Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/d0d2d3e3-4c20-4a90-833e-ead43c33991e/0/3130332e33302e3134372e302f32342d3234203d3e203436303530.roa
File:                     3130332e33302e3134372e302f32342d3234203d3e203436303530.roa (raw, json)
Hash identifier:          sZ7Y9HidNwNbLqaWtw5ljbRqMh/n0NpDyP/tNJF266g=
Subject key identifier:   0D:7C:09:4D:D0:85:73:16:B8:DA:E0:D9:D1:89:84:72:CC:EE:A1:C3
Certificate issuer:       /CN=1661A1BC89CCADD4C7BE723052AE5900DE181E06
Certificate serial:       3FBBC6446F3D6753549036B60B335F7FAC2AF526
Authority key identifier: 16:61:A1:BC:89:CC:AD:D4:C7:BE:72:30:52:AE:59:00:DE:18:1E:06
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1661A1BC89CCADD4C7BE723052AE5900DE181E06.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d0d2d3e3-4c20-4a90-833e-ead43c33991e/0/3130332e33302e3134372e302f32342d3234203d3e203436303530.roa
Signing time:             Sat 13 Sep 2025 04:00:01 +0000
ROA not before:           Sat 13 Sep 2025 03:55:01 +0000
ROA not after:            Sat 12 Sep 2026 04:00:01 +0000
asID:                     46050
IP address blocks:        103.30.147.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d0d2d3e3-4c20-4a90-833e-ead43c33991e/0/1661A1BC89CCADD4C7BE723052AE5900DE181E06.crl
                          rsync://repo-rpki.idnic.net/repo/d0d2d3e3-4c20-4a90-833e-ead43c33991e/0/1661A1BC89CCADD4C7BE723052AE5900DE181E06.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1661A1BC89CCADD4C7BE723052AE5900DE181E06.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Oct 2025 16:21:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:bb:c6:44:6f:3d:67:53:54:90:36:b6:0b:33:5f:7f:ac:2a:f5:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1661A1BC89CCADD4C7BE723052AE5900DE181E06
        Validity
            Not Before: Sep 13 03:55:01 2025 GMT
            Not After : Sep 12 04:00:01 2026 GMT
        Subject: CN=0D7C094DD0857316B8DAE0D9D1898472CCEEA1C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:d1:46:3e:43:8b:0e:11:7d:7e:29:02:35:6d:
                    a3:5e:af:bb:02:c6:6b:45:41:27:b3:89:77:2b:da:
                    6d:90:76:5f:40:4c:55:9f:13:70:24:8c:ae:36:ee:
                    b8:e9:68:76:8b:54:49:88:30:57:b3:02:77:2b:89:
                    29:41:e9:b8:4e:b0:49:66:e7:cf:ec:08:bf:42:55:
                    3d:62:5e:58:29:e3:63:4d:19:92:00:4f:25:5e:fd:
                    8e:51:3e:e2:55:2b:54:5f:db:fb:6c:f3:dd:8d:f2:
                    8e:77:27:84:37:5f:05:c2:89:5c:33:49:94:6c:8f:
                    8b:cc:b7:25:9f:33:c2:52:36:98:3c:28:da:a3:87:
                    0f:90:4d:12:71:47:75:b1:ae:13:f3:90:ef:75:01:
                    e5:6c:b6:15:8f:3f:1a:5d:ca:f8:de:b2:05:5a:7c:
                    55:62:dc:9d:f5:c6:ff:56:19:d1:74:46:4b:46:e2:
                    b8:11:12:0c:a2:e1:30:fc:8c:ac:23:01:3c:ba:bc:
                    86:4c:86:eb:eb:b7:12:35:21:8f:0e:3a:b9:ce:c8:
                    74:55:d8:2b:cc:a0:c8:2f:32:76:ce:3c:95:cc:2d:
                    42:72:ba:ae:0f:29:f9:95:0d:3a:ef:95:b6:1b:87:
                    52:bd:4c:fc:da:e1:f0:78:6f:b5:0e:f4:bd:00:ad:
                    fa:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:7C:09:4D:D0:85:73:16:B8:DA:E0:D9:D1:89:84:72:CC:EE:A1:C3
            X509v3 Authority Key Identifier:
