Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/57edcb7e-c38d-4e67-82bd-4e8150b88561/0/3130332e39342e3133322e302f32332d3233203d3e20313336313238.roa
File:                     3130332e39342e3133322e302f32332d3233203d3e20313336313238.roa (raw, json)
Hash identifier:          ZH95fzIk5wuuT+vd4hIsCcqQWDxd7AjWMS1Ri5F0arI=
Subject key identifier:   71:EC:CF:34:99:07:8A:48:68:60:57:43:1A:AE:3D:04:C1:0E:53:66
Certificate issuer:       /CN=F39284EDA8B81E5F498D167C4DB09075943DA23C
Certificate serial:       1D504004EBBCEB19AD01B1BFEA7E0540AC201118
Authority key identifier: F3:92:84:ED:A8:B8:1E:5F:49:8D:16:7C:4D:B0:90:75:94:3D:A2:3C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F39284EDA8B81E5F498D167C4DB09075943DA23C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/57edcb7e-c38d-4e67-82bd-4e8150b88561/0/3130332e39342e3133322e302f32332d3233203d3e20313336313238.roa
Signing time:             Wed 20 Aug 2025 06:00:01 +0000
ROA not before:           Wed 20 Aug 2025 05:55:01 +0000
ROA not after:            Wed 19 Aug 2026 06:00:01 +0000
asID:                     136128
IP address blocks:        103.94.132.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/57edcb7e-c38d-4e67-82bd-4e8150b88561/0/F39284EDA8B81E5F498D167C4DB09075943DA23C.crl
                          rsync://repo-rpki.idnic.net/repo/57edcb7e-c38d-4e67-82bd-4e8150b88561/0/F39284EDA8B81E5F498D167C4DB09075943DA23C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F39284EDA8B81E5F498D167C4DB09075943DA23C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Aug 2025 18:03:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:50:40:04:eb:bc:eb:19:ad:01:b1:bf:ea:7e:05:40:ac:20:11:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F39284EDA8B81E5F498D167C4DB09075943DA23C
        Validity
            Not Before: Aug 20 05:55:01 2025 GMT
            Not After : Aug 19 06:00:01 2026 GMT
        Subject: CN=71ECCF3499078A48686057431AAE3D04C10E5366
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:e8:6c:fb:ef:5c:36:a3:0f:7a:fa:0a:ca:45:
                    cd:dd:01:12:a5:50:70:bb:6e:89:8a:c3:df:24:1b:
                    2c:df:66:44:95:bf:a4:28:88:bc:3b:a3:47:4b:c6:
                    ed:bc:ef:7f:26:b6:65:a1:d1:83:7c:30:d2:f5:30:
                    3d:2d:16:63:f2:04:3a:60:6b:02:61:fa:8f:de:0f:
                    7d:31:b8:b8:ba:0a:1d:90:d8:ac:95:08:0f:14:16:
                    47:0c:18:26:b4:75:35:56:b5:0e:e6:e8:a0:fc:78:
                    b9:1b:e9:8c:71:2e:92:85:ab:73:56:b0:94:d6:98:
                    91:be:88:bd:35:56:93:21:46:70:b7:89:df:2d:5c:
                    3c:60:54:1b:72:8a:72:ad:8e:b8:eb:88:ae:46:e9:
                    f0:a9:e4:49:b9:43:c0:81:6d:24:ef:e6:e8:22:cf:
                    92:3b:65:45:4d:2a:29:d2:3c:8c:8a:60:ae:bf:c9:
                    59:c9:12:9d:0b:50:8c:a9:cd:bf:f3:8d:c7:a9:32:
                    c9:fd:75:13:3e:6b:5d:a0:a1:84:9c:ad:1f:bf:e0:
                    1a:cf:fd:c8:fb:c6:37:ae:7c:6b:97:2a:44:f9:34:
                    a5:4b:76:81:c5:cf:57:26:01:fe:05:ed:eb:f9:36:
                    d0:df:59:ca:43:71:6e:00:91:99:a8:91:83:03:f0:
                    ad:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:EC:CF:34:99:07:8A:48:68:60:57:43:1A:AE:3D:04:C1:0E:53:66
            X509v3 Authority Key Identifier:
                keyid:F3:92:84:ED:A8:B8:1E:5F:49:8D:16:7C:4D:B0:90:75:94:3D:A2:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/57edcb7e-c38d-4e67-82bd-4e8150b88561/0/F39284EDA8B81E5F498D167C4DB09075943DA23C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F39284EDA8B81E5F498D167C4DB09075943DA23C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/57edcb7e-c38d-4e67-82bd-4e8150b88561/0/3130332e39342e3133322e302f32332d3233203d3e20313336313238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.94.132.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1b:9d:52:b9:36:96:53:fc:4b:ea:3f:23:96:61:dd:e9:43:c0:
         cc:e9:5d:21:35:d6:0b:b8:e5:5e:e4:98:21:d2:ac:04:b6:9b:
         8a:48:a2:03:e3:1e:92:8f:b6:55:46:3a:dd:06:06:ae:18:d5:
         2f:34:02:77:fc:82:64:89:e9:35:45:16:01:7b:0c:e5:00:dc:
         a8:06:95:7e:66:8e:fc:7e:28:83:ca:02:d8:66:e3:c5:9e:10:
         02:a1:a1:d3:d1:19:94:44:0f:00:58:df:2e:2b:c1:32:19:b3:
         8c:8a:ab:51:3a:13:1f:f9:a0:b5:25:1e:8a:72:82:4f:f0:3d:
         3d:e7:01:3d:55:f9:1b:e3:0e:5f:5b:b4:f0:d5:73:9f:bb:00:
         67:6c:90:93:b6:63:8e:ca:47:42:a9:2e:3e:6f:87:4a:d3:70:
         ed:7d:9c:39:48:9f:0f:04:27:cf:fb:ee:e5:b3:48:a7:db:e8:
         cd:5d:11:fd:10:05:d2:f8:e4:3f:8d:10:99:da:90:af:19:04:
         3b:cc:3b:cd:b5:b3:ae:39:f3:0f:4e:3e:d7:92:ff:77:e6:86:
         7b:aa:8e:0c:7a:24:c0:24:5e:0b:26:41:f9:a5:a2:c8:71:c8:
         7f:7e:6b:18:ce:ad:bf:15:5d:f9:f3:d8:9c:b0:c2:5e:75:e3:
         26:e3:97:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:12:40 2025 by rpki-client