Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/3130332e3130352e37382e302f32342d3234203d3e20313336383734.roa
File:                     3130332e3130352e37382e302f32342d3234203d3e20313336383734.roa (raw, json)
Hash identifier:          8FISrQYbnFOpjiQHBztskExqHRou9e+XROYZoHoylq0=
Subject key identifier:   71:34:DA:5F:CF:A8:74:4F:97:AE:25:08:73:AB:92:C6:69:26:8D:3F
Certificate issuer:       /CN=2993EFF92300988A33773DD8C4B502F74B907112
Certificate serial:       5A362633EB8B6D1E1D6375607D2948CE82A4458C
Authority key identifier: 29:93:EF:F9:23:00:98:8A:33:77:3D:D8:C4:B5:02:F7:4B:90:71:12
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2993EFF92300988A33773DD8C4B502F74B907112.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/3130332e3130352e37382e302f32342d3234203d3e20313336383734.roa
Signing time:             Thu 16 Oct 2025 13:00:00 +0000
ROA not before:           Thu 16 Oct 2025 12:55:00 +0000
ROA not after:            Thu 15 Oct 2026 13:00:00 +0000
asID:                     136874
IP address blocks:        103.105.78.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/2993EFF92300988A33773DD8C4B502F74B907112.crl
                          rsync://repo-rpki.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/2993EFF92300988A33773DD8C4B502F74B907112.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2993EFF92300988A33773DD8C4B502F74B907112.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Oct 2025 08:06:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:36:26:33:eb:8b:6d:1e:1d:63:75:60:7d:29:48:ce:82:a4:45:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2993EFF92300988A33773DD8C4B502F74B907112
        Validity
            Not Before: Oct 16 12:55:00 2025 GMT
            Not After : Oct 15 13:00:00 2026 GMT
        Subject: CN=7134DA5FCFA8744F97AE250873AB92C669268D3F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:00:12:f7:d2:d4:5e:c4:6e:6e:e8:fd:a9:20:
                    b8:02:5c:06:cb:27:8f:ec:71:a7:8c:32:be:06:b0:
                    ff:a5:a3:a0:1f:78:bf:fa:70:3c:64:72:b7:06:6f:
                    dc:88:82:ec:a8:b6:be:ff:3d:8a:87:c8:fe:61:b7:
                    fb:12:0f:96:72:40:ed:72:09:0b:1a:39:f1:2c:db:
                    eb:a7:d3:9d:a9:84:b7:a2:ef:9a:eb:cc:02:47:0d:
                    97:cc:63:fb:9f:ed:0b:20:87:a7:9e:e8:c1:13:3d:
                    f9:f1:43:a1:37:69:38:e2:c2:52:90:9d:16:0f:61:
                    77:c5:7f:6c:c8:e0:2a:87:e6:fd:69:ad:8d:f6:cb:
                    94:50:63:e9:39:c8:69:a0:20:61:d8:3e:67:18:6a:
                    b8:61:1d:8f:67:0d:41:95:a7:6f:bb:8a:d9:c2:e0:
                    6b:e1:6e:fd:f6:ab:ba:9d:0e:8f:ca:d3:86:2f:46:
                    cd:bd:37:f7:2f:da:91:52:b7:68:83:2b:ef:ef:39:
                    cb:e6:8c:38:72:03:75:68:bd:95:80:3e:1c:bb:86:
                    62:bb:e0:d5:25:d5:82:a0:97:ec:9f:36:5b:c4:47:
                    f8:9e:08:26:74:57:a5:92:e0:65:5f:cf:ed:da:65:
                    e4:fe:dc:f2:33:d9:38:c0:60:f3:a0:15:ad:65:65:
                    00:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:34:DA:5F:CF:A8:74:4F:97:AE:25:08:73:AB:92:C6:69:26:8D:3F
            X509v3 Authority Key Identifier:
                keyid:29:93:EF:F9:23:00:98:8A:33:77:3D:D8:C4:B5:02:F7:4B:90:71:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/2993EFF92300988A33773DD8C4B502F74B907112.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2993EFF92300988A33773DD8C4B502F74B907112.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/3130332e3130352e37382e302f32342d3234203d3e20313336383734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.105.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b5:68:80:b6:f2:0a:6e:e4:be:c6:6f:56:f7:cb:aa:ee:a6:08:
         f3:c7:fc:f1:8a:7d:88:de:22:2a:47:ee:07:eb:39:8f:c9:ef:
         66:66:59:54:17:ea:2c:5c:8d:10:d4:f6:a9:91:af:2b:d0:42:
         62:bf:6b:c9:46:8d:d3:f6:5f:13:c8:b1:2a:14:c5:d2:26:1b:
         a8:c0:4d:24:7f:3c:94:dc:df:1d:56:59:3a:f4:c3:80:5d:91:
         f3:72:22:84:64:15:54:c5:d2:b6:b0:bd:5d:a2:42:86:67:c0:
         31:c7:f2:cb:ea:e4:94:6d:e9:15:9d:7c:af:41:f3:27:df:03:
         66:75:93:13:b9:7d:4d:6a:76:3e:54:f2:28:80:32:83:78:e8:
         5e:ce:54:0b:2d:81:98:0f:ae:9f:33:ba:e0:28:d6:2d:d2:9c:
         99:54:ed:99:17:08:2b:8e:54:c2:eb:f5:ab:b6:96:eb:a0:a3:
         e9:35:4e:56:39:76:25:64:68:af:a0:b3:5c:95:28:4e:0f:57:
         a6:31:76:13:fd:9b:29:de:1f:d2:f7:08:b3:aa:25:16:2d:fe:
         85:3a:0d:79:da:ac:6e:dd:09:20:62:0a:a7:c6:42:a6:be:39:
         5d:e7:41:2a:92:be:8e:c5:41:b0:44:88:d4:5d:b7:b9:92:ee:
         53:10:cc:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 08:57:04 2025 by rpki-client