Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/7bef6e8d-1ab0-41c4-b3ae-a200d17a821c/0/3130332e3139302e33332e302f32342d3234203d3e20313439393032.roa
File:                     3130332e3139302e33332e302f32342d3234203d3e20313439393032.roa (raw, json)
Hash identifier:          bU3jkKmrVDzxoMBizldCAf9o0i6XJVz0mcRCkl8jgAE=
Subject key identifier:   15:4F:A9:E7:BB:12:38:40:1D:9E:06:41:BA:96:FD:F5:C8:8A:5B:55
Certificate issuer:       /CN=665ACFA171591B851B0550143E7029498F238AF0
Certificate serial:       7B2DF24D9E25DCFB82F8356F3900CD16FA3FC74C
Authority key identifier: 66:5A:CF:A1:71:59:1B:85:1B:05:50:14:3E:70:29:49:8F:23:8A:F0
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/665ACFA171591B851B0550143E7029498F238AF0.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/7bef6e8d-1ab0-41c4-b3ae-a200d17a821c/0/3130332e3139302e33332e302f32342d3234203d3e20313439393032.roa
Signing time:             Wed 02 Jul 2025 03:02:49 +0000
ROA not before:           Wed 02 Jul 2025 02:57:49 +0000
ROA not after:            Wed 01 Jul 2026 03:02:49 +0000
asID:                     149902
IP address blocks:        103.190.33.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/7bef6e8d-1ab0-41c4-b3ae-a200d17a821c/0/665ACFA171591B851B0550143E7029498F238AF0.crl
                          rsync://repo-rpki.idnic.net/repo/7bef6e8d-1ab0-41c4-b3ae-a200d17a821c/0/665ACFA171591B851B0550143E7029498F238AF0.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/665ACFA171591B851B0550143E7029498F238AF0.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 09 Aug 2025 12:05:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:2d:f2:4d:9e:25:dc:fb:82:f8:35:6f:39:00:cd:16:fa:3f:c7:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=665ACFA171591B851B0550143E7029498F238AF0
        Validity
            Not Before: Jul  2 02:57:49 2025 GMT
            Not After : Jul  1 03:02:49 2026 GMT
        Subject: CN=154FA9E7BB1238401D9E0641BA96FDF5C88A5B55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:6d:55:07:a2:e6:7e:06:45:a4:10:fa:74:e1:
                    b6:48:93:24:68:af:5b:85:8e:da:e1:8d:19:26:3f:
                    b7:e7:30:e2:58:09:f3:12:ef:83:1c:ff:4f:2d:43:
                    ba:01:0c:13:5b:4b:a7:be:80:be:95:f0:63:02:ff:
                    fd:8e:90:bc:64:63:55:81:e0:9c:89:2d:90:bc:34:
                    15:a9:d8:88:1a:91:a6:bd:0c:5c:7f:2c:3c:b1:7c:
                    9a:d4:f2:b2:f0:78:8b:ce:92:1e:8f:6c:2f:d4:38:
                    eb:a2:27:90:5d:cf:08:b5:54:0b:99:23:62:b9:41:
                    09:53:3f:93:36:e7:5a:36:5b:18:85:7f:a0:c0:ed:
                    34:f8:d9:00:a4:7b:01:ab:f9:33:a6:ee:f2:a3:d5:
                    0c:cb:5c:ca:21:c1:af:bd:36:2f:74:47:be:56:4e:
                    a2:a4:93:ac:0b:c1:10:59:f8:dd:e6:4d:83:73:a4:
                    a9:22:9e:88:44:8a:ba:e7:57:16:f9:32:7f:cf:d8:
                    72:39:a6:bf:80:1e:f2:56:ad:84:37:66:88:90:cb:
                    2d:fb:11:c1:36:73:80:30:28:82:d4:88:77:83:43:
                    d7:7e:b5:9b:8d:7e:e5:81:80:b9:30:23:22:6d:80:
                    b0:a2:4e:4e:3f:9e:5c:80:37:3e:a9:0e:35:cc:c3:
                    6b:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:4F:A9:E7:BB:12:38:40:1D:9E:06:41:BA:96:FD:F5:C8:8A:5B:55
            X509v3 Authority Key Identifier:
                keyid:66:5A:CF:A1:71:59:1B:85:1B:05:50:14:3E:70:29:49:8F:23:8A:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/7bef6e8d-1ab0-41c4-b3ae-a200d17a821c/0/665ACFA171591B851B0550143E7029498F238AF0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/665ACFA171591B851B0550143E7029498F238AF0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7bef6e8d-1ab0-41c4-b3ae-a200d17a821c/0/3130332e3139302e33332e302f32342d3234203d3e20313439393032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.190.33.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c8:b4:1c:45:c0:dc:80:80:5e:5f:77:b9:ca:ba:a3:7e:fc:d0:
         bd:50:55:a2:36:fd:78:fe:c9:01:25:9e:c3:aa:fa:2f:76:85:
         4e:6e:da:a0:a1:9e:27:4d:93:65:f2:f3:b1:5c:39:1e:cf:2d:
         ab:67:9d:1a:6c:ea:46:7f:04:8f:83:11:83:4b:74:c3:5c:b8:
         0f:39:7e:01:c9:cf:e8:e5:bb:07:19:a4:52:d1:5c:77:5b:ed:
         fd:ef:b2:9d:81:75:01:3c:0f:b3:82:f9:ab:5e:3f:38:4a:ac:
         27:f7:f5:eb:fc:8a:67:3f:8c:5d:b1:38:08:2d:a4:94:75:68:
         ab:fd:0c:49:16:a2:3f:59:11:b3:02:13:bb:7a:da:77:6e:be:
         2f:a9:8d:d8:63:96:77:60:d4:3b:c3:d0:28:e0:6c:42:4f:cb:
         f6:e4:1d:02:37:a3:17:c7:4e:66:35:1c:28:da:79:b0:3f:d6:
         f6:c9:bf:ee:da:6e:62:f8:73:ac:2c:f1:44:2b:36:8d:3f:3d:
         fb:ed:d7:1c:23:57:c5:94:09:2f:c2:4a:ef:94:65:21:82:62:
         e8:1d:a6:13:83:7a:42:35:8d:78:0b:51:a1:c8:b0:5c:2c:2f:
         af:8e:3f:c4:b2:c5:c0:81:b1:7a:2b:b7:1f:81:af:4e:6a:d5:
         c1:e9:cd:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 20:24:49 2025 by rpki-client