Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/ac3f2288-88cf-4d2b-bba6-a03dd5f83761/0/3130332e37372e3135392e302f32342d3234203d3e20313437313435.roa
File:                     3130332e37372e3135392e302f32342d3234203d3e20313437313435.roa (raw, json)
Hash identifier:          mGAHC8BdMgBmjZL5jFtAJNkqoin6EENRYsub4ulTi+U=
Subject key identifier:   0A:0C:91:09:43:7A:AB:B3:C3:52:56:F2:F7:11:80:02:E9:26:71:29
Certificate issuer:       /CN=0E8637C23FD7FD1ABF91B025E48040909797EA6C
Certificate serial:       416FF4B943DF7EFC5F8F086BFC7174434A7A20DD
Authority key identifier: 0E:86:37:C2:3F:D7:FD:1A:BF:91:B0:25:E4:80:40:90:97:97:EA:6C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E8637C23FD7FD1ABF91B025E48040909797EA6C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ac3f2288-88cf-4d2b-bba6-a03dd5f83761/0/3130332e37372e3135392e302f32342d3234203d3e20313437313435.roa
Signing time:             Fri 17 Oct 2025 00:44:51 +0000
ROA not before:           Fri 17 Oct 2025 00:39:51 +0000
ROA not after:            Fri 16 Oct 2026 00:44:51 +0000
asID:                     147145
IP address blocks:        103.77.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ac3f2288-88cf-4d2b-bba6-a03dd5f83761/0/0E8637C23FD7FD1ABF91B025E48040909797EA6C.crl
                          rsync://repo-rpki.idnic.net/repo/ac3f2288-88cf-4d2b-bba6-a03dd5f83761/0/0E8637C23FD7FD1ABF91B025E48040909797EA6C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E8637C23FD7FD1ABF91B025E48040909797EA6C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Oct 2025 19:44:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:6f:f4:b9:43:df:7e:fc:5f:8f:08:6b:fc:71:74:43:4a:7a:20:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E8637C23FD7FD1ABF91B025E48040909797EA6C
        Validity
            Not Before: Oct 17 00:39:51 2025 GMT
            Not After : Oct 16 00:44:51 2026 GMT
        Subject: CN=0A0C9109437AABB3C35256F2F7118002E9267129
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:a5:9f:c2:f5:56:32:b7:51:4f:14:15:36:cd:
                    4b:fa:0e:95:1f:55:53:ba:e0:f9:7f:eb:9e:28:37:
                    1a:b1:73:cb:8b:1a:63:3f:f8:f1:eb:ac:ca:bb:2f:
                    e9:13:9d:48:87:de:cb:95:95:31:df:95:74:43:ea:
                    d0:c1:5e:65:eb:d3:ef:a5:15:3a:3f:fd:98:ac:39:
                    77:61:ce:36:58:60:bf:65:b1:5d:6a:29:7e:7a:71:
                    eb:44:9e:0b:e8:4c:6c:f2:82:93:85:90:8b:71:ba:
                    d7:6c:93:ec:a2:71:1a:a5:c9:17:94:42:7b:55:61:
                    a6:a1:43:e9:b3:e2:c0:de:8f:c1:3c:40:b4:7d:41:
                    96:9d:8f:87:6b:d5:46:53:da:39:07:92:f8:fc:53:
                    57:5e:5d:7d:d2:d4:3a:09:11:e5:dd:a3:60:cc:06:
                    3b:c5:81:1f:d2:62:7d:c2:5c:b0:d5:d7:b0:eb:51:
                    dc:47:37:04:65:2b:21:93:ce:8a:e6:a2:23:47:77:
                    ca:ce:de:f2:64:6a:50:c6:36:6a:d5:bc:f1:ec:4e:
                    a8:08:0c:dc:49:5d:70:f4:37:1b:f4:65:4c:b0:58:
                    f7:72:9c:93:45:8a:46:a8:ed:78:d3:32:2b:a2:5d:
                    24:4a:e7:19:a5:28:b5:68:a3:74:c6:7b:30:e6:db:
                    02:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:0C:91:09:43:7A:AB:B3:C3:52:56:F2:F7:11:80:02:E9:26:71:29
            X509v3 Authority Key Identifier:
