Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/782212c2-3d68-4867-b99c-fc5cf4d0dbf1/0/3130332e3136362e382e302f32332d3233203d3e20313431393738.roa
File:                     3130332e3136362e382e302f32332d3233203d3e20313431393738.roa (raw, json)
Hash identifier:          vs5RIVJc80gvdbMwYUf3UH5oDO3pPFbrNK7pJMccNgE=
Subject key identifier:   B8:CF:14:5B:00:1F:76:52:50:7B:BE:1E:21:AD:8D:D1:CB:C9:62:96
Certificate issuer:       /CN=21E46FEE03A1A4CB944F6CE6828AC30217E63BA1
Certificate serial:       4DC9CE05B74E9C7F44E3A0BE26CE4BD198E4FBF4
Authority key identifier: 21:E4:6F:EE:03:A1:A4:CB:94:4F:6C:E6:82:8A:C3:02:17:E6:3B:A1
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21E46FEE03A1A4CB944F6CE6828AC30217E63BA1.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/782212c2-3d68-4867-b99c-fc5cf4d0dbf1/0/3130332e3136362e382e302f32332d3233203d3e20313431393738.roa
Signing time:             Tue 29 Jul 2025 12:00:01 +0000
ROA not before:           Tue 29 Jul 2025 11:55:01 +0000
ROA not after:            Tue 28 Jul 2026 12:00:01 +0000
asID:                     141978
IP address blocks:        103.166.8.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/782212c2-3d68-4867-b99c-fc5cf4d0dbf1/0/21E46FEE03A1A4CB944F6CE6828AC30217E63BA1.crl
                          rsync://repo-rpki.idnic.net/repo/782212c2-3d68-4867-b99c-fc5cf4d0dbf1/0/21E46FEE03A1A4CB944F6CE6828AC30217E63BA1.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21E46FEE03A1A4CB944F6CE6828AC30217E63BA1.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 10 Aug 2025 16:45:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:c9:ce:05:b7:4e:9c:7f:44:e3:a0:be:26:ce:4b:d1:98:e4:fb:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21E46FEE03A1A4CB944F6CE6828AC30217E63BA1
        Validity
            Not Before: Jul 29 11:55:01 2025 GMT
            Not After : Jul 28 12:00:01 2026 GMT
        Subject: CN=B8CF145B001F7652507BBE1E21AD8DD1CBC96296
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:7e:01:73:61:89:0f:1a:bc:ef:69:68:fc:ae:
                    30:d9:1d:e8:f2:6f:df:c2:dc:8c:71:d3:08:d7:09:
                    17:1b:2a:cb:29:bf:96:5f:45:6c:b9:2d:35:43:32:
                    9f:96:c9:89:84:19:8c:fe:05:1e:c2:74:50:98:53:
                    d2:ac:4b:84:95:8a:8e:d6:62:99:52:ab:99:76:f8:
                    e4:2b:84:97:61:3c:2f:01:84:71:09:04:d8:d1:ca:
                    5d:8a:86:30:1c:df:70:c5:4c:20:ec:dc:27:de:d4:
                    e7:98:28:b4:be:1f:b3:56:15:c1:33:1c:e6:ba:1c:
                    c0:8a:bc:de:14:c7:2b:bb:cf:2a:5f:8c:2f:b6:d2:
                    1c:4c:8e:dd:49:97:c9:73:ed:a0:18:bf:d7:64:d8:
                    c4:46:bc:91:81:da:9c:d5:78:fb:23:c7:e3:b5:99:
                    c1:07:9d:05:cd:7a:ca:b8:0e:76:1a:96:61:f9:f2:
                    31:3f:7b:ae:19:8d:67:c1:c4:eb:06:ba:09:9f:33:
                    c2:01:aa:f6:7e:76:ac:37:c6:a1:79:82:f5:3c:05:
                    a1:11:2b:95:e7:07:02:8b:be:6a:40:7b:08:b2:e3:
                    ab:db:b7:b0:f4:bc:23:e6:b2:9b:a1:05:8a:e5:8a:
                    9e:63:44:23:47:d8:30:3f:af:db:b8:8e:15:5d:92:
                    ee:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:CF:14:5B:00:1F:76:52:50:7B:BE:1E:21:AD:8D:D1:CB:C9:62:96
            X509v3 Authority Key Identifier:
                keyid:21:E4:6F:EE:03:A1:A4:CB:94:4F:6C:E6:82:8A:C3:02:17:E6:3B:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/782212c2-3d68-4867-b99c-fc5cf4d0dbf1/0/21E46FEE03A1A4CB944F6CE6828AC30217E63BA1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21E46FEE03A1A4CB944F6CE6828AC30217E63BA1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/782212c2-3d68-4867-b99c-fc5cf4d0dbf1/0/3130332e3136362e382e302f32332d3233203d3e20313431393738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.166.8.0/23

    Signature Algorithm: sha256WithRSAEncryption
         38:ed:63:2b:41:f0:75:78:c9:3e:27:34:32:1a:fb:0d:14:08:
         85:b1:d1:5c:77:fc:d3:e2:06:6d:64:1b:54:80:23:35:9a:bd:
         5e:a8:69:f2:cc:fd:9c:23:14:d0:04:f4:4f:fc:57:8e:3b:30:
         50:ea:1f:0c:41:7c:70:42:47:7c:91:73:12:f6:b3:b2:7e:23:
         a1:be:2d:0b:1d:9a:67:05:0b:00:0e:0f:81:47:08:d6:aa:64:
         f8:fe:5f:81:e0:e6:a2:40:b6:17:80:04:e0:04:f0:7b:a4:54:
         62:aa:22:5d:b6:88:b3:24:55:e9:9b:48:bf:5b:52:65:b4:a0:
         5f:0a:23:77:ed:29:7e:67:78:20:d4:4c:ed:6d:7e:eb:42:0b:
         47:81:56:46:ed:48:13:04:ef:93:50:8f:68:cc:ce:eb:61:29:
         55:a4:a6:7d:03:d4:6b:eb:fa:c5:61:be:d8:9e:a5:9f:1b:59:
         80:6f:3b:4d:88:c7:6f:5d:37:ea:f5:1e:5d:95:9d:5d:e9:6e:
         86:52:81:33:6d:51:33:33:0a:d4:af:b2:bd:a0:2c:a9:65:bd:
         a4:6f:61:83:00:0c:c4:81:8c:e9:52:ee:2e:23:2d:75:07:a7:
         87:e9:0d:c6:b4:9f:da:c3:c3:34:8f:7e:3e:24:08:4c:12:6c:
         8f:05:56:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 11:08:48 2025 by rpki-client