                keyid:16:61:A1:BC:89:CC:AD:D4:C7:BE:72:30:52:AE:59:00:DE:18:1E:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d0d2d3e3-4c20-4a90-833e-ead43c33991e/0/1661A1BC89CCADD4C7BE723052AE5900DE181E06.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1661A1BC89CCADD4C7BE723052AE5900DE181E06.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d0d2d3e3-4c20-4a90-833e-ead43c33991e/0/3130332e33302e3134372e302f32342d3234203d3e203436303530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.30.147.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:eb:1c:8a:10:1c:ed:98:49:7d:77:10:a4:89:c5:57:01:be:
         77:00:a1:95:3b:12:e9:b0:fe:be:3c:fe:ea:0c:68:8e:e9:12:
         2f:19:af:e7:e7:80:a1:53:e1:1c:73:20:c9:ef:49:7c:22:6b:
         8b:ca:0b:bc:6a:22:19:6c:23:4f:b9:92:18:2d:d6:d4:5e:ff:
         1e:92:e1:2f:e0:37:74:e7:47:33:7f:6e:40:4a:d8:2a:c1:2a:
         56:ce:2f:73:e8:3d:c8:37:1e:2b:8b:0d:07:b7:21:38:eb:8b:
         42:33:d6:2b:67:74:86:18:9d:da:ab:82:ae:7e:bc:a8:18:19:
         a0:52:43:d9:df:7f:47:3d:48:9e:44:fd:a2:3c:c0:9c:01:ff:
         04:44:94:a0:00:96:1e:f3:7d:de:49:dd:51:e0:cd:e7:f9:2a:
         9a:23:ef:23:40:f5:75:de:c2:93:d3:78:5c:1e:95:24:e0:b7:
         fa:89:df:a7:e3:9a:07:e0:fd:ec:33:2d:07:60:46:fc:43:04:
         6d:8b:bc:04:98:6e:15:7e:61:75:48:cb:99:a7:f8:da:b2:ed:
         51:8a:1d:ce:4a:32:b6:9c:ed:68:b0:0b:c9:64:e1:af:d5:d5:
         ea:24:b5:9a:bf:03:3e:2a:fd:4b:92:da:48:e7:d7:b1:c6:d2:
         1e:a5:19:ae
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUP7vGRG89Z1NUkDa2CzNff6wq9SYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTY2MUExQkM4OUNDQURENEM3QkU3MjMwNTJBRTU5MDBE
RTE4MUUwNjAeFw0yNTA5MTMwMzU1MDFaFw0yNjA5MTIwNDAwMDFaMDMxMTAvBgNV
BAMTKDBEN0MwOTRERDA4NTczMTZCOERBRTBEOUQxODk4NDcyQ0NFRUExQzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH0UY+Q4sOEX1+KQI1baNer7sC
xmtFQSeziXcr2m2Qdl9ATFWfE3AkjK427rjpaHaLVEmIMFezAncriSlB6bhOsElm
58/sCL9CVT1iXlgp42NNGZIATyVe/Y5RPuJVK1Rf2/ts892N8o53J4Q3XwXCiVwz
SZRsj4vMtyWfM8JSNpg8KNqjhw+QTRJxR3WxrhPzkO91AeVsthWPPxpdyvjesgVa
fFVi3J31xv9WGdF0RktG4rgREgyi4TD8jKwjATy6vIZMhuvrtxI1IY8OOrnOyHRV
2CvMoMgvMnbOPJXMLUJyuq4PKfmVDTrvlbYbh1K9TPza4fB4b7UO9L0ArfqZAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUDXwJTdCFcxa42uDZ0YmEcszuocMwHwYDVR0j
BBgwFoAUFmGhvInMrdTHvnIwUq5ZAN4YHgYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k
MGQyZDNlMy00YzIwLTRhOTAtODMzZS1lYWQ0M2MzMzk5MWUvMC8xNjYxQTFCQzg5
Q0NBREQ0QzdCRTcyMzA1MkFFNTkwMERFMTgxRTA2LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMTY2MUExQkM4OUNDQURENEM3QkU3MjMwNTJBRTU5MDBERTE4
MUUwNi5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2QwZDJkM2UzLTRjMjAtNGE5MC04
MzNlLWVhZDQzYzMzOTkxZS8wLzMxMzAzMzJlMzMzMDJlMzEzNDM3MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzQzNjMwMzUzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGcekzANBgkqhkiG
9w0BAQsFAAOCAQEAMuscihAc7ZhJfXcQpInFVwG+dwChlTsS6bD+vjz+6gxojukS
Lxmv5+eAoVPhHHMgye9JfCJri8oLvGoiGWwjT7mSGC3W1F7/HpLhL+A3dOdHM39u
QErYKsEqVs4vc+g9yDceK4sNB7chOOuLQjPWK2d0hhid2quCrn68qBgZoFJD2d9/
Rz1InkT9ojzAnAH/BESUoACWHvN93kndUeDN5/kqmiPvI0D1dd7Ck9N4XB6VJOC3
+onfp+OaB+D97DMtB2BG/EMEbYu8BJhuFX5hdUjLmaf42rLtUYodzkoytpztaLAL
yWThr9XV6iS1mr8DPir9S5LaSOfXscbSHqUZrg==
-----END CERTIFICATE-----
Generated at Tue Oct 21 10:24:04 2025 by rpki-client