Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e2ac9e63-9890-422e-88dc-7cb6ddac22fa/0/3130332e3134382e32382e302f32342d3234203d3e20313430303132.roa
File:                     3130332e3134382e32382e302f32342d3234203d3e20313430303132.roa (raw, json)
Hash identifier:          c+kaUi4De+/vm5rVBRPjrkkr1HTjdZlHY3+0tiasoH8=
Subject key identifier:   EB:3D:C9:EE:92:1F:3F:75:04:EE:8E:8B:25:A1:4D:39:3B:29:74:FC
Certificate issuer:       /CN=E17357E41F3644D13EBC7C4B25B8A2936B91165A
Certificate serial:       70F5878759A0B93086AADEB24B1CA7AB8FCEB692
Authority key identifier: E1:73:57:E4:1F:36:44:D1:3E:BC:7C:4B:25:B8:A2:93:6B:91:16:5A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E17357E41F3644D13EBC7C4B25B8A2936B91165A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e2ac9e63-9890-422e-88dc-7cb6ddac22fa/0/3130332e3134382e32382e302f32342d3234203d3e20313430303132.roa
Signing time:             Wed 15 Oct 2025 11:00:01 +0000
ROA not before:           Wed 15 Oct 2025 10:55:01 +0000
ROA not after:            Wed 14 Oct 2026 11:00:01 +0000
asID:                     140012
IP address blocks:        103.148.28.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e2ac9e63-9890-422e-88dc-7cb6ddac22fa/0/E17357E41F3644D13EBC7C4B25B8A2936B91165A.crl
                          rsync://repo-rpki.idnic.net/repo/e2ac9e63-9890-422e-88dc-7cb6ddac22fa/0/E17357E41F3644D13EBC7C4B25B8A2936B91165A.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E17357E41F3644D13EBC7C4B25B8A2936B91165A.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Oct 2025 01:36:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:f5:87:87:59:a0:b9:30:86:aa:de:b2:4b:1c:a7:ab:8f:ce:b6:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E17357E41F3644D13EBC7C4B25B8A2936B91165A
        Validity
            Not Before: Oct 15 10:55:01 2025 GMT
            Not After : Oct 14 11:00:01 2026 GMT
        Subject: CN=EB3DC9EE921F3F7504EE8E8B25A14D393B2974FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ee:52:59:93:64:cd:5c:b3:c2:f8:c2:f8:9a:
                    28:33:10:ad:a5:48:b6:e6:90:63:cd:77:28:1b:5c:
                    57:8e:18:53:16:d4:a0:c7:9b:70:92:62:e4:c3:5f:
                    aa:11:9c:71:f2:bc:7f:bd:ee:12:36:c2:b6:b1:3b:
                    3d:f6:ae:e8:60:bd:be:32:b0:06:c7:e1:21:66:84:
                    84:fd:6e:13:89:11:e6:6a:c8:53:30:fb:6b:29:82:
                    c3:f7:a8:74:ed:9d:4e:16:0a:a2:c5:f7:65:1a:8f:
                    9d:fe:53:67:7b:f6:fe:d9:e4:0c:b0:44:dc:6d:8c:
                    c5:7c:b2:c0:c3:7e:2f:b8:3a:7d:ef:49:d0:28:8d:
                    13:a8:ee:35:31:d0:55:11:59:9a:43:09:c9:cb:08:
                    02:a5:a9:8d:40:4e:4a:d2:a6:d9:3a:7d:c4:bb:bf:
                    19:ea:88:a5:c6:d6:68:dc:b9:8d:68:ca:1e:87:91:
                    52:ea:4c:32:44:a9:5e:9c:78:7d:7e:85:73:a4:d2:
                    45:17:1c:d0:32:a6:38:c7:9d:d8:79:fd:df:99:52:
                    51:cc:9b:3c:55:6c:90:8a:60:1e:21:58:7e:21:ec:
                    d9:ff:37:11:4a:17:22:3f:79:49:e8:25:bc:53:a9:
                    36:ad:57:92:05:5d:97:9d:77:b0:10:1f:d1:05:6b:
                    30:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:3D:C9:EE:92:1F:3F:75:04:EE:8E:8B:25:A1:4D:39:3B:29:74:FC
            X509v3 Authority Key Identifier:
                keyid:E1:73:57:E4:1F:36:44:D1:3E:BC:7C:4B:25:B8:A2:93:6B:91:16:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e2ac9e63-9890-422e-88dc-7cb6ddac22fa/0/E17357E41F3644D13EBC7C4B25B8A2936B91165A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E17357E41F3644D13EBC7C4B25B8A2936B91165A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e2ac9e63-9890-422e-88dc-7cb6ddac22fa/0/3130332e3134382e32382e302f32342d3234203d3e20313430303132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.148.28.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:1e:06:2e:c6:74:4f:d2:38:ba:57:95:99:69:36:eb:18:fc:
         cd:91:4c:85:8a:58:af:ee:25:5c:da:57:0b:9a:74:42:ec:4d:
         b6:3b:3f:a0:be:35:c3:45:18:65:65:20:07:ad:22:6b:2f:22:
         15:77:a5:41:b4:56:b3:be:7e:20:d3:ec:0e:7e:86:c7:59:7e:
         0a:29:f8:69:74:d9:8a:bf:ed:34:52:84:69:f4:c1:6f:28:c1:
         dc:9c:e0:81:4a:00:ca:2b:9f:0a:9b:58:e3:bb:cb:77:66:3c:
         a6:b7:ce:68:a6:12:ec:30:c3:cc:f7:23:3f:6d:0e:d5:86:28:
         a9:38:67:23:32:e9:31:2f:8a:58:1c:84:48:9d:6e:60:57:49:
         4b:27:05:59:da:89:59:a3:56:19:cf:2e:20:7a:4c:ba:9d:ba:
         3a:d5:2d:89:08:2b:1f:66:f4:6b:b3:7e:87:61:ff:29:b5:b1:
         64:3a:db:63:33:a4:46:d3:8e:37:5c:24:33:87:d9:4b:89:f8:
         7e:42:5e:2e:40:ed:54:34:b4:04:f3:f9:83:a9:b4:5f:16:36:
         64:c9:6a:09:07:52:2f:9d:07:e1:b9:ab:4f:a7:5b:fa:84:f0:
         50:d9:3f:a7:be:7c:dc:3a:8c:e2:f4:13:27:07:57:f2:a1:e0:
         a9:e0:59:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:18:29 2025 by rpki-client