Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/71090573-6ad3-4e63-8af4-8a2d582aa0cd/0/3130332e3137342e3131362e302f32342d3234203d3e20313437313030.roa
File:                     3130332e3137342e3131362e302f32342d3234203d3e20313437313030.roa (raw, json)
Hash identifier:          g0qXlise9HaMFGbsno6S9nxOreCjvNtFTp/h65NgFw8=
Subject key identifier:   AB:7A:62:B0:ED:4B:07:69:F6:49:D8:2C:F0:78:03:FA:51:DB:3D:B0
Certificate issuer:       /CN=B6829F5E7EF7B5DF3397CD3222160BE94449AC6E
Certificate serial:       43DA721F2570DF62F1CFA80D66C0064FA240C147
Authority key identifier: B6:82:9F:5E:7E:F7:B5:DF:33:97:CD:32:22:16:0B:E9:44:49:AC:6E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6829F5E7EF7B5DF3397CD3222160BE94449AC6E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/71090573-6ad3-4e63-8af4-8a2d582aa0cd/0/3130332e3137342e3131362e302f32342d3234203d3e20313437313030.roa
Signing time:             Sun 06 Jul 2025 03:00:01 +0000
ROA not before:           Sun 06 Jul 2025 02:55:01 +0000
ROA not after:            Sun 05 Jul 2026 03:00:01 +0000
asID:                     147100
IP address blocks:        103.174.116.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/71090573-6ad3-4e63-8af4-8a2d582aa0cd/0/B6829F5E7EF7B5DF3397CD3222160BE94449AC6E.crl
                          rsync://repo-rpki.idnic.net/repo/71090573-6ad3-4e63-8af4-8a2d582aa0cd/0/B6829F5E7EF7B5DF3397CD3222160BE94449AC6E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6829F5E7EF7B5DF3397CD3222160BE94449AC6E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 10 Aug 2025 14:27:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:da:72:1f:25:70:df:62:f1:cf:a8:0d:66:c0:06:4f:a2:40:c1:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6829F5E7EF7B5DF3397CD3222160BE94449AC6E
        Validity
            Not Before: Jul  6 02:55:01 2025 GMT
            Not After : Jul  5 03:00:01 2026 GMT
        Subject: CN=AB7A62B0ED4B0769F649D82CF07803FA51DB3DB0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:40:1b:9f:0a:3a:90:a7:bd:dd:b1:bd:ac:87:
                    cb:90:9b:25:1a:be:d7:bd:62:71:4e:b9:da:60:07:
                    cc:41:a4:e6:11:b7:74:ed:5a:a6:b0:b7:e2:b9:b9:
                    2d:da:26:37:e8:50:0b:53:54:0b:d6:01:1c:1a:89:
                    37:4c:ff:0e:65:eb:78:fe:93:36:c1:be:a0:1d:1f:
                    bc:0c:8a:7b:cb:de:b6:0d:a3:29:91:7c:78:2c:54:
                    d1:05:ae:fa:88:7a:c4:be:f4:62:79:7f:94:6c:d8:
                    0e:a6:a0:76:3f:70:d6:16:23:66:4e:50:06:f7:3e:
                    7b:ae:4d:cc:de:dd:fc:d0:a8:be:8d:54:85:75:1b:
                    82:34:f9:dc:f0:0b:92:b9:0a:39:b5:24:52:04:62:
                    41:9b:c0:1d:2b:b3:ff:50:4d:e0:8e:0d:19:bf:ec:
                    e7:b0:b7:59:c8:bb:cd:53:24:52:a5:1f:6f:56:fd:
                    22:58:ac:e2:84:53:e6:f3:bf:5d:99:fa:ac:ad:66:
                    a9:fc:3f:e8:40:0d:1f:76:74:80:0e:66:c3:a5:69:
                    ef:17:08:2c:ae:ee:1b:b4:20:f9:2e:61:80:6a:ed:
                    e2:ca:7c:f1:d8:c9:14:b6:d0:62:79:3b:7c:6c:3b:
                    6a:09:ce:95:3e:73:46:88:d1:7b:9e:00:37:76:2b:
                    f0:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:7A:62:B0:ED:4B:07:69:F6:49:D8:2C:F0:78:03:FA:51:DB:3D:B0
            X509v3 Authority Key Identifier:
                keyid:B6:82:9F:5E:7E:F7:B5:DF:33:97:CD:32:22:16:0B:E9:44:49:AC:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/71090573-6ad3-4e63-8af4-8a2d582aa0cd/0/B6829F5E7EF7B5DF3397CD3222160BE94449AC6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6829F5E7EF7B5DF3397CD3222160BE94449AC6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/71090573-6ad3-4e63-8af4-8a2d582aa0cd/0/3130332e3137342e3131362e302f32342d3234203d3e20313437313030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.174.116.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:f8:75:40:6d:1f:34:b6:a0:0d:3b:d2:0a:7c:a0:29:68:80:
         78:5d:f4:9e:67:82:df:6f:01:66:66:7b:1d:e5:29:3e:44:07:
         74:c3:33:81:25:82:91:02:9b:45:1a:cd:11:09:e8:ea:1b:41:
         12:5b:fd:d9:fd:0b:17:f6:8e:a4:a2:54:ee:34:84:52:01:bb:
         8d:27:26:de:0c:b4:59:85:dc:49:4c:21:8c:18:70:86:f2:9a:
         80:57:a3:05:78:3b:87:93:16:51:bf:1e:0a:6a:77:b0:d7:1d:
         b2:57:f5:9f:f5:62:68:7e:77:dd:38:17:22:57:5b:d6:c6:c6:
         83:4e:89:54:61:20:08:91:d1:a7:40:1b:9d:6f:fe:73:f1:c2:
         29:9f:fa:b2:6f:12:30:40:fc:40:0f:82:ca:80:fc:66:14:ee:
         89:1e:f4:d0:e9:b0:83:1d:ea:fa:92:c4:02:49:41:43:f7:0b:
         8c:d8:17:b2:3a:c6:14:1a:0b:6c:39:35:69:34:3c:80:30:ae:
         78:8c:48:a4:bb:32:db:4a:fb:59:ab:18:a0:ae:32:4e:94:0f:
         ed:10:ed:80:2d:46:cf:0b:5d:fc:a6:da:b5:aa:bb:dc:cc:08:
         f1:8e:45:5e:c4:80:e5:b1:9b:40:5a:d8:31:a1:80:8b:fc:f5:
         8c:b0:1b:92
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUQ9pyHyVw32Lxz6gNZsAGT6JAwUcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjY4MjlGNUU3RUY3QjVERjMzOTdDRDMyMjIxNjBCRTk0
NDQ5QUM2RTAeFw0yNTA3MDYwMjU1MDFaFw0yNjA3MDUwMzAwMDFaMDMxMTAvBgNV
BAMTKEFCN0E2MkIwRUQ0QjA3NjlGNjQ5RDgyQ0YwNzgwM0ZBNTFEQjNEQjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeQBufCjqQp73dsb2sh8uQmyUa
vte9YnFOudpgB8xBpOYRt3TtWqawt+K5uS3aJjfoUAtTVAvWARwaiTdM/w5l63j+
kzbBvqAdH7wMinvL3rYNoymRfHgsVNEFrvqIesS+9GJ5f5Rs2A6moHY/cNYWI2ZO
UAb3PnuuTcze3fzQqL6NVIV1G4I0+dzwC5K5Cjm1JFIEYkGbwB0rs/9QTeCODRm/
7Oewt1nIu81TJFKlH29W/SJYrOKEU+bzv12Z+qytZqn8P+hADR92dIAOZsOlae8X
CCyu7hu0IPkuYYBq7eLKfPHYyRS20GJ5O3xsO2oJzpU+c0aI0XueADd2K/CJAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUq3pisO1LB2n2Sdgs8HgD+lHbPbAwHwYDVR0j
BBgwFoAUtoKfXn73td8zl80yIhYL6URJrG4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83
MTA5MDU3My02YWQzLTRlNjMtOGFmNC04YTJkNTgyYWEwY2QvMC9CNjgyOUY1RTdF
RjdCNURGMzM5N0NEMzIyMjE2MEJFOTQ0NDlBQzZFLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQjY4MjlGNUU3RUY3QjVERjMzOTdDRDMyMjIxNjBCRTk0NDQ5
QUM2RS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzcxMDkwNTczLTZhZDMtNGU2My04
YWY0LThhMmQ1ODJhYTBjZC8wLzMxMzAzMzJlMzEzNzM0MmUzMTMxMzYyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzczMTMwMzAucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnrnQwDQYJ
KoZIhvcNAQELBQADggEBAKP4dUBtHzS2oA070gp8oClogHhd9J5ngt9vAWZmex3l
KT5EB3TDM4ElgpECm0UazREJ6OobQRJb/dn9Cxf2jqSiVO40hFIBu40nJt4MtFmF
3ElMIYwYcIbymoBXowV4O4eTFlG/Hgpqd7DXHbJX9Z/1Ymh+d904FyJXW9bGxoNO
iVRhIAiR0adAG51v/nPxwimf+rJvEjBA/EAPgsqA/GYU7oke9NDpsIMd6vqSxAJJ
QUP3C4zYF7I6xhQaC2w5NWk0PIAwrniMSKS7MttK+1mrGKCuMk6UD+0Q7YAtRs8L
Xfym2rWqu9zMCPGORV7EgOWxm0Ba2DGhgIv89YywG5I=
-----END CERTIFICATE-----
Generated at Thu Aug 7 20:19:38 2025 by rpki-client