Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e2e96bf3-d021-4d84-90d5-c24558aa495f/0/3130332e3134332e3132382e302f32342d3234203d3e20313339333933.roa
File:                     3130332e3134332e3132382e302f32342d3234203d3e20313339333933.roa (raw, json)
Hash identifier:          WrbEtwkzEelam58TNUV4Bn/EuB71NKCGwrujJRp3Bd8=
Subject key identifier:   1F:2D:08:CD:D3:95:97:C3:BA:E0:01:A4:71:A9:33:18:9F:08:73:1A
Certificate issuer:       /CN=29BE771FE6D788CA509E787787F218ADFB43DDB2
Certificate serial:       56A8899089FB143E6C1764B9CD014C79BA41E55B
Authority key identifier: 29:BE:77:1F:E6:D7:88:CA:50:9E:78:77:87:F2:18:AD:FB:43:DD:B2
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29BE771FE6D788CA509E787787F218ADFB43DDB2.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e2e96bf3-d021-4d84-90d5-c24558aa495f/0/3130332e3134332e3132382e302f32342d3234203d3e20313339333933.roa
Signing time:             Wed 24 Sep 2025 09:36:13 +0000
ROA not before:           Wed 24 Sep 2025 09:31:13 +0000
ROA not after:            Wed 23 Sep 2026 09:36:13 +0000
asID:                     139393
IP address blocks:        103.143.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e2e96bf3-d021-4d84-90d5-c24558aa495f/0/29BE771FE6D788CA509E787787F218ADFB43DDB2.crl
                          rsync://repo-rpki.idnic.net/repo/e2e96bf3-d021-4d84-90d5-c24558aa495f/0/29BE771FE6D788CA509E787787F218ADFB43DDB2.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29BE771FE6D788CA509E787787F218ADFB43DDB2.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Oct 2025 17:49:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:a8:89:90:89:fb:14:3e:6c:17:64:b9:cd:01:4c:79:ba:41:e5:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29BE771FE6D788CA509E787787F218ADFB43DDB2
        Validity
            Not Before: Sep 24 09:31:13 2025 GMT
            Not After : Sep 23 09:36:13 2026 GMT
        Subject: CN=1F2D08CDD39597C3BAE001A471A933189F08731A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:ec:11:53:98:0c:6a:da:77:03:80:a0:84:82:
                    fe:32:41:fe:c6:6b:2c:35:e4:6d:a1:26:6f:0d:c4:
                    7f:ea:59:49:d8:18:b4:db:29:92:8c:c2:59:94:b7:
                    92:06:10:b4:fd:6d:fd:74:89:88:2b:0c:58:a9:e2:
                    47:38:34:a6:57:7b:c6:4e:e6:9e:fc:ed:4d:7a:be:
                    aa:ee:45:db:ba:d5:f0:f5:5f:ec:ba:ba:c3:8c:1d:
                    41:02:9a:c1:62:50:c8:d0:5c:55:93:bd:51:ce:a6:
                    25:e5:d7:8c:d3:22:fd:d9:a0:61:9e:8f:2a:32:fe:
                    db:63:58:eb:0d:7a:50:2e:11:df:22:67:50:dd:0c:
                    b0:94:36:fd:d1:76:3b:fa:f0:f2:4f:69:6d:d0:ab:
                    a4:60:92:57:4b:71:74:ce:9b:d2:de:86:3e:a2:40:
                    cb:b3:bd:39:4d:bf:d8:08:f2:41:38:1f:3b:bf:a7:
                    50:59:99:48:58:5e:84:b1:eb:bb:d8:62:be:a9:a1:
                    1e:7d:96:a7:f2:e3:cb:70:7e:6c:4a:ba:a2:e5:42:
                    95:2c:9d:c1:64:0b:b0:c1:5b:fe:2a:57:45:4d:86:
                    8d:65:a1:c4:0f:0c:53:c7:61:4d:6e:fe:c4:d5:bb:
                    1e:8d:04:dc:c4:81:d5:19:c3:8d:b7:ab:b1:56:e2:
                    b0:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:2D:08:CD:D3:95:97:C3:BA:E0:01:A4:71:A9:33:18:9F:08:73:1A
            X509v3 Authority Key Identifier:
                keyid:29:BE:77:1F:E6:D7:88:CA:50:9E:78:77:87:F2:18:AD:FB:43:DD:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e2e96bf3-d021-4d84-90d5-c24558aa495f/0/29BE771FE6D788CA509E787787F218ADFB43DDB2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29BE771FE6D788CA509E787787F218ADFB43DDB2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e2e96bf3-d021-4d84-90d5-c24558aa495f/0/3130332e3134332e3132382e302f32342d3234203d3e20313339333933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.143.128.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:10:05:7e:10:ce:75:f3:7e:42:e9:ba:49:01:56:5a:5e:44:
         a0:cd:cc:c5:78:e2:6b:d3:6a:d0:13:b4:ab:18:0c:06:86:69:
         d2:e3:a1:5f:22:85:45:f9:e3:24:9e:0f:20:33:77:50:af:39:
         18:27:35:76:a2:40:9a:ff:2c:b6:c0:6e:b3:74:df:1f:a8:69:
         75:07:0c:4b:7a:48:89:91:51:25:91:c5:52:90:16:c0:85:6f:
         75:31:7a:f0:be:02:36:9a:21:df:2c:9f:7f:40:3d:41:86:76:
         64:51:1f:36:f7:d0:b1:c4:b5:69:fe:05:56:7e:54:5d:70:f9:
         24:e0:d7:9f:be:4b:c3:8d:e1:27:db:66:14:87:44:12:e4:5c:
         33:96:4c:e4:36:80:47:f4:b1:15:0b:e4:60:9a:13:ab:84:8d:
         e8:3a:5b:77:56:e9:6c:13:5d:79:7f:9f:cb:ff:63:ac:33:dc:
         28:11:c4:3e:e0:e6:d6:3c:31:a2:81:42:ff:eb:a6:35:9a:c4:
         e2:5f:15:24:db:3a:46:62:29:1d:b3:ff:f6:27:50:c9:2c:0d:
         e1:85:62:c8:33:cc:c9:e9:2a:3c:90:25:ec:61:dc:e7:a5:5e:
         56:a7:9a:66:b2:1c:a6:58:69:c9:9a:a9:de:f4:ff:d1:f9:ea:
         27:df:e1:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 20:49:20 2025 by rpki-client