Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/431a9426-3c35-470e-bf34-30e7e41602cb/0/3130332e3137362e34342e302f32332d3233203d3e20313437313238.roa
File:                     3130332e3137362e34342e302f32332d3233203d3e20313437313238.roa (raw, json)
Hash identifier:          QdIixnzSq8N8sCH+dxKebIKtXdrr8qVttS8Xci0wB7M=
Subject key identifier:   2F:D1:5B:C0:72:68:24:23:03:58:D2:43:5F:87:F5:3B:4B:03:28:5C
Certificate issuer:       /CN=024ABFF2959A6144CC4889C70F77F968FA410EF1
Certificate serial:       69D46B7F42F219DF2B80240A07397E19EB1A4060
Authority key identifier: 02:4A:BF:F2:95:9A:61:44:CC:48:89:C7:0F:77:F9:68:FA:41:0E:F1
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/024ABFF2959A6144CC4889C70F77F968FA410EF1.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/431a9426-3c35-470e-bf34-30e7e41602cb/0/3130332e3137362e34342e302f32332d3233203d3e20313437313238.roa
Signing time:             Sat 09 Aug 2025 15:00:01 +0000
ROA not before:           Sat 09 Aug 2025 14:55:01 +0000
ROA not after:            Sat 08 Aug 2026 15:00:01 +0000
asID:                     147128
IP address blocks:        103.176.44.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/431a9426-3c35-470e-bf34-30e7e41602cb/0/024ABFF2959A6144CC4889C70F77F968FA410EF1.crl
                          rsync://repo-rpki.idnic.net/repo/431a9426-3c35-470e-bf34-30e7e41602cb/0/024ABFF2959A6144CC4889C70F77F968FA410EF1.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/024ABFF2959A6144CC4889C70F77F968FA410EF1.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Aug 2025 10:19:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:d4:6b:7f:42:f2:19:df:2b:80:24:0a:07:39:7e:19:eb:1a:40:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=024ABFF2959A6144CC4889C70F77F968FA410EF1
        Validity
            Not Before: Aug  9 14:55:01 2025 GMT
            Not After : Aug  8 15:00:01 2026 GMT
        Subject: CN=2FD15BC0726824230358D2435F87F53B4B03285C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:eb:49:ba:dc:11:f7:c3:8b:31:6d:e4:70:e2:
                    2f:17:25:ce:a9:59:ca:b9:0d:7c:28:2b:8f:eb:a2:
                    05:bd:17:89:49:7f:a7:36:c8:c7:91:69:db:00:8b:
                    5f:51:74:5f:e2:9a:20:f4:fe:02:8f:bf:89:10:c5:
                    f7:af:35:91:88:50:b0:50:3f:1e:7c:c8:30:7b:3c:
                    a4:1e:6f:13:6e:c6:e4:a8:a0:6a:49:9f:30:6b:e1:
                    6d:32:c6:a4:59:79:89:a1:e2:b1:c4:ea:55:5d:87:
                    ee:6b:ca:92:15:70:d0:a6:01:49:88:73:bb:48:f2:
                    17:86:30:23:23:1a:54:19:9e:46:62:b6:9b:20:78:
                    2f:b1:78:da:97:49:b4:6b:5b:00:b2:19:ab:67:ed:
                    91:7b:7d:0f:bb:31:d9:d7:f8:9a:71:fd:63:dc:c5:
                    66:3d:de:c8:cc:a5:62:b0:be:fe:4d:97:b3:02:f1:
                    e6:37:66:1d:57:b5:66:65:a5:90:7d:93:b2:11:77:
                    8e:cd:55:ca:12:8d:62:d6:c1:d3:70:a2:7e:cd:22:
                    66:fa:6c:5e:8b:5c:a1:85:88:b5:56:92:dc:88:a3:
                    d7:d5:1c:00:fb:8a:58:b8:13:39:97:37:68:3c:63:
                    0c:5d:72:86:5d:cd:3b:ac:4c:bb:d1:44:db:4f:28:
                    7e:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:D1:5B:C0:72:68:24:23:03:58:D2:43:5F:87:F5:3B:4B:03:28:5C
            X509v3 Authority Key Identifier:
                keyid:02:4A:BF:F2:95:9A:61:44:CC:48:89:C7:0F:77:F9:68:FA:41:0E:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/431a9426-3c35-470e-bf34-30e7e41602cb/0/024ABFF2959A6144CC4889C70F77F968FA410EF1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/024ABFF2959A6144CC4889C70F77F968FA410EF1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/431a9426-3c35-470e-bf34-30e7e41602cb/0/3130332e3137362e34342e302f32332d3233203d3e20313437313238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.176.44.0/23

    Signature Algorithm: sha256WithRSAEncryption
         25:38:62:88:4b:56:a8:6b:7e:1c:ee:2f:09:4e:cd:b2:50:3d:
         c5:59:72:03:4b:da:2f:56:c4:3c:fd:fa:a1:f9:c5:5e:52:ed:
         51:d7:cf:bc:c3:8e:13:6a:98:06:1e:45:03:4d:67:66:a9:7f:
         e5:ac:64:09:3f:a2:2d:52:a6:0f:a8:8c:e2:22:97:5e:aa:11:
         e6:5b:2b:ed:aa:80:7e:9a:29:f7:e9:37:00:84:21:21:40:82:
         be:07:02:df:ae:39:2e:de:78:42:9c:c9:91:b5:ba:4e:03:be:
         ff:20:78:a5:7f:c1:2d:e4:12:7c:5b:4b:d5:3b:96:bd:0d:97:
         ba:c2:21:31:69:06:4d:e7:5e:00:9d:72:87:ea:5f:6f:c8:44:
         3c:5a:66:6d:bb:92:7a:14:57:4f:aa:a6:d0:c2:0d:95:c0:68:
         59:8b:37:53:f1:11:97:59:2b:d1:ed:54:9a:d1:3c:f9:c3:05:
         22:c1:f4:03:17:ac:a8:af:52:cb:a5:cb:33:5e:f8:17:00:04:
         d0:f8:b9:83:2d:b5:35:ce:b7:45:f6:db:f9:e3:52:c7:a0:0c:
         62:cf:4b:cc:db:3c:c3:1d:22:c7:d1:bf:67:52:55:c7:da:f3:
         f2:3f:40:17:8c:73:7d:e4:40:ef:40:5e:3d:bf:6d:99:b7:a2:
         c8:d9:81:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:43:58 2025 by rpki-client