Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/4759476e-6adb-4f2e-be75-8467259e128f/0/3130332e31372e3134322e302f32332d3233203d3e2039333431.roa
File:                     3130332e31372e3134322e302f32332d3233203d3e2039333431.roa (raw, json)
Hash identifier:          7zBTS0bU7PgzGa8PCcebIzMScdeyLBIAzKr1yoDxbbo=
Subject key identifier:   DA:F7:F5:EA:D7:E6:F1:C8:24:0C:7B:B6:ED:7A:46:99:A9:F7:8B:B0
Certificate issuer:       /CN=AEDA3A6876F2BB6E33C81BB28B08F9F36C80DC40
Certificate serial:       25953F9837EE664522DDE16DBF80FACEC49D3E80
Authority key identifier: AE:DA:3A:68:76:F2:BB:6E:33:C8:1B:B2:8B:08:F9:F3:6C:80:DC:40
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEDA3A6876F2BB6E33C81BB28B08F9F36C80DC40.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/4759476e-6adb-4f2e-be75-8467259e128f/0/3130332e31372e3134322e302f32332d3233203d3e2039333431.roa
Signing time:             Mon 28 Jul 2025 15:00:00 +0000
ROA not before:           Mon 28 Jul 2025 14:55:00 +0000
ROA not after:            Mon 27 Jul 2026 15:00:00 +0000
asID:                     9341
IP address blocks:        103.17.142.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/4759476e-6adb-4f2e-be75-8467259e128f/0/AEDA3A6876F2BB6E33C81BB28B08F9F36C80DC40.crl
                          rsync://repo-rpki.idnic.net/repo/4759476e-6adb-4f2e-be75-8467259e128f/0/AEDA3A6876F2BB6E33C81BB28B08F9F36C80DC40.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEDA3A6876F2BB6E33C81BB28B08F9F36C80DC40.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 10 Aug 2025 05:56:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:95:3f:98:37:ee:66:45:22:dd:e1:6d:bf:80:fa:ce:c4:9d:3e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEDA3A6876F2BB6E33C81BB28B08F9F36C80DC40
        Validity
            Not Before: Jul 28 14:55:00 2025 GMT
            Not After : Jul 27 15:00:00 2026 GMT
        Subject: CN=DAF7F5EAD7E6F1C8240C7BB6ED7A4699A9F78BB0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:01:72:04:34:eb:35:d1:f0:fd:75:89:d0:d2:
                    b1:d6:5d:6d:98:fb:60:cb:40:d8:f5:45:0a:fa:08:
                    c1:da:f5:c5:bc:9e:b4:10:6c:5e:7f:a0:24:81:97:
                    bd:1b:e3:4c:74:fa:c0:35:55:e3:35:0e:65:14:c0:
                    5f:f7:d2:e9:8f:6b:78:45:67:87:69:45:96:18:5c:
                    09:ea:ba:9c:82:20:9a:af:61:23:e7:9e:0e:9d:e9:
                    ca:76:a2:7a:10:04:f4:01:ec:ac:db:1c:25:cc:c7:
                    8d:42:66:c5:b6:20:24:69:f9:93:5c:2d:65:de:a3:
                    97:86:5e:11:63:b6:8e:cf:62:98:77:08:00:e1:7c:
                    5c:d3:ae:26:13:50:25:d4:5d:55:18:d3:8e:28:e9:
                    07:6e:b0:29:7f:ea:48:9b:57:c9:c0:59:7f:08:a3:
                    dd:3f:2a:7c:60:75:56:3f:4a:2d:35:3d:4f:e9:fd:
                    90:40:b4:44:4b:96:f2:2d:41:23:4b:f2:66:be:df:
                    62:4f:98:6f:ae:96:a9:10:d7:9b:9d:ac:ff:d8:87:
                    58:64:61:85:c4:e6:12:7d:99:14:bb:17:7f:72:22:
                    4d:c7:76:58:84:29:91:91:ee:b7:df:ba:97:56:05:
                    19:c0:fc:c1:88:89:ab:25:8e:b9:22:e4:a4:c3:ea:
                    b1:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:F7:F5:EA:D7:E6:F1:C8:24:0C:7B:B6:ED:7A:46:99:A9:F7:8B:B0
            X509v3 Authority Key Identifier:
                keyid:AE:DA:3A:68:76:F2:BB:6E:33:C8:1B:B2:8B:08:F9:F3:6C:80:DC:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/4759476e-6adb-4f2e-be75-8467259e128f/0/AEDA3A6876F2BB6E33C81BB28B08F9F36C80DC40.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEDA3A6876F2BB6E33C81BB28B08F9F36C80DC40.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4759476e-6adb-4f2e-be75-8467259e128f/0/3130332e31372e3134322e302f32332d3233203d3e2039333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.17.142.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b4:97:0a:2e:fd:13:93:f4:66:54:93:8b:1d:69:66:f1:53:9d:
         0b:32:bc:49:60:4f:0e:ea:77:90:38:18:4f:47:fb:92:93:f9:
         a6:f1:b8:e8:ce:a4:7a:e5:dc:4f:4b:df:10:e3:1e:c9:22:73:
         ed:a6:b2:5a:84:45:b9:2d:f2:cc:28:d1:48:d1:5f:32:2e:14:
         fc:7f:29:e4:03:5d:17:09:14:ab:a8:39:b8:dd:54:f9:ca:28:
         8c:73:dd:f0:5a:37:6d:12:84:a3:9f:87:99:ce:5c:3a:fb:78:
         46:57:8c:66:75:5b:b3:50:c2:52:7b:a5:f7:b6:79:97:2c:9c:
         60:51:2b:16:90:3c:a9:1e:b4:c9:ce:4e:ba:07:2e:9d:5c:75:
         20:0b:2a:1a:8d:af:b5:90:63:5c:73:ec:0f:2b:70:b7:2b:de:
         56:24:90:56:85:40:30:c8:6f:9d:f8:7c:3c:ae:81:29:6b:2f:
         01:f6:e5:34:db:71:e6:44:29:df:95:16:a6:0e:a7:93:72:0b:
         ff:dc:a0:d5:e5:56:5d:6a:16:d6:2b:a5:24:e1:2a:e9:24:e8:
         e2:33:06:8a:0a:e4:3d:8b:1d:45:18:9c:27:a7:d5:e0:6a:74:
         e4:6a:9b:de:da:14:23:ed:6f:f3:65:4f:c5:a6:0f:09:ba:09:
         4b:d2:ef:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 23:56:22 2025 by rpki-client