Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/cc60a6c1-c081-439b-ae8d-8149b634d5a2/0/3130332e3134352e3134372e302f32342d3234203d3e20313430303038.roa
File:                     3130332e3134352e3134372e302f32342d3234203d3e20313430303038.roa (raw, json)
Hash identifier:          FzyKL9bCnJSB3v6U9N3ecP/uhXzcWqpKC54Mt7U5nck=
Subject key identifier:   6F:8B:7D:4C:56:DF:E8:4A:2D:C8:E7:0A:41:3B:B0:7F:B0:D6:B8:96
Certificate issuer:       /CN=26A14190F845A3F3FC336BD3062AE6F165B97E5C
Certificate serial:       36598F7DEB167F7A52E0854E0F75548F36F4508B
Authority key identifier: 26:A1:41:90:F8:45:A3:F3:FC:33:6B:D3:06:2A:E6:F1:65:B9:7E:5C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26A14190F845A3F3FC336BD3062AE6F165B97E5C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/cc60a6c1-c081-439b-ae8d-8149b634d5a2/0/3130332e3134352e3134372e302f32342d3234203d3e20313430303038.roa
Signing time:             Thu 02 Oct 2025 06:00:01 +0000
ROA not before:           Thu 02 Oct 2025 05:55:01 +0000
ROA not after:            Thu 01 Oct 2026 06:00:01 +0000
asID:                     140008
IP address blocks:        103.145.147.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/cc60a6c1-c081-439b-ae8d-8149b634d5a2/0/26A14190F845A3F3FC336BD3062AE6F165B97E5C.crl
                          rsync://repo-rpki.idnic.net/repo/cc60a6c1-c081-439b-ae8d-8149b634d5a2/0/26A14190F845A3F3FC336BD3062AE6F165B97E5C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26A14190F845A3F3FC336BD3062AE6F165B97E5C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Oct 2025 04:35:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:59:8f:7d:eb:16:7f:7a:52:e0:85:4e:0f:75:54:8f:36:f4:50:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26A14190F845A3F3FC336BD3062AE6F165B97E5C
        Validity
            Not Before: Oct  2 05:55:01 2025 GMT
            Not After : Oct  1 06:00:01 2026 GMT
        Subject: CN=6F8B7D4C56DFE84A2DC8E70A413BB07FB0D6B896
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:56:c9:30:fc:ec:7d:1a:14:98:16:54:05:a7:
                    79:4a:da:f8:a4:8f:a8:96:1d:82:a2:4c:54:17:d7:
                    b1:f9:26:9d:c5:a0:f0:d7:f7:3f:cd:d7:f4:2c:91:
                    25:9d:4c:37:95:fd:c7:86:bd:99:a8:f6:0d:a7:cf:
                    a1:b6:9d:1d:81:f4:77:28:19:97:2a:82:60:cf:78:
                    0b:1e:2b:c0:12:af:d7:2c:e6:d0:7d:53:e2:f4:1d:
                    40:07:e4:4d:8b:c9:90:32:2f:f2:2c:df:c3:3f:92:
                    4a:87:e4:8b:37:19:29:cf:f2:fc:5e:64:81:0b:ef:
                    ff:12:32:87:1c:ac:c8:0c:e0:0e:ed:e1:1b:27:bd:
                    d9:46:c0:cf:9e:c4:da:2b:72:4c:26:13:9e:b1:7d:
                    61:ff:bc:01:14:45:ad:c7:6e:49:65:58:17:b6:1c:
                    dc:4e:1c:2e:fb:c5:49:85:84:e5:57:0e:f5:7b:78:
                    ce:d9:e8:b8:34:7d:e9:99:89:74:b5:ef:94:80:e3:
                    19:f1:af:f2:3a:50:4a:08:f8:b4:c4:e3:89:0a:e7:
                    48:6c:17:c6:b4:d2:f1:60:a7:e5:3e:3a:5f:43:6d:
                    71:47:b8:1c:6a:60:49:c5:7c:71:0f:82:7d:94:f0:
                    7b:1b:f6:a9:7b:af:86:5b:71:b4:1e:ef:d8:f7:45:
                    66:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:8B:7D:4C:56:DF:E8:4A:2D:C8:E7:0A:41:3B:B0:7F:B0:D6:B8:96
            X509v3 Authority Key Identifier:
