Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/3130332e39372e37372e302f32342d3234203d3e20313336313331.roa
File:                     3130332e39372e37372e302f32342d3234203d3e20313336313331.roa (raw, json)
Hash identifier:          audNLou8WkSNI41O6Bj42zTe5yNLL3IkDF/evFV7jOs=
Subject key identifier:   29:83:C2:E5:D0:11:34:5E:20:EF:50:BE:1C:A2:E3:03:FE:0D:9B:DD
Certificate issuer:       /CN=7D64B8F4CFB687141137D10F9E73FFD0BAB93F67
Certificate serial:       20CE7624611570DF935FC7F3CAC6B474C4CB5C55
Authority key identifier: 7D:64:B8:F4:CF:B6:87:14:11:37:D1:0F:9E:73:FF:D0:BA:B9:3F:67
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/3130332e39372e37372e302f32342d3234203d3e20313336313331.roa
Signing time:             Thu 21 Aug 2025 10:00:01 +0000
ROA not before:           Thu 21 Aug 2025 09:55:01 +0000
ROA not after:            Thu 20 Aug 2026 10:00:01 +0000
asID:                     136131
IP address blocks:        103.97.77.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.crl
                          rsync://repo-rpki.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Aug 2025 07:08:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:ce:76:24:61:15:70:df:93:5f:c7:f3:ca:c6:b4:74:c4:cb:5c:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D64B8F4CFB687141137D10F9E73FFD0BAB93F67
        Validity
            Not Before: Aug 21 09:55:01 2025 GMT
            Not After : Aug 20 10:00:01 2026 GMT
        Subject: CN=2983C2E5D011345E20EF50BE1CA2E303FE0D9BDD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:f7:a4:ed:43:66:dc:f6:80:ce:ad:19:d4:ee:
                    fa:65:e1:69:60:fd:a6:be:dd:eb:68:74:b5:62:f0:
                    b3:b2:f1:ad:27:d9:b8:c9:99:32:b2:99:aa:aa:f1:
                    56:ef:f7:49:88:30:dd:1c:c4:ed:6c:19:01:94:ae:
                    9a:f9:e4:22:e8:06:5a:02:54:32:e0:af:ab:84:0c:
                    43:73:52:ed:50:90:45:64:fd:87:f7:57:ad:15:fd:
                    f0:e9:4b:c4:a7:fa:a2:72:aa:6a:f2:da:1f:d4:b1:
                    70:99:6c:02:e9:59:cc:66:e6:09:ef:fe:33:fa:e1:
                    0b:32:dd:8d:ad:c7:2a:7c:31:ff:ea:6e:bd:9b:ca:
                    20:0f:4e:1d:3c:10:d7:ba:3c:a2:c3:d5:3d:a1:84:
                    49:c7:55:6b:0f:ec:6d:d1:e8:f5:6f:d9:f1:5e:74:
                    e8:40:37:a4:06:31:ef:c5:a2:5a:c0:b1:9c:8b:fd:
                    9f:a0:9a:85:0e:37:c3:6b:21:ff:0b:5e:4a:fc:99:
                    89:94:1e:7d:d6:64:22:0e:61:6a:ce:49:4a:07:b8:
                    6b:f8:c7:c4:a5:59:b6:d0:a6:b1:f3:32:cd:1c:6d:
                    46:e9:92:55:51:38:e9:2a:a4:d8:07:73:6b:3d:ea:
                    83:f8:f4:fd:c6:99:2f:d7:3f:1e:1b:d0:14:ab:4a:
                    d3:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:83:C2:E5:D0:11:34:5E:20:EF:50:BE:1C:A2:E3:03:FE:0D:9B:DD
            X509v3 Authority Key Identifier:
