Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/429f8902-1a06-45a8-a998-72e46aaae8fc/0/3130332e3136362e3235352e302f32342d3234203d3e20313431393636.roa
File:                     3130332e3136362e3235352e302f32342d3234203d3e20313431393636.roa (raw, json)
Hash identifier:          xce0AmVhdIuoA0s5G07BTYqxfWM/i2bbCDllzfV1P80=
Subject key identifier:   85:21:79:19:B3:84:BB:FC:C9:ED:F3:AE:CA:22:19:BF:52:A5:EB:59
Certificate issuer:       /CN=30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45
Certificate serial:       1A2C161177B3806B4056A60FF8A61882C6CF7C27
Authority key identifier: 30:E2:B4:61:7B:8B:9C:FC:4F:C5:7B:1C:5A:4D:74:FC:7E:91:2D:45
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/429f8902-1a06-45a8-a998-72e46aaae8fc/0/3130332e3136362e3235352e302f32342d3234203d3e20313431393636.roa
Signing time:             Sat 26 Jul 2025 03:00:01 +0000
ROA not before:           Sat 26 Jul 2025 02:55:01 +0000
ROA not after:            Sat 25 Jul 2026 03:00:01 +0000
asID:                     141966
IP address blocks:        103.166.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/429f8902-1a06-45a8-a998-72e46aaae8fc/0/30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45.crl
                          rsync://repo-rpki.idnic.net/repo/429f8902-1a06-45a8-a998-72e46aaae8fc/0/30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 10 Aug 2025 10:35:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:2c:16:11:77:b3:80:6b:40:56:a6:0f:f8:a6:18:82:c6:cf:7c:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45
        Validity
            Not Before: Jul 26 02:55:01 2025 GMT
            Not After : Jul 25 03:00:01 2026 GMT
        Subject: CN=85217919B384BBFCC9EDF3AECA2219BF52A5EB59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d1:e0:d0:1b:20:8c:fb:b3:98:83:72:5a:2f:
                    42:75:05:78:7e:61:c8:11:41:13:d0:27:bc:49:21:
                    f5:a9:c5:06:49:44:c6:f9:5b:bd:97:f0:58:8f:81:
                    b3:f7:2b:83:47:20:d1:fd:39:7f:55:df:93:ef:ff:
                    be:ae:14:32:ba:0e:9a:85:40:07:5c:6c:90:07:1f:
                    75:3c:82:51:94:5a:a6:39:c2:4a:ed:b2:b4:15:b5:
                    e0:35:d0:13:71:35:6a:a5:04:5f:4c:82:ca:0c:6d:
                    50:f2:9c:15:66:af:cf:5c:48:ff:99:64:fb:c9:fc:
                    8a:77:08:6b:71:97:c9:04:09:8a:64:e2:31:aa:9f:
                    4b:98:4b:68:ad:eb:25:59:39:ea:99:86:6a:75:8a:
                    c9:35:dc:8d:78:89:7b:7c:47:b0:9d:79:ec:d7:0e:
                    3a:38:6b:3d:20:53:c4:53:5d:4a:d6:bc:52:0f:f0:
                    99:80:1e:65:d5:cf:dd:f9:0e:eb:46:f8:b4:6a:60:
                    0a:86:16:5f:6d:3d:4b:56:0f:2d:dd:7a:d1:c8:37:
                    ef:b7:0e:3f:5a:da:57:b6:12:a1:03:a6:d3:a4:ee:
                    31:aa:76:7b:97:8d:ce:67:1f:74:d7:9d:f8:c8:da:
                    c7:49:73:73:7b:26:1a:24:2f:5e:f9:f3:9e:04:36:
                    47:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:21:79:19:B3:84:BB:FC:C9:ED:F3:AE:CA:22:19:BF:52:A5:EB:59
            X509v3 Authority Key Identifier:
                keyid:30:E2:B4:61:7B:8B:9C:FC:4F:C5:7B:1C:5A:4D:74:FC:7E:91:2D:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/429f8902-1a06-45a8-a998-72e46aaae8fc/0/30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/429f8902-1a06-45a8-a998-72e46aaae8fc/0/3130332e3136362e3235352e302f32342d3234203d3e20313431393636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.166.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bb:d2:27:c8:15:a0:ce:0b:27:8d:f5:6c:cc:68:d8:3d:04:a4:
         3e:dc:40:60:f0:8c:b9:68:40:08:00:cf:f5:c8:d8:6b:13:b0:
         a7:f8:4e:f3:82:e0:39:3f:ce:af:c1:a3:06:72:42:75:8a:b5:
         8f:f2:31:78:9e:d9:65:3e:ee:3e:a5:33:5f:33:4f:9b:d2:3e:
         87:80:26:b2:08:62:fd:f1:62:45:50:c6:8d:b6:3b:70:68:04:
         9a:34:d0:75:f2:27:35:86:a7:1d:9f:a8:55:41:ff:ac:dc:2d:
         aa:1e:0c:7b:d5:ac:9e:30:c1:6a:12:1d:03:38:b4:7c:b2:a9:
         ed:f0:04:8a:4d:48:24:e8:69:7a:00:27:2b:dc:b7:53:ce:6c:
         16:63:bf:83:32:35:20:fb:56:09:92:36:77:bd:cc:1d:86:87:
         64:6b:ff:b9:e8:ef:25:a0:13:9e:7d:0c:5d:20:1f:da:93:1e:
         ab:bc:64:20:b6:f0:48:eb:ad:cc:46:32:3c:0f:15:66:fc:dd:
         25:5b:08:c9:db:33:6a:81:9a:7b:ef:97:39:8b:d9:f2:d9:29:
         20:14:f3:36:24:3e:21:61:e9:f2:38:ba:2e:9e:bd:19:08:e6:
         48:36:5c:f6:45:56:e1:d6:9e:9d:b1:a3:b1:6c:50:a6:a9:3e:
         e1:8c:ee:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 20:12:35 2025 by rpki-client