Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/05eab442-7480-4581-81dd-23a200614382/0/3130332e3137392e3231362e302f32332d3234203d3e20313339343439.roa
File:                     3130332e3137392e3231362e302f32332d3234203d3e20313339343439.roa (raw, json)
Hash identifier:          5sf8re0mhnirNB/CVBjr3dugWUOEZnIAdNv5SsfjaIQ=
Subject key identifier:   9D:72:89:0A:54:20:2A:79:A3:68:7F:A7:43:D1:35:B5:EB:8B:A7:91
Certificate issuer:       /CN=71C1EFD5DFDE20418A49070671B01D675F9A8917
Certificate serial:       5BA86A94B35B490094B86B1464FC154E01D9ABE3
Authority key identifier: 71:C1:EF:D5:DF:DE:20:41:8A:49:07:06:71:B0:1D:67:5F:9A:89:17
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71C1EFD5DFDE20418A49070671B01D675F9A8917.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/05eab442-7480-4581-81dd-23a200614382/0/3130332e3137392e3231362e302f32332d3234203d3e20313339343439.roa
Signing time:             Sun 26 Oct 2025 06:00:00 +0000
ROA not before:           Sun 26 Oct 2025 05:55:00 +0000
ROA not after:            Sun 25 Oct 2026 06:00:00 +0000
asID:                     139449
IP address blocks:        103.179.216.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/05eab442-7480-4581-81dd-23a200614382/0/71C1EFD5DFDE20418A49070671B01D675F9A8917.crl
                          rsync://repo-rpki.idnic.net/repo/05eab442-7480-4581-81dd-23a200614382/0/71C1EFD5DFDE20418A49070671B01D675F9A8917.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71C1EFD5DFDE20418A49070671B01D675F9A8917.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 06 Nov 2025 22:42:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:a8:6a:94:b3:5b:49:00:94:b8:6b:14:64:fc:15:4e:01:d9:ab:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71C1EFD5DFDE20418A49070671B01D675F9A8917
        Validity
            Not Before: Oct 26 05:55:00 2025 GMT
            Not After : Oct 25 06:00:00 2026 GMT
        Subject: CN=9D72890A54202A79A3687FA743D135B5EB8BA791
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f4:ca:ba:db:a8:d6:d9:c5:38:46:80:71:a1:
                    e9:45:92:db:0a:3d:4e:e5:d7:84:60:81:55:ad:d5:
                    a1:1b:a5:0f:45:a3:a1:4a:7c:14:ba:a3:d5:2d:78:
                    8c:e4:28:f9:5a:9d:32:65:ad:47:ad:5b:6b:e2:ef:
                    61:4e:19:c8:02:eb:de:0a:f1:97:5d:b9:3c:f8:0c:
                    0a:73:36:eb:31:f7:3c:e4:85:2c:c2:38:ef:92:7b:
                    a3:bc:4c:17:8f:6b:ba:89:61:56:77:18:5a:b3:af:
                    49:4a:31:41:09:17:a5:76:05:76:a5:e5:2d:a9:79:
                    c8:88:46:ff:84:a5:c2:29:d1:41:e1:a9:24:b8:d4:
                    d1:b0:2a:57:ba:e0:50:21:fc:93:dc:fe:4f:1b:b6:
                    5d:cb:09:33:ea:aa:a9:49:48:0f:d5:9f:ab:76:d2:
                    b4:4c:97:c5:e8:24:6a:fd:b3:2a:a7:49:64:f5:30:
                    62:06:bf:58:64:bf:8e:a0:73:f0:24:78:aa:23:42:
                    ff:44:ca:56:32:bc:50:4d:60:6d:2f:66:13:d0:1a:
                    1d:00:89:5d:f0:ac:01:4c:92:17:74:eb:3b:9d:e4:
                    93:0e:d3:98:c5:87:18:99:7c:a2:0a:fd:1d:d6:34:
                    e0:da:cf:21:62:43:f7:43:ca:f0:16:7e:71:f3:18:
                    e7:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:72:89:0A:54:20:2A:79:A3:68:7F:A7:43:D1:35:B5:EB:8B:A7:91
            X509v3 Authority Key Identifier:
                keyid:71:C1:EF:D5:DF:DE:20:41:8A:49:07:06:71:B0:1D:67:5F:9A:89:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/05eab442-7480-4581-81dd-23a200614382/0/71C1EFD5DFDE20418A49070671B01D675F9A8917.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71C1EFD5DFDE20418A49070671B01D675F9A8917.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/05eab442-7480-4581-81dd-23a200614382/0/3130332e3137392e3231362e302f32332d3234203d3e20313339343439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.179.216.0/23

    Signature Algorithm: sha256WithRSAEncryption
         bd:fa:ef:a6:42:0f:ab:5c:68:2e:ee:5a:3d:dc:de:93:5b:75:
         b9:5b:b3:77:61:36:da:f1:20:8b:f1:08:e0:11:7b:af:c6:65:
         54:c4:c1:3d:8b:61:e9:6d:6d:20:68:7a:fc:6f:b4:61:06:87:
         cf:8d:73:8a:dc:f5:8c:04:47:f5:20:c4:b0:56:a1:61:a1:94:
         64:75:bd:89:9a:d7:e1:53:61:0a:f6:88:50:10:ed:59:3c:be:
         7e:37:e9:4b:5b:50:48:28:c5:6d:3b:db:a6:70:c0:d8:49:61:
         21:4a:f8:ed:9c:50:4a:46:2b:10:02:f3:4b:4a:c4:8d:2e:89:
         7e:0c:a7:51:4f:f3:a6:b3:00:12:98:e1:e9:b6:bc:10:73:31:
         f5:e7:6c:f6:1c:55:c9:a9:47:af:be:9b:93:3f:b8:da:2f:86:
         4b:8b:d0:d8:7a:95:64:01:ae:0e:26:b7:da:5a:6d:db:14:c2:
         8e:46:34:d1:11:29:33:6d:f6:a3:56:6a:ce:a4:a3:9e:ee:48:
         7d:53:11:ee:df:a0:bb:35:80:eb:77:42:b8:e6:a0:99:08:f0:
         d4:c2:3b:af:d9:79:3c:35:4b:44:5b:1d:3d:f2:2c:83:de:0f:
         99:99:92:07:ab:44:ac:4b:5f:21:d1:f3:90:7d:be:e6:dd:84:
         26:ab:70:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:30:38 2025 by rpki-client