Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/fe716dea-6536-4d6e-b54b-bf7f73cf6b94/0/3130332e3130352e3131342e302f32342d3234203d3e20313431383837.roa
File:                     3130332e3130352e3131342e302f32342d3234203d3e20313431383837.roa (raw, json)
Hash identifier:          GRwDnUc7WyoqAZz3r1fAzJ9AMbu2UxwSXF08hxNvauE=
Subject key identifier:   30:03:A7:F2:8F:1B:0B:7B:13:E1:E8:33:A5:47:FD:B5:3D:AD:A5:D0
Certificate issuer:       /CN=C2759C8490CBC757371078D2CA604D6FF8EE4C19
Certificate serial:       0C7C1B7F3C801BBBDAB74E6A32807B74617FEB2C
Authority key identifier: C2:75:9C:84:90:CB:C7:57:37:10:78:D2:CA:60:4D:6F:F8:EE:4C:19
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2759C8490CBC757371078D2CA604D6FF8EE4C19.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/fe716dea-6536-4d6e-b54b-bf7f73cf6b94/0/3130332e3130352e3131342e302f32342d3234203d3e20313431383837.roa
Signing time:             Tue 23 Sep 2025 04:48:57 +0000
ROA not before:           Tue 23 Sep 2025 04:43:57 +0000
ROA not after:            Tue 22 Sep 2026 04:48:57 +0000
asID:                     141887
IP address blocks:        103.105.114.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/fe716dea-6536-4d6e-b54b-bf7f73cf6b94/0/C2759C8490CBC757371078D2CA604D6FF8EE4C19.crl
                          rsync://repo-rpki.idnic.net/repo/fe716dea-6536-4d6e-b54b-bf7f73cf6b94/0/C2759C8490CBC757371078D2CA604D6FF8EE4C19.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2759C8490CBC757371078D2CA604D6FF8EE4C19.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Oct 2025 11:48:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:7c:1b:7f:3c:80:1b:bb:da:b7:4e:6a:32:80:7b:74:61:7f:eb:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2759C8490CBC757371078D2CA604D6FF8EE4C19
        Validity
            Not Before: Sep 23 04:43:57 2025 GMT
            Not After : Sep 22 04:48:57 2026 GMT
        Subject: CN=3003A7F28F1B0B7B13E1E833A547FDB53DADA5D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:71:a0:73:ec:ed:b9:ff:07:89:d3:35:8c:19:
                    73:06:36:ff:f0:ad:8e:56:4a:c1:b7:5a:86:8a:f5:
                    08:fa:d0:b3:be:b0:80:ea:99:3d:3d:98:e2:be:12:
                    ca:c2:ce:b2:3d:22:f1:0f:04:08:dc:1d:51:88:25:
                    26:9e:11:14:e6:51:c7:b4:55:84:94:fe:7e:98:0d:
                    1e:c2:b1:96:5a:51:b3:74:d7:c6:41:47:f3:5b:36:
                    90:46:12:9d:6c:8b:48:5e:b7:c6:bf:08:d9:27:25:
                    a6:78:f1:69:7a:d7:51:b2:9c:0c:fc:60:2b:9d:6c:
                    db:4d:ae:19:81:9c:16:5b:95:35:8d:67:8d:c0:4a:
                    c6:e3:f4:53:bd:a4:44:ab:89:db:f8:f6:d7:d7:ea:
                    f5:15:d9:66:b3:f5:61:fa:f3:60:80:cf:05:94:93:
                    c6:9a:5b:96:f8:02:2c:1a:21:d1:8b:10:cb:fb:c0:
                    02:db:b0:0c:5c:e2:80:0f:7a:5d:4c:c4:35:3a:94:
                    df:37:ce:28:32:f5:a3:98:c2:58:0a:c1:23:e4:8c:
                    ca:5a:2c:ad:37:4f:e3:1a:89:e6:11:95:88:80:98:
                    8c:bd:d7:66:9e:7a:a9:19:91:17:b3:6d:20:5f:ff:
                    eb:ff:cf:02:2c:f5:be:93:ec:f0:ab:b3:89:de:71:
                    de:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:03:A7:F2:8F:1B:0B:7B:13:E1:E8:33:A5:47:FD:B5:3D:AD:A5:D0
            X509v3 Authority Key Identifier:
                keyid:C2:75:9C:84:90:CB:C7:57:37:10:78:D2:CA:60:4D:6F:F8:EE:4C:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/fe716dea-6536-4d6e-b54b-bf7f73cf6b94/0/C2759C8490CBC757371078D2CA604D6FF8EE4C19.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2759C8490CBC757371078D2CA604D6FF8EE4C19.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fe716dea-6536-4d6e-b54b-bf7f73cf6b94/0/3130332e3130352e3131342e302f32342d3234203d3e20313431383837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.105.114.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:1e:70:6e:94:c2:9d:d8:26:e5:56:f0:06:c1:69:83:3a:be:
         fc:b2:62:11:62:a3:b0:5f:b7:4b:83:d9:ec:59:3d:ee:df:90:
         63:2c:0e:ee:7f:81:58:c8:d3:c7:99:df:30:f8:8c:7b:86:be:
         40:61:87:d5:b0:49:1f:ff:3d:01:43:d4:40:c8:f5:fc:79:70:
         3a:36:86:12:be:b6:8b:6c:02:3b:d3:5b:5d:f5:62:cc:68:2f:
         32:3c:08:25:1c:02:9d:c1:25:ea:ab:26:c7:ec:37:9a:37:b9:
         55:12:6a:bd:fb:f5:2d:fa:00:af:02:6f:ca:58:4c:8a:b9:91:
         16:d3:99:ed:6a:8b:dd:b4:6e:03:fe:73:33:ed:cf:39:a3:83:
         76:b9:b7:e6:f4:99:0b:df:3f:17:e1:84:29:af:ad:5f:c9:aa:
         25:50:8c:ce:02:26:a4:75:f3:d5:1e:a3:6e:97:6d:f2:66:91:
         ea:fc:78:48:7a:45:26:91:a8:ba:87:ec:2d:7a:27:b4:04:75:
         e0:b7:d2:84:6b:90:93:a6:0d:b6:15:58:1e:1e:0a:1e:d5:d2:
         13:aa:ba:2b:49:ce:4d:ae:ad:68:d5:60:10:11:8e:c5:6c:0f:
         01:be:b2:06:b4:32:d8:73:03:76:36:33:35:c7:0d:f6:1b:af:
         72:db:63:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 02:18:01 2025 by rpki-client