Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/85f9002d-9267-4f8b-859a-dfa7d89143b4/0/3130332e3136362e3234302e302f32332d3233203d3e20313431393639.roa
File:                     3130332e3136362e3234302e302f32332d3233203d3e20313431393639.roa (raw, json)
Hash identifier:          16U5ENt1Fx7mXMkbXyDTcuDuUq+dB5XA/NthjrW4JLc=
Subject key identifier:   44:BF:E7:DD:DA:BF:5A:7B:2A:F3:59:A8:12:7E:FD:0C:07:92:5F:B5
Certificate issuer:       /CN=63A008B749DB87C773CA05C5DF448BCA5357BB01
Certificate serial:       56846F42F56150328E6F3F9A0ED211CD2AA2AB5F
Authority key identifier: 63:A0:08:B7:49:DB:87:C7:73:CA:05:C5:DF:44:8B:CA:53:57:BB:01
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/63A008B749DB87C773CA05C5DF448BCA5357BB01.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/85f9002d-9267-4f8b-859a-dfa7d89143b4/0/3130332e3136362e3234302e302f32332d3233203d3e20313431393639.roa
Signing time:             Sat 14 Jun 2025 11:00:00 +0000
ROA not before:           Sat 14 Jun 2025 10:55:00 +0000
ROA not after:            Sat 13 Jun 2026 11:00:00 +0000
asID:                     141969
IP address blocks:        103.166.240.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/85f9002d-9267-4f8b-859a-dfa7d89143b4/0/63A008B749DB87C773CA05C5DF448BCA5357BB01.crl
                          rsync://repo-rpki.idnic.net/repo/85f9002d-9267-4f8b-859a-dfa7d89143b4/0/63A008B749DB87C773CA05C5DF448BCA5357BB01.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/63A008B749DB87C773CA05C5DF448BCA5357BB01.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 02 Jul 2025 23:59:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:84:6f:42:f5:61:50:32:8e:6f:3f:9a:0e:d2:11:cd:2a:a2:ab:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63A008B749DB87C773CA05C5DF448BCA5357BB01
        Validity
            Not Before: Jun 14 10:55:00 2025 GMT
            Not After : Jun 13 11:00:00 2026 GMT
        Subject: CN=44BFE7DDDABF5A7B2AF359A8127EFD0C07925FB5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:f0:cb:d4:cd:7a:95:a1:f2:2f:9c:46:ee:cd:
                    e8:fd:b3:9c:88:8f:30:d1:66:e7:d6:49:c8:74:0f:
                    da:f7:d2:ff:f3:98:36:4d:c9:a5:93:1e:2c:4c:64:
                    d7:95:f3:03:84:60:ac:b1:78:5e:11:c9:96:b9:76:
                    dc:fd:88:6d:19:73:26:b4:b2:10:3e:fb:a4:43:0b:
                    84:f2:dd:49:89:03:68:d5:ec:c9:ca:c0:60:20:a3:
                    20:47:89:8e:d8:04:d3:b6:72:5e:31:bf:d3:2d:bd:
                    b6:72:98:d3:81:00:b1:3a:c2:2b:a6:73:07:73:b2:
                    92:7b:c0:ea:b1:e5:10:60:07:93:c2:b6:46:d0:eb:
                    b8:19:e8:f3:77:15:09:df:06:61:56:c4:a0:88:da:
                    45:75:b6:32:fc:12:7f:2f:56:b7:d1:ca:c8:47:45:
                    9f:6f:22:c0:31:e5:cf:81:40:a9:e2:b7:ad:6b:3d:
                    6a:f7:7f:be:1e:63:c3:36:30:68:11:28:ad:3f:e1:
                    56:62:01:c0:bd:66:95:b4:75:e5:fc:ed:7d:14:d7:
                    5a:16:f2:ab:09:04:f8:6e:2b:ee:fd:7b:6b:00:92:
                    45:d7:b8:3f:9d:4b:94:45:57:e0:18:1b:e9:86:1e:
                    5d:2f:87:32:9d:05:b4:fb:d3:77:1f:ad:a7:09:fd:
                    58:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:BF:E7:DD:DA:BF:5A:7B:2A:F3:59:A8:12:7E:FD:0C:07:92:5F:B5
            X509v3 Authority Key Identifier:
                keyid:63:A0:08:B7:49:DB:87:C7:73:CA:05:C5:DF:44:8B:CA:53:57:BB:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/85f9002d-9267-4f8b-859a-dfa7d89143b4/0/63A008B749DB87C773CA05C5DF448BCA5357BB01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/63A008B749DB87C773CA05C5DF448BCA5357BB01.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/85f9002d-9267-4f8b-859a-dfa7d89143b4/0/3130332e3136362e3234302e302f32332d3233203d3e20313431393639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.166.240.0/23

    Signature Algorithm: sha256WithRSAEncryption
         28:6b:21:f6:b1:d2:6a:89:ae:ba:3e:9f:4c:dd:22:99:fe:42:
         cb:c4:83:82:29:e9:ad:17:8b:31:45:0e:bb:70:aa:64:80:c2:
         b1:d4:66:a4:46:98:db:a8:df:31:f1:77:71:cf:28:71:73:cb:
         16:a1:30:2d:23:18:4d:1b:ff:fa:f8:46:33:19:83:61:16:55:
         92:73:db:1e:f8:0f:88:d6:23:82:f6:2a:96:c4:6f:57:de:09:
         27:3f:12:cd:ce:90:89:23:6b:1a:f5:59:93:f2:64:b5:e6:c2:
         9f:cd:f6:79:b5:d5:d6:d7:cc:ca:1d:c4:e6:dc:8a:c3:e2:83:
         80:cf:c9:87:e1:e5:49:df:18:65:f0:15:ae:c2:99:e9:68:3a:
         75:e1:57:22:19:c3:08:4f:18:4d:76:97:4b:7a:4d:8f:d4:44:
         32:59:a7:fe:de:ed:f4:70:2b:e8:4a:2a:e8:64:82:56:b4:81:
         29:34:a2:ae:fc:b9:a9:06:c1:00:e2:4b:56:bf:0a:93:d8:40:
         29:5b:04:88:52:d2:06:23:60:c5:57:51:05:cb:bd:76:ec:58:
         cb:ae:c2:66:e3:1f:16:26:1e:68:64:21:a4:2e:c5:13:41:56:
         8a:d5:06:e1:f9:47:fe:a6:74:aa:06:c6:db:7a:b5:19:52:db:
         93:a0:bc:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 05:03:08 2025 by rpki-client