Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/2bd30587-a7ca-4195-a359-0c0f627af8da/0/3130332e3135372e36322e302f32342d3234203d3e20313439393736.roa
File:                     3130332e3135372e36322e302f32342d3234203d3e20313439393736.roa (raw, json)
Hash identifier:          umdrRzgp8Ciqeng1bs/crkT4xOCEEqpUSt3z8J2SnuY=
Subject key identifier:   B5:04:EF:9E:78:CB:37:F1:06:25:7C:0E:CB:B0:2D:5F:FE:E9:A5:2B
Certificate issuer:       /CN=798944F7FBC57D5CFBF5F1BB680F2D73CAD26DD5
Certificate serial:       1E3326A7688FF6855CF7CF105AAF361C5CFC1DA0
Authority key identifier: 79:89:44:F7:FB:C5:7D:5C:FB:F5:F1:BB:68:0F:2D:73:CA:D2:6D:D5
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/798944F7FBC57D5CFBF5F1BB680F2D73CAD26DD5.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2bd30587-a7ca-4195-a359-0c0f627af8da/0/3130332e3135372e36322e302f32342d3234203d3e20313439393736.roa
Signing time:             Fri 04 Jul 2025 18:00:02 +0000
ROA not before:           Fri 04 Jul 2025 17:55:02 +0000
ROA not after:            Fri 03 Jul 2026 18:00:02 +0000
asID:                     149976
IP address blocks:        103.157.62.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/2bd30587-a7ca-4195-a359-0c0f627af8da/0/798944F7FBC57D5CFBF5F1BB680F2D73CAD26DD5.crl
                          rsync://repo-rpki.idnic.net/repo/2bd30587-a7ca-4195-a359-0c0f627af8da/0/798944F7FBC57D5CFBF5F1BB680F2D73CAD26DD5.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/798944F7FBC57D5CFBF5F1BB680F2D73CAD26DD5.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 10 Aug 2025 19:08:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:33:26:a7:68:8f:f6:85:5c:f7:cf:10:5a:af:36:1c:5c:fc:1d:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=798944F7FBC57D5CFBF5F1BB680F2D73CAD26DD5
        Validity
            Not Before: Jul  4 17:55:02 2025 GMT
            Not After : Jul  3 18:00:02 2026 GMT
        Subject: CN=B504EF9E78CB37F106257C0ECBB02D5FFEE9A52B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:68:9b:32:36:89:bb:b1:ab:87:3d:4f:3c:cb:
                    61:2c:18:2c:37:dd:39:30:c6:a5:e3:ac:23:c1:1e:
                    31:30:30:49:15:ff:11:5f:71:bc:84:af:0f:11:c6:
                    5c:7c:4d:7f:22:cb:6d:89:d1:c0:9b:3f:04:cc:52:
                    dd:74:f1:7f:46:54:92:7c:8f:b0:6d:71:d3:d8:75:
                    76:52:b4:85:de:e4:73:1e:cc:f3:55:df:0e:7a:07:
                    94:09:7f:65:81:2b:76:ce:5a:e1:7f:2a:f0:7b:c3:
                    cc:1c:22:0d:eb:75:db:4b:82:92:b4:ac:36:71:01:
                    b1:f6:1f:eb:52:d7:d5:d9:7c:f9:bb:02:c0:59:f8:
                    c9:36:57:41:a2:a6:dc:b3:2c:a4:25:cc:20:c2:f8:
                    2d:5a:fd:6c:4a:a5:8a:b6:77:94:f0:07:6f:5f:f9:
                    85:f8:c9:7b:f2:7c:38:62:41:fa:18:d1:df:52:03:
                    21:71:8e:37:d8:a0:4b:94:63:cf:45:95:00:ee:f2:
                    07:a2:9c:5f:3a:f6:0e:4a:a0:65:3c:8d:15:4b:74:
                    1d:0d:b8:2e:fb:6c:e3:10:7c:0a:29:d0:a8:c4:8d:
                    35:01:0d:10:8e:16:fa:3a:33:68:be:32:f7:31:a6:
                    ea:37:a4:5c:e6:1a:e2:8e:a1:d7:ea:db:d3:09:6e:
                    02:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:04:EF:9E:78:CB:37:F1:06:25:7C:0E:CB:B0:2D:5F:FE:E9:A5:2B
            X509v3 Authority Key Identifier:
                keyid:79:89:44:F7:FB:C5:7D:5C:FB:F5:F1:BB:68:0F:2D:73:CA:D2:6D:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2bd30587-a7ca-4195-a359-0c0f627af8da/0/798944F7FBC57D5CFBF5F1BB680F2D73CAD26DD5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/798944F7FBC57D5CFBF5F1BB680F2D73CAD26DD5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2bd30587-a7ca-4195-a359-0c0f627af8da/0/3130332e3135372e36322e302f32342d3234203d3e20313439393736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.157.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:05:2e:53:d7:e2:17:9c:58:df:16:d9:db:d9:9a:2f:86:e6:
         dc:1d:38:0a:bc:57:aa:eb:b4:94:b0:1b:29:b1:88:37:58:7e:
         13:41:af:d5:be:94:86:f9:43:7e:5d:e3:cf:2e:d1:f9:16:d3:
         fb:87:fe:d6:b8:e0:30:da:f5:92:6d:b6:5c:8e:70:db:74:e8:
         b3:c0:9a:f6:fe:bd:3e:73:9a:44:62:8c:08:c5:50:d2:76:7b:
         f8:1a:64:b0:13:01:ef:21:1b:fb:4c:c5:25:12:32:1d:3f:69:
         26:7f:dc:d1:9b:f4:4e:bc:e7:ab:e6:ec:6d:4f:7f:98:30:d4:
         b9:3b:4c:9c:eb:61:d0:53:2e:82:99:1b:06:f5:66:57:c7:a3:
         02:2a:80:85:2a:65:36:13:53:90:8f:ea:2c:6b:c6:39:ec:a9:
         b1:6c:f8:7f:46:41:18:78:52:c7:ba:9d:17:5a:54:9a:5a:cf:
         7a:d2:dd:f1:e1:23:9a:65:4a:b7:1e:f4:14:d0:82:7d:53:98:
         99:4e:0f:c6:ac:01:03:14:c8:48:d4:65:ff:46:a4:4d:ba:81:
         6b:b3:ff:96:f7:e4:4f:22:fc:70:aa:95:2e:b2:31:90:20:33:
         4b:85:0e:89:6a:9b:da:bd:d5:fe:57:6d:51:60:06:d3:eb:c8:
         8b:d7:11:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 00:43:06 2025 by rpki-client