Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/401c4d61-dcef-4a20-bd4c-a282a37aa69e/0/3130332e3136342e3135312e302f32342d3234203d3e20313431393039.roa
File:                     3130332e3136342e3135312e302f32342d3234203d3e20313431393039.roa (raw, json)
Hash identifier:          pcL7z2soi9Q0FZro9wWeWvMV7DRxoXReR3myJOf1vRA=
Subject key identifier:   3F:16:17:4A:9E:9A:12:4A:32:5E:24:4B:BE:D7:81:FF:73:A9:74:BA
Certificate issuer:       /CN=26C01247693F68CFDA1F8CB6B88F7A3700D30001
Certificate serial:       08CF5573914FC16A5F5E4AAA39F406F1010811E8
Authority key identifier: 26:C0:12:47:69:3F:68:CF:DA:1F:8C:B6:B8:8F:7A:37:00:D3:00:01
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26C01247693F68CFDA1F8CB6B88F7A3700D30001.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/401c4d61-dcef-4a20-bd4c-a282a37aa69e/0/3130332e3136342e3135312e302f32342d3234203d3e20313431393039.roa
Signing time:             Fri 10 Oct 2025 11:00:02 +0000
ROA not before:           Fri 10 Oct 2025 10:55:02 +0000
ROA not after:            Fri 09 Oct 2026 11:00:02 +0000
asID:                     141909
IP address blocks:        103.164.151.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/401c4d61-dcef-4a20-bd4c-a282a37aa69e/0/26C01247693F68CFDA1F8CB6B88F7A3700D30001.crl
                          rsync://repo-rpki.idnic.net/repo/401c4d61-dcef-4a20-bd4c-a282a37aa69e/0/26C01247693F68CFDA1F8CB6B88F7A3700D30001.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26C01247693F68CFDA1F8CB6B88F7A3700D30001.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Oct 2025 03:58:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:cf:55:73:91:4f:c1:6a:5f:5e:4a:aa:39:f4:06:f1:01:08:11:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26C01247693F68CFDA1F8CB6B88F7A3700D30001
        Validity
            Not Before: Oct 10 10:55:02 2025 GMT
            Not After : Oct  9 11:00:02 2026 GMT
        Subject: CN=3F16174A9E9A124A325E244BBED781FF73A974BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:76:d5:0e:7a:f2:35:a2:7d:b5:c0:93:a3:49:
                    18:50:e1:57:bc:ef:88:a7:f2:38:41:e9:b7:a2:4e:
                    87:9c:e6:b1:19:83:3b:69:f4:5e:fd:98:e8:99:14:
                    1b:f6:ff:98:ed:30:27:df:91:9c:88:4d:43:09:dd:
                    9a:20:42:17:c6:60:49:bc:fa:88:b4:57:fb:d1:7c:
                    79:56:70:c2:86:0f:ab:ab:50:97:5e:ee:40:4c:bc:
                    ab:7f:b1:ac:7d:9a:e0:c6:77:79:60:b1:8a:ce:8c:
                    d0:f5:31:fc:7e:38:45:11:a0:de:dc:e0:c9:5c:f1:
                    98:77:76:51:a0:53:ea:32:a1:08:7d:7e:16:b6:55:
                    b0:62:13:97:4f:fd:e2:14:d5:95:51:8c:50:e1:32:
                    6a:32:16:42:76:bb:1e:82:6d:12:ae:53:33:fb:cf:
                    01:90:4d:fd:07:7e:1a:25:ea:27:2b:95:a6:6c:5c:
                    0d:d0:7f:37:2a:5f:75:55:ad:4d:5a:03:5f:a6:7d:
                    72:ba:a7:f0:b0:69:03:7f:8a:a6:de:50:70:d3:79:
                    7e:53:3c:56:c7:03:44:71:2b:42:d4:16:6c:ff:72:
                    ae:d3:b1:c9:77:b4:83:5b:fc:85:67:33:08:be:1a:
                    8a:d6:c5:81:88:c8:9e:1d:7e:e8:35:45:04:c2:3e:
                    54:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:16:17:4A:9E:9A:12:4A:32:5E:24:4B:BE:D7:81:FF:73:A9:74:BA
            X509v3 Authority Key Identifier:
                keyid:26:C0:12:47:69:3F:68:CF:DA:1F:8C:B6:B8:8F:7A:37:00:D3:00:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/401c4d61-dcef-4a20-bd4c-a282a37aa69e/0/26C01247693F68CFDA1F8CB6B88F7A3700D30001.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26C01247693F68CFDA1F8CB6B88F7A3700D30001.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/401c4d61-dcef-4a20-bd4c-a282a37aa69e/0/3130332e3136342e3135312e302f32342d3234203d3e20313431393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.164.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:41:54:bb:7c:96:dd:d0:a6:3a:d5:02:37:08:a0:5e:ae:64:
         01:88:71:25:58:d8:05:67:00:8c:6d:47:c6:8f:c4:8e:d2:29:
         80:07:45:56:dc:36:b6:27:c4:09:ff:e8:69:0a:de:79:04:09:
         60:a0:3d:f0:ff:31:80:a4:72:ff:ed:9f:fa:7e:66:2a:c9:64:
         f3:0f:91:82:c0:9f:ef:5b:24:b4:9e:86:ce:d1:cc:4f:4d:e4:
         96:b3:f4:f8:25:6d:93:c4:ec:11:e1:07:6c:05:f2:54:40:21:
         ec:66:13:46:60:c3:7e:7f:e0:6d:4f:20:d2:3b:95:af:b9:0d:
         0f:58:4d:8c:d2:13:95:ed:82:70:4e:92:1b:7e:47:34:99:20:
         f1:64:60:36:e3:62:92:42:8e:60:c5:74:4d:8e:88:35:18:55:
         2d:25:bf:c6:b2:a8:e3:3e:dc:0b:1c:3b:20:9f:bd:48:71:c8:
         8e:e1:8a:44:ce:a5:04:7f:b2:46:1b:df:77:30:78:ab:33:04:
         23:58:42:82:e1:34:5c:01:d8:31:6a:bf:91:ab:25:9f:1f:9c:
         56:5b:02:fd:78:ae:90:f4:8e:41:6a:d3:17:fa:03:6f:df:c7:
         b8:68:12:e0:5e:61:52:d6:3b:96:77:6d:61:f4:1d:45:b0:b8:
         78:30:e3:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 01:42:43 2025 by rpki-client