                keyid:26:A1:41:90:F8:45:A3:F3:FC:33:6B:D3:06:2A:E6:F1:65:B9:7E:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/cc60a6c1-c081-439b-ae8d-8149b634d5a2/0/26A14190F845A3F3FC336BD3062AE6F165B97E5C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26A14190F845A3F3FC336BD3062AE6F165B97E5C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cc60a6c1-c081-439b-ae8d-8149b634d5a2/0/3130332e3134352e3134372e302f32342d3234203d3e20313430303038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.145.147.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:59:3a:d1:0e:a7:e2:9e:cb:91:03:02:58:3a:bf:38:d1:1e:
         3d:7a:66:03:99:6f:2f:b7:29:f3:b8:2e:05:54:35:16:dd:88:
         06:3b:03:87:4e:35:60:21:0d:be:ed:d2:7a:7e:07:ad:da:f4:
         bf:cc:a8:47:b3:f7:53:d0:22:12:5f:d6:c5:c9:c2:9c:87:18:
         7b:2a:22:a0:8f:17:a8:82:63:e9:f5:a4:49:89:6c:f7:a6:93:
         8c:42:18:d6:b8:8c:61:18:d1:4d:37:bb:92:65:8a:cf:e6:5b:
         03:84:30:47:ad:2c:1b:2a:19:bc:da:b8:bb:ea:41:dc:70:b5:
         3c:39:21:d2:5c:4b:3d:b1:74:5b:7e:d8:c4:1d:b6:6e:31:0f:
         e7:e5:ec:5f:72:d3:1d:7a:81:84:2a:cc:b6:94:66:e5:57:55:
         13:bf:ec:9b:58:57:0b:41:ac:f2:34:ee:01:02:32:9c:a3:45:
         1b:9f:cc:eb:2f:93:55:c3:d0:ce:70:cb:a7:fa:df:b1:34:1a:
         68:eb:96:e9:ae:4f:ef:ed:3e:12:ec:5f:57:93:fe:4b:9f:d2:
         3d:a3:39:9d:4c:f8:20:9c:3d:58:d0:81:23:9c:68:7b:3f:86:
         35:71:c9:5c:57:16:cc:d1:67:ab:80:0c:2b:8b:7c:e7:30:3d:
         e7:b7:82:0f
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUNlmPfesWf3pS4IVOD3VUjzb0UIswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjZBMTQxOTBGODQ1QTNGM0ZDMzM2QkQzMDYyQUU2RjE2
NUI5N0U1QzAeFw0yNTEwMDIwNTU1MDFaFw0yNjEwMDEwNjAwMDFaMDMxMTAvBgNV
BAMTKDZGOEI3RDRDNTZERkU4NEEyREM4RTcwQTQxM0JCMDdGQjBENkI4OTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtVskw/Ox9GhSYFlQFp3lK2vik
j6iWHYKiTFQX17H5Jp3FoPDX9z/N1/QskSWdTDeV/ceGvZmo9g2nz6G2nR2B9Hco
GZcqgmDPeAseK8ASr9cs5tB9U+L0HUAH5E2LyZAyL/Is38M/kkqH5Is3GSnP8vxe
ZIEL7/8SMoccrMgM4A7t4RsnvdlGwM+exNorckwmE56xfWH/vAEURa3HbkllWBe2
HNxOHC77xUmFhOVXDvV7eM7Z6Lg0femZiXS175SA4xnxr/I6UEoI+LTE44kK50hs
F8a00vFgp+U+Ol9DbXFHuBxqYEnFfHEPgn2U8Hsb9ql7r4ZbcbQe79j3RWYNAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUb4t9TFbf6EotyOcKQTuwf7DWuJYwHwYDVR0j
BBgwFoAUJqFBkPhFo/P8M2vTBirm8WW5flwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j
YzYwYTZjMS1jMDgxLTQzOWItYWU4ZC04MTQ5YjYzNGQ1YTIvMC8yNkExNDE5MEY4
NDVBM0YzRkMzMzZCRDMwNjJBRTZGMTY1Qjk3RTVDLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMjZBMTQxOTBGODQ1QTNGM0ZDMzM2QkQzMDYyQUU2RjE2NUI5
N0U1Qy5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2NjNjBhNmMxLWMwODEtNDM5Yi1h
ZThkLTgxNDliNjM0ZDVhMi8wLzMxMzAzMzJlMzEzNDM1MmUzMTM0MzcyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzAzMDMwMzgucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnkZMwDQYJ
KoZIhvcNAQELBQADggEBACJZOtEOp+Key5EDAlg6vzjRHj16ZgOZby+3KfO4LgVU
NRbdiAY7A4dONWAhDb7t0np+B63a9L/MqEez91PQIhJf1sXJwpyHGHsqIqCPF6iC
Y+n1pEmJbPemk4xCGNa4jGEY0U03u5Jlis/mWwOEMEetLBsqGbzauLvqQdxwtTw5
IdJcSz2xdFt+2MQdtm4xD+fl7F9y0x16gYQqzLaUZuVXVRO/7JtYVwtBrPI07gEC
MpyjRRufzOsvk1XD0M5wy6f637E0GmjrlumuT+/tPhLsX1eT/kuf0j2jOZ1M+CCc
PVjQgSOcaHs/hjVxyVxXFszRZ6uADCuLfOcwPee3gg8=
-----END CERTIFICATE-----
Generated at Tue Oct 21 00:12:27 2025 by rpki-client