Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/0bb29378-45f0-49d3-a6af-573be7dca6d0/0/3130332e3137352e33382e302f32332d3234203d3e20313437313038.roa
File:                     3130332e3137352e33382e302f32332d3234203d3e20313437313038.roa (raw, json)
Hash identifier:          JG72NXt605ww3XbVNf9DT18KzObGZzgsJOiqL+ceVSI=
Subject key identifier:   42:E6:A3:D0:49:26:AB:E8:56:0F:E8:42:D0:C2:89:DB:99:07:99:57
Certificate issuer:       /CN=E014E6ED03537E453565D06E7B8A31AA8A0525A1
Certificate serial:       191AA2497196F074C30C6BC79CD20AABD72F61D3
Authority key identifier: E0:14:E6:ED:03:53:7E:45:35:65:D0:6E:7B:8A:31:AA:8A:05:25:A1
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E014E6ED03537E453565D06E7B8A31AA8A0525A1.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/0bb29378-45f0-49d3-a6af-573be7dca6d0/0/3130332e3137352e33382e302f32332d3234203d3e20313437313038.roa
Signing time:             Mon 04 Aug 2025 16:00:01 +0000
ROA not before:           Mon 04 Aug 2025 15:55:01 +0000
ROA not after:            Mon 03 Aug 2026 16:00:01 +0000
asID:                     147108
IP address blocks:        103.175.38.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/0bb29378-45f0-49d3-a6af-573be7dca6d0/0/E014E6ED03537E453565D06E7B8A31AA8A0525A1.crl
                          rsync://repo-rpki.idnic.net/repo/0bb29378-45f0-49d3-a6af-573be7dca6d0/0/E014E6ED03537E453565D06E7B8A31AA8A0525A1.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E014E6ED03537E453565D06E7B8A31AA8A0525A1.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 10 Aug 2025 07:05:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:1a:a2:49:71:96:f0:74:c3:0c:6b:c7:9c:d2:0a:ab:d7:2f:61:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E014E6ED03537E453565D06E7B8A31AA8A0525A1
        Validity
            Not Before: Aug  4 15:55:01 2025 GMT
            Not After : Aug  3 16:00:01 2026 GMT
        Subject: CN=42E6A3D04926ABE8560FE842D0C289DB99079957
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:09:c7:32:1c:2b:59:1e:4e:e6:38:80:03:07:
                    11:fc:a9:cc:41:e4:f1:a1:c1:f3:5b:74:5a:01:45:
                    69:79:36:84:b1:6b:19:b8:22:a9:8e:48:8d:c6:76:
                    eb:c1:e7:f1:2e:01:ef:d8:76:ff:40:da:5e:ee:04:
                    4c:0c:a2:e1:ae:4c:3b:1f:7e:28:92:da:ad:c2:b3:
                    6b:48:40:fe:82:c5:2e:9a:db:d9:f3:bc:4b:04:57:
                    69:ce:57:ca:19:5a:b9:69:e6:ac:92:de:4b:65:7e:
                    a9:a5:e7:0b:e8:6c:34:c9:ea:a8:cd:35:bc:d9:48:
                    55:c9:88:09:a6:d6:2f:c6:9c:4f:ae:40:a0:7c:e1:
                    4c:c1:66:58:96:0c:49:d6:27:11:87:e2:bd:27:df:
                    e1:c0:a7:84:8c:26:80:02:30:19:1f:b1:54:a6:47:
                    53:d4:7c:12:00:f5:dd:8a:b8:53:6e:9b:3f:2c:1e:
                    49:ff:3c:0a:83:12:2c:8c:02:5c:15:4a:26:c6:b5:
                    c1:40:1c:e3:a9:44:08:91:a8:22:b7:fc:8c:6b:23:
                    90:7c:9f:7d:f4:6a:a4:78:73:da:7f:85:20:ed:2c:
                    67:24:f6:ee:19:d1:b6:ce:eb:00:76:06:9a:27:72:
                    2c:4b:eb:61:b0:3f:d0:79:58:ff:b8:75:a8:ad:09:
                    b1:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:E6:A3:D0:49:26:AB:E8:56:0F:E8:42:D0:C2:89:DB:99:07:99:57
            X509v3 Authority Key Identifier:
                keyid:E0:14:E6:ED:03:53:7E:45:35:65:D0:6E:7B:8A:31:AA:8A:05:25:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/0bb29378-45f0-49d3-a6af-573be7dca6d0/0/E014E6ED03537E453565D06E7B8A31AA8A0525A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E014E6ED03537E453565D06E7B8A31AA8A0525A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0bb29378-45f0-49d3-a6af-573be7dca6d0/0/3130332e3137352e33382e302f32332d3234203d3e20313437313038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.175.38.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6e:8b:fa:7b:0f:ad:ed:62:d5:fa:7d:9a:c3:48:68:41:2e:99:
         4b:59:df:b1:e1:46:b1:80:97:81:b8:13:f2:a2:21:f2:a5:fb:
         06:ee:aa:29:99:f0:fd:3a:6b:93:99:bc:d3:54:25:cb:22:16:
         55:ca:39:86:be:6d:c9:8f:d8:45:e9:df:46:c5:f1:c3:02:95:
         b2:3f:ad:42:12:36:42:49:ae:99:1f:5c:62:f2:13:07:4e:db:
         60:41:1e:5a:5c:c8:e7:79:e6:da:ca:75:24:fb:ad:b8:72:90:
         ad:e3:2c:d5:b2:80:cf:80:39:14:ec:f6:38:62:6a:25:e5:fd:
         88:fd:00:fe:ae:ef:5f:c1:b3:ed:d5:cb:61:16:3d:4f:cd:8b:
         3c:57:b7:eb:48:69:a8:5c:04:4d:e8:f9:3f:09:1a:4b:06:60:
         90:1e:79:c0:30:d1:67:25:e8:ad:30:e7:c7:ee:e4:31:bf:e9:
         db:1b:18:04:3a:98:c2:58:f1:bc:65:89:6c:20:5c:d0:dc:ea:
         f7:eb:cd:a0:c2:00:02:f2:dd:18:e6:96:87:92:aa:43:41:b4:
         4c:ec:13:ae:38:40:7c:3d:b0:19:73:19:a3:89:76:ca:c7:20:
         28:88:60:46:78:b9:10:d3:74:94:20:d8:a0:27:18:fd:b2:b9:
         ac:e4:8f:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 00:00:51 2025 by rpki-client