Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/ea47231f-02dd-49e8-aa25-2d54c0a999ca/0/3130332e3131322e3234342e302f32332d3234203d3e20313336313037.roa
File:                     3130332e3131322e3234342e302f32332d3234203d3e20313336313037.roa (raw, json)
Hash identifier:          iey0oG1qHYOzJhbqWTH39EDQ0pZ3GLohA4EPTGiKvsg=
Subject key identifier:   CF:53:46:41:03:EC:B7:B4:7B:A8:3F:BE:73:BC:7F:F2:F8:D2:00:B5
Certificate issuer:       /CN=439A4981549ABB151B12D6EC85FC8D0DBF99A81E
Certificate serial:       40129536879D94452E83FDCCA60998D18BE7D812
Authority key identifier: 43:9A:49:81:54:9A:BB:15:1B:12:D6:EC:85:FC:8D:0D:BF:99:A8:1E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/439A4981549ABB151B12D6EC85FC8D0DBF99A81E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ea47231f-02dd-49e8-aa25-2d54c0a999ca/0/3130332e3131322e3234342e302f32332d3234203d3e20313336313037.roa
Signing time:             Sun 05 Oct 2025 15:00:01 +0000
ROA not before:           Sun 05 Oct 2025 14:55:01 +0000
ROA not after:            Sun 04 Oct 2026 15:00:01 +0000
asID:                     136107
IP address blocks:        103.112.244.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ea47231f-02dd-49e8-aa25-2d54c0a999ca/0/439A4981549ABB151B12D6EC85FC8D0DBF99A81E.crl
                          rsync://repo-rpki.idnic.net/repo/ea47231f-02dd-49e8-aa25-2d54c0a999ca/0/439A4981549ABB151B12D6EC85FC8D0DBF99A81E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/439A4981549ABB151B12D6EC85FC8D0DBF99A81E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Oct 2025 02:15:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:12:95:36:87:9d:94:45:2e:83:fd:cc:a6:09:98:d1:8b:e7:d8:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=439A4981549ABB151B12D6EC85FC8D0DBF99A81E
        Validity
            Not Before: Oct  5 14:55:01 2025 GMT
            Not After : Oct  4 15:00:01 2026 GMT
        Subject: CN=CF53464103ECB7B47BA83FBE73BC7FF2F8D200B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:b4:8e:c8:71:19:ed:82:7e:f0:37:e5:47:1c:
                    31:c5:57:0c:6b:c7:e9:df:a0:42:ec:87:ea:58:e7:
                    83:fd:e0:0f:21:04:2d:8a:1e:da:3f:1e:3e:60:d1:
                    dc:1a:5b:27:a5:1e:21:ac:bc:bc:8d:7c:27:c6:8e:
                    46:ee:2c:76:e2:b7:34:29:85:e7:dc:13:b0:57:1c:
                    e6:7d:98:42:ba:3b:fc:f4:7a:0a:29:ee:bc:a5:26:
                    1b:7f:02:e5:9e:2c:40:d9:2f:07:be:15:f7:a3:09:
                    6c:18:94:8d:f9:e7:7f:d5:61:e0:bb:f8:fb:62:57:
                    ab:85:b8:fc:aa:1a:ff:9a:c1:93:47:1c:2b:06:f8:
                    c8:2a:c5:0d:87:88:d6:9b:c4:f5:51:ff:69:05:99:
                    54:90:53:83:1f:91:a3:a5:f3:53:25:b0:dd:80:9d:
                    fe:59:59:ae:7c:43:dd:e5:a0:de:55:f6:d5:1b:26:
                    a8:2f:27:4a:5a:de:9c:cb:4b:57:ed:e2:ed:b9:7f:
                    d3:86:fe:84:dd:17:7e:3c:3b:58:a3:76:70:c0:5f:
                    69:03:3b:72:20:a0:84:67:cc:b9:eb:93:a6:74:89:
                    d2:16:e3:40:31:57:55:c5:99:b7:95:52:4c:6a:a0:
                    8e:b5:1d:f1:ae:2f:82:86:aa:af:e9:a3:8b:f4:c8:
                    c3:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:53:46:41:03:EC:B7:B4:7B:A8:3F:BE:73:BC:7F:F2:F8:D2:00:B5
            X509v3 Authority Key Identifier:
