Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/bce0fe5a-e468-49d9-931b-ab4b924a45c2/0/3130332e38322e3234362e302f32342d3234203d3e20313432333730.roa
File:                     3130332e38322e3234362e302f32342d3234203d3e20313432333730.roa (raw, json)
Hash identifier:          vY8WV98Jcmzb4ODBeT1hqvxozKSfqOYtlfGMabwL6vk=
Subject key identifier:   26:59:C0:10:DA:30:34:98:87:41:75:FF:7B:E5:4A:15:5C:B4:B2:3A
Certificate issuer:       /CN=067116F928280AE09336BC39D005AAC13695F63C
Certificate serial:       13D8D1A6AE095431C957B8ABC96073B9E7150CC5
Authority key identifier: 06:71:16:F9:28:28:0A:E0:93:36:BC:39:D0:05:AA:C1:36:95:F6:3C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/067116F928280AE09336BC39D005AAC13695F63C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/bce0fe5a-e468-49d9-931b-ab4b924a45c2/0/3130332e38322e3234362e302f32342d3234203d3e20313432333730.roa
Signing time:             Wed 13 Aug 2025 05:02:26 +0000
ROA not before:           Wed 13 Aug 2025 04:57:26 +0000
ROA not after:            Wed 12 Aug 2026 05:02:26 +0000
asID:                     142370
IP address blocks:        103.82.246.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/bce0fe5a-e468-49d9-931b-ab4b924a45c2/0/067116F928280AE09336BC39D005AAC13695F63C.crl
                          rsync://repo-rpki.idnic.net/repo/bce0fe5a-e468-49d9-931b-ab4b924a45c2/0/067116F928280AE09336BC39D005AAC13695F63C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/067116F928280AE09336BC39D005AAC13695F63C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Aug 2025 06:31:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:d8:d1:a6:ae:09:54:31:c9:57:b8:ab:c9:60:73:b9:e7:15:0c:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=067116F928280AE09336BC39D005AAC13695F63C
        Validity
            Not Before: Aug 13 04:57:26 2025 GMT
            Not After : Aug 12 05:02:26 2026 GMT
        Subject: CN=2659C010DA303498874175FF7BE54A155CB4B23A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ca:40:cd:7a:ef:44:b8:1c:10:ec:39:dc:a8:
                    76:d0:2e:7c:fd:13:7b:e0:ed:c0:6c:ab:86:bb:d9:
                    aa:ba:30:3d:c5:8d:0e:d6:d9:67:ea:3b:00:b5:e7:
                    55:60:e7:7d:4a:c1:7e:4d:a2:c2:76:85:8f:f5:31:
                    0d:47:a2:f8:28:99:8e:d8:be:6e:c4:e5:5f:05:29:
                    f1:6e:b8:f1:58:73:5a:cf:89:42:c8:9c:ec:75:94:
                    31:1a:b8:66:bb:2b:bd:90:26:48:54:23:46:bf:38:
                    3b:ca:df:3f:1b:2f:69:2c:67:bd:e0:b5:34:0c:ac:
                    2e:65:b7:2e:32:9e:42:d4:a4:12:80:81:31:e8:f7:
                    ee:7d:6e:2a:a5:06:18:96:bb:4c:b7:76:be:8f:c8:
                    54:b7:61:b2:9a:f1:f6:6f:11:af:94:0f:b7:ca:62:
                    c8:9a:95:85:e6:0e:e6:a8:cb:95:1e:58:56:35:2c:
                    bf:7f:99:8d:75:f2:67:29:a3:b1:ba:43:45:c6:41:
                    c5:cc:83:f0:5a:4d:88:35:41:79:1c:4e:0f:d8:1c:
                    45:92:82:38:19:69:a2:55:9f:12:28:15:1e:88:e6:
                    ec:d1:43:24:44:7f:d7:2f:61:46:b8:47:3d:bd:ae:
                    87:1e:e0:40:5c:00:6c:21:00:7b:28:a0:08:0f:88:
                    75:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:59:C0:10:DA:30:34:98:87:41:75:FF:7B:E5:4A:15:5C:B4:B2:3A
            X509v3 Authority Key Identifier:
                keyid:06:71:16:F9:28:28:0A:E0:93:36:BC:39:D0:05:AA:C1:36:95:F6:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/bce0fe5a-e468-49d9-931b-ab4b924a45c2/0/067116F928280AE09336BC39D005AAC13695F63C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/067116F928280AE09336BC39D005AAC13695F63C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bce0fe5a-e468-49d9-931b-ab4b924a45c2/0/3130332e38322e3234362e302f32342d3234203d3e20313432333730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.82.246.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d0:30:12:2a:bd:3a:36:db:6d:91:94:f5:98:ba:49:f5:b4:27:
         48:17:d3:e9:1a:7a:cf:57:1d:32:0d:58:17:57:50:df:fe:dc:
         a5:54:35:8d:3d:13:72:05:62:82:c8:c0:ba:8b:da:cb:d8:92:
         4d:2b:02:69:aa:99:f7:d8:7b:49:1a:d4:c7:fd:0a:c0:70:fe:
         0f:cc:a4:98:25:d9:ac:11:87:56:78:8f:ad:ec:4f:86:45:65:
         cd:33:bd:1f:ba:20:10:18:a5:ca:ed:41:28:47:58:e6:fe:e6:
         9b:e0:db:78:bc:0d:10:70:4e:83:fa:53:1c:59:49:a7:7b:2c:
         54:f8:06:39:a6:2c:44:b7:82:2b:e3:f7:a7:21:5a:21:13:0a:
         b2:5b:a1:f7:c3:d7:8c:46:2c:5f:46:be:bf:0f:8e:13:44:d0:
         0e:ea:d1:8e:db:89:e2:ea:fd:c9:6d:e2:77:cd:fe:dc:f4:e9:
         a8:55:79:8d:8c:fb:aa:11:4b:60:ce:95:fb:6b:f1:6d:e3:21:
         e9:5d:ce:ef:e2:f7:12:c3:a0:92:cb:32:c6:0b:65:11:fc:d1:
         ff:f4:8c:f3:80:61:7b:d0:66:29:0a:47:59:ba:d7:f9:f1:8e:
         20:a1:d8:9a:01:00:56:03:78:1f:2b:a4:bf:01:e8:57:7f:95:
         2d:96:b3:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:58:19 2025 by rpki-client