Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/7bef6e8d-1ab0-41c4-b3ae-a200d17a821c/0/3130332e3139302e33322e302f32342d3234203d3e20313439393032.roa
File:                     3130332e3139302e33322e302f32342d3234203d3e20313439393032.roa (raw, json)
Hash identifier:          UBuoyTn3HReKwfW6PcrJhW8k5cydXbUfq85IfE8g+KM=
Subject key identifier:   6E:A5:60:BE:CC:44:D0:A5:65:5E:3E:FD:64:78:7A:E7:24:5A:34:9F
Certificate issuer:       /CN=665ACFA171591B851B0550143E7029498F238AF0
Certificate serial:       0893A088BC2D59900F72F0F568EC23A7447A134B
Authority key identifier: 66:5A:CF:A1:71:59:1B:85:1B:05:50:14:3E:70:29:49:8F:23:8A:F0
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/665ACFA171591B851B0550143E7029498F238AF0.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/7bef6e8d-1ab0-41c4-b3ae-a200d17a821c/0/3130332e3139302e33322e302f32342d3234203d3e20313439393032.roa
Signing time:             Wed 02 Jul 2025 03:02:49 +0000
ROA not before:           Wed 02 Jul 2025 02:57:49 +0000
ROA not after:            Wed 01 Jul 2026 03:02:49 +0000
asID:                     149902
IP address blocks:        103.190.32.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/7bef6e8d-1ab0-41c4-b3ae-a200d17a821c/0/665ACFA171591B851B0550143E7029498F238AF0.crl
                          rsync://repo-rpki.idnic.net/repo/7bef6e8d-1ab0-41c4-b3ae-a200d17a821c/0/665ACFA171591B851B0550143E7029498F238AF0.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/665ACFA171591B851B0550143E7029498F238AF0.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 09 Aug 2025 12:05:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:93:a0:88:bc:2d:59:90:0f:72:f0:f5:68:ec:23:a7:44:7a:13:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=665ACFA171591B851B0550143E7029498F238AF0
        Validity
            Not Before: Jul  2 02:57:49 2025 GMT
            Not After : Jul  1 03:02:49 2026 GMT
        Subject: CN=6EA560BECC44D0A5655E3EFD64787AE7245A349F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:95:7e:46:8e:9d:58:d0:09:a5:4a:f1:7f:9a:
                    8f:1d:0d:64:b0:5e:86:19:54:63:7a:53:9d:95:f1:
                    cc:f2:b8:02:57:88:bd:74:90:56:4e:53:11:3d:ff:
                    0a:ac:4b:79:33:cd:7e:99:e2:96:d3:46:63:8f:d7:
                    bf:51:50:15:cb:b2:69:02:14:a3:09:d3:09:11:95:
                    b3:a3:d1:34:b4:96:54:0d:0e:9f:af:59:6d:4b:20:
                    4c:48:d0:0b:5d:0c:31:a7:a0:d6:71:14:f0:35:52:
                    69:21:29:aa:5a:b0:1b:6a:db:c0:da:ec:0e:d7:48:
                    d5:46:16:98:79:17:30:66:f8:b3:76:0a:04:80:8d:
                    b0:d1:8d:04:e3:b9:e4:e2:97:57:4e:2e:35:aa:95:
                    8c:97:51:71:7a:1e:6b:27:bd:4c:06:0d:cb:33:36:
                    af:9d:cf:b3:4a:14:8d:1e:b0:98:9d:a9:28:6b:d3:
                    98:04:21:0d:7a:43:3e:c2:75:f5:70:b1:74:95:00:
                    1b:77:ec:21:87:ac:01:20:0d:46:89:11:8b:d7:3d:
                    12:3b:88:01:9a:fa:c1:cf:1f:5a:4f:a0:63:33:50:
                    07:24:87:31:db:1b:74:2b:64:22:95:04:ce:ec:6d:
                    b5:95:bd:63:b1:e3:ba:96:77:53:e0:5c:ed:79:8d:
                    d3:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:A5:60:BE:CC:44:D0:A5:65:5E:3E:FD:64:78:7A:E7:24:5A:34:9F
            X509v3 Authority Key Identifier:
                keyid:66:5A:CF:A1:71:59:1B:85:1B:05:50:14:3E:70:29:49:8F:23:8A:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/7bef6e8d-1ab0-41c4-b3ae-a200d17a821c/0/665ACFA171591B851B0550143E7029498F238AF0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/665ACFA171591B851B0550143E7029498F238AF0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7bef6e8d-1ab0-41c4-b3ae-a200d17a821c/0/3130332e3139302e33322e302f32342d3234203d3e20313439393032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.190.32.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:68:ec:58:2a:d9:46:1f:1d:1f:33:33:66:d2:0d:47:a4:19:
         97:04:1f:52:2e:d9:7f:bd:87:e7:d6:50:e7:0e:69:58:d8:8b:
         ad:8f:d4:e4:60:20:5e:25:f0:8f:7b:78:43:db:5f:4a:ce:b5:
         48:ca:29:f3:8c:8c:01:c6:36:8e:bb:0c:43:a6:5f:d0:45:70:
         15:4f:09:60:b8:9f:4d:2f:a2:d6:59:4b:db:5b:aa:98:00:b7:
         dc:f3:be:96:0f:5a:0e:ca:2b:53:1d:24:03:3b:04:4b:61:03:
         3c:39:b1:89:f9:1a:46:2c:ae:fb:24:08:40:88:94:97:38:f6:
         a0:a2:4e:4f:e8:2d:1c:a7:60:06:53:32:06:8a:1b:d1:fa:49:
         67:d5:aa:e6:dc:12:23:0a:97:ee:8d:11:dd:82:d0:fd:52:12:
         ac:73:3c:2c:60:ff:a9:fa:3e:3d:34:40:2a:15:5a:25:21:56:
         e6:27:4a:dc:c3:a2:0d:f4:4c:f0:43:e9:2b:3e:6e:af:3b:3f:
         c0:0a:58:9a:93:95:98:78:72:68:3f:e9:0d:f3:29:e3:4d:12:
         15:50:4d:0b:d5:5b:bc:9c:dc:e9:a7:d3:9e:ce:d8:ef:a0:ff:
         64:a9:5c:56:f5:74:05:4c:52:58:24:9b:4b:68:c0:e8:d1:4b:
         27:b4:1b:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 20:24:32 2025 by rpki-client