Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/5591b59b-1ca5-4464-9982-bf6f6d8a1c94/0/3130332e3136312e3139302e302f32342d3234203d3e20313333383233.roa
File:                     3130332e3136312e3139302e302f32342d3234203d3e20313333383233.roa (raw, json)
Hash identifier:          inNvDvxX4hbCC8+Dho69jFxrO3UdsZFxdsWq+NYPKcc=
Subject key identifier:   1F:5E:32:06:51:38:07:EE:43:08:A1:8D:F2:CB:DF:E7:02:F5:85:47
Certificate issuer:       /CN=715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1
Certificate serial:       1B3428D3BDB0C86C46099108718185118E4BF5A1
Authority key identifier: 71:5D:C6:DE:A8:0F:E5:D8:9F:DC:68:2C:19:C7:B3:0F:5C:77:E2:C1
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5591b59b-1ca5-4464-9982-bf6f6d8a1c94/0/3130332e3136312e3139302e302f32342d3234203d3e20313333383233.roa
Signing time:             Sat 11 Oct 2025 07:00:04 +0000
ROA not before:           Sat 11 Oct 2025 06:55:04 +0000
ROA not after:            Sat 10 Oct 2026 07:00:04 +0000
asID:                     133823
IP address blocks:        103.161.190.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/5591b59b-1ca5-4464-9982-bf6f6d8a1c94/0/715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1.crl
                          rsync://repo-rpki.idnic.net/repo/5591b59b-1ca5-4464-9982-bf6f6d8a1c94/0/715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Oct 2025 08:25:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:34:28:d3:bd:b0:c8:6c:46:09:91:08:71:81:85:11:8e:4b:f5:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1
        Validity
            Not Before: Oct 11 06:55:04 2025 GMT
            Not After : Oct 10 07:00:04 2026 GMT
        Subject: CN=1F5E3206513807EE4308A18DF2CBDFE702F58547
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:89:21:47:33:63:f2:62:52:7c:52:c4:19:ad:
                    33:66:9a:99:59:70:cc:44:7d:ca:ed:45:3e:8b:a4:
                    5c:b3:19:80:de:3d:bb:f2:7b:a1:68:10:18:d0:86:
                    60:c8:34:48:4d:71:46:be:3d:c6:98:96:cd:5f:f6:
                    1b:35:f9:09:cf:42:89:78:f8:9c:7e:26:6b:ed:26:
                    61:e2:b4:6e:49:57:0e:a3:38:de:2d:a4:0c:da:03:
                    01:88:b7:93:02:b7:6c:ab:cc:9e:b4:1a:d1:13:40:
                    91:2b:1e:92:cc:af:f0:d1:6e:bf:a3:61:fa:27:94:
                    0a:51:4c:b3:76:3c:6e:97:74:37:16:7f:37:c1:ba:
                    56:58:20:a6:01:2a:d0:54:a2:8c:51:a9:59:31:3d:
                    4e:5b:46:4e:b4:67:2a:fc:79:4a:71:6f:13:4f:35:
                    67:26:9c:3b:81:5a:7c:1b:e7:c8:f9:cb:d7:5c:b5:
                    4e:6f:ac:3d:c0:d3:8a:67:8a:d6:ed:72:24:1d:22:
                    39:f9:aa:0c:4f:e1:78:b1:67:e9:e3:b7:de:8c:a1:
                    9b:d4:29:a7:f5:0d:9b:4b:20:2c:40:5c:d1:f4:74:
                    d0:44:a3:70:b7:a6:e2:64:40:24:8e:7c:6d:95:51:
                    c4:c0:6a:b1:e1:f3:62:e7:47:a1:cf:00:6d:c3:6c:
                    13:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:5E:32:06:51:38:07:EE:43:08:A1:8D:F2:CB:DF:E7:02:F5:85:47
            X509v3 Authority Key Identifier:
                keyid:71:5D:C6:DE:A8:0F:E5:D8:9F:DC:68:2C:19:C7:B3:0F:5C:77:E2:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5591b59b-1ca5-4464-9982-bf6f6d8a1c94/0/715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5591b59b-1ca5-4464-9982-bf6f6d8a1c94/0/3130332e3136312e3139302e302f32342d3234203d3e20313333383233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.161.190.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:62:0e:bb:b7:33:73:e0:0b:86:d9:3e:ba:9a:e2:8f:ed:6a:
         cd:02:78:78:0c:10:19:da:a5:4b:7b:96:28:7e:35:8e:64:e3:
         39:e4:dd:b0:71:d6:79:d8:9d:ab:3f:61:27:c6:fb:74:23:b4:
         f5:08:66:eb:1d:9c:6f:92:83:c8:e9:c8:3e:b7:6f:69:f7:88:
         1f:0b:69:b2:78:f7:66:8c:08:a8:4d:cd:44:ca:6f:61:7b:21:
         31:8a:fe:df:c4:54:1b:90:65:ce:fd:9b:5e:4b:23:f4:f8:f5:
         f9:88:0f:d3:06:1d:2e:74:6c:0a:1d:73:d7:77:8a:1d:fe:5f:
         26:62:b8:37:ef:b3:25:fe:7a:c2:dd:d8:69:a3:67:30:d2:db:
         a2:4d:0d:ba:37:4c:86:2d:01:26:5a:6c:53:8f:80:56:57:ab:
         b3:ca:77:88:bf:7c:d0:e1:48:8c:d4:3f:f7:17:b6:4b:b5:77:
         9d:63:5c:e1:55:d4:f3:ca:43:c3:05:5f:da:33:bb:6c:46:d5:
         ff:f7:36:16:a2:4c:cf:27:35:f4:02:d9:d7:89:53:43:59:bb:
         8e:22:60:5e:bf:84:dc:5f:33:9c:c9:3a:7a:2d:24:40:2d:14:
         60:84:84:ba:0d:49:18:e0:38:8c:c8:cf:04:32:79:5b:f3:10:
         66:1d:73:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:06:07 2025 by rpki-client