Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/5c285291-ce92-4144-9c18-9e8c191ddec6/0/3130332e3137342e3138302e302f32332d3233203d3e20313437313037.roa
File:                     3130332e3137342e3138302e302f32332d3233203d3e20313437313037.roa (raw, json)
Hash identifier:          oK3qw71PTaTu9zr3WTDr2kf09ZEsEk1iSGVob7ZwRo0=
Subject key identifier:   FA:5C:D1:50:E2:76:BB:91:FC:FD:BD:FA:BF:29:C1:3C:D7:9E:81:3D
Certificate issuer:       /CN=166B4918E7A1A1641E7C79C537833379E393522E
Certificate serial:       2302034D675CAB285E6F7177374372AFB02874A4
Authority key identifier: 16:6B:49:18:E7:A1:A1:64:1E:7C:79:C5:37:83:33:79:E3:93:52:2E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/166B4918E7A1A1641E7C79C537833379E393522E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5c285291-ce92-4144-9c18-9e8c191ddec6/0/3130332e3137342e3138302e302f32332d3233203d3e20313437313037.roa
Signing time:             Thu 31 Jul 2025 17:00:01 +0000
ROA not before:           Thu 31 Jul 2025 16:55:01 +0000
ROA not after:            Thu 30 Jul 2026 17:00:01 +0000
asID:                     147107
IP address blocks:        103.174.180.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/5c285291-ce92-4144-9c18-9e8c191ddec6/0/166B4918E7A1A1641E7C79C537833379E393522E.crl
                          rsync://repo-rpki.idnic.net/repo/5c285291-ce92-4144-9c18-9e8c191ddec6/0/166B4918E7A1A1641E7C79C537833379E393522E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/166B4918E7A1A1641E7C79C537833379E393522E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 09 Aug 2025 16:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:02:03:4d:67:5c:ab:28:5e:6f:71:77:37:43:72:af:b0:28:74:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=166B4918E7A1A1641E7C79C537833379E393522E
        Validity
            Not Before: Jul 31 16:55:01 2025 GMT
            Not After : Jul 30 17:00:01 2026 GMT
        Subject: CN=FA5CD150E276BB91FCFDBDFABF29C13CD79E813D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:e7:da:14:c4:d4:0a:d3:dd:63:3b:47:50:32:
                    82:1b:22:44:bd:1b:d9:48:ef:71:5d:d0:b2:4d:48:
                    b1:db:23:2f:1d:48:4e:2e:bf:c1:c3:9b:87:e2:57:
                    67:8e:98:e1:9e:61:46:15:44:b8:22:84:23:8d:7b:
                    1a:4c:fd:39:ba:86:c0:3d:98:f0:53:79:9f:1a:aa:
                    ae:20:e7:7f:f9:7e:c8:07:b9:36:b7:29:b4:a2:36:
                    fe:3e:73:62:72:e3:c7:42:c7:c5:79:82:6f:03:db:
                    78:e1:5a:ad:40:90:85:35:de:26:80:c5:cf:db:f1:
                    a3:54:dc:6d:d8:4b:66:de:37:1f:7b:ad:02:7c:07:
                    3a:fc:22:e8:71:f3:ea:42:cd:cc:3b:85:c9:e9:8a:
                    34:ef:1b:c9:b8:f8:b5:f4:be:cd:61:89:07:1a:25:
                    02:08:9f:5e:b9:2f:bb:d6:b1:bd:c8:b3:ca:da:39:
                    89:2f:ca:73:dd:37:d3:08:fd:e3:d2:0a:0a:dc:a8:
                    22:17:fc:b0:4c:1b:64:e2:30:c4:97:79:1b:b9:e6:
                    73:ca:fb:d0:64:63:39:d6:8b:af:f0:ce:fd:a4:31:
                    ec:92:a9:26:d3:71:4a:fc:34:5a:ab:e0:38:1d:ea:
                    da:6c:46:76:63:59:92:6b:ca:fe:57:02:05:c6:7c:
                    dc:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:5C:D1:50:E2:76:BB:91:FC:FD:BD:FA:BF:29:C1:3C:D7:9E:81:3D
            X509v3 Authority Key Identifier:
                keyid:16:6B:49:18:E7:A1:A1:64:1E:7C:79:C5:37:83:33:79:E3:93:52:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5c285291-ce92-4144-9c18-9e8c191ddec6/0/166B4918E7A1A1641E7C79C537833379E393522E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/166B4918E7A1A1641E7C79C537833379E393522E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5c285291-ce92-4144-9c18-9e8c191ddec6/0/3130332e3137342e3138302e302f32332d3233203d3e20313437313037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.174.180.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b3:0b:bb:12:33:76:f1:4c:c1:b6:6d:83:66:55:32:1d:5d:fd:
         96:2d:8d:6a:e3:17:59:ad:eb:da:63:ac:94:8b:e5:a8:f4:a1:
         3c:6b:ca:0c:93:78:1b:50:2e:da:d2:85:b5:25:c7:38:5c:1e:
         9b:4b:27:41:dc:3b:8c:4b:0a:00:7c:7b:51:ff:76:e9:df:0d:
         0d:5d:ea:a4:8d:e1:55:4d:c3:ec:87:1b:3b:ab:b8:aa:12:e8:
         a2:3a:73:34:c8:66:09:54:56:fb:30:a9:dc:b5:32:fa:8a:48:
         0d:e5:3b:2a:68:d1:b6:37:2b:fe:66:d4:a4:9e:10:7c:c1:e3:
         80:6f:9c:ac:dd:fe:ad:18:be:78:54:41:f1:30:9b:f4:6c:e2:
         2d:ce:82:12:ab:50:75:55:37:ce:33:98:62:b8:34:22:59:99:
         a0:d0:22:ec:fd:00:1c:26:b2:cf:97:fb:17:2b:61:92:16:f4:
         44:5c:88:bf:bc:ee:90:ed:2b:19:4e:cb:32:3e:d2:db:d2:5e:
         2d:0f:d2:1f:bf:d3:be:5e:e4:da:ad:06:f7:d3:2c:ed:34:66:
         2f:10:09:82:41:2e:ca:ee:0c:a3:24:6e:87:1c:88:53:db:b3:
         27:2b:ed:cf:cd:4f:71:1d:d2:90:bb:8e:37:62:23:c3:68:9f:
         84:ae:72:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 00:43:03 2025 by rpki-client