Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c3dd6135-548c-4881-af78-93af9f2a2516/0/3130332e3130362e37382e302f32342d3234203d3e203436303233.roa
File:                     3130332e3130362e37382e302f32342d3234203d3e203436303233.roa (raw, json)
Hash identifier:          iSq6NwogxUEJNuToH4CRAdLPA94Ifhymd/i0qK2RpFY=
Subject key identifier:   F6:B8:E7:ED:D6:09:BC:36:D9:8C:FC:47:30:23:94:E7:16:AC:83:D7
Certificate issuer:       /CN=21F5E152BA3E25561EA4D2E2986546412F44F15B
Certificate serial:       5E1E633EA44AE3EBA13FF886E6FB17C3EA3B8965
Authority key identifier: 21:F5:E1:52:BA:3E:25:56:1E:A4:D2:E2:98:65:46:41:2F:44:F1:5B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21F5E152BA3E25561EA4D2E2986546412F44F15B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c3dd6135-548c-4881-af78-93af9f2a2516/0/3130332e3130362e37382e302f32342d3234203d3e203436303233.roa
Signing time:             Tue 07 Oct 2025 09:00:00 +0000
ROA not before:           Tue 07 Oct 2025 08:55:00 +0000
ROA not after:            Tue 06 Oct 2026 09:00:00 +0000
asID:                     46023
IP address blocks:        103.106.78.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c3dd6135-548c-4881-af78-93af9f2a2516/0/21F5E152BA3E25561EA4D2E2986546412F44F15B.crl
                          rsync://repo-rpki.idnic.net/repo/c3dd6135-548c-4881-af78-93af9f2a2516/0/21F5E152BA3E25561EA4D2E2986546412F44F15B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21F5E152BA3E25561EA4D2E2986546412F44F15B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Oct 2025 11:48:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:1e:63:3e:a4:4a:e3:eb:a1:3f:f8:86:e6:fb:17:c3:ea:3b:89:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21F5E152BA3E25561EA4D2E2986546412F44F15B
        Validity
            Not Before: Oct  7 08:55:00 2025 GMT
            Not After : Oct  6 09:00:00 2026 GMT
        Subject: CN=F6B8E7EDD609BC36D98CFC47302394E716AC83D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e7:85:b6:1f:12:bd:df:aa:18:43:c7:bf:d9:
                    4d:5d:b1:69:8a:30:d9:1d:eb:07:75:0c:81:3d:23:
                    00:1a:b3:d5:9e:10:64:02:c0:0d:58:1a:0b:1b:1a:
                    3d:86:5f:ab:29:de:0a:84:75:1a:e6:72:db:32:01:
                    7f:19:d3:ae:30:cf:e3:88:bc:8c:6e:5e:69:71:ca:
                    1f:a1:37:b5:3a:26:0e:ec:20:1e:d2:b8:ff:99:a4:
                    1a:36:99:9f:c2:5e:e2:b7:54:69:b0:41:98:3a:e2:
                    5f:80:3b:98:d5:8a:61:f3:cd:38:4c:ce:9f:41:ef:
                    99:23:0f:8b:54:86:0a:a4:3b:dd:2b:f3:ac:f3:f0:
                    fc:55:2e:41:d5:04:d6:bb:13:9a:3e:6a:00:b5:9c:
                    b2:26:44:5f:b0:a7:8b:5a:b2:36:95:cb:de:e1:3f:
                    e1:34:61:28:8f:30:75:2d:37:07:13:3e:e7:5d:d2:
                    02:40:d1:31:ef:1e:77:07:ee:c4:48:39:65:20:27:
                    74:02:c1:05:1f:9a:4c:99:09:43:d7:a8:4c:44:c8:
                    5b:a5:d6:82:54:6b:a3:a5:9d:90:85:24:5e:2e:7d:
                    ba:5a:45:48:d6:03:75:e3:3a:28:cd:5c:66:79:d6:
                    92:d2:7a:1d:0f:57:33:a4:ff:f2:38:89:97:44:81:
                    96:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:B8:E7:ED:D6:09:BC:36:D9:8C:FC:47:30:23:94:E7:16:AC:83:D7
            X509v3 Authority Key Identifier:
                keyid:21:F5:E1:52:BA:3E:25:56:1E:A4:D2:E2:98:65:46:41:2F:44:F1:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c3dd6135-548c-4881-af78-93af9f2a2516/0/21F5E152BA3E25561EA4D2E2986546412F44F15B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21F5E152BA3E25561EA4D2E2986546412F44F15B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c3dd6135-548c-4881-af78-93af9f2a2516/0/3130332e3130362e37382e302f32342d3234203d3e203436303233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.106.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:d3:0a:10:cf:e7:32:19:02:10:9b:93:70:3f:b7:bd:53:da:
         63:a9:aa:6e:f8:5a:b9:34:ed:f7:3d:5a:27:a6:f3:09:40:60:
         de:ff:b8:9e:eb:3b:18:1a:96:d6:8a:ed:33:32:20:3b:23:97:
         ee:ce:bd:ef:d5:c1:06:45:66:56:12:43:67:ba:c8:74:e2:76:
         a1:cd:5d:fc:aa:30:9a:20:0a:2a:9b:71:b5:96:d4:08:2a:4a:
         8b:1b:61:5c:74:3f:b9:a8:ff:2a:e8:04:4c:31:76:94:a7:b9:
         f0:1b:21:1e:48:6b:83:19:c8:f6:82:eb:5c:28:36:eb:da:9c:
         75:36:29:2a:81:df:d0:22:c1:03:f3:01:12:6f:e0:14:d7:7a:
         9b:fc:7f:f0:23:71:81:21:39:3b:22:ab:14:cd:7e:9d:01:25:
         cb:f2:ef:ad:85:d0:12:89:91:80:1f:11:f8:11:fa:7e:0e:69:
         f3:12:d4:58:77:ee:8c:f0:2b:85:6e:41:13:e4:b2:f8:f9:c5:
         70:bc:30:b3:68:b5:ee:f0:9e:1e:3d:f3:5f:5c:9e:5f:ec:ea:
         ed:33:cf:91:c6:e8:ef:8d:5b:13:99:7d:00:b8:cf:e9:13:4c:
         3b:4c:0c:f8:aa:25:b1:22:78:07:c7:cf:31:5d:ab:d4:ee:6f:
         e3:aa:61:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 02:21:37 2025 by rpki-client