Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0/3130332e3139302e32382e302f32342d3234203d3e20313439393438.roa
File:                     3130332e3139302e32382e302f32342d3234203d3e20313439393438.roa (raw, json)
Hash identifier:          BETPcfS1VcTumvWSwQRlY9PEvVDNhn9IgT3oOeof4jw=
Subject key identifier:   05:85:EB:6A:49:E1:4F:8F:A6:5C:62:E7:3C:31:08:02:70:61:C0:C5
Certificate issuer:       /CN=F23ACCA147720B423A9576F3E408691505B293A3
Certificate serial:       31C7188D97AD0F28926C7AF1EC63D162A00CA39E
Authority key identifier: F2:3A:CC:A1:47:72:0B:42:3A:95:76:F3:E4:08:69:15:05:B2:93:A3
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F23ACCA147720B423A9576F3E408691505B293A3.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0/3130332e3139302e32382e302f32342d3234203d3e20313439393438.roa
Signing time:             Thu 14 Aug 2025 08:03:04 +0000
ROA not before:           Thu 14 Aug 2025 07:58:04 +0000
ROA not after:            Thu 13 Aug 2026 08:03:04 +0000
asID:                     149948
IP address blocks:        103.190.28.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0/F23ACCA147720B423A9576F3E408691505B293A3.crl
                          rsync://repo-rpki.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0/F23ACCA147720B423A9576F3E408691505B293A3.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F23ACCA147720B423A9576F3E408691505B293A3.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Aug 2025 18:06:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:c7:18:8d:97:ad:0f:28:92:6c:7a:f1:ec:63:d1:62:a0:0c:a3:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F23ACCA147720B423A9576F3E408691505B293A3
        Validity
            Not Before: Aug 14 07:58:04 2025 GMT
            Not After : Aug 13 08:03:04 2026 GMT
        Subject: CN=0585EB6A49E14F8FA65C62E73C3108027061C0C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:22:64:8b:ab:a8:8c:7e:59:93:bc:cf:ad:97:
                    1c:52:33:92:62:c7:39:da:bb:23:1c:35:fb:eb:5f:
                    f0:20:e7:c7:af:03:9e:b3:6e:47:b0:3d:6a:57:a0:
                    b0:b7:ee:c5:be:d0:6b:95:f3:08:9e:35:f0:fd:2d:
                    51:b0:9a:b4:88:bc:bc:2f:15:c6:14:4a:f7:fe:22:
                    be:68:cf:b3:ab:d3:4c:d1:2c:f6:96:6a:ac:be:1d:
                    82:7a:1f:0e:99:39:4c:58:4e:e0:6a:92:aa:d2:65:
                    eb:07:9b:b3:a3:e8:79:59:00:4a:cd:d1:3d:5f:d8:
                    a3:6a:c5:47:4f:0e:94:4a:d1:01:90:a6:f8:b0:ca:
                    ab:2f:09:fc:6d:ea:76:ef:04:e0:e4:aa:d4:34:a6:
                    d4:73:05:d0:e6:04:e8:af:ef:02:f0:21:af:08:94:
                    7a:6d:db:c4:64:7d:71:2d:17:f0:1c:75:f3:ef:b9:
                    fc:ca:d3:33:22:fe:4f:12:e1:9a:1a:dd:e5:4d:f5:
                    76:57:38:15:52:7e:32:df:d9:22:0f:ff:80:91:90:
                    f4:42:1d:fc:d1:f7:56:60:56:e6:da:fe:04:2b:30:
                    85:c9:d8:dc:ca:4d:c6:4f:ba:63:24:7e:bf:ef:d0:
                    cd:d4:3c:aa:6c:a2:ab:a4:41:6b:6e:14:0d:15:be:
                    e6:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:85:EB:6A:49:E1:4F:8F:A6:5C:62:E7:3C:31:08:02:70:61:C0:C5
            X509v3 Authority Key Identifier:
                keyid:F2:3A:CC:A1:47:72:0B:42:3A:95:76:F3:E4:08:69:15:05:B2:93:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0/F23ACCA147720B423A9576F3E408691505B293A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F23ACCA147720B423A9576F3E408691505B293A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0/3130332e3139302e32382e302f32342d3234203d3e20313439393438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.190.28.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:73:47:cf:9b:94:50:10:85:60:7a:62:d0:8c:ab:1a:6f:06:
         d9:e0:50:da:1d:cf:8b:65:f9:b7:71:dc:82:9b:d9:8b:c8:0e:
         78:73:72:64:6e:b8:4c:54:b7:22:53:3b:af:e0:fa:9d:fe:b1:
         95:24:c9:3d:81:62:4e:d6:9a:a9:02:14:6a:48:3e:3e:19:83:
         e0:a7:e4:86:90:68:c8:9d:06:6c:db:5f:f6:d7:fa:d8:f2:f9:
         16:19:4d:6c:56:c7:29:44:86:90:df:0d:ab:9f:75:6e:86:37:
         4a:38:28:33:af:3e:15:f9:8b:e8:ce:bf:50:97:dd:8c:da:06:
         4e:5f:70:2e:c8:27:65:c6:ce:13:8e:21:2b:ce:b0:f4:4d:fa:
         ab:5b:d7:fd:de:bb:1e:af:23:68:0d:f6:c8:1e:2a:8c:c7:e8:
         9e:18:69:6e:da:ad:36:84:6c:9a:e1:f6:6b:b9:4e:20:31:70:
         5a:e3:de:ef:a3:b0:9e:8e:28:4c:f8:cf:10:1d:9a:4d:d2:df:
         39:f1:2d:7e:f6:93:aa:8e:72:f4:fb:07:06:de:e5:96:3a:2b:
         05:52:d6:42:8d:3b:d9:a7:83:0e:c5:4f:a7:3f:28:93:24:6e:
         2a:c5:ab:e9:43:25:4a:7c:c2:ea:75:86:25:15:a4:8c:30:57:
         b0:64:c2:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 01:20:32 2025 by rpki-client