Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/3130332e3134382e3139392e302f32342d3234203d3e2034373837.roa
File:                     3130332e3134382e3139392e302f32342d3234203d3e2034373837.roa (raw, json)
Hash identifier:          spe84zVMe2bcaKVxUGj36+XcsHH/BNLwdoJ4BjQFuA4=
Subject key identifier:   18:AF:4B:97:52:71:96:57:D5:18:6E:62:00:AA:3B:8A:69:D7:ED:E9
Certificate issuer:       /CN=08D07F010DA28112A94E8800C317B8DF7F1ABF43
Certificate serial:       6B9607E494D38E2EB4FB7EFAB8326BC8006098A1
Authority key identifier: 08:D0:7F:01:0D:A2:81:12:A9:4E:88:00:C3:17:B8:DF:7F:1A:BF:43
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08D07F010DA28112A94E8800C317B8DF7F1ABF43.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/3130332e3134382e3139392e302f32342d3234203d3e2034373837.roa
Signing time:             Mon 13 Oct 2025 03:03:55 +0000
ROA not before:           Mon 13 Oct 2025 02:58:55 +0000
ROA not after:            Mon 12 Oct 2026 03:03:55 +0000
asID:                     4787
IP address blocks:        103.148.199.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/08D07F010DA28112A94E8800C317B8DF7F1ABF43.crl
                          rsync://repo-rpki.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/08D07F010DA28112A94E8800C317B8DF7F1ABF43.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08D07F010DA28112A94E8800C317B8DF7F1ABF43.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Oct 2025 05:46:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:96:07:e4:94:d3:8e:2e:b4:fb:7e:fa:b8:32:6b:c8:00:60:98:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08D07F010DA28112A94E8800C317B8DF7F1ABF43
        Validity
            Not Before: Oct 13 02:58:55 2025 GMT
            Not After : Oct 12 03:03:55 2026 GMT
        Subject: CN=18AF4B9752719657D5186E6200AA3B8A69D7EDE9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:53:a4:8b:27:90:48:88:90:a7:de:13:3e:a8:
                    b8:b6:b2:c4:71:34:86:75:a2:51:97:c7:d6:e9:3c:
                    3a:49:1e:12:20:aa:80:11:b7:86:89:bc:96:98:23:
                    65:49:7d:a9:3d:ca:b2:af:de:09:ef:98:9d:5e:33:
                    4a:27:f8:8b:51:c6:29:00:d5:9c:60:7b:8f:3e:08:
                    37:d6:51:f4:ee:9f:a0:de:a2:67:fa:db:a7:a7:63:
                    2d:d3:6b:82:0b:52:b4:75:75:61:82:fe:2b:df:bc:
                    e3:4f:75:c0:d6:23:b8:2f:ab:4a:cf:0a:c8:72:f1:
                    55:4d:27:e2:66:c2:c0:4b:d5:bd:0d:8d:a4:86:86:
                    a5:3d:4d:9b:f2:8c:36:c8:a5:5b:64:e6:61:c4:98:
                    cb:7a:4d:ca:4f:9b:de:0d:e3:ca:a0:e1:80:0c:6e:
                    98:ef:91:cb:c2:48:f8:11:a6:10:f2:a3:4b:65:8e:
                    7c:01:ce:5e:c2:0d:0a:61:01:51:34:91:d3:14:70:
                    a6:61:2f:ca:be:eb:0e:54:f1:58:c5:b2:48:fd:a9:
                    bf:b6:ad:4b:ca:7f:50:85:81:60:a6:6a:79:86:3d:
                    10:3b:3f:d1:53:73:de:ba:66:e9:c6:f1:c1:2b:8f:
                    ef:2b:55:c3:2a:01:a4:33:fc:28:b2:8d:49:d1:7e:
                    65:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:AF:4B:97:52:71:96:57:D5:18:6E:62:00:AA:3B:8A:69:D7:ED:E9
            X509v3 Authority Key Identifier:
                keyid:08:D0:7F:01:0D:A2:81:12:A9:4E:88:00:C3:17:B8:DF:7F:1A:BF:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/08D07F010DA28112A94E8800C317B8DF7F1ABF43.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08D07F010DA28112A94E8800C317B8DF7F1ABF43.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/3130332e3134382e3139392e302f32342d3234203d3e2034373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.148.199.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:35:7d:f9:eb:a4:f1:53:0c:ff:7d:b7:e6:f9:1d:2d:15:fd:
         63:0f:bd:89:52:b5:10:98:8a:bd:a8:12:4e:fd:4c:80:0f:c3:
         60:41:ae:23:17:70:d2:26:d6:bc:05:52:a0:a9:a7:40:73:fa:
         c1:5c:21:d1:e1:48:58:bf:c3:1c:38:fd:cb:6c:c3:7a:29:98:
         6f:69:87:3e:55:38:03:3f:51:88:35:63:05:51:be:99:16:89:
         10:e2:6c:59:e3:1b:fe:16:b3:b2:8a:75:cd:06:d2:7a:e1:c6:
         8f:97:83:e5:94:fe:82:52:78:2c:28:d7:7f:9d:79:0d:fd:4f:
         98:e6:47:ad:ea:30:0b:c8:b6:52:04:ac:b5:71:cd:52:b1:a8:
         6c:01:40:32:0c:80:5d:47:6c:dc:ec:ec:3b:67:8d:e6:86:37:
         ec:6d:dd:e3:73:9d:87:c0:5a:46:85:65:da:03:b3:fd:d0:65:
         a0:7b:0b:69:e6:65:9e:10:77:c7:4c:e7:75:f5:48:f5:a7:96:
         23:83:31:db:48:ea:e6:0e:c7:93:a8:8c:39:1f:05:00:2a:67:
         1e:37:49:a8:01:df:f8:d4:ca:e9:35:e2:39:af:a9:8c:19:ae:
         c3:65:3e:65:1c:cc:24:be:e1:d1:84:35:31:f0:bd:44:67:55:
         ca:1a:50:73
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUa5YH5JTTji60+376uDJryABgmKEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDhEMDdGMDEwREEyODExMkE5NEU4ODAwQzMxN0I4REY3
RjFBQkY0MzAeFw0yNTEwMTMwMjU4NTVaFw0yNjEwMTIwMzAzNTVaMDMxMTAvBgNV
BAMTKDE4QUY0Qjk3NTI3MTk2NTdENTE4NkU2MjAwQUEzQjhBNjlEN0VERTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOU6SLJ5BIiJCn3hM+qLi2ssRx
NIZ1olGXx9bpPDpJHhIgqoARt4aJvJaYI2VJfak9yrKv3gnvmJ1eM0on+ItRxikA
1Zxge48+CDfWUfTun6Deomf626enYy3Ta4ILUrR1dWGC/ivfvONPdcDWI7gvq0rP
Cshy8VVNJ+JmwsBL1b0NjaSGhqU9TZvyjDbIpVtk5mHEmMt6TcpPm94N48qg4YAM
bpjvkcvCSPgRphDyo0tljnwBzl7CDQphAVE0kdMUcKZhL8q+6w5U8VjFskj9qb+2
rUvKf1CFgWCmanmGPRA7P9FTc966ZunG8cErj+8rVcMqAaQz/CiyjUnRfmUjAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUGK9Ll1JxllfVGG5iAKo7imnX7ekwHwYDVR0j
BBgwFoAUCNB/AQ2igRKpTogAwxe4338av0MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83
MGMyYTEzYi0xZjQwLTRjMDMtYmMzNS1mNjk2MTUxNmQ0ZDkvMC8wOEQwN0YwMTBE
QTI4MTEyQTk0RTg4MDBDMzE3QjhERjdGMUFCRjQzLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMDhEMDdGMDEwREEyODExMkE5NEU4ODAwQzMxN0I4REY3RjFB
QkY0My5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzcwYzJhMTNiLTFmNDAtNGMwMy1i
YzM1LWY2OTYxNTE2ZDRkOS8wLzMxMzAzMzJlMzEzNDM4MmUzMTM5MzkyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzNDM3MzgzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGeUxzANBgkqhkiG
9w0BAQsFAAOCAQEADzV9+euk8VMM/3235vkdLRX9Yw+9iVK1EJiKvagSTv1MgA/D
YEGuIxdw0ibWvAVSoKmnQHP6wVwh0eFIWL/DHDj9y2zDeimYb2mHPlU4Az9RiDVj
BVG+mRaJEOJsWeMb/hazsop1zQbSeuHGj5eD5ZT+glJ4LCjXf515Df1PmOZHreow
C8i2UgSstXHNUrGobAFAMgyAXUds3OzsO2eN5oY37G3d43Odh8BaRoVl2gOz/dBl
oHsLaeZlnhB3x0zndfVI9aeWI4Mx20jq5g7Hk6iMOR8FACpnHjdJqAHf+NTK6TXi
Oa+pjBmuw2U+ZRzMJL7h0YQ1MfC9RGdVyhpQcw==
-----END CERTIFICATE-----
Generated at Mon Oct 20 04:40:14 2025 by rpki-client