Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/6132a740-bd7d-46b8-b10a-a7a703e350f2/0/3130332e3230322e3232372e302f32342d3234203d3e20313334363335.roa
File:                     3130332e3230322e3232372e302f32342d3234203d3e20313334363335.roa (raw, json)
Hash identifier:          nH1oMcdoDvuHP/DwzkTAyZckDG1Pwn9g7DHCrhDPMiw=
Subject key identifier:   7F:CE:41:ED:D1:6E:67:43:AB:73:07:1C:6B:22:81:5D:01:C1:EC:5B
Certificate issuer:       /CN=7701FBF4A9C9B559888F02656447A3AA1963811C
Certificate serial:       4C01BEE2714D608AEF7BA8138039094A9AD10930
Authority key identifier: 77:01:FB:F4:A9:C9:B5:59:88:8F:02:65:64:47:A3:AA:19:63:81:1C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7701FBF4A9C9B559888F02656447A3AA1963811C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6132a740-bd7d-46b8-b10a-a7a703e350f2/0/3130332e3230322e3232372e302f32342d3234203d3e20313334363335.roa
Signing time:             Fri 25 Jul 2025 07:00:02 +0000
ROA not before:           Fri 25 Jul 2025 06:55:02 +0000
ROA not after:            Fri 24 Jul 2026 07:00:02 +0000
asID:                     134635
IP address blocks:        103.202.227.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/6132a740-bd7d-46b8-b10a-a7a703e350f2/0/7701FBF4A9C9B559888F02656447A3AA1963811C.crl
                          rsync://repo-rpki.idnic.net/repo/6132a740-bd7d-46b8-b10a-a7a703e350f2/0/7701FBF4A9C9B559888F02656447A3AA1963811C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7701FBF4A9C9B559888F02656447A3AA1963811C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 10 Aug 2025 21:34:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:01:be:e2:71:4d:60:8a:ef:7b:a8:13:80:39:09:4a:9a:d1:09:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7701FBF4A9C9B559888F02656447A3AA1963811C
        Validity
            Not Before: Jul 25 06:55:02 2025 GMT
            Not After : Jul 24 07:00:02 2026 GMT
        Subject: CN=7FCE41EDD16E6743AB73071C6B22815D01C1EC5B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:36:1f:fe:eb:93:69:bb:20:ec:de:eb:e4:21:
                    72:9f:48:8f:0f:9f:e7:8e:5a:5d:9a:bb:48:7c:82:
                    2f:9c:cf:85:30:e5:d8:33:b4:86:37:50:41:f9:3d:
                    99:c0:0f:e4:aa:b1:5b:ed:90:64:d7:72:85:02:14:
                    b3:c9:a6:67:66:55:f2:4d:dc:21:64:5b:d9:50:65:
                    b7:79:9d:2c:16:cc:73:b5:ab:81:fa:da:62:31:f6:
                    91:01:75:af:24:57:ae:65:c1:80:8d:43:3f:78:78:
                    f1:75:ab:36:b5:36:99:e2:4b:4f:2a:62:d7:e0:2e:
                    57:48:0e:ec:45:96:33:3c:22:fb:6b:9c:67:00:40:
                    6e:c2:4e:5b:3f:9a:8e:c4:2d:46:3b:53:89:fe:ac:
                    79:68:6e:14:0a:78:bd:ab:0b:4d:60:42:74:2b:0c:
                    58:74:63:e6:8d:75:76:ca:4b:43:92:e6:77:e0:1d:
                    f7:ed:de:67:c7:e8:bf:cb:bf:66:fa:58:db:4a:d9:
                    c5:7e:64:5b:f2:56:ac:83:8e:7e:0f:c7:40:26:22:
                    4a:bf:98:d1:16:8d:32:be:a3:d3:04:73:8c:fa:99:
                    40:68:a0:18:1d:a4:12:71:15:75:6c:25:fc:fb:6f:
                    3b:71:30:13:89:d4:0d:4e:30:7a:a7:e3:8f:dc:51:
                    b2:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:CE:41:ED:D1:6E:67:43:AB:73:07:1C:6B:22:81:5D:01:C1:EC:5B
            X509v3 Authority Key Identifier:
                keyid:77:01:FB:F4:A9:C9:B5:59:88:8F:02:65:64:47:A3:AA:19:63:81:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6132a740-bd7d-46b8-b10a-a7a703e350f2/0/7701FBF4A9C9B559888F02656447A3AA1963811C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7701FBF4A9C9B559888F02656447A3AA1963811C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6132a740-bd7d-46b8-b10a-a7a703e350f2/0/3130332e3230322e3232372e302f32342d3234203d3e20313334363335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.202.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:22:95:ae:d8:66:85:92:9e:22:bb:d2:9b:4a:e8:82:fc:26:
         4d:dc:c6:89:27:d7:e5:aa:16:e2:01:ac:99:2c:f6:fe:f7:d6:
         45:20:10:1f:2a:d0:a5:4b:06:14:3b:06:bb:0f:dc:f0:d1:60:
         85:02:43:c8:8a:3a:39:e5:7e:3b:73:ec:97:f8:22:59:30:8a:
         7a:0b:21:6c:5d:e7:dc:95:ae:3b:da:ad:6e:0b:ba:3a:a2:12:
         07:20:0b:9e:bf:5c:00:fb:90:94:70:ac:43:c2:c3:40:26:35:
         55:73:38:c2:dc:bf:6b:fc:08:60:b6:23:0e:bf:b8:24:c1:e4:
         6f:3e:d0:3b:a4:84:90:d0:09:d0:4b:7c:c4:a2:ce:39:05:0c:
         29:6d:e7:df:01:7c:49:34:66:fb:6a:58:2d:55:b9:f7:b2:39:
         24:28:8e:6b:fd:5f:e6:90:b4:a4:ff:89:98:07:ee:7c:18:38:
         fe:66:41:cc:40:b7:d0:72:fc:db:a7:a7:df:d6:22:87:2a:52:
         9c:1a:fd:11:7b:5f:d2:92:9b:a6:63:11:3f:94:b6:fb:ae:fc:
         55:8f:72:f8:08:57:65:d6:1c:9c:f1:2e:2f:5e:57:35:d3:2c:
         9d:46:51:9f:3f:1d:f2:a5:c4:fa:20:d2:dc:4f:8c:d9:78:5b:
         cb:0a:7c:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 20:21:34 2025 by rpki-client