Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/773d2b60-12c8-413e-b941-393e00fdd653/0/3130332e3137372e3231352e302f32342d3234203d3e20313437313633.roa
File:                     3130332e3137372e3231352e302f32342d3234203d3e20313437313633.roa (raw, json)
Hash identifier:          dUSjnFJULsQt0ZMfSuCJpifmDF9rtnb0yNIzE9XIOWo=
Subject key identifier:   41:6B:16:C2:FD:39:C1:14:8D:ED:05:47:69:D5:F6:B9:E9:00:14:E3
Certificate issuer:       /CN=ADB9C197352F8128F6DAA47A227D3869A4C238F4
Certificate serial:       41B8E1D0423551E6C774ADE1E909AF365CDF47CC
Authority key identifier: AD:B9:C1:97:35:2F:81:28:F6:DA:A4:7A:22:7D:38:69:A4:C2:38:F4
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADB9C197352F8128F6DAA47A227D3869A4C238F4.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/773d2b60-12c8-413e-b941-393e00fdd653/0/3130332e3137372e3231352e302f32342d3234203d3e20313437313633.roa
Signing time:             Wed 15 Oct 2025 10:00:00 +0000
ROA not before:           Wed 15 Oct 2025 09:55:00 +0000
ROA not after:            Wed 14 Oct 2026 10:00:00 +0000
asID:                     147163
IP address blocks:        103.177.215.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/773d2b60-12c8-413e-b941-393e00fdd653/0/ADB9C197352F8128F6DAA47A227D3869A4C238F4.crl
                          rsync://repo-rpki.idnic.net/repo/773d2b60-12c8-413e-b941-393e00fdd653/0/ADB9C197352F8128F6DAA47A227D3869A4C238F4.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADB9C197352F8128F6DAA47A227D3869A4C238F4.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Oct 2025 02:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:b8:e1:d0:42:35:51:e6:c7:74:ad:e1:e9:09:af:36:5c:df:47:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ADB9C197352F8128F6DAA47A227D3869A4C238F4
        Validity
            Not Before: Oct 15 09:55:00 2025 GMT
            Not After : Oct 14 10:00:00 2026 GMT
        Subject: CN=416B16C2FD39C1148DED054769D5F6B9E90014E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:da:3d:19:a9:0e:a4:17:51:37:d7:e4:32:87:
                    17:fa:b5:42:b3:e8:5f:35:8c:b0:db:a1:7b:dc:72:
                    8e:3a:de:15:05:f3:55:85:b4:f4:78:08:ae:80:e2:
                    a6:d1:0b:09:59:ac:4a:da:1b:a9:d0:50:b5:3c:99:
                    4b:0e:c7:98:0b:51:1d:a7:e0:58:63:ee:4d:64:46:
                    c8:1b:e4:ef:f9:5e:96:c5:45:5e:90:62:37:3a:f0:
                    1f:72:ed:43:97:95:ef:3a:51:07:2b:81:34:3b:61:
                    d8:b2:bc:bc:df:12:d6:94:ac:7b:28:00:a5:cc:67:
                    36:f6:c5:da:6b:b6:c0:b9:0a:cb:97:1d:24:08:dc:
                    6d:14:a9:4f:3b:43:a2:87:ec:75:0e:74:76:08:6d:
                    83:d8:0a:ff:3b:ba:ad:2a:2c:9c:fd:8c:5d:33:8a:
                    fe:2c:c8:10:47:7d:cc:d7:66:18:c6:66:ae:c4:e0:
                    bf:bb:50:eb:cd:43:57:47:80:84:d6:6e:76:6e:55:
                    34:07:a1:c8:cb:ac:28:d9:fb:8b:88:c6:83:c2:1e:
                    94:7a:aa:18:8a:60:7f:31:73:eb:60:33:79:ee:e7:
                    c3:32:43:a3:e3:1b:b0:6c:ab:72:c5:67:57:61:2a:
                    83:cf:92:09:4f:d7:95:67:d2:34:c0:08:4b:bf:14:
                    0a:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:6B:16:C2:FD:39:C1:14:8D:ED:05:47:69:D5:F6:B9:E9:00:14:E3
            X509v3 Authority Key Identifier:
                keyid:AD:B9:C1:97:35:2F:81:28:F6:DA:A4:7A:22:7D:38:69:A4:C2:38:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/773d2b60-12c8-413e-b941-393e00fdd653/0/ADB9C197352F8128F6DAA47A227D3869A4C238F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADB9C197352F8128F6DAA47A227D3869A4C238F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/773d2b60-12c8-413e-b941-393e00fdd653/0/3130332e3137372e3231352e302f32342d3234203d3e20313437313633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.177.215.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:bd:1f:93:ea:9b:b3:a1:b0:43:42:10:23:db:49:70:9f:65:
         44:a6:3b:a1:b5:9c:a9:f4:95:65:5f:c8:e8:7c:c1:39:00:8d:
         07:f2:26:0f:e5:09:51:2e:01:6b:0d:83:3b:39:93:26:ac:4c:
         f0:80:4e:59:a8:ba:e3:57:4c:28:78:ee:dc:d9:fb:00:16:70:
         67:24:8a:d4:ab:c4:49:d0:92:41:88:ca:d7:95:7e:f1:e5:02:
         87:a9:82:0e:99:f3:a7:45:86:dd:91:58:fe:1a:2b:e6:de:72:
         e2:11:16:a7:56:93:da:e2:49:74:fa:8d:36:1c:59:b1:d0:3f:
         bf:fe:6b:57:e7:ba:21:f2:ea:4c:eb:32:f9:40:a1:24:96:c1:
         73:70:d2:54:b0:84:b3:98:48:c9:b2:e6:85:98:5b:cc:22:c2:
         2d:a4:76:bd:02:37:08:4a:49:e0:9f:24:01:a7:3b:56:6d:b0:
         7b:5c:54:5f:27:8f:48:db:34:49:97:37:7e:51:5f:ac:4a:95:
         49:04:da:e9:bc:ba:32:c0:1b:40:d8:94:55:d7:38:a6:cc:1d:
         d9:91:3a:a7:01:9e:bb:02:19:d5:97:ad:5d:78:2e:0d:a2:cf:
         b0:4e:e1:60:b2:42:94:32:b6:0a:30:55:97:87:9d:e1:15:57:
         08:a6:a3:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:01:11 2025 by rpki-client