Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/782212c2-3d68-4867-b99c-fc5cf4d0dbf1/0/3130332e3136362e392e302f32342d3234203d3e20313431393738.roa
File:                     3130332e3136362e392e302f32342d3234203d3e20313431393738.roa (raw, json)
Hash identifier:          Q+1KtEBmdlGkxj3d6e36S57kBlYlwv0qk9NrHtEayyk=
Subject key identifier:   7E:3B:C8:AC:F4:01:C7:72:57:88:4F:56:AD:FD:42:24:BB:CC:18:CE
Certificate issuer:       /CN=21E46FEE03A1A4CB944F6CE6828AC30217E63BA1
Certificate serial:       74A571FBCAAE994B707169E0654E7430ADB1D82D
Authority key identifier: 21:E4:6F:EE:03:A1:A4:CB:94:4F:6C:E6:82:8A:C3:02:17:E6:3B:A1
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21E46FEE03A1A4CB944F6CE6828AC30217E63BA1.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/782212c2-3d68-4867-b99c-fc5cf4d0dbf1/0/3130332e3136362e392e302f32342d3234203d3e20313431393738.roa
Signing time:             Tue 29 Jul 2025 12:00:00 +0000
ROA not before:           Tue 29 Jul 2025 11:55:00 +0000
ROA not after:            Tue 28 Jul 2026 12:00:00 +0000
asID:                     141978
IP address blocks:        103.166.9.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/782212c2-3d68-4867-b99c-fc5cf4d0dbf1/0/21E46FEE03A1A4CB944F6CE6828AC30217E63BA1.crl
                          rsync://repo-rpki.idnic.net/repo/782212c2-3d68-4867-b99c-fc5cf4d0dbf1/0/21E46FEE03A1A4CB944F6CE6828AC30217E63BA1.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21E46FEE03A1A4CB944F6CE6828AC30217E63BA1.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 08 Aug 2025 07:31:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:a5:71:fb:ca:ae:99:4b:70:71:69:e0:65:4e:74:30:ad:b1:d8:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21E46FEE03A1A4CB944F6CE6828AC30217E63BA1
        Validity
            Not Before: Jul 29 11:55:00 2025 GMT
            Not After : Jul 28 12:00:00 2026 GMT
        Subject: CN=7E3BC8ACF401C77257884F56ADFD4224BBCC18CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:8f:ef:25:f2:60:da:12:94:54:6e:fc:ee:16:
                    f7:44:78:ca:db:c6:7c:19:52:1e:ec:d5:97:9f:5f:
                    85:be:a4:6e:78:ce:5b:f6:9c:29:9f:c4:72:52:cd:
                    12:34:a4:40:be:d4:c4:e8:c1:3b:1b:1a:ed:7e:9b:
                    c3:09:12:cc:bd:b0:83:03:a3:67:21:26:61:07:33:
                    cb:79:10:24:34:6e:f0:56:37:a3:92:b6:d9:c4:98:
                    61:f1:8f:9f:23:ad:57:05:fa:0e:81:d3:43:57:63:
                    eb:cf:a2:e4:89:61:75:a8:2c:6f:c5:63:0a:b0:d6:
                    85:55:f8:68:46:56:0b:fc:a5:d6:67:99:eb:e4:aa:
                    e4:a2:d4:90:36:3f:dd:17:1c:cf:8f:ef:f5:58:7a:
                    29:5d:db:f1:1f:a1:a2:bc:f5:81:f0:8c:dc:6b:9b:
                    40:a8:e2:ba:a0:51:be:43:17:1f:51:5b:ce:ce:70:
                    d0:07:bb:94:65:7b:e7:ee:67:7c:10:ba:d8:3f:d6:
                    b1:7b:96:93:8a:f2:51:43:7c:21:37:94:16:ef:4b:
                    6b:5d:ec:9b:30:79:0a:20:00:d0:62:24:dd:4d:d3:
                    ea:26:2c:ab:6c:54:b1:f5:b1:e5:54:c3:f5:67:f4:
                    bb:a3:47:ff:0c:13:9e:d2:55:88:9c:07:ed:08:54:
                    e2:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:3B:C8:AC:F4:01:C7:72:57:88:4F:56:AD:FD:42:24:BB:CC:18:CE
            X509v3 Authority Key Identifier:
                keyid:21:E4:6F:EE:03:A1:A4:CB:94:4F:6C:E6:82:8A:C3:02:17:E6:3B:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/782212c2-3d68-4867-b99c-fc5cf4d0dbf1/0/21E46FEE03A1A4CB944F6CE6828AC30217E63BA1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21E46FEE03A1A4CB944F6CE6828AC30217E63BA1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/782212c2-3d68-4867-b99c-fc5cf4d0dbf1/0/3130332e3136362e392e302f32342d3234203d3e20313431393738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.166.9.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:ec:40:ac:71:fc:c6:d2:dd:6d:76:72:67:44:73:cc:ce:48:
         bd:3e:6d:d9:76:08:64:c1:27:b3:89:21:37:fe:7e:6b:1a:19:
         64:7b:46:80:14:3b:f0:ba:09:72:7e:6f:eb:1b:05:4a:9e:b2:
         61:b5:bb:fa:ea:d0:63:ec:1b:cd:7b:06:2a:ea:ba:0a:5a:57:
         09:28:0c:be:a5:52:1c:a1:e6:85:59:1a:71:f4:fc:78:4b:13:
         72:48:9f:e4:7e:a5:12:2f:5a:4e:d1:d2:35:31:a7:74:0d:87:
         8e:cd:21:02:0e:f8:9f:f9:69:b8:45:24:66:a3:d0:45:32:4e:
         31:17:a3:a7:44:92:46:d1:8c:60:c3:50:dc:f3:21:ee:fe:1a:
         bd:b4:9f:57:e9:2c:35:2f:96:99:bc:b6:d9:e0:71:8e:0f:f1:
         f5:3c:e7:da:ac:38:63:a2:84:da:ee:b4:4a:d9:2c:13:68:8d:
         73:70:58:a5:5b:7b:56:81:d8:d9:ce:fa:21:93:8b:d8:0b:0a:
         ee:6d:0a:76:1b:b2:f3:82:18:a5:ca:50:2b:5f:36:83:5d:08:
         63:26:c3:e0:97:98:3c:e7:22:44:ba:6d:30:45:89:2b:f2:f2:
         08:aa:53:b3:93:64:95:4c:5e:c9:10:fe:f7:f7:c9:58:7b:37:
         94:4a:30:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 07:19:10 2025 by rpki-client