:ab:d7:
                    7f:e8:08:82:07:33:fb:59:61:41:b4:aa:96:c5:64:
                    89:9c:1d:36:d7:d6:a4:c0:fb:a7:4a:36:7d:57:91:
                    36:2d:87:0d:6f:f0:92:cd:45:2f:5c:51:17:6e:71:
                    fa:55:8c:60:74:cf:da:eb:a4:09:12:02:f7:78:db:
                    8a:b5:2d:5c:1c:10:bc:c5:a4:73:97:f4:3d:a4:9a:
                    04:03:a7:f2:51:28:e9:7c:e9:8e:a5:14:f9:f6:d2:
                    de:a0:ef:94:c1:3b:06:c4:16:25:b8:6f:aa:0d:83:
                    6c:06:e4:03:e0:8a:c3:6f:99:d5:61:69:7a:29:73:
                    92:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:B2:2E:EC:78:29:21:F1:2E:16:FA:F0:94:C8:C5:EF:7C:28:C2:23
            X509v3 Authority Key Identifier:
                keyid:82:EE:51:76:06:C7:69:02:15:9E:88:86:F8:75:EF:96:B0:32:7C:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2bc65b8c-39e9-478d-8742-c535b61bae59/0/82EE517606C76902159E8886F875EF96B0327C72.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82EE517606C76902159E8886F875EF96B0327C72.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2bc65b8c-39e9-478d-8742-c535b61bae59/0/3130332e3135372e32342e302f32342d3234203d3e20313431313035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.157.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:df:8e:5b:e4:d9:06:64:7f:6b:04:73:9f:60:9e:6b:3d:18:
         28:34:b0:41:e2:1a:03:0c:cf:91:f3:13:ff:4e:c1:9a:e0:29:
         7c:a2:b0:e7:47:90:b5:70:e2:50:d1:09:8c:e0:0c:17:75:0e:
         c6:ae:ab:3d:4c:a3:d9:5d:23:95:e1:78:20:a1:37:a9:3a:e7:
         e4:5f:25:3a:d3:26:ea:4e:f7:43:35:f2:67:e5:4f:fc:ce:e7:
         9a:bf:16:15:93:c4:a7:4f:5f:eb:a8:af:a9:14:8d:13:f5:2e:
         02:f9:3a:a5:ee:e1:73:63:94:34:15:1e:e0:ad:fe:22:c3:67:
         81:0f:31:65:0d:b1:e4:65:31:f0:a7:25:46:a0:69:df:6d:50:
         d8:2f:7c:1e:8c:6d:9f:cf:ac:91:64:aa:43:24:6c:69:fe:78:
         7f:75:33:3f:6d:4f:c7:e1:e0:1e:a0:06:d0:17:9d:32:6f:c8:
         3b:b4:21:22:ac:fa:fc:0f:df:39:ce:94:77:c8:9e:12:e1:5b:
         3c:ec:7e:ed:4d:83:f4:93:7b:4f:9a:35:2b:17:e4:ba:22:1f:
         f8:2a:37:cc:51:bc:11:a3:f9:24:29:43:58:82:54:48:66:21:
         df:d2:4d:69:6b:de:bb:87:33:3e:e3:8e:0b:7f:12:b4:ea:c8:
         69:80:74:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 20:35:30 2025 by rpki-client