Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/ea0bdcc5-4cd9-46b0-9d7b-d231a9e57b50/0/3130332e3136352e3235322e302f32342d3234203d3e20313531353231.roa
File:                     3130332e3136352e3235322e302f32342d3234203d3e20313531353231.roa (raw, json)
Hash identifier:          InrImlNizXyRaZ5OSZAbKYKNMEMqIX4WAQ1A/9whx7w=
Subject key identifier:   C3:A3:88:95:D3:C3:BD:C0:BC:84:70:B8:83:3A:18:BB:A6:09:E2:B5
Certificate issuer:       /CN=1E8E853BD0B0EC8B2C020B975B205A556C14E8E9
Certificate serial:       444930EF1CAE5B6D72A037E2EC1B9A25F18FF1E3
Authority key identifier: 1E:8E:85:3B:D0:B0:EC:8B:2C:02:0B:97:5B:20:5A:55:6C:14:E8:E9
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1E8E853BD0B0EC8B2C020B975B205A556C14E8E9.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ea0bdcc5-4cd9-46b0-9d7b-d231a9e57b50/0/3130332e3136352e3235322e302f32342d3234203d3e20313531353231.roa
Signing time:             Mon 13 Oct 2025 03:04:23 +0000
ROA not before:           Mon 13 Oct 2025 02:59:23 +0000
ROA not after:            Mon 12 Oct 2026 03:04:23 +0000
asID:                     151521
IP address blocks:        103.165.252.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ea0bdcc5-4cd9-46b0-9d7b-d231a9e57b50/0/1E8E853BD0B0EC8B2C020B975B205A556C14E8E9.crl
                          rsync://repo-rpki.idnic.net/repo/ea0bdcc5-4cd9-46b0-9d7b-d231a9e57b50/0/1E8E853BD0B0EC8B2C020B975B205A556C14E8E9.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1E8E853BD0B0EC8B2C020B975B205A556C14E8E9.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Oct 2025 11:48:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:49:30:ef:1c:ae:5b:6d:72:a0:37:e2:ec:1b:9a:25:f1:8f:f1:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E8E853BD0B0EC8B2C020B975B205A556C14E8E9
        Validity
            Not Before: Oct 13 02:59:23 2025 GMT
            Not After : Oct 12 03:04:23 2026 GMT
        Subject: CN=C3A38895D3C3BDC0BC8470B8833A18BBA609E2B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:41:13:90:a7:67:2c:6e:35:5f:b7:d6:77:02:
                    ea:53:2c:03:69:d9:2b:6f:cc:0c:1b:01:84:b9:36:
                    d8:d8:3c:68:04:35:79:76:2a:0e:fc:92:ea:02:d2:
                    cc:9b:61:a2:d0:ca:28:ee:16:dc:6a:bd:d6:55:f8:
                    b2:f1:57:49:dc:3c:cb:7e:bd:e3:98:30:84:82:c5:
                    a2:dc:b7:55:b4:16:01:43:a6:23:ce:ab:0b:54:ef:
                    2f:36:8b:6b:bc:50:36:53:82:1d:cb:0a:cd:e3:b4:
                    bf:72:e7:fb:70:3e:ca:68:50:bd:3b:49:e0:88:4b:
                    35:88:ca:02:c5:35:93:41:a5:6c:8b:f9:a1:9d:c2:
                    60:d1:75:d3:07:3b:89:f0:3e:6b:b2:69:fd:c6:1a:
                    53:04:8b:49:1f:2d:7f:20:81:00:18:76:13:15:a1:
                    ae:3a:91:47:c6:f7:a9:ce:c8:db:b3:9c:5f:d3:5f:
                    81:10:26:e4:85:15:7e:00:e1:17:b1:81:96:fd:1d:
                    12:ee:f6:d2:7e:ff:16:4e:9a:c9:d4:8b:26:f3:f0:
                    34:2e:d4:68:0f:51:93:7f:ba:3a:cc:ee:33:d1:23:
                    e3:ef:d2:e3:52:7a:f4:11:86:b9:9c:71:a7:f9:f4:
                    82:cf:46:0d:4e:32:73:07:ea:9c:94:e7:1c:5c:63:
                    fe:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:A3:88:95:D3:C3:BD:C0:BC:84:70:B8:83:3A:18:BB:A6:09:E2:B5
            X509v3 Authority Key Identifier:
