Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/90073164-8008-49c6-b186-3c7fe9b80a17/0/3130332e3134302e37362e302f32342d3234203d3e203535363636.roa
File:                     3130332e3134302e37362e302f32342d3234203d3e203535363636.roa (raw, json)
Hash identifier:          GLppbahQizSwOWwKriMc4uG3htQlLQar3GU+UJJemeo=
Subject key identifier:   E5:73:F8:01:0D:0F:18:54:C1:C2:EA:BB:C5:32:6A:DC:D5:0F:6D:E3
Certificate issuer:       /CN=35E6B2357C98B974C14BA8A5DE46B519083666C6
Certificate serial:       127F25569F56E36D4F2C5BA57B9BCA662719F463
Authority key identifier: 35:E6:B2:35:7C:98:B9:74:C1:4B:A8:A5:DE:46:B5:19:08:36:66:C6
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35E6B2357C98B974C14BA8A5DE46B519083666C6.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/90073164-8008-49c6-b186-3c7fe9b80a17/0/3130332e3134302e37362e302f32342d3234203d3e203535363636.roa
Signing time:             Thu 16 Oct 2025 11:00:00 +0000
ROA not before:           Thu 16 Oct 2025 10:55:00 +0000
ROA not after:            Thu 15 Oct 2026 11:00:00 +0000
asID:                     55666
IP address blocks:        103.140.76.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/90073164-8008-49c6-b186-3c7fe9b80a17/0/35E6B2357C98B974C14BA8A5DE46B519083666C6.crl
                          rsync://repo-rpki.idnic.net/repo/90073164-8008-49c6-b186-3c7fe9b80a17/0/35E6B2357C98B974C14BA8A5DE46B519083666C6.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35E6B2357C98B974C14BA8A5DE46B519083666C6.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Oct 2025 01:56:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:7f:25:56:9f:56:e3:6d:4f:2c:5b:a5:7b:9b:ca:66:27:19:f4:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35E6B2357C98B974C14BA8A5DE46B519083666C6
        Validity
            Not Before: Oct 16 10:55:00 2025 GMT
            Not After : Oct 15 11:00:00 2026 GMT
        Subject: CN=E573F8010D0F1854C1C2EABBC5326ADCD50F6DE3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:74:84:58:9c:00:b8:50:43:4d:12:79:cb:b2:
                    95:f9:4e:b9:be:ea:2a:75:7b:14:6f:b9:63:4a:44:
                    a2:0c:d5:03:46:d2:54:56:aa:a4:27:0c:b5:26:2b:
                    af:12:05:5f:00:bd:83:05:33:25:5b:db:ef:4f:cb:
                    43:60:bd:af:1b:cf:c7:ad:bf:1c:31:bc:46:be:44:
                    bc:f6:24:6b:c3:b0:80:00:6c:54:db:c7:d5:a1:15:
                    c7:e7:e3:2f:98:e9:6c:e8:3c:d8:d3:13:04:1d:c4:
                    e1:c4:c4:de:95:d6:d4:fa:b3:65:69:f0:d0:e6:88:
                    4f:8e:0a:42:61:d6:59:83:87:b2:f4:ee:01:7d:41:
                    ef:1f:13:6e:5c:cc:57:62:24:98:42:11:cc:e2:5d:
                    78:a1:e2:bd:4f:15:80:e5:bf:a2:73:9a:9b:6f:c6:
                    b4:df:8a:3d:55:71:11:4a:6c:a3:03:4d:e1:38:4e:
                    8f:fc:f2:99:ec:f1:03:78:b1:59:23:a3:37:8b:5b:
                    a3:c1:42:61:4d:a3:30:e4:bd:b8:76:72:a4:f2:6e:
                    1b:de:b7:84:4b:ad:19:36:ad:e3:84:27:5b:42:50:
                    26:0f:11:e4:b8:aa:a1:ed:02:cd:76:b9:44:64:67:
                    a0:8e:6a:81:1b:67:13:1e:69:25:d6:3f:ad:11:cc:
                    1a:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:73:F8:01:0D:0F:18:54:C1:C2:EA:BB:C5:32:6A:DC:D5:0F:6D:E3
            X509v3 Authority Key Identifier:
