Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/6bee1ee1-a5b5-4c64-bbbb-2636352dacfc/0/3130332e3136302e3231322e302f32342d3234203d3e20313430333839.roa
File:                     3130332e3136302e3231322e302f32342d3234203d3e20313430333839.roa (raw, json)
Hash identifier:          b/xbORHT+fQcjRsUPACV/EddNJE5h6xg8w5gIZewjWA=
Subject key identifier:   62:A1:D2:6C:0F:A3:7D:01:79:B6:35:B7:42:11:01:94:B5:47:BF:20
Certificate issuer:       /CN=C6E3A22817CE6E098DFC674B26288C83D6C3F1CE
Certificate serial:       02900982D7AA26AE2FA5396FB55791A6CF2CFCB9
Authority key identifier: C6:E3:A2:28:17:CE:6E:09:8D:FC:67:4B:26:28:8C:83:D6:C3:F1:CE
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C6E3A22817CE6E098DFC674B26288C83D6C3F1CE.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6bee1ee1-a5b5-4c64-bbbb-2636352dacfc/0/3130332e3136302e3231322e302f32342d3234203d3e20313430333839.roa
Signing time:             Thu 21 Aug 2025 04:02:26 +0000
ROA not before:           Thu 21 Aug 2025 03:57:26 +0000
ROA not after:            Thu 20 Aug 2026 04:02:26 +0000
asID:                     140389
IP address blocks:        103.160.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/6bee1ee1-a5b5-4c64-bbbb-2636352dacfc/0/C6E3A22817CE6E098DFC674B26288C83D6C3F1CE.crl
                          rsync://repo-rpki.idnic.net/repo/6bee1ee1-a5b5-4c64-bbbb-2636352dacfc/0/C6E3A22817CE6E098DFC674B26288C83D6C3F1CE.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C6E3A22817CE6E098DFC674B26288C83D6C3F1CE.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Aug 2025 07:01:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:90:09:82:d7:aa:26:ae:2f:a5:39:6f:b5:57:91:a6:cf:2c:fc:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C6E3A22817CE6E098DFC674B26288C83D6C3F1CE
        Validity
            Not Before: Aug 21 03:57:26 2025 GMT
            Not After : Aug 20 04:02:26 2026 GMT
        Subject: CN=62A1D26C0FA37D0179B635B742110194B547BF20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:f7:10:07:c6:c3:ac:97:b5:a1:d0:93:86:a1:
                    58:47:a5:c8:2a:9c:1d:7f:04:65:93:cf:c6:97:bd:
                    7e:81:a9:52:20:3c:7c:ce:c0:d2:ee:12:ae:87:58:
                    94:77:d5:e1:92:42:2b:8a:a8:3f:ec:4f:bb:de:ee:
                    b0:06:03:c1:81:cd:fa:8b:a2:9c:2e:a6:80:9b:7c:
                    11:9b:11:bf:76:29:c6:33:87:c3:9b:ba:0e:a6:62:
                    c3:be:fd:cb:1b:81:e8:ee:19:c7:00:bf:28:c7:06:
                    f6:98:32:fb:63:54:17:02:8e:f0:eb:02:df:77:3c:
                    8d:f5:86:6a:b9:b7:4e:eb:a5:d0:bd:fe:73:dc:5b:
                    25:22:66:02:87:44:b8:f4:0e:f3:55:70:be:29:fc:
                    f4:64:97:1a:32:0e:ce:5d:3c:03:4a:9d:24:b2:cd:
                    cc:94:94:a4:19:58:59:06:4a:be:4d:55:c2:7f:b8:
                    2e:e7:bb:84:36:27:67:69:7e:d9:ac:59:83:91:eb:
                    cb:ac:2b:10:76:a2:09:5d:be:25:70:c7:da:f9:0f:
                    91:45:1a:bb:96:bc:12:9c:b4:bd:56:af:8d:82:4d:
                    3e:dd:09:81:a6:da:4b:51:61:1c:6b:1e:05:96:3b:
                    d2:94:50:5b:7b:c8:00:d0:a8:61:ae:5f:b5:ac:c1:
                    a6:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:A1:D2:6C:0F:A3:7D:01:79:B6:35:B7:42:11:01:94:B5:47:BF:20
            X509v3 Authority Key Identifier:
                keyid:C6:E3:A2:28:17:CE:6E:09:8D:FC:67:4B:26:28:8C:83:D6:C3:F1:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6bee1ee1-a5b5-4c64-bbbb-2636352dacfc/0/C6E3A22817CE6E098DFC674B26288C83D6C3F1CE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C6E3A22817CE6E098DFC674B26288C83D6C3F1CE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6bee1ee1-a5b5-4c64-bbbb-2636352dacfc/0/3130332e3136302e3231322e302f32342d3234203d3e20313430333839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.160.212.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:6f:4a:8e:c3:47:4e:e9:fd:86:b9:d0:bb:d2:4b:5b:84:58:
         75:34:49:92:bc:35:0b:c6:30:bb:33:e8:61:35:0e:7f:b5:b2:
         56:24:d8:c5:87:6a:5c:38:ab:c4:91:c4:74:44:38:7b:0e:fd:
         b6:d6:5a:9b:8a:78:e8:4d:f7:31:4d:80:86:7e:d9:aa:ca:06:
         64:b1:0f:12:94:33:ba:45:67:c3:0c:6f:20:fb:b6:a4:4a:22:
         79:00:8f:9a:93:fa:94:c9:10:38:84:e6:d1:39:4f:fc:aa:fc:
         d4:2d:76:a9:3e:6a:ad:91:8f:80:8f:d5:bc:fb:f1:7b:78:f1:
         ce:81:44:e1:55:23:0c:11:98:9a:74:19:2d:8b:10:0f:e9:64:
         a7:1e:00:60:c8:f5:82:3f:8a:75:17:4d:59:b8:c3:9e:97:28:
         6f:5f:90:2a:9d:d2:74:9e:8f:5e:54:29:37:99:b0:cf:46:32:
         86:49:9a:b1:04:d8:16:b8:e3:5f:19:2b:16:75:15:3b:71:e2:
         c4:ad:9d:52:54:d5:db:b1:f3:38:84:cf:b4:eb:50:b2:01:16:
         25:40:30:3a:65:32:b9:3c:26:5f:dc:c6:9f:8c:bb:6e:5b:f9:
         6c:c4:61:15:1a:8f:2c:18:63:39:9b:7d:c2:43:0a:8c:4d:9e:
         c0:cd:03:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:48:01 2025 by rpki-client