Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/63c8f4d7-e4b3-4b41-a685-514940fec819/0/3130332e37332e37382e302f32342d3234203d3e20313335343734.roa
File:                     3130332e37332e37382e302f32342d3234203d3e20313335343734.roa (raw, json)
Hash identifier:          /+qgUP1FzBqyIlX852+AoUrW1x1q8UQGT+rmfMidTQ8=
Subject key identifier:   2C:75:7C:68:38:0E:82:AA:A3:FB:CC:C0:1C:1D:9E:C0:37:69:00:D9
Certificate issuer:       /CN=E01F80F5B6C41210CA0370AEEFC9794EF0F0644A
Certificate serial:       57A547B55250AC066BE8F04E63BA8C8D58B729B6
Authority key identifier: E0:1F:80:F5:B6:C4:12:10:CA:03:70:AE:EF:C9:79:4E:F0:F0:64:4A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E01F80F5B6C41210CA0370AEEFC9794EF0F0644A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/63c8f4d7-e4b3-4b41-a685-514940fec819/0/3130332e37332e37382e302f32342d3234203d3e20313335343734.roa
Signing time:             Sun 06 Jul 2025 08:00:00 +0000
ROA not before:           Sun 06 Jul 2025 07:55:00 +0000
ROA not after:            Sun 05 Jul 2026 08:00:00 +0000
asID:                     135474
IP address blocks:        103.73.78.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/63c8f4d7-e4b3-4b41-a685-514940fec819/0/E01F80F5B6C41210CA0370AEEFC9794EF0F0644A.crl
                          rsync://repo-rpki.idnic.net/repo/63c8f4d7-e4b3-4b41-a685-514940fec819/0/E01F80F5B6C41210CA0370AEEFC9794EF0F0644A.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E01F80F5B6C41210CA0370AEEFC9794EF0F0644A.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 12 Aug 2025 05:48:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:a5:47:b5:52:50:ac:06:6b:e8:f0:4e:63:ba:8c:8d:58:b7:29:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E01F80F5B6C41210CA0370AEEFC9794EF0F0644A
        Validity
            Not Before: Jul  6 07:55:00 2025 GMT
            Not After : Jul  5 08:00:00 2026 GMT
        Subject: CN=2C757C68380E82AAA3FBCCC01C1D9EC0376900D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:70:3c:68:00:68:0c:a4:86:ad:f0:50:b4:a4:
                    d2:85:24:1b:24:89:5f:23:81:07:d5:5d:3c:c8:3e:
                    5d:68:4c:3e:4f:af:37:86:82:85:94:e3:7a:32:41:
                    d8:d4:d5:c7:7d:df:d2:20:c3:af:19:cc:43:c4:b2:
                    2a:fc:c2:48:47:7d:bf:06:c4:82:d5:07:e7:4a:ff:
                    bf:a5:d2:c9:a8:df:e3:d9:6a:b4:9b:b1:88:0e:02:
                    ad:14:47:1c:59:b1:a4:64:de:7d:cf:73:c3:b3:e3:
                    d2:ac:8e:1e:0d:52:36:05:13:6f:d4:38:62:7e:6b:
                    65:bc:41:a8:03:43:23:25:b2:78:b9:e6:05:d2:93:
                    60:40:10:62:b1:34:b9:14:4f:3d:7e:e8:ca:56:ae:
                    ca:9e:c3:49:9c:aa:c8:c4:2b:91:80:8d:a5:e7:2e:
                    f2:fc:e9:84:d8:e0:ab:f9:6a:7c:0c:c8:44:f1:3d:
                    47:34:09:38:69:c3:8b:6b:f0:03:0b:11:b0:ae:b7:
                    26:f6:1d:98:1e:c4:e8:86:d6:a9:1d:a3:5b:19:3d:
                    e3:2a:49:6e:08:b0:9a:fd:64:90:c5:07:82:77:43:
                    e4:e4:fe:c7:e4:69:5c:36:24:c4:c4:34:1e:e6:4e:
                    c1:d3:1f:90:66:12:5a:73:e0:76:48:b6:49:ff:fd:
                    1d:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:75:7C:68:38:0E:82:AA:A3:FB:CC:C0:1C:1D:9E:C0:37:69:00:D9
            X509v3 Authority Key Identifier:
                keyid:E0:1F:80:F5:B6:C4:12:10:CA:03:70:AE:EF:C9:79:4E:F0:F0:64:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/63c8f4d7-e4b3-4b41-a685-514940fec819/0/E01F80F5B6C41210CA0370AEEFC9794EF0F0644A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E01F80F5B6C41210CA0370AEEFC9794EF0F0644A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/63c8f4d7-e4b3-4b41-a685-514940fec819/0/3130332e37332e37382e302f32342d3234203d3e20313335343734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.73.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:d3:6c:7c:41:e5:c9:6c:ed:a5:3f:fb:85:3e:8f:e7:cd:03:
         b0:15:51:b6:49:70:0e:77:7f:25:3f:f5:25:17:f0:77:1e:94:
         2c:80:ac:97:13:44:03:84:04:5a:83:61:93:54:9b:dd:0b:9f:
         0a:e7:c3:73:72:cd:fd:18:e4:b7:84:22:d7:8f:6a:13:fa:38:
         e1:b8:bc:81:95:d7:4e:fd:7a:ed:e6:51:2a:b7:25:82:d9:6f:
         29:e0:05:e4:c7:82:84:4d:82:ea:48:9c:26:c1:65:8d:8c:d0:
         4b:63:71:17:7f:3a:3f:bd:0c:96:ca:ee:11:c1:66:11:c9:96:
         50:39:5f:08:6a:92:64:37:19:08:63:e4:32:47:80:f3:96:3b:
         f0:56:94:b3:6b:a7:db:5b:75:6d:79:42:8d:53:0e:c5:ca:52:
         da:c6:ba:da:f1:f7:3d:d5:65:95:27:25:59:ab:6b:c8:26:03:
         1c:a8:12:37:2b:34:11:c5:52:8b:f8:c1:eb:7b:58:64:00:ab:
         19:84:4c:3b:bd:f7:af:22:b5:fe:f1:7a:26:7f:29:5c:81:67:
         42:0d:e4:0c:71:a0:ef:1b:f9:06:df:a5:02:76:b6:16:ed:48:
         5d:8a:44:de:98:44:70:de:0b:8c:0e:57:aa:44:ea:e7:b6:5d:
         df:63:1a:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 01:45:50 2025 by rpki-client