                keyid:7D:64:B8:F4:CF:B6:87:14:11:37:D1:0F:9E:73:FF:D0:BA:B9:3F:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/3130332e39372e37372e302f32342d3234203d3e20313336313331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.97.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:d5:78:2b:bd:ef:7c:9b:91:22:13:a4:17:b1:56:2c:fd:11:
         a3:1b:66:16:70:a4:8b:8a:fe:a4:95:22:9a:d0:dd:63:a1:d9:
         53:40:d1:50:90:75:7c:61:08:3f:d3:ab:36:93:b1:32:b3:ce:
         75:d5:9a:59:17:95:94:c5:5d:e9:b5:53:9a:7f:e1:56:1b:da:
         23:57:54:69:87:7a:c7:fd:8e:ff:72:b3:cd:11:1c:73:e9:0a:
         ca:df:8e:c9:19:5b:2f:6e:f5:35:cc:6b:c4:ae:02:3a:ce:c8:
         63:73:50:24:89:56:5f:99:2b:6b:05:e7:79:26:b3:a1:00:20:
         02:c8:11:ef:71:bc:32:cf:12:ab:6d:03:dd:af:37:cf:ed:16:
         c8:ee:c1:8e:f0:c7:78:a0:9a:3b:8b:b1:3c:93:7a:3f:09:07:
         8b:72:22:a3:72:cf:13:46:f4:aa:5f:a8:ae:7d:74:0a:3e:67:
         af:f0:03:28:db:8a:86:2e:76:52:27:78:81:22:21:17:01:8b:
         68:d3:f3:b1:c6:a3:41:89:9f:12:63:fe:29:60:6c:4c:26:82:
         db:e7:18:58:d0:0c:33:35:50:3b:58:80:2a:8b:44:bc:cb:af:
         91:74:cd:f8:bf:af:a9:20:c0:f2:d6:ec:3e:a3:34:4c:fc:5e:
         ee:4a:d5:d6
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUIM52JGEVcN+TX8fzysa0dMTLXFUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0Q2NEI4RjRDRkI2ODcxNDExMzdEMTBGOUU3M0ZGRDBC
QUI5M0Y2NzAeFw0yNTA4MjEwOTU1MDFaFw0yNjA4MjAxMDAwMDFaMDMxMTAvBgNV
BAMTKDI5ODNDMkU1RDAxMTM0NUUyMEVGNTBCRTFDQTJFMzAzRkUwRDlCREQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDh96TtQ2bc9oDOrRnU7vpl4Wlg
/aa+3etodLVi8LOy8a0n2bjJmTKymaqq8Vbv90mIMN0cxO1sGQGUrpr55CLoBloC
VDLgr6uEDENzUu1QkEVk/Yf3V60V/fDpS8Sn+qJyqmry2h/UsXCZbALpWcxm5gnv
/jP64Qsy3Y2txyp8Mf/qbr2byiAPTh08ENe6PKLD1T2hhEnHVWsP7G3R6PVv2fFe
dOhAN6QGMe/FolrAsZyL/Z+gmoUON8NrIf8LXkr8mYmUHn3WZCIOYWrOSUoHuGv4
x8SlWbbQprHzMs0cbUbpklVROOkqpNgHc2s96oP49P3GmS/XPx4b0BSrStMtAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUKYPC5dARNF4g71C+HKLjA/4Nm90wHwYDVR0j
BBgwFoAUfWS49M+2hxQRN9EPnnP/0Lq5P2cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85
NTdiMGQ3ZS1lYWRlLTQzMTgtYWIyMC04YzdmMmQ1YmU2OWYvMC83RDY0QjhGNENG
QjY4NzE0MTEzN0QxMEY5RTczRkZEMEJBQjkzRjY3LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvN0Q2NEI4RjRDRkI2ODcxNDExMzdEMTBGOUU3M0ZGRDBCQUI5
M0Y2Ny5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzk1N2IwZDdlLWVhZGUtNDMxOC1h
YjIwLThjN2YyZDViZTY5Zi8wLzMxMzAzMzJlMzkzNzJlMzczNzJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDMxMzMzNjMxMzMzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGdhTTANBgkqhkiG
9w0BAQsFAAOCAQEAa9V4K73vfJuRIhOkF7FWLP0RoxtmFnCki4r+pJUimtDdY6HZ
U0DRUJB1fGEIP9OrNpOxMrPOddWaWReVlMVd6bVTmn/hVhvaI1dUaYd6x/2O/3Kz
zREcc+kKyt+OyRlbL271NcxrxK4COs7IY3NQJIlWX5krawXneSazoQAgAsgR73G8
Ms8Sq20D3a83z+0WyO7BjvDHeKCaO4uxPJN6PwkHi3Iio3LPE0b0ql+orn10Cj5n
r/ADKNuKhi52Uid4gSIhFwGLaNPzscajQYmfEmP+KWBsTCaC2+cYWNAMMzVQO1iA
KotEvMuvkXTN+L+vqSDA8tbsPqM0TPxe7krV1g==
-----END CERTIFICATE-----
Generated at Sat Aug 23 23:46:38 2025 by rpki-client