Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/4638bd21-be56-42b4-8278-05405dce5e88/0/3130332e3137352e34372e302f32342d3234203d3e20313437313039.roa
File:                     3130332e3137352e34372e302f32342d3234203d3e20313437313039.roa (raw, json)
Hash identifier:          1P+PQQB102TZART/oZnwB0CXGgNgBobig9IZy6mAuUM=
Subject key identifier:   2E:73:29:C7:2C:D6:8A:F8:DF:C0:84:5E:D6:69:FB:AE:26:1F:2B:5C
Certificate issuer:       /CN=9A4F69E8B46063638E82F1FB060AB3D725FA4821
Certificate serial:       4BFFCCE92BD15527B71B28443D28775E9DE96BE7
Authority key identifier: 9A:4F:69:E8:B4:60:63:63:8E:82:F1:FB:06:0A:B3:D7:25:FA:48:21
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A4F69E8B46063638E82F1FB060AB3D725FA4821.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/4638bd21-be56-42b4-8278-05405dce5e88/0/3130332e3137352e34372e302f32342d3234203d3e20313437313039.roa
Signing time:             Sat 18 Oct 2025 05:03:55 +0000
ROA not before:           Sat 18 Oct 2025 04:58:55 +0000
ROA not after:            Sat 17 Oct 2026 05:03:55 +0000
asID:                     147109
IP address blocks:        103.175.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/4638bd21-be56-42b4-8278-05405dce5e88/0/9A4F69E8B46063638E82F1FB060AB3D725FA4821.crl
                          rsync://repo-rpki.idnic.net/repo/4638bd21-be56-42b4-8278-05405dce5e88/0/9A4F69E8B46063638E82F1FB060AB3D725FA4821.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A4F69E8B46063638E82F1FB060AB3D725FA4821.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Oct 2025 08:40:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:ff:cc:e9:2b:d1:55:27:b7:1b:28:44:3d:28:77:5e:9d:e9:6b:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A4F69E8B46063638E82F1FB060AB3D725FA4821
        Validity
            Not Before: Oct 18 04:58:55 2025 GMT
            Not After : Oct 17 05:03:55 2026 GMT
        Subject: CN=2E7329C72CD68AF8DFC0845ED669FBAE261F2B5C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a1:35:3f:f8:d2:69:de:96:ba:a0:2b:90:5c:
                    ae:6f:ee:a2:3b:7e:43:c3:8b:42:e1:48:1e:fa:ad:
                    b5:f2:12:a9:4a:8d:23:34:de:91:30:36:21:92:df:
                    cf:94:5d:81:1c:70:3e:16:27:88:04:75:5b:ea:5b:
                    99:1c:2b:81:a1:34:97:9c:ae:38:a2:9f:58:42:c5:
                    4e:28:a9:f0:ce:cb:9e:ac:b3:dc:18:20:14:32:b7:
                    2d:79:82:9d:12:55:27:1f:f0:b7:38:c3:1a:7b:db:
                    75:b9:09:59:b2:5c:5b:53:7d:11:74:46:68:09:39:
                    93:c8:ea:5d:ce:1e:d1:c9:1b:1b:c5:dc:15:80:74:
                    18:20:3c:73:0e:f7:6d:e8:68:d9:fa:2f:dc:2d:14:
                    ef:02:86:00:f4:5b:10:0f:77:e5:78:2f:50:d4:30:
                    bb:5c:fe:4e:b5:63:58:c0:fc:c0:be:3a:87:8e:d3:
                    c6:09:0b:7b:4f:86:29:2e:a0:9a:39:d9:d4:91:37:
                    78:7f:dd:1c:38:53:c1:67:4f:42:8f:20:31:74:7d:
                    35:a2:33:01:46:ba:b7:02:c1:13:5f:35:13:4e:83:
                    91:71:95:58:4a:b9:52:a9:32:3f:4a:aa:ad:c9:5d:
                    2c:7f:81:a9:f6:b2:36:1f:93:1c:fe:63:17:34:c9:
                    4f:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:73:29:C7:2C:D6:8A:F8:DF:C0:84:5E:D6:69:FB:AE:26:1F:2B:5C
            X509v3 Authority Key Identifier:
                keyid:9A:4F:69:E8:B4:60:63:63:8E:82:F1:FB:06:0A:B3:D7:25:FA:48:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/4638bd21-be56-42b4-8278-05405dce5e88/0/9A4F69E8B46063638E82F1FB060AB3D725FA4821.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A4F69E8B46063638E82F1FB060AB3D725FA4821.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4638bd21-be56-42b4-8278-05405dce5e88/0/3130332e3137352e34372e302f32342d3234203d3e20313437313039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.175.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:d8:c5:7b:97:cb:85:69:7f:a5:c3:22:7e:fd:e7:7a:8f:fa:
         29:60:01:52:51:43:8c:2c:ce:1e:63:ba:a9:9a:4d:e1:4a:94:
         6b:0d:f8:7d:a1:ba:c9:3b:e5:d6:f1:3f:a6:c4:28:ca:6c:31:
         be:31:b9:33:2d:b1:f6:e2:0f:0c:b4:3a:8b:35:d4:54:ef:37:
         22:29:e7:50:56:c9:a5:45:86:3b:8d:d6:77:6d:1d:00:25:c5:
         9b:84:9e:6d:80:52:7d:95:7b:7c:f0:4b:5c:3c:de:f5:49:d8:
         ed:26:08:e9:8b:61:39:40:1d:eb:05:50:98:f9:32:b2:9a:0b:
         7a:0d:19:85:0b:e0:df:db:1f:91:20:b6:05:24:25:6f:f8:c8:
         cc:32:4c:08:60:95:db:d9:53:3d:48:9e:f9:14:d5:ce:14:63:
         49:bc:79:20:9b:8b:c4:9d:b9:9f:c6:50:1b:54:96:47:75:4a:
         d0:3a:8f:7a:00:c0:2a:56:e4:08:65:35:2d:a1:63:93:43:a2:
         7e:6b:5a:c6:c6:ff:ae:12:e3:78:c3:f3:a1:3d:66:e0:ab:34:
         8b:f6:23:68:87:a4:ff:60:cb:ad:3d:31:85:93:81:87:2a:0b:
         85:f5:b2:28:e5:7b:d9:37:4c:38:dd:90:84:87:b7:fd:cf:73:
         90:fd:ca:69
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUS//M6SvRVSe3GyhEPSh3Xp3pa+cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUE0RjY5RThCNDYwNjM2MzhFODJGMUZCMDYwQUIzRDcy
NUZBNDgyMTAeFw0yNTEwMTgwNDU4NTVaFw0yNjEwMTcwNTAzNTVaMDMxMTAvBgNV
BAMTKDJFNzMyOUM3MkNENjhBRjhERkMwODQ1RUQ2NjlGQkFFMjYxRjJCNUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6oTU/+NJp3pa6oCuQXK5v7qI7
fkPDi0LhSB76rbXyEqlKjSM03pEwNiGS38+UXYEccD4WJ4gEdVvqW5kcK4GhNJec
rjiin1hCxU4oqfDOy56ss9wYIBQyty15gp0SVScf8Lc4wxp723W5CVmyXFtTfRF0
RmgJOZPI6l3OHtHJGxvF3BWAdBggPHMO923oaNn6L9wtFO8ChgD0WxAPd+V4L1DU
MLtc/k61Y1jA/MC+OoeO08YJC3tPhikuoJo52dSRN3h/3Rw4U8FnT0KPIDF0fTWi
MwFGurcCwRNfNRNOg5FxlVhKuVKpMj9Kqq3JXSx/gan2sjYfkxz+Yxc0yU/rAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQULnMpxyzWivjfwIRe1mn7riYfK1wwHwYDVR0j
BBgwFoAUmk9p6LRgY2OOgvH7Bgqz1yX6SCEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80
NjM4YmQyMS1iZTU2LTQyYjQtODI3OC0wNTQwNWRjZTVlODgvMC85QTRGNjlFOEI0
NjA2MzYzOEU4MkYxRkIwNjBBQjNENzI1RkE0ODIxLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvOUE0RjY5RThCNDYwNjM2MzhFODJGMUZCMDYwQUIzRDcyNUZB
NDgyMS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzQ2MzhiZDIxLWJlNTYtNDJiNC04
Mjc4LTA1NDA1ZGNlNWU4OC8wLzMxMzAzMzJlMzEzNzM1MmUzNDM3MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzNDM3MzEzMDM5LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ68vMA0GCSqG
SIb3DQEBCwUAA4IBAQBC2MV7l8uFaX+lwyJ+/ed6j/opYAFSUUOMLM4eY7qpmk3h
SpRrDfh9obrJO+XW8T+mxCjKbDG+MbkzLbH24g8MtDqLNdRU7zciKedQVsmlRYY7
jdZ3bR0AJcWbhJ5tgFJ9lXt88EtcPN71SdjtJgjpi2E5QB3rBVCY+TKymgt6DRmF
C+Df2x+RILYFJCVv+MjMMkwIYJXb2VM9SJ75FNXOFGNJvHkgm4vEnbmfxlAbVJZH
dUrQOo96AMAqVuQIZTUtoWOTQ6J+a1rGxv+uEuN4w/OhPWbgqzSL9iNoh6T/YMut
PTGFk4GHKguF9bIo5XvZN0w43ZCEh7f9z3OQ/cpp
-----END CERTIFICATE-----
Generated at Tue Oct 21 01:12:47 2025 by rpki-client