Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/b0516a7a-4195-44b3-a24e-cf8ed578d791/0/3130332e3139302e3131322e302f32332d3234203d3e20313439393037.roa
File:                     3130332e3139302e3131322e302f32332d3234203d3e20313439393037.roa (raw, json)
Hash identifier:          ki0hIXEeGo8cU77Xr7lKfx7zoFMhB4mSH2tdcqcaUcQ=
Subject key identifier:   94:E4:1A:1C:90:05:96:2B:46:3C:15:04:2B:A9:56:78:94:14:34:7B
Certificate issuer:       /CN=0CE1E11146E251D0CD52BD837A1A0ACDB7E0BA0C
Certificate serial:       0E5FDF519524286829A497A055931029FC752C6C
Authority key identifier: 0C:E1:E1:11:46:E2:51:D0:CD:52:BD:83:7A:1A:0A:CD:B7:E0:BA:0C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CE1E11146E251D0CD52BD837A1A0ACDB7E0BA0C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/b0516a7a-4195-44b3-a24e-cf8ed578d791/0/3130332e3139302e3131322e302f32332d3234203d3e20313439393037.roa
Signing time:             Fri 15 Aug 2025 02:02:28 +0000
ROA not before:           Fri 15 Aug 2025 01:57:28 +0000
ROA not after:            Fri 14 Aug 2026 02:02:28 +0000
asID:                     149907
IP address blocks:        103.190.112.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/b0516a7a-4195-44b3-a24e-cf8ed578d791/0/0CE1E11146E251D0CD52BD837A1A0ACDB7E0BA0C.crl
                          rsync://repo-rpki.idnic.net/repo/b0516a7a-4195-44b3-a24e-cf8ed578d791/0/0CE1E11146E251D0CD52BD837A1A0ACDB7E0BA0C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CE1E11146E251D0CD52BD837A1A0ACDB7E0BA0C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Aug 2025 16:21:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:5f:df:51:95:24:28:68:29:a4:97:a0:55:93:10:29:fc:75:2c:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0CE1E11146E251D0CD52BD837A1A0ACDB7E0BA0C
        Validity
            Not Before: Aug 15 01:57:28 2025 GMT
            Not After : Aug 14 02:02:28 2026 GMT
        Subject: CN=94E41A1C9005962B463C15042BA956789414347B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ef:13:a4:95:e5:a6:44:73:55:55:de:0c:da:
                    10:21:f1:58:c4:f8:f6:66:f1:44:8f:1b:b3:9c:bd:
                    15:b7:2a:c1:d2:b4:27:9f:f7:ce:60:1e:3f:b4:76:
                    a3:bc:ff:3e:0f:ab:58:46:c7:b3:93:9b:ca:be:cc:
                    01:b2:0f:8c:24:a8:9c:57:be:b3:5e:91:71:b9:70:
                    b4:87:84:ff:3b:48:58:46:1a:c4:11:43:7f:87:b9:
                    f1:50:42:df:35:ac:e1:db:0b:fc:d9:b6:9e:8a:d9:
                    91:69:57:1b:4e:a4:8e:fa:62:40:6b:d6:92:5e:82:
                    54:0b:b8:9d:a8:4a:8d:2e:6f:ee:54:62:4d:64:51:
                    05:5f:22:9d:b1:53:70:83:9c:56:67:dc:6f:cb:48:
                    9c:4d:f9:70:cf:d5:fb:96:bf:d1:53:2e:53:ca:ed:
                    0b:62:24:3c:9e:ef:99:7a:bc:20:bf:78:66:db:ec:
                    ab:38:df:ef:49:c8:0e:5f:b8:43:25:67:08:c2:7e:
                    d2:3f:e0:5b:52:40:53:8c:ee:ba:2c:38:a2:83:9b:
                    27:e0:c3:42:f6:a2:cd:91:8c:4c:12:71:68:90:9d:
                    a9:32:b8:be:34:4c:7f:e3:76:63:50:a3:31:41:66:
                    5b:3e:21:2a:16:4e:b2:4c:b5:1e:10:d9:db:a8:00:
                    00:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:E4:1A:1C:90:05:96:2B:46:3C:15:04:2B:A9:56:78:94:14:34:7B
            X509v3 Authority Key Identifier:
                keyid:0C:E1:E1:11:46:E2:51:D0:CD:52:BD:83:7A:1A:0A:CD:B7:E0:BA:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/b0516a7a-4195-44b3-a24e-cf8ed578d791/0/0CE1E11146E251D0CD52BD837A1A0ACDB7E0BA0C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CE1E11146E251D0CD52BD837A1A0ACDB7E0BA0C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b0516a7a-4195-44b3-a24e-cf8ed578d791/0/3130332e3139302e3131322e302f32332d3234203d3e20313439393037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.190.112.0/23

    Signature Algorithm: sha256WithRSAEncryption
         af:11:51:25:fa:ac:ee:ac:13:3b:48:c0:de:7f:1b:ac:a3:17:
         3f:d9:b6:47:bd:2f:76:dd:4a:bf:f5:ef:6c:6d:64:6f:54:27:
         df:e2:73:85:97:c1:59:cb:62:d4:1a:68:56:28:af:a4:a0:ca:
         78:15:ac:ae:08:55:58:20:ea:f8:79:5e:be:d2:da:e1:99:f6:
         8c:0b:eb:86:38:77:67:fb:71:cf:9b:83:9a:3d:6d:00:d6:dd:
         05:c2:5a:e7:69:aa:36:0b:57:16:0a:ff:11:13:b3:ec:07:ae:
         46:0f:6e:17:e8:0c:7e:17:60:06:f0:43:f9:81:83:30:70:7e:
         7a:f3:ab:c6:cd:b4:2e:b1:3f:5b:b8:ac:2b:ae:3e:07:b4:62:
         7a:89:bf:db:81:4e:a7:21:14:6d:83:69:76:ac:06:0f:df:d2:
         2f:fb:42:03:f8:11:68:a7:9f:bf:71:3f:e4:85:a4:bb:b8:7e:
         e3:4a:29:4b:b8:41:ae:2f:f5:45:a0:d8:5f:b1:06:fa:91:3b:
         47:c0:e4:a4:31:24:34:9f:0c:4d:81:f1:6c:57:61:a0:20:c4:
         5a:72:25:56:27:4d:a4:83:2f:4b:af:d9:23:86:46:6b:27:ff:
         7f:37:47:b4:a9:bf:aa:93:d4:e1:cd:6e:2d:1a:04:87:48:73:
         c0:1a:f5:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:45:28 2025 by rpki-client