Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e11a3d56-ac75-4981-9726-c440214c81ed/0/3130332e3130312e3134302e302f32332d3234203d3e20313530393536.roa
File:                     3130332e3130312e3134302e302f32332d3234203d3e20313530393536.roa (raw, json)
Hash identifier:          jwEFj89dKbg3wcUKCaFzeQ/zncN2pkCnlrkS0ztC5Tk=
Subject key identifier:   8B:99:BF:A8:97:9C:AE:DE:51:8E:E6:3E:AC:DE:8A:C2:31:23:4B:2A
Certificate issuer:       /CN=16B946F06E300C41DA2C037393837F098BA659D1
Certificate serial:       42EADA687E38DFF5AFA5D4B852EF8217237C3B1F
Authority key identifier: 16:B9:46:F0:6E:30:0C:41:DA:2C:03:73:93:83:7F:09:8B:A6:59:D1
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/16B946F06E300C41DA2C037393837F098BA659D1.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e11a3d56-ac75-4981-9726-c440214c81ed/0/3130332e3130312e3134302e302f32332d3234203d3e20313530393536.roa
Signing time:             Wed 13 Aug 2025 09:02:28 +0000
ROA not before:           Wed 13 Aug 2025 08:57:28 +0000
ROA not after:            Wed 12 Aug 2026 09:02:28 +0000
asID:                     150956
IP address blocks:        103.101.140.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e11a3d56-ac75-4981-9726-c440214c81ed/0/16B946F06E300C41DA2C037393837F098BA659D1.crl
                          rsync://repo-rpki.idnic.net/repo/e11a3d56-ac75-4981-9726-c440214c81ed/0/16B946F06E300C41DA2C037393837F098BA659D1.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/16B946F06E300C41DA2C037393837F098BA659D1.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Aug 2025 21:25:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:ea:da:68:7e:38:df:f5:af:a5:d4:b8:52:ef:82:17:23:7c:3b:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16B946F06E300C41DA2C037393837F098BA659D1
        Validity
            Not Before: Aug 13 08:57:28 2025 GMT
            Not After : Aug 12 09:02:28 2026 GMT
        Subject: CN=8B99BFA8979CAEDE518EE63EACDE8AC231234B2A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:c1:91:93:79:04:b4:1c:cc:9a:37:3b:d6:3c:
                    ea:e7:cb:e9:1b:ae:c2:1f:b4:61:f4:af:d7:25:5d:
                    18:87:e0:cb:07:34:a2:71:d8:e3:86:65:0f:3d:f4:
                    f5:2e:c0:7e:20:3c:1d:d5:b8:70:1f:71:71:e8:e3:
                    b5:0f:66:8f:fb:7d:29:42:ef:d4:3f:a0:90:3f:d1:
                    7d:e7:a6:7b:11:33:06:2a:d7:e4:07:f8:98:7c:6d:
                    f2:72:f2:05:f5:68:a4:32:4b:a1:8e:27:4a:c1:93:
                    07:53:0d:29:dc:75:bb:9f:ab:b1:65:b0:fd:7a:6f:
                    11:aa:aa:27:cd:00:44:8d:b8:fb:9f:a7:7f:16:e5:
                    f3:f8:77:59:ff:dc:7a:af:6e:ae:1f:5b:65:9c:a3:
                    f2:44:0b:6f:0a:61:17:e4:e0:a8:07:bb:f3:21:9b:
                    26:89:15:84:42:8c:61:62:a9:6b:7e:40:9a:12:f9:
                    63:59:1f:d1:f7:eb:57:fe:c0:be:b7:fe:ab:38:29:
                    8c:32:a7:ac:c4:3d:62:83:6f:75:7a:de:8b:2b:f5:
                    ea:d4:e4:9a:1d:fb:7d:f3:8b:f6:91:d3:a3:7e:bb:
                    ed:18:d8:41:15:9d:37:5f:94:c5:d0:d4:13:a0:5d:
                    09:33:5d:77:20:ef:a9:5b:07:05:92:0d:89:6d:35:
                    7c:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:99:BF:A8:97:9C:AE:DE:51:8E:E6:3E:AC:DE:8A:C2:31:23:4B:2A
            X509v3 Authority Key Identifier:
                keyid:16:B9:46:F0:6E:30:0C:41:DA:2C:03:73:93:83:7F:09:8B:A6:59:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e11a3d56-ac75-4981-9726-c440214c81ed/0/16B946F06E300C41DA2C037393837F098BA659D1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/16B946F06E300C41DA2C037393837F098BA659D1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e11a3d56-ac75-4981-9726-c440214c81ed/0/3130332e3130312e3134302e302f32332d3234203d3e20313530393536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.101.140.0/23

    Signature Algorithm: sha256WithRSAEncryption
         33:79:97:1c:14:ae:ef:99:de:51:9d:2a:c7:d3:db:bf:7e:7d:
         12:15:4c:78:74:1c:ac:1d:7b:62:44:88:ea:1e:18:ed:fc:64:
         b9:72:14:54:67:95:8f:84:ce:9e:58:b7:dd:df:0f:36:82:46:
         94:07:ba:56:48:23:76:23:0c:ce:93:23:30:10:0d:8b:4c:91:
         3d:00:d0:7e:31:e7:df:00:e4:b1:5f:17:44:bf:9f:2a:9a:b1:
         f0:96:1b:ea:7a:f6:86:48:53:ed:2f:49:9f:95:47:d4:55:6a:
         05:13:e9:66:75:24:be:62:a3:62:77:76:a5:13:9d:04:f9:d1:
         71:97:6d:40:cb:c2:c0:d0:44:de:27:b7:69:77:55:15:f3:33:
         5d:1b:83:c6:2d:64:46:6b:16:65:9d:32:bf:e4:47:16:80:7b:
         c7:69:71:15:3f:87:16:5c:90:2f:45:2d:11:64:3b:4e:67:27:
         10:0c:8b:a4:4f:ff:49:32:e4:01:38:e8:21:e4:f2:4e:db:2b:
         9a:01:87:50:42:94:8b:89:df:a7:30:33:1a:e9:82:f7:3e:98:
         10:16:f7:06:f0:51:d7:96:d4:ac:9a:c2:a7:b2:b7:94:88:20:
         0e:4f:49:74:c7:fb:ea:b1:99:1e:58:ae:eb:b5:63:b4:78:81:
         bc:07:1d:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:54:33 2025 by rpki-client