Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/773d2b60-12c8-413e-b941-393e00fdd653/0/3130332e3137372e3231342e302f32342d3234203d3e20313437313633.roa
File:                     3130332e3137372e3231342e302f32342d3234203d3e20313437313633.roa (raw, json)
Hash identifier:          BQDZ7beKpSG5YJTRW/gbj7YmxhbuMugwzWVLa45Kdxg=
Subject key identifier:   A8:B3:07:3B:59:F5:DD:FB:39:35:44:AA:2E:93:E0:C4:4B:BB:B6:AD
Certificate issuer:       /CN=ADB9C197352F8128F6DAA47A227D3869A4C238F4
Certificate serial:       09E236865178ADA90138F47573EB12D5CFBF506D
Authority key identifier: AD:B9:C1:97:35:2F:81:28:F6:DA:A4:7A:22:7D:38:69:A4:C2:38:F4
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADB9C197352F8128F6DAA47A227D3869A4C238F4.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/773d2b60-12c8-413e-b941-393e00fdd653/0/3130332e3137372e3231342e302f32342d3234203d3e20313437313633.roa
Signing time:             Wed 15 Oct 2025 09:00:00 +0000
ROA not before:           Wed 15 Oct 2025 08:55:00 +0000
ROA not after:            Wed 14 Oct 2026 09:00:00 +0000
asID:                     147163
IP address blocks:        103.177.214.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/773d2b60-12c8-413e-b941-393e00fdd653/0/ADB9C197352F8128F6DAA47A227D3869A4C238F4.crl
                          rsync://repo-rpki.idnic.net/repo/773d2b60-12c8-413e-b941-393e00fdd653/0/ADB9C197352F8128F6DAA47A227D3869A4C238F4.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADB9C197352F8128F6DAA47A227D3869A4C238F4.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Oct 2025 02:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:e2:36:86:51:78:ad:a9:01:38:f4:75:73:eb:12:d5:cf:bf:50:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ADB9C197352F8128F6DAA47A227D3869A4C238F4
        Validity
            Not Before: Oct 15 08:55:00 2025 GMT
            Not After : Oct 14 09:00:00 2026 GMT
        Subject: CN=A8B3073B59F5DDFB393544AA2E93E0C44BBBB6AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:7c:5a:e0:19:d2:25:ee:90:9c:68:75:09:03:
                    20:08:a3:8b:54:22:24:be:89:8a:a9:b8:21:6b:12:
                    4f:96:2c:8c:fe:2a:58:55:37:b5:e0:13:67:60:e9:
                    9c:d4:ad:02:a1:ab:23:a3:43:d2:80:2f:50:07:47:
                    99:18:6d:93:c3:71:f3:07:dc:15:e1:88:59:27:11:
                    c2:7f:f2:27:92:24:b0:47:dc:07:0a:30:c2:9a:04:
                    db:73:10:b1:72:bb:a1:fc:8a:a8:dd:a2:c8:47:bb:
                    32:34:44:27:57:c1:b9:d3:4c:5e:4e:c7:54:78:dc:
                    4e:2c:1c:1f:a8:61:e1:1f:a3:4b:1a:9e:ce:ae:c6:
                    89:c5:4c:fb:b8:69:80:8d:3e:a0:df:5b:d6:75:56:
                    cf:d6:28:de:24:96:5a:c9:16:e0:6a:41:73:a0:8d:
                    30:72:d4:40:eb:69:39:a1:6b:b6:13:fa:21:fb:63:
                    e2:a3:b1:5c:3b:89:63:70:cd:d2:a8:46:60:41:70:
                    67:49:2d:b7:1b:f1:6f:0b:e0:90:d6:f6:af:a7:02:
                    20:eb:2a:cc:9d:ec:3c:f8:50:a7:c5:7f:d5:79:7b:
                    55:b2:85:b0:a0:26:89:8a:ee:45:58:91:ea:af:86:
                    11:b5:35:c4:42:cf:54:ce:ac:96:fc:99:6a:21:6f:
                    f3:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:B3:07:3B:59:F5:DD:FB:39:35:44:AA:2E:93:E0:C4:4B:BB:B6:AD
            X509v3 Authority Key Identifier:
                keyid:AD:B9:C1:97:35:2F:81:28:F6:DA:A4:7A:22:7D:38:69:A4:C2:38:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/773d2b60-12c8-413e-b941-393e00fdd653/0/ADB9C197352F8128F6DAA47A227D3869A4C238F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADB9C197352F8128F6DAA47A227D3869A4C238F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/773d2b60-12c8-413e-b941-393e00fdd653/0/3130332e3137372e3231342e302f32342d3234203d3e20313437313633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.177.214.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c9:d0:14:ed:0e:a5:86:7d:0c:57:93:3e:f9:38:ce:ba:23:a3:
         f1:18:9e:74:11:ef:7f:a6:c1:4a:8c:15:2a:5b:66:bf:37:2e:
         d2:d2:01:fd:e8:67:e3:71:b5:cc:87:6c:5c:e2:f6:d3:5c:51:
         2f:4a:32:5c:e7:6f:0d:4b:07:f8:54:86:b0:6d:3a:94:bc:36:
         03:07:fc:11:aa:13:88:78:9a:27:ef:69:0c:23:ba:7f:43:2f:
         55:ca:9c:9b:a4:09:5f:c9:73:c3:f7:26:b2:4b:17:ed:52:8a:
         97:0a:e0:9a:1a:5e:ff:84:33:9d:a4:99:69:62:d3:87:ea:92:
         bf:d0:3f:53:30:f3:62:ad:ae:06:83:88:ea:ed:ec:91:e1:c3:
         b9:00:98:b9:34:be:35:45:b0:37:79:29:fb:19:78:a4:7c:50:
         22:4f:8a:a2:44:45:2a:3a:f0:76:d1:72:ff:50:de:8a:7d:7c:
         3a:63:85:0d:68:39:92:b0:02:cb:70:61:63:01:36:ff:fa:30:
         94:c6:c5:22:18:12:3b:3f:e5:b7:a7:0e:81:f1:e7:f2:d3:33:
         b5:17:ab:c2:a0:6a:e3:c5:fd:66:dd:93:fe:03:a3:b9:e7:8a:
         ad:b2:5b:da:c4:05:a4:5a:df:62:ea:d7:c6:41:82:3f:7e:df:
         7b:e4:17:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:01:00 2025 by rpki-client