Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e595b7d4-3aab-4b83-94b2-c4267b2ae0a0/0/3130332e3136362e3231322e302f32332d3233203d3e20313431393537.roa
File:                     3130332e3136362e3231322e302f32332d3233203d3e20313431393537.roa (raw, json)
Hash identifier:          I3IiUxQVB0K6AHHH6hadb9zyg87yVWrhTKPdESrGNC4=
Subject key identifier:   99:6E:72:0F:75:79:57:F0:3D:67:61:0D:BB:46:90:C8:AB:AA:CA:27
Certificate issuer:       /CN=23093B0E58201D339EAA3983654297729EB3D7FD
Certificate serial:       7AC01032F16FE8DD7B8F378DC06152F8B4FEF73C
Authority key identifier: 23:09:3B:0E:58:20:1D:33:9E:AA:39:83:65:42:97:72:9E:B3:D7:FD
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/23093B0E58201D339EAA3983654297729EB3D7FD.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e595b7d4-3aab-4b83-94b2-c4267b2ae0a0/0/3130332e3136362e3231322e302f32332d3233203d3e20313431393537.roa
Signing time:             Tue 14 Oct 2025 03:02:59 +0000
ROA not before:           Tue 14 Oct 2025 02:57:59 +0000
ROA not after:            Tue 13 Oct 2026 03:02:59 +0000
asID:                     141957
IP address blocks:        103.166.212.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e595b7d4-3aab-4b83-94b2-c4267b2ae0a0/0/23093B0E58201D339EAA3983654297729EB3D7FD.crl
                          rsync://repo-rpki.idnic.net/repo/e595b7d4-3aab-4b83-94b2-c4267b2ae0a0/0/23093B0E58201D339EAA3983654297729EB3D7FD.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/23093B0E58201D339EAA3983654297729EB3D7FD.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 21 Oct 2025 19:02:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:c0:10:32:f1:6f:e8:dd:7b:8f:37:8d:c0:61:52:f8:b4:fe:f7:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23093B0E58201D339EAA3983654297729EB3D7FD
        Validity
            Not Before: Oct 14 02:57:59 2025 GMT
            Not After : Oct 13 03:02:59 2026 GMT
        Subject: CN=996E720F757957F03D67610DBB4690C8ABAACA27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:ff:24:6f:fc:25:b4:bf:36:49:cc:ef:3a:ee:
                    e1:3c:68:5d:92:e5:24:4a:e0:4c:47:5c:3e:42:8a:
                    8d:5e:4b:d7:78:49:08:98:0b:9a:2c:30:1e:76:88:
                    b7:73:a3:69:bb:9b:2f:a0:38:42:be:0d:ae:0f:3b:
                    bc:e7:93:c1:50:27:78:68:39:49:03:71:77:b1:84:
                    01:8b:42:59:88:0c:89:4b:37:65:65:fb:db:b5:de:
                    f6:cd:60:d4:cd:39:b9:91:ff:bc:3d:3b:ae:e6:1a:
                    2e:f3:5d:c6:a3:69:b0:cc:98:f2:29:ff:5a:46:0a:
                    fd:c3:f9:7c:41:00:dd:6e:9d:b3:73:21:bb:36:7a:
                    91:00:c3:b6:d5:34:6b:bf:4a:97:f6:a2:82:91:3a:
                    e3:75:e4:e0:3a:0b:3c:65:d0:5c:07:db:63:3b:e2:
                    69:66:c4:18:85:f8:e2:a4:a3:d5:93:e4:53:f3:36:
                    c5:81:03:6b:30:0c:6c:6a:97:59:c6:cb:31:58:4a:
                    04:4f:93:83:66:cd:72:ac:e7:4a:06:53:bb:e1:20:
                    3a:a5:80:c4:74:9d:7c:37:ba:d2:f1:f9:eb:0c:02:
                    ad:ef:92:c2:b3:e6:87:d6:cd:2b:9e:c5:c7:19:cc:
                    5f:22:e9:63:8c:b8:72:4d:c2:20:a7:b9:fb:68:f2:
                    44:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:6E:72:0F:75:79:57:F0:3D:67:61:0D:BB:46:90:C8:AB:AA:CA:27
            X509v3 Authority Key Identifier:
