Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/7b130b75-4593-4141-a06f-57a22a023dd0/0/3130332e3134322e32312e302f32342d3234203d3e20313339393536.roa
File:                     3130332e3134322e32312e302f32342d3234203d3e20313339393536.roa (raw, json)
Hash identifier:          oosppneRoSbmwD3s+VWSjVI8PDvHs2L2ec3h4IZjW/8=
Subject key identifier:   A5:79:CB:E6:7F:BF:F2:91:94:8D:EE:A7:7B:46:80:56:DE:75:50:A1
Certificate issuer:       /CN=28612772543E43335B080C32808B7FDC277E71E4
Certificate serial:       0CFE8E08EB9DFD75D7110A9DD2B80AFA2AB46362
Authority key identifier: 28:61:27:72:54:3E:43:33:5B:08:0C:32:80:8B:7F:DC:27:7E:71:E4
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28612772543E43335B080C32808B7FDC277E71E4.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/7b130b75-4593-4141-a06f-57a22a023dd0/0/3130332e3134322e32312e302f32342d3234203d3e20313339393536.roa
Signing time:             Thu 14 Aug 2025 04:00:01 +0000
ROA not before:           Thu 14 Aug 2025 03:55:01 +0000
ROA not after:            Thu 13 Aug 2026 04:00:01 +0000
asID:                     139956
IP address blocks:        103.142.21.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/7b130b75-4593-4141-a06f-57a22a023dd0/0/28612772543E43335B080C32808B7FDC277E71E4.crl
                          rsync://repo-rpki.idnic.net/repo/7b130b75-4593-4141-a06f-57a22a023dd0/0/28612772543E43335B080C32808B7FDC277E71E4.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28612772543E43335B080C32808B7FDC277E71E4.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Aug 2025 17:11:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:fe:8e:08:eb:9d:fd:75:d7:11:0a:9d:d2:b8:0a:fa:2a:b4:63:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28612772543E43335B080C32808B7FDC277E71E4
        Validity
            Not Before: Aug 14 03:55:01 2025 GMT
            Not After : Aug 13 04:00:01 2026 GMT
        Subject: CN=A579CBE67FBFF291948DEEA77B468056DE7550A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:9f:bf:f8:87:54:4c:58:bd:30:0b:32:81:f6:
                    d1:59:22:b7:c7:4e:76:4c:3d:07:7f:af:94:dd:dc:
                    f5:43:ab:07:4c:eb:94:b7:bb:9c:01:0a:82:02:c2:
                    0b:4b:22:34:70:74:c0:e9:e1:a3:ad:ea:f1:4c:e3:
                    77:73:33:40:20:cc:8e:bf:c8:40:f4:8c:98:11:e1:
                    ee:e9:68:a3:a6:63:1f:34:70:6d:a0:7c:29:39:ed:
                    24:57:bc:9c:03:4d:2f:6c:e6:86:0b:20:7e:9e:4f:
                    fb:a0:a0:29:10:3d:a1:53:73:f2:cf:b4:b1:1d:7f:
                    66:9e:2d:da:ba:06:9a:60:d2:c5:ca:c7:44:6b:7f:
                    55:e1:27:d6:0f:c4:0e:60:ea:eb:04:ff:8c:60:48:
                    04:fa:bf:e3:5c:55:95:7e:66:4e:41:3d:ae:b6:24:
                    41:ef:0f:11:2e:71:c4:5d:02:7d:f8:b8:07:47:1f:
                    a0:5b:d1:55:33:53:d2:78:20:86:be:cd:91:45:b2:
                    2a:81:c9:8c:44:9a:91:81:02:6e:b7:7c:83:da:f0:
                    f3:4b:f5:ae:83:43:2d:a8:14:2d:16:3f:30:ee:93:
                    bb:5c:d6:63:f3:2b:46:ed:81:dd:93:a2:99:94:e9:
                    60:d4:7f:91:3d:f6:d0:e4:4e:3b:ca:1c:c2:48:bd:
                    df:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:79:CB:E6:7F:BF:F2:91:94:8D:EE:A7:7B:46:80:56:DE:75:50:A1
            X509v3 Authority Key Identifier:
                keyid:28:61:27:72:54:3E:43:33:5B:08:0C:32:80:8B:7F:DC:27:7E:71:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/7b130b75-4593-4141-a06f-57a22a023dd0/0/28612772543E43335B080C32808B7FDC277E71E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28612772543E43335B080C32808B7FDC277E71E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7b130b75-4593-4141-a06f-57a22a023dd0/0/3130332e3134322e32312e302f32342d3234203d3e20313339393536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.142.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:c9:ef:2a:4d:cf:15:07:fd:a0:c5:a8:a3:e1:c3:53:72:1d:
         75:e3:2c:c4:54:10:d4:7d:6a:4d:eb:35:07:73:67:36:94:5c:
         83:98:a2:6a:22:1c:ee:86:fc:2c:7e:f3:73:5d:1c:b6:ba:06:
         60:31:80:01:44:60:f5:ad:4a:50:e0:c9:04:d2:2c:1b:95:ae:
         4b:10:4b:dc:cf:6f:e7:73:6a:a5:2a:71:9b:fe:21:35:4d:2b:
         52:d3:14:f2:ba:04:17:01:69:a2:81:30:48:2e:e6:d3:e0:1e:
         4a:a3:63:f7:0b:af:3c:1b:8e:b6:84:b2:dc:29:d3:4f:0f:25:
         9f:16:40:c7:48:3c:1f:eb:e8:d2:b8:44:6c:e3:e2:55:a8:09:
         36:e6:a4:2d:a3:e6:d7:46:92:9a:78:54:19:b2:81:29:74:db:
         73:ae:99:bb:2f:72:2c:ef:0d:f2:37:ed:d2:e4:36:82:c3:05:
         87:fa:ac:8a:07:9f:42:d0:64:ca:0e:c9:da:48:9e:cb:c6:09:
         c0:86:29:b7:da:2d:8c:93:23:60:dd:19:fc:b4:af:d3:a0:db:
         cf:fa:26:97:db:c1:35:f0:7d:e6:8c:3b:15:5a:8e:26:57:d3:
         ae:c9:2d:0d:35:85:4b:2b:f5:d2:2b:10:60:7a:b1:09:19:85:
         d2:2f:9e:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:18:36 2025 by rpki-client