Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/8c1e80d4-6ebe-492c-a0c5-d759827533b3/0/3130332e3137382e31362e302f32342d3234203d3e2039333431.roa
File:                     3130332e3137382e31362e302f32342d3234203d3e2039333431.roa (raw, json)
Hash identifier:          HWtlgeL3MiIhlDvuL8DrSz4LAVxkX8H7joJ9R29LLYc=
Subject key identifier:   60:BD:1A:16:D0:FF:B6:86:0E:FA:57:63:8F:26:54:54:E1:E7:A3:9D
Certificate issuer:       /CN=091F7323435A889C466D811B73B98389C1E084DD
Certificate serial:       0F65DED1F3C7D66A24634A9B4BDEAFF81317E60F
Authority key identifier: 09:1F:73:23:43:5A:88:9C:46:6D:81:1B:73:B9:83:89:C1:E0:84:DD
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/091F7323435A889C466D811B73B98389C1E084DD.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8c1e80d4-6ebe-492c-a0c5-d759827533b3/0/3130332e3137382e31362e302f32342d3234203d3e2039333431.roa
Signing time:             Thu 16 Oct 2025 16:00:01 +0000
ROA not before:           Thu 16 Oct 2025 15:55:01 +0000
ROA not after:            Thu 15 Oct 2026 16:00:01 +0000
asID:                     9341
IP address blocks:        103.178.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8c1e80d4-6ebe-492c-a0c5-d759827533b3/0/091F7323435A889C466D811B73B98389C1E084DD.crl
                          rsync://repo-rpki.idnic.net/repo/8c1e80d4-6ebe-492c-a0c5-d759827533b3/0/091F7323435A889C466D811B73B98389C1E084DD.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/091F7323435A889C466D811B73B98389C1E084DD.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 21 Oct 2025 23:58:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:65:de:d1:f3:c7:d6:6a:24:63:4a:9b:4b:de:af:f8:13:17:e6:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=091F7323435A889C466D811B73B98389C1E084DD
        Validity
            Not Before: Oct 16 15:55:01 2025 GMT
            Not After : Oct 15 16:00:01 2026 GMT
        Subject: CN=60BD1A16D0FFB6860EFA57638F265454E1E7A39D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:3f:cb:e9:3a:35:54:2a:d7:4b:af:9e:07:81:
                    1a:1a:ec:27:b1:8b:07:ab:64:9d:11:da:fb:e8:8a:
                    ae:61:11:32:06:94:77:3c:2d:dd:06:69:7f:18:ee:
                    b9:87:69:99:6e:59:10:6c:50:9a:d4:56:bf:d4:9c:
                    1b:ee:17:60:d9:eb:ab:e2:aa:fd:1d:e3:cc:ea:fa:
                    f5:2e:64:f5:19:09:dd:22:8d:7c:0b:f7:2d:50:66:
                    49:f1:26:c3:1a:73:62:00:46:a8:e1:24:e9:d8:f5:
                    28:d1:60:11:82:ba:ea:e9:be:67:ef:24:5d:19:2c:
                    02:0e:9a:ba:dc:c7:58:35:82:d8:3d:98:68:43:e5:
                    3d:2e:4d:83:02:0e:92:e9:54:a6:c2:60:21:e1:f0:
                    1b:33:ee:3c:d7:3c:85:46:e9:af:07:f3:a5:bb:8a:
                    c9:29:1d:05:c9:52:e0:f1:a3:c9:36:a8:6c:1e:da:
                    d1:8c:a8:04:be:09:b0:2f:22:9f:fe:ad:52:29:c3:
                    a3:82:5d:d1:5f:d2:68:d9:82:17:de:9a:4c:ce:53:
                    84:4c:46:a2:84:29:6f:3f:26:41:1a:c9:47:39:4e:
                    96:fd:be:ed:cb:12:37:e3:28:82:64:ca:34:d2:ba:
                    77:5a:ba:10:d9:d7:62:bb:d5:2d:f6:83:71:ea:df:
                    2f:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:BD:1A:16:D0:FF:B6:86:0E:FA:57:63:8F:26:54:54:E1:E7:A3:9D
            X509v3 Authority Key Identifier:
                keyid:09:1F:73:23:43:5A:88:9C:46:6D:81:1B:73:B9:83:89:C1:E0:84:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8c1e80d4-6ebe-492c-a0c5-d759827533b3/0/091F7323435A889C466D811B73B98389C1E084DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/091F7323435A889C466D811B73B98389C1E084DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8c1e80d4-6ebe-492c-a0c5-d759827533b3/0/3130332e3137382e31362e302f32342d3234203d3e2039333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.178.16.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:08:84:bd:bc:02:cf:25:10:11:75:30:7c:4f:c8:b5:06:9e:
         cc:26:7f:2c:64:7e:4b:a9:b3:2f:53:95:34:b9:e0:9c:1e:0a:
         99:26:c3:fe:7a:59:aa:d4:d1:03:64:89:98:76:e7:16:75:66:
         83:a2:0f:f1:32:22:e9:2d:37:64:75:c3:b0:1d:bd:93:13:b5:
         09:fb:29:0f:84:af:97:c3:01:60:cd:0c:20:d0:c6:3c:6f:51:
         ae:57:68:56:ef:f0:d1:45:d3:37:08:90:04:74:29:f2:b4:e7:
         84:a7:90:69:bd:b5:e5:45:36:57:1c:26:e2:94:80:4c:57:32:
         68:9f:ed:1d:86:3c:d6:94:18:2d:09:8b:c7:e7:2d:bc:31:34:
         85:42:76:b8:0b:e3:bb:70:c6:55:12:02:7c:57:1a:5f:d1:fe:
         9d:04:8f:dd:9c:6f:f1:7f:e0:db:ab:ff:0a:8b:32:d0:e5:c2:
         06:2c:ab:d6:0a:d8:82:dd:c6:6a:0c:52:3f:2b:6e:4a:97:f4:
         0a:b9:bd:4a:fc:ab:4e:c0:b9:58:19:fe:21:18:3b:83:be:b1:
         40:15:32:a9:fb:fb:b6:8d:6f:0d:7f:1e:45:9e:53:63:03:36:
         a5:74:a4:b0:ea:2e:c1:8a:b9:5e:b6:cb:67:10:7d:62:62:06:
         d1:67:01:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:57:46 2025 by rpki-client