                keyid:35:E6:B2:35:7C:98:B9:74:C1:4B:A8:A5:DE:46:B5:19:08:36:66:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/90073164-8008-49c6-b186-3c7fe9b80a17/0/35E6B2357C98B974C14BA8A5DE46B519083666C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35E6B2357C98B974C14BA8A5DE46B519083666C6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/90073164-8008-49c6-b186-3c7fe9b80a17/0/3130332e3134302e37362e302f32342d3234203d3e203535363636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.140.76.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:5a:94:03:92:87:9d:ce:a2:33:52:28:6e:50:24:22:7f:1b:
         4d:81:bf:db:cf:da:a6:40:14:fa:3e:fc:da:75:b7:0b:5c:04:
         2a:d0:4d:3c:5e:62:13:d8:4a:a6:56:ca:dd:05:bc:76:bc:88:
         b8:9c:06:0e:db:69:c3:95:8e:2c:52:ad:36:f1:a7:ba:c3:0e:
         4c:d1:b4:34:c1:59:e6:fd:2c:00:d6:8d:ce:00:5c:7f:1c:73:
         4b:b5:13:da:cb:a4:3e:76:fe:a0:67:cf:c6:a7:ca:10:ed:62:
         66:8a:1b:92:17:26:62:af:18:d6:e3:3e:28:a4:aa:0c:07:e8:
         e7:1e:4f:a9:f2:51:4f:87:df:f6:e0:01:8c:47:54:4d:ec:b2:
         6b:da:23:34:2f:3e:12:ec:22:87:f5:46:07:39:88:0e:19:21:
         db:05:0c:e6:0e:ca:f5:b5:53:d8:54:1e:13:38:8e:9a:55:26:
         a8:48:9c:0d:b6:a1:6a:9f:87:20:41:12:e1:70:d3:47:57:2c:
         ae:d1:7c:3c:79:85:de:78:10:26:1a:13:03:ec:a2:51:38:cf:
         a9:2e:48:58:bf:19:23:45:64:e2:cb:10:a4:98:1d:ab:ed:2c:
         51:84:51:dd:ce:28:e4:28:25:8f:8f:05:d0:08:87:c4:42:47:
         f4:ad:07:aa
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUEn8lVp9W421PLFule5vKZicZ9GMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzVFNkIyMzU3Qzk4Qjk3NEMxNEJBOEE1REU0NkI1MTkw
ODM2NjZDNjAeFw0yNTEwMTYxMDU1MDBaFw0yNjEwMTUxMTAwMDBaMDMxMTAvBgNV
BAMTKEU1NzNGODAxMEQwRjE4NTRDMUMyRUFCQkM1MzI2QURDRDUwRjZERTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsdIRYnAC4UENNEnnLspX5Trm+
6ip1exRvuWNKRKIM1QNG0lRWqqQnDLUmK68SBV8AvYMFMyVb2+9Py0Ngva8bz8et
vxwxvEa+RLz2JGvDsIAAbFTbx9WhFcfn4y+Y6WzoPNjTEwQdxOHExN6V1tT6s2Vp
8NDmiE+OCkJh1lmDh7L07gF9Qe8fE25czFdiJJhCEcziXXih4r1PFYDlv6Jzmptv
xrTfij1VcRFKbKMDTeE4To/88pns8QN4sVkjozeLW6PBQmFNozDkvbh2cqTybhve
t4RLrRk2reOEJ1tCUCYPEeS4qqHtAs12uURkZ6COaoEbZxMeaSXWP60RzBo1AgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQU5XP4AQ0PGFTBwuq7xTJq3NUPbeMwHwYDVR0j
BBgwFoAUNeayNXyYuXTBS6il3ka1GQg2ZsYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85
MDA3MzE2NC04MDA4LTQ5YzYtYjE4Ni0zYzdmZTliODBhMTcvMC8zNUU2QjIzNTdD
OThCOTc0QzE0QkE4QTVERTQ2QjUxOTA4MzY2NkM2LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMzVFNkIyMzU3Qzk4Qjk3NEMxNEJBOEE1REU0NkI1MTkwODM2
NjZDNi5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzkwMDczMTY0LTgwMDgtNDljNi1i
MTg2LTNjN2ZlOWI4MGExNy8wLzMxMzAzMzJlMzEzNDMwMmUzNzM2MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzUzNTM2MzYzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGeMTDANBgkqhkiG
9w0BAQsFAAOCAQEAIVqUA5KHnc6iM1IoblAkIn8bTYG/28/apkAU+j782nW3C1wE
KtBNPF5iE9hKplbK3QW8dryIuJwGDttpw5WOLFKtNvGnusMOTNG0NMFZ5v0sANaN
zgBcfxxzS7UT2sukPnb+oGfPxqfKEO1iZoobkhcmYq8Y1uM+KKSqDAfo5x5PqfJR
T4ff9uABjEdUTeyya9ojNC8+Euwih/VGBzmIDhkh2wUM5g7K9bVT2FQeEziOmlUm
qEicDbahap+HIEES4XDTR1csrtF8PHmF3ngQJhoTA+yiUTjPqS5IWL8ZI0Vk4ssQ
pJgdq+0sUYRR3c4o5Cglj48F0AiHxEJH9K0Hqg==
-----END CERTIFICATE-----
Generated at Mon Oct 20 12:45:22 2025 by rpki-client