                keyid:0E:86:37:C2:3F:D7:FD:1A:BF:91:B0:25:E4:80:40:90:97:97:EA:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ac3f2288-88cf-4d2b-bba6-a03dd5f83761/0/0E8637C23FD7FD1ABF91B025E48040909797EA6C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E8637C23FD7FD1ABF91B025E48040909797EA6C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ac3f2288-88cf-4d2b-bba6-a03dd5f83761/0/3130332e37372e3135392e302f32342d3234203d3e20313437313435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.77.159.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:ce:d4:16:59:38:cf:97:43:39:99:c2:f6:ce:e2:68:8d:eb:
         c3:e3:cf:78:1b:a0:1a:66:b4:b2:eb:59:f4:75:05:23:b7:51:
         28:3e:57:f1:7d:f2:8d:99:f5:07:15:7d:e7:5d:b3:ce:40:c0:
         58:22:f3:d2:66:de:74:18:1a:76:b2:b6:20:38:b7:d8:47:3d:
         c2:df:a8:f8:8f:c2:1a:99:03:03:ab:c9:33:9e:b8:27:91:0b:
         18:1c:70:fa:1c:4b:a7:b8:37:fd:e2:b7:eb:05:60:a9:60:5a:
         1c:bc:80:71:42:8d:b3:a2:5f:5e:ae:9f:cf:f8:b4:d4:a8:06:
         57:94:44:d6:d2:34:d1:70:c4:91:74:00:3a:3c:18:41:ca:3e:
         c5:52:f5:c3:e5:19:1e:b8:05:42:a6:af:72:25:28:70:82:4e:
         63:5e:fa:df:af:33:09:b6:45:29:aa:f6:92:0c:36:d4:b6:ad:
         25:bd:9b:53:74:47:11:7b:38:15:30:ff:08:f6:fd:3d:9f:2c:
         a7:eb:db:fc:06:81:af:e7:ce:ea:ab:28:3f:04:a5:62:56:7c:
         6b:c3:ea:1f:02:b9:ac:60:85:60:10:a3:9e:5f:d6:bf:f5:b0:
         63:40:a2:7b:fa:23:10:16:dc:83:de:f0:e4:96:a9:07:cd:55:
         58:c1:50:ee
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUQW/0uUPffvxfjwhr/HF0Q0p6IN0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEU4NjM3QzIzRkQ3RkQxQUJGOTFCMDI1RTQ4MDQwOTA5
Nzk3RUE2QzAeFw0yNTEwMTcwMDM5NTFaFw0yNjEwMTYwMDQ0NTFaMDMxMTAvBgNV
BAMTKDBBMEM5MTA5NDM3QUFCQjNDMzUyNTZGMkY3MTE4MDAyRTkyNjcxMjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLpZ/C9VYyt1FPFBU2zUv6DpUf
VVO64Pl/654oNxqxc8uLGmM/+PHrrMq7L+kTnUiH3suVlTHflXRD6tDBXmXr0++l
FTo//ZisOXdhzjZYYL9lsV1qKX56cetEngvoTGzygpOFkItxutdsk+yicRqlyReU
QntVYaahQ+mz4sDej8E8QLR9QZadj4dr1UZT2jkHkvj8U1deXX3S1DoJEeXdo2DM
BjvFgR/SYn3CXLDV17DrUdxHNwRlKyGTzormoiNHd8rO3vJkalDGNmrVvPHsTqgI
DNxJXXD0Nxv0ZUywWPdynJNFikao7XjTMiuiXSRK5xmlKLVoo3TGezDm2wIZAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUCgyRCUN6q7PDUlby9xGAAukmcSkwHwYDVR0j
BBgwFoAUDoY3wj/X/Rq/kbAl5IBAkJeX6mwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
YzNmMjI4OC04OGNmLTRkMmItYmJhNi1hMDNkZDVmODM3NjEvMC8wRTg2MzdDMjNG
RDdGRDFBQkY5MUIwMjVFNDgwNDA5MDk3OTdFQTZDLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMEU4NjM3QzIzRkQ3RkQxQUJGOTFCMDI1RTQ4MDQwOTA5Nzk3
RUE2Qy5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2FjM2YyMjg4LTg4Y2YtNGQyYi1i
YmE2LWEwM2RkNWY4Mzc2MS8wLzMxMzAzMzJlMzczNzJlMzEzNTM5MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzNDM3MzEzNDM1LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ02fMA0GCSqG
SIb3DQEBCwUAA4IBAQBNztQWWTjPl0M5mcL2zuJojevD4894G6AaZrSy61n0dQUj
t1EoPlfxffKNmfUHFX3nXbPOQMBYIvPSZt50GBp2srYgOLfYRz3C36j4j8IamQMD
q8kznrgnkQsYHHD6HEunuDf94rfrBWCpYFocvIBxQo2zol9erp/P+LTUqAZXlETW
0jTRcMSRdAA6PBhByj7FUvXD5RkeuAVCpq9yJShwgk5jXvrfrzMJtkUpqvaSDDbU
tq0lvZtTdEcRezgVMP8I9v09nyyn69v8BoGv587qqyg/BKViVnxrw+ofArmsYIVg
EKOeX9a/9bBjQKJ7+iMQFtyD3vDklqkHzVVYwVDu
-----END CERTIFICATE-----
Generated at Mon Oct 20 09:48:42 2025 by rpki-client