Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/63c8f4d7-e4b3-4b41-a685-514940fec819/0/3130332e37332e37362e302f32342d3234203d3e20313335343734.roa
File:                     3130332e37332e37362e302f32342d3234203d3e20313335343734.roa (raw, json)
Hash identifier:          5Ndlq/+1JhO5LRCuBGurul0wd0jOL8PkLP0IS65Rxjc=
Subject key identifier:   96:00:90:20:26:42:0C:9A:88:CB:A0:72:E5:04:FF:12:AF:2F:F8:D3
Certificate issuer:       /CN=E01F80F5B6C41210CA0370AEEFC9794EF0F0644A
Certificate serial:       7D008BF9F7A77EF4C7BCAB5B90F961A7E13A0368
Authority key identifier: E0:1F:80:F5:B6:C4:12:10:CA:03:70:AE:EF:C9:79:4E:F0:F0:64:4A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E01F80F5B6C41210CA0370AEEFC9794EF0F0644A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/63c8f4d7-e4b3-4b41-a685-514940fec819/0/3130332e37332e37362e302f32342d3234203d3e20313335343734.roa
Signing time:             Sun 06 Jul 2025 08:00:00 +0000
ROA not before:           Sun 06 Jul 2025 07:55:00 +0000
ROA not after:            Sun 05 Jul 2026 08:00:00 +0000
asID:                     135474
IP address blocks:        103.73.76.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/63c8f4d7-e4b3-4b41-a685-514940fec819/0/E01F80F5B6C41210CA0370AEEFC9794EF0F0644A.crl
                          rsync://repo-rpki.idnic.net/repo/63c8f4d7-e4b3-4b41-a685-514940fec819/0/E01F80F5B6C41210CA0370AEEFC9794EF0F0644A.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E01F80F5B6C41210CA0370AEEFC9794EF0F0644A.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 12 Aug 2025 05:48:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:00:8b:f9:f7:a7:7e:f4:c7:bc:ab:5b:90:f9:61:a7:e1:3a:03:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E01F80F5B6C41210CA0370AEEFC9794EF0F0644A
        Validity
            Not Before: Jul  6 07:55:00 2025 GMT
            Not After : Jul  5 08:00:00 2026 GMT
        Subject: CN=9600902026420C9A88CBA072E504FF12AF2FF8D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:17:5e:73:dd:d0:ef:04:10:3b:f8:06:c3:fd:
                    fb:97:10:01:fc:47:f5:8a:21:e9:dd:3e:a0:a6:cd:
                    61:0e:21:f8:ec:70:64:fe:82:7f:0d:e1:14:50:33:
                    a2:d1:d2:ac:67:f4:bc:7c:8a:35:92:a8:d1:aa:0e:
                    9f:a6:d1:d7:d5:dd:0c:b2:47:42:bb:d6:e4:41:3c:
                    55:48:88:8e:24:c6:ca:3b:42:a3:d2:81:7e:8a:71:
                    26:aa:c9:01:41:a4:7a:c0:c5:f6:c5:25:54:a7:f5:
                    11:e9:84:05:e4:84:8f:77:a6:9c:2d:3f:62:e3:d0:
                    df:24:0e:1c:d2:6f:28:68:47:47:f9:e5:23:73:e9:
                    e2:8a:3e:f5:be:74:a8:ae:5a:42:44:23:dc:47:e9:
                    7c:fe:d7:1d:8b:3b:2e:d3:98:d1:dc:3d:42:51:1a:
                    e5:76:e8:1a:4c:9e:81:ff:ce:91:6a:63:f9:d4:4a:
                    f0:b3:31:4d:27:d9:13:56:f8:b2:2a:8b:d4:08:12:
                    6b:ef:86:c3:45:d9:c4:cf:c9:4b:3c:47:a5:33:3b:
                    76:7f:85:47:cc:f3:f6:33:94:8d:fe:c7:8d:4d:73:
                    d2:ae:ec:79:cc:7d:4d:77:14:0e:40:8b:c9:3c:b9:
                    73:ec:5a:d9:47:4a:22:fc:31:ae:d5:34:51:0c:56:
                    1d:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:00:90:20:26:42:0C:9A:88:CB:A0:72:E5:04:FF:12:AF:2F:F8:D3
            X509v3 Authority Key Identifier:
                keyid:E0:1F:80:F5:B6:C4:12:10:CA:03:70:AE:EF:C9:79:4E:F0:F0:64:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/63c8f4d7-e4b3-4b41-a685-514940fec819/0/E01F80F5B6C41210CA0370AEEFC9794EF0F0644A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E01F80F5B6C41210CA0370AEEFC9794EF0F0644A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/63c8f4d7-e4b3-4b41-a685-514940fec819/0/3130332e37332e37362e302f32342d3234203d3e20313335343734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.73.76.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:10:9d:ef:5a:6f:d5:2a:8b:be:ab:18:ff:15:8f:04:d7:73:
         aa:57:67:12:45:99:33:13:95:55:5c:b7:1a:e6:8a:6a:c2:28:
         01:c0:7f:0b:a0:0e:4e:57:48:d8:93:4a:ef:54:30:fe:66:bf:
         87:1c:14:6a:11:fc:2b:a3:e8:5f:f4:51:60:11:22:7d:92:d5:
         cb:d0:b6:0c:51:76:b7:19:86:90:77:07:51:0f:fd:13:32:48:
         a5:bb:77:84:12:93:2d:aa:3c:4d:49:02:fa:e5:29:ca:42:62:
         93:1c:14:78:ae:11:27:00:57:6d:b1:2e:49:a3:48:f9:49:63:
         82:be:46:ba:1d:f7:e5:47:f3:fe:f7:44:0a:83:b6:81:ef:5c:
         4c:39:36:b1:f6:70:0a:f9:4d:71:32:09:1a:6b:6d:52:93:ce:
         a6:73:15:90:90:47:83:04:b9:74:11:4f:36:c1:6a:87:7a:ac:
         0a:8a:5d:b8:ab:7e:16:be:08:fc:78:64:11:1a:c4:09:34:87:
         b6:49:93:45:b4:fe:f8:64:98:7d:61:59:a0:cd:26:8f:16:bc:
         54:b1:f3:eb:68:f0:88:00:e8:9a:82:f1:36:d6:0e:0a:8f:42:
         7b:4b:03:4c:06:c1:d5:e4:c1:82:ec:ed:ac:e9:68:0c:09:de:
         05:6b:80:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 19:47:39 2025 by rpki-client