Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/eb81bcea-b70f-4374-924b-b6c778109837/0/3130332e3130382e3234302e302f32322d3232203d3e20313336383535.roa
File:                     3130332e3130382e3234302e302f32322d3232203d3e20313336383535.roa (raw, json)
Hash identifier:          7eJhfA1U72MfmI6Gl9X8Bc7KFQEL+NhfB3ZqMIqrEaA=
Subject key identifier:   8B:92:68:47:DE:68:21:39:CC:E3:FF:A2:B4:97:D2:86:04:56:89:AA
Certificate issuer:       /CN=CA47BA6D9780611AEA68BC9BF72724AE94799AA6
Certificate serial:       08754FBA4E1837A0284652ED84A7B04AB95323F7
Authority key identifier: CA:47:BA:6D:97:80:61:1A:EA:68:BC:9B:F7:27:24:AE:94:79:9A:A6
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA47BA6D9780611AEA68BC9BF72724AE94799AA6.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/eb81bcea-b70f-4374-924b-b6c778109837/0/3130332e3130382e3234302e302f32322d3232203d3e20313336383535.roa
Signing time:             Sun 12 Oct 2025 02:00:00 +0000
ROA not before:           Sun 12 Oct 2025 01:55:00 +0000
ROA not after:            Sun 11 Oct 2026 02:00:00 +0000
asID:                     136855
IP address blocks:        103.108.240.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/eb81bcea-b70f-4374-924b-b6c778109837/0/CA47BA6D9780611AEA68BC9BF72724AE94799AA6.crl
                          rsync://repo-rpki.idnic.net/repo/eb81bcea-b70f-4374-924b-b6c778109837/0/CA47BA6D9780611AEA68BC9BF72724AE94799AA6.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA47BA6D9780611AEA68BC9BF72724AE94799AA6.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Oct 2025 06:46:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:75:4f:ba:4e:18:37:a0:28:46:52:ed:84:a7:b0:4a:b9:53:23:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA47BA6D9780611AEA68BC9BF72724AE94799AA6
        Validity
            Not Before: Oct 12 01:55:00 2025 GMT
            Not After : Oct 11 02:00:00 2026 GMT
        Subject: CN=8B926847DE682139CCE3FFA2B497D286045689AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:c3:c8:29:be:3c:df:46:21:82:9c:62:49:00:
                    99:91:10:e3:44:22:50:9f:4d:3f:1f:75:fd:b7:b8:
                    1f:0c:93:e2:26:ce:e8:81:78:44:22:19:55:f9:af:
                    6b:dc:90:44:8e:2f:7b:05:b6:1f:34:1d:fe:99:2d:
                    2d:0b:77:74:50:f0:b8:7e:ea:0d:a8:29:66:b1:02:
                    89:37:09:0b:ac:58:bf:ca:dc:1f:fa:09:73:51:bc:
                    9c:f0:01:f6:2c:eb:25:08:19:90:50:f5:fc:39:c0:
                    95:33:4b:41:1f:7b:82:83:55:65:1f:cc:e2:62:5f:
                    46:83:fc:b3:5c:2f:3d:d4:79:38:be:75:4e:bb:76:
                    68:27:ac:76:b8:28:24:da:0c:56:b8:05:ae:de:2c:
                    ae:c1:5f:af:4c:1a:ab:60:11:15:cf:a9:ee:19:68:
                    30:bc:71:7b:df:a5:16:6f:5e:bb:56:53:bc:c5:f8:
                    8a:48:23:03:c2:e8:c2:27:45:a8:a7:4e:dd:b1:42:
                    d4:b8:01:59:04:84:cd:14:5d:50:fd:52:80:db:e9:
                    33:b6:a4:c1:fb:af:d2:b9:eb:cc:76:39:e8:63:78:
                    a5:d6:93:34:aa:dc:34:66:4c:39:dc:09:38:35:e3:
                    b6:c3:7a:c5:fd:7d:c0:1d:78:46:9b:ed:f1:a1:17:
                    2d:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:92:68:47:DE:68:21:39:CC:E3:FF:A2:B4:97:D2:86:04:56:89:AA
            X509v3 Authority Key Identifier:
                keyid:CA:47:BA:6D:97:80:61:1A:EA:68:BC:9B:F7:27:24:AE:94:79:9A:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/eb81bcea-b70f-4374-924b-b6c778109837/0/CA47BA6D9780611AEA68BC9BF72724AE94799AA6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA47BA6D9780611AEA68BC9BF72724AE94799AA6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/eb81bcea-b70f-4374-924b-b6c778109837/0/3130332e3130382e3234302e302f32322d3232203d3e20313336383535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.108.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         86:dd:13:cb:cd:f5:fb:a5:a0:ab:86:c5:a6:08:54:e8:ea:75:
         cd:ab:d7:93:b5:1e:19:fd:04:9d:1e:ed:88:56:92:43:30:07:
         2f:83:bf:aa:bf:ff:22:19:75:e3:80:f3:4b:3c:c2:ac:34:d6:
         43:64:3e:32:c2:c4:03:d3:4e:c0:bd:77:3d:71:d6:3d:d9:22:
         0c:19:cd:89:7e:ce:18:b7:48:39:44:59:f7:dd:18:5d:a2:17:
         9d:91:7b:ee:a3:c2:11:44:07:22:8c:04:94:7d:83:bb:17:c3:
         f3:59:39:13:0b:b0:5a:99:47:32:03:53:a4:b9:22:8a:e4:28:
         2b:53:dd:c8:a3:f6:34:96:16:d9:42:3c:e5:30:dd:21:04:9f:
         6a:ca:7f:f0:91:63:4e:54:45:38:ac:f7:eb:9c:6f:72:79:87:
         c5:17:ff:ff:f4:99:9f:f8:7e:c8:46:55:71:2c:6d:3c:be:85:
         a7:65:bd:b1:62:29:cc:c8:42:58:40:31:9d:1e:48:7d:d7:55:
         61:25:1a:0e:3b:38:8b:f3:67:3a:4c:77:79:58:c0:fb:9a:ad:
         64:4c:5e:be:a4:0f:7a:e3:d8:d1:d0:93:16:1b:58:7d:f1:f2:
         58:36:1f:7a:2b:72:56:0a:aa:8e:14:b7:72:e3:f8:e4:78:83:
         36:43:fa:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:19:09 2025 by rpki-client