Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/7bfae565-4114-4434-940d-7c01928c8ab1/0/3130332e3137382e322e302f32332d3233203d3e20313431303737.roa
File:                     3130332e3137382e322e302f32332d3233203d3e20313431303737.roa (raw, json)
Hash identifier:          J/BGU2SKakZdXQC+qdzZqCI4Fjqls/RCd2k8Ynz+ieQ=
Subject key identifier:   F9:66:C6:51:28:E7:19:1B:90:EC:10:F8:97:E7:B9:6B:8C:3B:7D:FD
Certificate issuer:       /CN=C6076E330D4679EF0455EA400D1158D4F49B0BF1
Certificate serial:       765A08FFC46CFDE276B7E26641A47451735E0559
Authority key identifier: C6:07:6E:33:0D:46:79:EF:04:55:EA:40:0D:11:58:D4:F4:9B:0B:F1
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C6076E330D4679EF0455EA400D1158D4F49B0BF1.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/7bfae565-4114-4434-940d-7c01928c8ab1/0/3130332e3137382e322e302f32332d3233203d3e20313431303737.roa
Signing time:             Wed 17 Sep 2025 06:05:43 +0000
ROA not before:           Wed 17 Sep 2025 06:00:43 +0000
ROA not after:            Wed 16 Sep 2026 06:05:43 +0000
asID:                     141077
IP address blocks:        103.178.2.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/7bfae565-4114-4434-940d-7c01928c8ab1/0/C6076E330D4679EF0455EA400D1158D4F49B0BF1.crl
                          rsync://repo-rpki.idnic.net/repo/7bfae565-4114-4434-940d-7c01928c8ab1/0/C6076E330D4679EF0455EA400D1158D4F49B0BF1.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C6076E330D4679EF0455EA400D1158D4F49B0BF1.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Oct 2025 05:44:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:5a:08:ff:c4:6c:fd:e2:76:b7:e2:66:41:a4:74:51:73:5e:05:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C6076E330D4679EF0455EA400D1158D4F49B0BF1
        Validity
            Not Before: Sep 17 06:00:43 2025 GMT
            Not After : Sep 16 06:05:43 2026 GMT
        Subject: CN=F966C65128E7191B90EC10F897E7B96B8C3B7DFD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:68:b6:4b:39:14:f4:40:b0:6a:1c:b7:20:cf:
                    75:23:14:97:0a:47:74:c7:85:5f:82:39:71:bc:f8:
                    d3:44:a6:aa:f9:52:38:8f:28:b0:23:ff:8c:a1:09:
                    10:60:16:4d:e2:7c:1e:ea:37:0d:62:74:7f:7d:de:
                    41:9f:85:6c:aa:cc:17:17:ab:82:20:3c:11:51:92:
                    3c:a7:9f:3c:1c:55:1b:2a:24:ed:83:d6:cf:ce:bf:
                    ef:b5:8b:d8:b6:58:bb:b4:12:e9:01:cf:24:3a:27:
                    aa:0e:9a:cd:1c:cf:ed:6b:3b:4e:dc:71:d2:0d:fe:
                    72:bd:00:ea:85:2e:d3:07:53:5e:5e:8e:8e:23:1e:
                    d3:2c:c5:26:ca:1f:f2:18:ca:14:98:19:95:32:f5:
                    fa:20:28:0f:1d:ca:11:97:55:30:23:05:2f:34:49:
                    0d:d4:8b:ce:4f:e7:2b:72:12:53:06:6a:36:c9:49:
                    f5:9b:5c:a7:fd:38:00:ff:19:54:08:76:ca:0c:96:
                    59:02:dd:51:0e:4d:ac:06:ed:d0:6f:e1:7d:6d:41:
                    62:e4:fc:73:d7:5f:47:a8:cb:8e:95:ba:fa:fc:64:
                    2f:a2:36:b1:30:43:a4:f4:aa:ee:1c:5d:d6:19:17:
                    34:c6:b0:36:a7:7d:ee:5d:2a:25:9a:3f:1d:31:ed:
                    90:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:66:C6:51:28:E7:19:1B:90:EC:10:F8:97:E7:B9:6B:8C:3B:7D:FD
            X509v3 Authority Key Identifier:
                keyid:C6:07:6E:33:0D:46:79:EF:04:55:EA:40:0D:11:58:D4:F4:9B:0B:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/7bfae565-4114-4434-940d-7c01928c8ab1/0/C6076E330D4679EF0455EA400D1158D4F49B0BF1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C6076E330D4679EF0455EA400D1158D4F49B0BF1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7bfae565-4114-4434-940d-7c01928c8ab1/0/3130332e3137382e322e302f32332d3233203d3e20313431303737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.178.2.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3d:17:11:e5:75:b0:23:8d:ee:20:1b:db:0c:18:96:63:2a:a6:
         f9:69:bb:e1:65:4d:dd:9d:ec:db:f6:19:8a:67:8d:f4:19:1a:
         5f:4e:87:01:74:a5:fb:9c:4c:22:a3:3d:57:4d:04:36:5a:c2:
         16:4b:00:8e:91:c1:61:29:d9:c3:48:01:f1:6c:ba:50:3b:2c:
         2c:15:47:63:aa:e4:fe:7a:76:f7:3e:b2:b4:1a:f8:07:14:0a:
         11:23:c2:f9:22:11:41:40:86:c7:17:62:ff:c6:ab:d9:19:0f:
         bc:b3:93:1b:1f:d6:75:d3:36:71:c4:d1:19:2e:5e:24:01:8e:
         bd:81:e2:41:4b:c5:25:3b:e7:0d:ca:d8:ac:14:92:13:34:04:
         18:84:9c:e6:53:6c:5b:3d:bf:ab:dd:97:5b:63:5d:17:b7:49:
         fa:48:a7:1a:f8:a6:94:4a:bd:cc:7c:9f:d9:9b:da:7f:8c:07:
         75:67:27:2c:4b:fa:a0:65:38:10:86:14:b5:82:8c:c2:0b:15:
         32:4d:c4:d9:b2:d8:d0:35:18:9c:d4:43:f5:79:35:a5:a1:0a:
         01:eb:ec:6b:cf:af:e3:ce:5a:d2:c1:8d:db:7d:0c:36:06:c8:
         90:02:bd:04:f4:ef:30:8b:8c:c9:60:11:ac:05:f0:2d:37:4c:
         bf:e5:68:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 12:41:10 2025 by rpki-client