Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/3130332e3130352e37362e302f32342d3234203d3e20313336383734.roa
File:                     3130332e3130352e37362e302f32342d3234203d3e20313336383734.roa (raw, json)
Hash identifier:          MQCiIDyqzNBQYpoR0MRnkXubNFQEv31SOdbwjwRhFAI=
Subject key identifier:   7C:AE:70:98:6A:F2:75:D2:BF:C7:AA:86:CC:FA:2F:0F:6C:7C:CB:EE
Certificate issuer:       /CN=2993EFF92300988A33773DD8C4B502F74B907112
Certificate serial:       39399910880246849EDCB40182736D4E20D7F1C9
Authority key identifier: 29:93:EF:F9:23:00:98:8A:33:77:3D:D8:C4:B5:02:F7:4B:90:71:12
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2993EFF92300988A33773DD8C4B502F74B907112.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/3130332e3130352e37362e302f32342d3234203d3e20313336383734.roa
Signing time:             Thu 16 Oct 2025 14:00:00 +0000
ROA not before:           Thu 16 Oct 2025 13:55:00 +0000
ROA not after:            Thu 15 Oct 2026 14:00:00 +0000
asID:                     136874
IP address blocks:        103.105.76.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/2993EFF92300988A33773DD8C4B502F74B907112.crl
                          rsync://repo-rpki.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/2993EFF92300988A33773DD8C4B502F74B907112.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2993EFF92300988A33773DD8C4B502F74B907112.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Oct 2025 08:06:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:39:99:10:88:02:46:84:9e:dc:b4:01:82:73:6d:4e:20:d7:f1:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2993EFF92300988A33773DD8C4B502F74B907112
        Validity
            Not Before: Oct 16 13:55:00 2025 GMT
            Not After : Oct 15 14:00:00 2026 GMT
        Subject: CN=7CAE70986AF275D2BFC7AA86CCFA2F0F6C7CCBEE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:48:60:13:d6:e6:5f:48:32:7b:c5:10:9d:2e:
                    16:28:f4:10:82:42:05:98:35:77:49:a8:ac:e3:b1:
                    17:32:a0:72:52:8a:6c:79:2a:4f:0c:cf:6b:a4:9a:
                    9d:1a:c0:26:71:b9:a7:70:26:7d:f0:fe:f8:91:a9:
                    68:9e:fd:90:c6:ee:7e:8a:3c:7d:70:be:3b:18:d6:
                    9e:58:63:00:35:6f:99:0b:2d:e3:f3:0c:95:c8:d9:
                    e8:88:8c:52:1c:bf:dc:72:62:e6:c6:c8:20:8c:2d:
                    09:d0:52:04:70:30:db:5d:a0:97:35:38:08:61:47:
                    3a:a8:41:6a:2a:80:f1:34:c5:1e:ef:0b:75:f1:a2:
                    b5:ad:56:ab:47:dd:0c:0f:03:0b:59:0d:a5:35:bc:
                    aa:d5:96:38:52:92:c4:d5:73:4f:4c:b6:b2:81:00:
                    71:ec:00:c8:1c:20:7e:91:19:c5:94:3e:62:83:cc:
                    96:9d:b0:89:ee:bd:a2:4c:eb:f1:b5:5f:ef:6b:21:
                    ca:29:0a:84:88:c4:f6:61:e0:47:58:aa:37:bb:98:
                    2f:95:eb:02:4e:14:83:c0:ed:c4:17:d4:8a:e9:49:
                    74:1d:d3:06:4f:19:36:20:05:2b:d8:11:25:5c:b8:
                    88:6d:dc:8b:c1:2c:d7:24:51:ac:99:61:89:7a:1e:
                    ed:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:AE:70:98:6A:F2:75:D2:BF:C7:AA:86:CC:FA:2F:0F:6C:7C:CB:EE
            X509v3 Authority Key Identifier:
                keyid:29:93:EF:F9:23:00:98:8A:33:77:3D:D8:C4:B5:02:F7:4B:90:71:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/2993EFF92300988A33773DD8C4B502F74B907112.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2993EFF92300988A33773DD8C4B502F74B907112.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/3130332e3130352e37362e302f32342d3234203d3e20313336383734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.105.76.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:bd:ba:cf:2a:9a:c5:3e:76:a5:c7:bf:17:c8:fa:dd:1d:f5:
         af:4f:46:d1:85:35:59:22:ab:aa:95:84:06:65:e9:79:c8:8b:
         f9:a2:2b:fe:30:a7:7b:60:b3:41:39:f0:e0:ca:55:bc:08:04:
         c7:da:80:36:64:32:bb:98:de:9b:e2:81:77:da:24:3e:41:fb:
         39:99:37:1f:c6:ae:14:48:73:ed:ce:cc:04:d5:2b:5e:41:1b:
         c7:be:81:35:5a:e5:b0:ec:07:36:da:5d:73:30:49:4d:34:17:
         3a:be:a4:24:d5:30:10:c6:e5:d6:6a:69:e5:58:ae:fa:99:e2:
         7c:a4:b4:13:41:7e:32:97:5a:20:9c:19:6d:94:4c:88:23:08:
         41:c4:e4:05:67:92:5f:eb:23:27:fc:16:36:85:69:8e:b1:7c:
         10:5b:01:9f:69:f8:47:55:96:93:3d:88:45:05:d4:c5:0f:bb:
         15:c0:87:74:8b:a9:b9:0c:13:1b:f2:c9:48:3a:62:f3:02:07:
         ac:05:9a:7d:3f:61:ac:a5:d3:66:9b:46:2c:0a:63:9e:de:b2:
         8a:4c:0b:93:f4:b8:dc:be:1f:e9:62:59:fa:2d:9c:7d:a5:b2:
         3c:cc:51:b0:ab:90:42:ba:a0:73:72:c1:df:97:d5:da:e4:ba:
         f9:67:29:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:03:03 2025 by rpki-client