Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/835048c6-8ccd-463d-ad34-ae7428647a9c/0/3130332e3134362e3139372e302f32342d3234203d3e20313339393431.roa
File:                     3130332e3134362e3139372e302f32342d3234203d3e20313339393431.roa (raw, json)
Hash identifier:          p7Jtuo2fT9SMHQpNlniVY5E8TDvsdgf0sorpgXPSACM=
Subject key identifier:   BF:92:BE:DF:CC:A3:06:F4:84:66:30:85:BC:DF:C3:A6:58:25:13:55
Certificate issuer:       /CN=7008868799E77C42E437F0D7ACCF683CF5B2AA4E
Certificate serial:       257CCAAE4BFD2F77CDFBDB6CC554A47EA4F2F5DB
Authority key identifier: 70:08:86:87:99:E7:7C:42:E4:37:F0:D7:AC:CF:68:3C:F5:B2:AA:4E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7008868799E77C42E437F0D7ACCF683CF5B2AA4E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/835048c6-8ccd-463d-ad34-ae7428647a9c/0/3130332e3134362e3139372e302f32342d3234203d3e20313339393431.roa
Signing time:             Fri 15 Aug 2025 06:00:00 +0000
ROA not before:           Fri 15 Aug 2025 05:55:00 +0000
ROA not after:            Fri 14 Aug 2026 06:00:00 +0000
asID:                     139941
IP address blocks:        103.146.197.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/835048c6-8ccd-463d-ad34-ae7428647a9c/0/7008868799E77C42E437F0D7ACCF683CF5B2AA4E.crl
                          rsync://repo-rpki.idnic.net/repo/835048c6-8ccd-463d-ad34-ae7428647a9c/0/7008868799E77C42E437F0D7ACCF683CF5B2AA4E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7008868799E77C42E437F0D7ACCF683CF5B2AA4E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Aug 2025 03:47:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:7c:ca:ae:4b:fd:2f:77:cd:fb:db:6c:c5:54:a4:7e:a4:f2:f5:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7008868799E77C42E437F0D7ACCF683CF5B2AA4E
        Validity
            Not Before: Aug 15 05:55:00 2025 GMT
            Not After : Aug 14 06:00:00 2026 GMT
        Subject: CN=BF92BEDFCCA306F484663085BCDFC3A658251355
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:fb:83:43:79:46:71:0d:7a:04:17:cd:c3:d9:
                    75:64:52:81:db:19:aa:5d:66:72:f1:21:b8:2e:bf:
                    f7:f7:d7:7f:e3:72:fd:24:6c:b1:ee:7b:d3:32:18:
                    19:12:f4:79:26:13:54:2b:ce:e4:bc:c1:b4:96:b4:
                    ea:c3:21:73:cb:c2:82:f5:55:28:3a:12:5b:61:65:
                    25:0e:8d:5e:54:f8:e2:af:21:e1:05:fd:21:09:a1:
                    3f:13:2f:4e:89:31:4a:1c:93:8e:75:01:d5:f3:2f:
                    9f:2c:8d:3d:fa:6f:73:88:d4:75:20:a6:01:5b:6a:
                    00:1a:4b:bf:35:3a:a8:35:e5:ad:fe:fa:5c:8b:28:
                    9e:5c:82:36:98:55:97:5b:d9:a9:59:b0:2a:6c:77:
                    dc:bd:17:99:6e:17:5e:02:ba:98:d3:9b:0f:bb:7a:
                    ce:7d:f5:0e:dd:34:15:e3:e5:a8:0c:bd:e6:31:e9:
                    1c:14:23:b9:93:36:32:be:2c:38:c3:17:62:2f:08:
                    09:63:01:d5:17:49:b3:fa:f6:0b:c5:dd:89:ab:01:
                    b5:e0:4b:ce:6c:0f:25:74:f8:0d:df:9a:c7:73:c3:
                    e2:7f:f1:8a:b3:a6:ea:ff:e6:6a:59:1a:7f:44:81:
                    e0:07:ce:5d:2a:fb:42:24:91:f1:37:f6:37:72:52:
                    20:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:92:BE:DF:CC:A3:06:F4:84:66:30:85:BC:DF:C3:A6:58:25:13:55
            X509v3 Authority Key Identifier:
                keyid:70:08:86:87:99:E7:7C:42:E4:37:F0:D7:AC:CF:68:3C:F5:B2:AA:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/835048c6-8ccd-463d-ad34-ae7428647a9c/0/7008868799E77C42E437F0D7ACCF683CF5B2AA4E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7008868799E77C42E437F0D7ACCF683CF5B2AA4E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/835048c6-8ccd-463d-ad34-ae7428647a9c/0/3130332e3134362e3139372e302f32342d3234203d3e20313339393431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.146.197.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:fa:4d:43:de:5d:8d:11:7e:6b:7f:f7:f2:39:6c:1b:3b:fe:
         1e:d3:a1:27:0f:9f:b7:f3:8e:90:00:d4:a6:c8:85:59:74:30:
         cc:05:b3:cc:e9:fa:51:7f:cd:6e:f5:5d:dd:f7:05:15:e6:a1:
         93:2c:75:c9:de:98:0e:1b:1e:5b:2a:f4:23:f5:f6:1a:43:6b:
         6d:c9:1d:2c:71:4e:94:c8:6b:46:01:c7:e7:50:60:e2:53:51:
         40:68:5f:58:80:d9:a1:71:6f:1d:6e:9d:eb:42:aa:61:e6:2c:
         4c:e7:7e:c2:70:b6:2e:7d:9a:ec:30:c3:61:fe:bb:74:3c:c9:
         f5:94:b2:5c:76:56:fe:96:20:2e:d8:b5:f7:7c:6a:3b:3e:0f:
         75:66:84:5c:f2:38:b4:7c:4b:0c:cc:5f:24:c1:db:ba:5f:c7:
         7d:71:bb:34:65:8c:53:bf:cc:d8:05:00:36:9a:ff:28:a6:ba:
         94:15:56:00:41:c6:85:7d:8c:51:5b:c0:3c:9e:6b:c1:44:74:
         57:ac:40:e2:82:88:22:90:1c:b1:bb:b2:c0:78:46:93:bb:41:
         c2:58:54:9f:6d:07:46:b1:c3:c8:88:e0:f2:e6:9a:1b:e1:c2:
         e3:dc:48:9e:dd:bb:59:31:ac:f3:5e:a4:2a:88:f0:98:42:5d:
         83:28:ad:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:50:19 2025 by rpki-client