Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e73419b9-5422-4fc2-a3e0-c49a8aa07f73/0/3130332e3135392e39332e302f32342d3234203d3e20313431313339.roa
File:                     3130332e3135392e39332e302f32342d3234203d3e20313431313339.roa (raw, json)
Hash identifier:          jur3GwCCR/cxdnMD6W4cwMvOKZw4VghZsOtg/kxwW48=
Subject key identifier:   07:56:7F:25:76:89:D0:78:4A:FB:FF:EA:91:8D:CC:83:14:8F:26:D5
Certificate issuer:       /CN=42C6E10CB4D5AF0F92CCA6A9595CCC05E2E829AE
Certificate serial:       13942E4292FEAA015115858A996822C7184EA89E
Authority key identifier: 42:C6:E1:0C:B4:D5:AF:0F:92:CC:A6:A9:59:5C:CC:05:E2:E8:29:AE
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42C6E10CB4D5AF0F92CCA6A9595CCC05E2E829AE.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e73419b9-5422-4fc2-a3e0-c49a8aa07f73/0/3130332e3135392e39332e302f32342d3234203d3e20313431313339.roa
Signing time:             Tue 19 Aug 2025 19:00:01 +0000
ROA not before:           Tue 19 Aug 2025 18:55:01 +0000
ROA not after:            Tue 18 Aug 2026 19:00:01 +0000
asID:                     141139
IP address blocks:        103.159.93.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e73419b9-5422-4fc2-a3e0-c49a8aa07f73/0/42C6E10CB4D5AF0F92CCA6A9595CCC05E2E829AE.crl
                          rsync://repo-rpki.idnic.net/repo/e73419b9-5422-4fc2-a3e0-c49a8aa07f73/0/42C6E10CB4D5AF0F92CCA6A9595CCC05E2E829AE.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42C6E10CB4D5AF0F92CCA6A9595CCC05E2E829AE.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Aug 2025 22:33:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:94:2e:42:92:fe:aa:01:51:15:85:8a:99:68:22:c7:18:4e:a8:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42C6E10CB4D5AF0F92CCA6A9595CCC05E2E829AE
        Validity
            Not Before: Aug 19 18:55:01 2025 GMT
            Not After : Aug 18 19:00:01 2026 GMT
        Subject: CN=07567F257689D0784AFBFFEA918DCC83148F26D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:58:26:49:df:31:4a:83:24:ea:50:3e:24:81:
                    9f:45:54:cb:11:de:9f:fe:d9:27:3c:f2:a6:13:6c:
                    d2:1e:00:fa:01:00:a3:b7:34:2a:6b:9d:8d:83:2a:
                    db:3d:28:1e:39:ae:4e:7e:c6:56:bc:27:35:e7:a7:
                    5f:fc:b6:2c:0e:bf:be:d5:9b:8b:9f:2b:14:21:44:
                    97:0b:57:ea:38:48:18:dc:90:be:8a:06:91:f0:9b:
                    39:41:ef:8e:24:2f:49:90:d6:7c:10:ed:0d:6b:1c:
                    34:85:9b:1c:5a:f1:2d:66:ce:2b:03:53:6a:a2:07:
                    d5:79:58:85:be:ff:b6:6c:ab:fb:da:2c:0e:cf:86:
                    f7:d6:a4:bc:52:14:d0:a9:45:26:41:05:b4:a4:f9:
                    57:d5:2d:0a:ec:7a:bc:4c:0a:85:a0:2c:85:83:0e:
                    79:f1:d1:1d:75:52:94:10:4c:89:fb:4c:fe:b1:52:
                    52:c1:86:a2:3d:3f:10:f6:3a:61:8d:88:c5:47:79:
                    10:4c:2f:d5:02:b8:cd:72:e7:4d:c9:92:4c:cb:b2:
                    45:97:80:22:1d:03:7d:01:0c:41:fe:e9:bf:f9:74:
                    16:fb:ac:1d:f7:3e:23:fa:f0:0e:fe:ae:78:23:53:
                    68:ac:14:68:77:02:70:75:78:86:17:ed:3d:d7:df:
                    55:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:56:7F:25:76:89:D0:78:4A:FB:FF:EA:91:8D:CC:83:14:8F:26:D5
            X509v3 Authority Key Identifier:
                keyid:42:C6:E1:0C:B4:D5:AF:0F:92:CC:A6:A9:59:5C:CC:05:E2:E8:29:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e73419b9-5422-4fc2-a3e0-c49a8aa07f73/0/42C6E10CB4D5AF0F92CCA6A9595CCC05E2E829AE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42C6E10CB4D5AF0F92CCA6A9595CCC05E2E829AE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e73419b9-5422-4fc2-a3e0-c49a8aa07f73/0/3130332e3135392e39332e302f32342d3234203d3e20313431313339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.159.93.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:4f:91:26:5b:4b:61:3a:27:59:94:7d:be:ea:76:77:32:0e:
         f0:9e:34:e4:b1:cc:46:8a:cb:48:a2:01:d7:5e:df:b1:8e:4f:
         62:99:e7:75:f3:22:25:05:4b:9e:3e:0f:4c:1d:17:0b:51:39:
         3f:55:58:c1:cc:e1:19:b0:b2:72:8a:a0:41:e1:01:92:92:5a:
         df:a7:66:cd:aa:de:e7:94:bc:ff:23:2c:0c:b1:79:d6:78:b9:
         c4:d7:02:84:7d:55:4a:96:b0:c5:da:2b:df:8c:a6:8c:1f:29:
         fb:3f:13:59:29:d9:b8:56:fb:a1:93:81:02:02:db:70:44:3c:
         ef:99:47:b0:22:af:f6:e0:da:af:eb:79:d4:e1:47:67:f4:3e:
         4e:37:a9:c4:7b:e0:41:3b:c2:d6:2c:0a:9c:f7:5f:44:e2:7c:
         20:83:b7:98:19:af:a5:19:ec:ba:89:ee:40:5a:a4:2f:c2:41:
         39:02:00:e2:01:46:54:17:ca:e2:83:dc:54:15:32:00:f3:28:
         43:3a:a4:8c:07:54:9d:05:48:14:35:bf:cc:3c:e4:95:07:b3:
         a0:27:84:62:05:02:94:c6:3d:34:bd:fb:d8:8d:b3:fc:f9:6e:
         ac:13:88:bc:ec:37:2a:8e:17:df:1a:49:52:f6:7e:99:86:c7:
         26:f4:17:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:39:57 2025 by rpki-client