                keyid:23:09:3B:0E:58:20:1D:33:9E:AA:39:83:65:42:97:72:9E:B3:D7:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e595b7d4-3aab-4b83-94b2-c4267b2ae0a0/0/23093B0E58201D339EAA3983654297729EB3D7FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/23093B0E58201D339EAA3983654297729EB3D7FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e595b7d4-3aab-4b83-94b2-c4267b2ae0a0/0/3130332e3136362e3231322e302f32332d3233203d3e20313431393537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.166.212.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0f:9e:28:97:51:5d:13:57:20:06:42:37:e2:81:22:85:8d:cf:
         27:b6:f0:e2:0e:bf:05:4c:32:ca:73:f9:78:4e:1f:3b:c5:c1:
         7c:ba:32:39:2b:28:50:57:28:1c:24:49:af:ba:3b:39:f3:33:
         76:04:06:21:9b:94:2e:08:e1:ed:d1:62:53:e0:80:00:75:2c:
         b2:ad:f8:cc:66:26:49:ba:7e:d3:08:7f:65:73:10:4d:fa:e4:
         94:a1:73:a0:ce:e3:27:bb:8a:2d:f6:e6:f3:8b:2a:27:e8:61:
         b0:08:f7:c9:c0:b3:2c:56:06:8d:75:0a:0e:d3:50:c8:ab:ce:
         b5:b3:a3:84:dc:74:17:69:19:00:38:20:ef:24:1c:7e:5f:85:
         23:a9:26:59:bc:2b:a9:7f:7f:1d:b7:23:48:c7:ec:8b:d2:5f:
         a9:9a:6a:5c:4c:ec:c7:24:2d:af:d5:5d:4e:e3:1a:0c:f6:a7:
         7f:49:87:82:b2:01:90:7d:6b:bc:a0:99:c7:bb:96:e1:52:99:
         8e:96:87:f1:47:dd:ba:d1:d7:95:ef:fd:f3:75:2e:d2:7c:24:
         03:3b:cc:87:48:7a:d6:56:6a:5f:81:18:ca:d1:cf:7f:94:92:
         f7:c4:e6:de:f0:15:08:fb:47:22:12:2d:8f:29:90:ac:d7:a3:
         13:ee:59:be
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUesAQMvFv6N17jzeNwGFS+LT+9zwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjMwOTNCMEU1ODIwMUQzMzlFQUEzOTgzNjU0Mjk3NzI5
RUIzRDdGRDAeFw0yNTEwMTQwMjU3NTlaFw0yNjEwMTMwMzAyNTlaMDMxMTAvBgNV
BAMTKDk5NkU3MjBGNzU3OTU3RjAzRDY3NjEwREJCNDY5MEM4QUJBQUNBMjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDa/yRv/CW0vzZJzO867uE8aF2S
5SRK4ExHXD5Cio1eS9d4SQiYC5osMB52iLdzo2m7my+gOEK+Da4PO7znk8FQJ3ho
OUkDcXexhAGLQlmIDIlLN2Vl+9u13vbNYNTNObmR/7w9O67mGi7zXcajabDMmPIp
/1pGCv3D+XxBAN1unbNzIbs2epEAw7bVNGu/Spf2ooKROuN15OA6Czxl0FwH22M7
4mlmxBiF+OKko9WT5FPzNsWBA2swDGxql1nGyzFYSgRPk4NmzXKs50oGU7vhIDql
gMR0nXw3utLx+esMAq3vksKz5ofWzSuexccZzF8i6WOMuHJNwiCnufto8kTBAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUmW5yD3V5V/A9Z2ENu0aQyKuqyicwHwYDVR0j
BBgwFoAUIwk7DlggHTOeqjmDZUKXcp6z1/0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l
NTk1YjdkNC0zYWFiLTRiODMtOTRiMi1jNDI2N2IyYWUwYTAvMC8yMzA5M0IwRTU4
MjAxRDMzOUVBQTM5ODM2NTQyOTc3MjlFQjNEN0ZELmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMjMwOTNCMEU1ODIwMUQzMzlFQUEzOTgzNjU0Mjk3NzI5RUIz
RDdGRC5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2U1OTViN2Q0LTNhYWItNGI4My05
NGIyLWM0MjY3YjJhZTBhMC8wLzMxMzAzMzJlMzEzNjM2MmUzMjMxMzIyZTMwMmYz
MjMzMmQzMjMzMjAzZDNlMjAzMTM0MzEzOTM1Mzcucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnptQwDQYJ
KoZIhvcNAQELBQADggEBAA+eKJdRXRNXIAZCN+KBIoWNzye28OIOvwVMMspz+XhO
HzvFwXy6MjkrKFBXKBwkSa+6OznzM3YEBiGblC4I4e3RYlPggAB1LLKt+MxmJkm6
ftMIf2VzEE365JShc6DO4ye7ii325vOLKifoYbAI98nAsyxWBo11Cg7TUMirzrWz
o4TcdBdpGQA4IO8kHH5fhSOpJlm8K6l/fx23I0jH7IvSX6maalxM7MckLa/VXU7j
Ggz2p39Jh4KyAZB9a7ygmce7luFSmY6Wh/FH3brR15Xv/fN1LtJ8JAM7zIdIetZW
al+BGMrRz3+UkvfE5t7wFQj7RyISLY8pkKzXoxPuWb4=
-----END CERTIFICATE-----
Generated at Mon Oct 20 18:02:38 2025 by rpki-client