Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/5c285291-ce92-4144-9c18-9e8c191ddec6/0/3130332e3137342e3138302e302f32342d3234203d3e20313437313037.roa
File:                     3130332e3137342e3138302e302f32342d3234203d3e20313437313037.roa (raw, json)
Hash identifier:          WsHwgNa1eu27mA5KJGjHDisSyyKknyjiNT1hKbJ/YGc=
Subject key identifier:   F6:92:DF:83:0F:4D:92:DC:CD:FF:99:FE:B0:4E:08:FA:C2:78:E2:81
Certificate issuer:       /CN=166B4918E7A1A1641E7C79C537833379E393522E
Certificate serial:       25F681921151CE4DB67EA02644AECE8E720B335A
Authority key identifier: 16:6B:49:18:E7:A1:A1:64:1E:7C:79:C5:37:83:33:79:E3:93:52:2E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/166B4918E7A1A1641E7C79C537833379E393522E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5c285291-ce92-4144-9c18-9e8c191ddec6/0/3130332e3137342e3138302e302f32342d3234203d3e20313437313037.roa
Signing time:             Wed 06 Aug 2025 11:01:31 +0000
ROA not before:           Wed 06 Aug 2025 10:56:31 +0000
ROA not after:            Wed 05 Aug 2026 11:01:31 +0000
asID:                     147107
IP address blocks:        103.174.180.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/5c285291-ce92-4144-9c18-9e8c191ddec6/0/166B4918E7A1A1641E7C79C537833379E393522E.crl
                          rsync://repo-rpki.idnic.net/repo/5c285291-ce92-4144-9c18-9e8c191ddec6/0/166B4918E7A1A1641E7C79C537833379E393522E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/166B4918E7A1A1641E7C79C537833379E393522E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 12 Aug 2025 00:46:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:f6:81:92:11:51:ce:4d:b6:7e:a0:26:44:ae:ce:8e:72:0b:33:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=166B4918E7A1A1641E7C79C537833379E393522E
        Validity
            Not Before: Aug  6 10:56:31 2025 GMT
            Not After : Aug  5 11:01:31 2026 GMT
        Subject: CN=F692DF830F4D92DCCDFF99FEB04E08FAC278E281
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:fa:f5:c5:9b:22:a8:6d:ac:47:6f:c1:a6:35:
                    be:bc:50:55:b5:10:94:a1:96:38:1f:2e:74:9f:b0:
                    3f:19:02:01:4c:96:6f:95:f2:9c:1d:1b:74:91:67:
                    96:49:25:71:3c:19:2f:48:73:60:f7:e8:0e:54:34:
                    e0:86:d6:a6:5b:22:0c:98:a9:fa:6b:79:75:18:da:
                    da:c1:b9:8d:3c:83:79:b2:f4:0a:19:94:9f:01:cf:
                    74:35:27:95:fb:11:72:3a:9e:d7:82:da:c8:4c:9f:
                    35:40:21:ee:90:bd:72:b7:83:9c:dd:07:19:17:ae:
                    2c:74:cf:1a:d1:e6:64:72:d8:d8:6e:13:ed:b2:ac:
                    fc:a2:8d:d8:8f:a9:88:cd:f7:f9:48:0b:d4:a5:b2:
                    dc:65:a3:db:1d:06:26:1b:cb:f2:ee:74:41:d0:b5:
                    7c:4c:c5:1a:08:35:87:e4:86:90:0c:6c:32:b4:c9:
                    7d:2e:c4:1e:3a:cb:5f:f9:9e:bf:b7:b9:bc:af:fd:
                    f8:2d:15:d4:b4:90:c8:20:0d:6c:06:cc:69:cc:b1:
                    54:2e:dd:ed:1a:84:f5:1b:45:59:7b:4d:3a:27:4a:
                    f6:b2:a0:90:54:45:ad:52:48:a8:24:40:0a:ec:16:
                    55:2f:67:96:2f:d6:69:1f:d3:33:a4:08:49:1c:b1:
                    79:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:92:DF:83:0F:4D:92:DC:CD:FF:99:FE:B0:4E:08:FA:C2:78:E2:81
            X509v3 Authority Key Identifier:
                keyid:16:6B:49:18:E7:A1:A1:64:1E:7C:79:C5:37:83:33:79:E3:93:52:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5c285291-ce92-4144-9c18-9e8c191ddec6/0/166B4918E7A1A1641E7C79C537833379E393522E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/166B4918E7A1A1641E7C79C537833379E393522E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5c285291-ce92-4144-9c18-9e8c191ddec6/0/3130332e3137342e3138302e302f32342d3234203d3e20313437313037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.174.180.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:d0:dd:56:1d:0a:41:d6:40:85:c8:9b:ff:1e:09:67:12:5b:
         c7:fb:b7:16:fd:77:35:70:36:ce:52:6c:ee:2d:c9:f8:45:f3:
         17:8d:c4:ff:5b:f9:52:01:1a:96:6c:dd:4e:c3:b1:0e:c3:af:
         df:4d:33:b5:42:d0:05:98:a0:cc:9e:d1:4a:3e:5e:7f:74:ce:
         2b:19:b5:29:fe:29:a5:55:57:5f:2d:13:98:8e:c4:49:61:f4:
         a6:1b:18:f4:0e:48:01:93:a4:d6:ec:69:f5:79:a4:c2:a6:0b:
         29:7a:e4:19:5e:cf:5e:b5:50:2b:e7:70:5f:7a:9c:69:31:3a:
         65:cb:79:af:d9:ce:c3:19:33:80:fe:75:cc:7c:91:4f:50:57:
         f3:21:d4:43:06:70:b7:64:09:09:00:3a:eb:c4:cf:a0:85:4a:
         07:99:32:13:42:e0:65:ba:39:ff:0e:4c:ed:2c:e7:d4:30:82:
         3d:06:77:7b:95:0b:5c:07:c3:3d:22:1d:a2:71:f5:19:59:a6:
         e4:5e:06:e7:49:9f:1f:c8:24:08:ea:c7:a7:da:1a:91:56:b6:
         ca:c5:5a:99:69:aa:8f:f0:4a:55:02:f7:9d:cf:9e:bb:23:a7:
         ce:ce:92:68:59:f6:c5:65:f1:17:16:c4:94:b2:bb:af:35:bf:
         dc:65:6a:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 19:34:48 2025 by rpki-client