                keyid:43:9A:49:81:54:9A:BB:15:1B:12:D6:EC:85:FC:8D:0D:BF:99:A8:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ea47231f-02dd-49e8-aa25-2d54c0a999ca/0/439A4981549ABB151B12D6EC85FC8D0DBF99A81E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/439A4981549ABB151B12D6EC85FC8D0DBF99A81E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea47231f-02dd-49e8-aa25-2d54c0a999ca/0/3130332e3131322e3234342e302f32332d3234203d3e20313336313037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.112.244.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c0:8d:15:41:d1:ae:f0:e5:23:86:35:e9:d0:d2:ef:4d:39:ce:
         83:c3:e9:1a:f0:6e:f5:85:7d:73:e6:43:61:32:68:16:75:dd:
         0a:90:6a:45:3a:83:ad:ff:b5:82:46:a1:0f:44:6e:6e:33:8a:
         56:e1:f1:67:a9:46:60:f3:96:c9:18:09:85:32:e4:a6:42:fa:
         c9:33:0e:aa:cb:67:2d:3a:5e:21:c8:81:2e:68:97:3f:db:ea:
         27:b1:a3:bc:5f:5c:c2:43:a1:8e:db:22:04:34:66:4a:ac:65:
         e9:1c:a0:19:28:dc:b3:43:47:c0:c1:7b:7c:99:c9:0a:9b:51:
         b3:66:b4:a3:4c:15:5b:4f:72:e5:2d:a8:76:b3:e4:b8:18:49:
         d2:60:f8:ce:0e:df:cc:c0:6d:40:a7:50:f2:00:dd:5e:2b:1c:
         b9:57:05:d4:33:72:24:73:e5:65:b5:48:e6:5a:0f:54:e7:0a:
         da:36:ad:4d:83:26:f8:cd:54:6d:39:b5:28:75:f5:78:ec:67:
         51:4d:42:3f:5c:70:fb:61:53:51:13:09:ab:c1:65:2a:20:39:
         a3:6a:5f:93:c0:7c:e5:d7:04:df:7c:ec:0b:b8:95:98:0c:fd:
         d5:95:55:4a:86:61:fd:80:03:97:f9:f5:86:74:24:b7:11:ec:
         b3:ac:cc:2d
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUQBKVNoedlEUug/3MpgmY0Yvn2BIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDM5QTQ5ODE1NDlBQkIxNTFCMTJENkVDODVGQzhEMERC
Rjk5QTgxRTAeFw0yNTEwMDUxNDU1MDFaFw0yNjEwMDQxNTAwMDFaMDMxMTAvBgNV
BAMTKENGNTM0NjQxMDNFQ0I3QjQ3QkE4M0ZCRTczQkM3RkYyRjhEMjAwQjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAtI7IcRntgn7wN+VHHDHFVwxr
x+nfoELsh+pY54P94A8hBC2KHto/Hj5g0dwaWyelHiGsvLyNfCfGjkbuLHbitzQp
hefcE7BXHOZ9mEK6O/z0egop7rylJht/AuWeLEDZLwe+FfejCWwYlI3553/VYeC7
+PtiV6uFuPyqGv+awZNHHCsG+MgqxQ2HiNabxPVR/2kFmVSQU4MfkaOl81MlsN2A
nf5ZWa58Q93loN5V9tUbJqgvJ0pa3pzLS1ft4u25f9OG/oTdF348O1ijdnDAX2kD
O3IgoIRnzLnrk6Z0idIW40AxV1XFmbeVUkxqoI61HfGuL4KGqq/po4v0yMMdAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUz1NGQQPst7R7qD++c7x/8vjSALUwHwYDVR0j
BBgwFoAUQ5pJgVSauxUbEtbshfyNDb+ZqB4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l
YTQ3MjMxZi0wMmRkLTQ5ZTgtYWEyNS0yZDU0YzBhOTk5Y2EvMC80MzlBNDk4MTU0
OUFCQjE1MUIxMkQ2RUM4NUZDOEQwREJGOTlBODFFLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNDM5QTQ5ODE1NDlBQkIxNTFCMTJENkVDODVGQzhEMERCRjk5
QTgxRS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2VhNDcyMzFmLTAyZGQtNDllOC1h
YTI1LTJkNTRjMGE5OTljYS8wLzMxMzAzMzJlMzEzMTMyMmUzMjM0MzQyZTMwMmYz
MjMzMmQzMjM0MjAzZDNlMjAzMTMzMzYzMTMwMzcucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFncPQwDQYJ
KoZIhvcNAQELBQADggEBAMCNFUHRrvDlI4Y16dDS7005zoPD6RrwbvWFfXPmQ2Ey
aBZ13QqQakU6g63/tYJGoQ9Ebm4zilbh8WepRmDzlskYCYUy5KZC+skzDqrLZy06
XiHIgS5olz/b6iexo7xfXMJDoY7bIgQ0ZkqsZekcoBko3LNDR8DBe3yZyQqbUbNm
tKNMFVtPcuUtqHaz5LgYSdJg+M4O38zAbUCnUPIA3V4rHLlXBdQzciRz5WW1SOZa
D1TnCto2rU2DJvjNVG05tSh19XjsZ1FNQj9ccPthU1ETCavBZSogOaNqX5PAfOXX
BN987Au4lZgM/dWVVUqGYf2AA5f59YZ0JLcR7LOszC0=
-----END CERTIFICATE-----
Generated at Mon Oct 20 18:53:06 2025 by rpki-client