                keyid:1E:8E:85:3B:D0:B0:EC:8B:2C:02:0B:97:5B:20:5A:55:6C:14:E8:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ea0bdcc5-4cd9-46b0-9d7b-d231a9e57b50/0/1E8E853BD0B0EC8B2C020B975B205A556C14E8E9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1E8E853BD0B0EC8B2C020B975B205A556C14E8E9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea0bdcc5-4cd9-46b0-9d7b-d231a9e57b50/0/3130332e3136352e3235322e302f32342d3234203d3e20313531353231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.165.252.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:55:c8:ba:f1:a1:51:f6:ba:be:aa:7f:94:93:bf:1a:67:eb:
         2d:51:68:9e:69:df:a8:ef:66:cd:3f:ad:74:cd:a0:12:19:ec:
         37:b4:b9:ca:6f:f1:9e:40:d6:66:7e:cb:15:62:c8:0f:4f:a1:
         05:f4:5e:e8:23:1a:7b:a3:cf:93:eb:e7:18:ff:3d:52:36:97:
         2e:38:e5:a9:57:88:1d:8f:85:72:e9:10:46:bf:94:37:ee:1a:
         aa:41:f0:7e:17:43:3d:3b:bc:43:99:cc:ba:ff:50:31:32:b9:
         d1:ca:02:08:73:ef:ee:14:97:36:b8:72:13:3c:07:28:29:4e:
         93:96:f2:a4:c0:3e:00:63:93:f4:44:5c:05:5a:88:b6:a7:f7:
         4f:84:b1:1d:aa:9d:90:27:1f:e4:cc:ce:eb:4c:e1:df:15:e1:
         b4:e5:cd:40:1f:e9:9f:ed:4b:53:8d:28:67:40:33:77:d4:44:
         9a:eb:1e:61:40:ac:45:21:ba:c8:cc:aa:db:d3:79:b5:a9:3f:
         8e:97:b9:dc:3c:44:b9:06:62:01:ce:c1:06:a4:8b:e0:17:56:
         75:05:3c:26:9b:d9:c7:c5:76:fc:d4:d0:c1:75:9b:e7:be:65:
         5f:13:f1:42:9a:5a:5d:04:63:c9:65:39:b7:07:c4:79:0e:ec:
         eb:b6:3b:9b
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUREkw7xyuW21yoDfi7BuaJfGP8eMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUU4RTg1M0JEMEIwRUM4QjJDMDIwQjk3NUIyMDVBNTU2
QzE0RThFOTAeFw0yNTEwMTMwMjU5MjNaFw0yNjEwMTIwMzA0MjNaMDMxMTAvBgNV
BAMTKEMzQTM4ODk1RDNDM0JEQzBCQzg0NzBCODgzM0ExOEJCQTYwOUUyQjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFQROQp2csbjVft9Z3AupTLANp
2StvzAwbAYS5NtjYPGgENXl2Kg78kuoC0sybYaLQyijuFtxqvdZV+LLxV0ncPMt+
veOYMISCxaLct1W0FgFDpiPOqwtU7y82i2u8UDZTgh3LCs3jtL9y5/twPspoUL07
SeCISzWIygLFNZNBpWyL+aGdwmDRddMHO4nwPmuyaf3GGlMEi0kfLX8ggQAYdhMV
oa46kUfG96nOyNuznF/TX4EQJuSFFX4A4RexgZb9HRLu9tJ+/xZOmsnUiybz8DQu
1GgPUZN/ujrM7jPRI+Pv0uNSevQRhrmccaf59ILPRg1OMnMH6pyU5xxcY/69AgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUw6OIldPDvcC8hHC4gzoYu6YJ4rUwHwYDVR0j
BBgwFoAUHo6FO9Cw7IssAguXWyBaVWwU6OkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l
YTBiZGNjNS00Y2Q5LTQ2YjAtOWQ3Yi1kMjMxYTllNTdiNTAvMC8xRThFODUzQkQw
QjBFQzhCMkMwMjBCOTc1QjIwNUE1NTZDMTRFOEU5LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMUU4RTg1M0JEMEIwRUM4QjJDMDIwQjk3NUIyMDVBNTU2QzE0
RThFOS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2VhMGJkY2M1LTRjZDktNDZiMC05
ZDdiLWQyMzFhOWU1N2I1MC8wLzMxMzAzMzJlMzEzNjM1MmUzMjM1MzIyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTM1MzEzNTMyMzEucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnpfwwDQYJ
KoZIhvcNAQELBQADggEBABRVyLrxoVH2ur6qf5STvxpn6y1RaJ5p36jvZs0/rXTN
oBIZ7De0ucpv8Z5A1mZ+yxViyA9PoQX0XugjGnujz5Pr5xj/PVI2ly445alXiB2P
hXLpEEa/lDfuGqpB8H4XQz07vEOZzLr/UDEyudHKAghz7+4Ulza4chM8BygpTpOW
8qTAPgBjk/REXAVaiLan90+EsR2qnZAnH+TMzutM4d8V4bTlzUAf6Z/tS1ONKGdA
M3fURJrrHmFArEUhusjMqtvTebWpP46Xudw8RLkGYgHOwQaki+AXVnUFPCab2cfF
dvzU0MF1m+e+ZV8T8UKaWl0EY8llObcHxHkO7Ou2O5s=
-----END CERTIFICATE-----
Generated at Mon Oct 20 23:10:54 2025 by rpki-client