Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/7d738314-a975-4fd1-9bc9-52138f83b56e/0/3130332e3137382e38362e302f32332d3233203d3e20313439333230.roa
File:                     3130332e3137382e38362e302f32332d3233203d3e20313439333230.roa (raw, json)
Hash identifier:          kHcDvJb/DgVTvuuABJZolA65opC22Ih0u8COwgg0FLM=
Subject key identifier:   8A:8C:E7:E1:CE:42:BB:19:2E:FC:F5:34:1C:11:4C:BA:5D:E8:1C:5F
Certificate issuer:       /CN=A62202F88CE61D6BD47195FB36103CDD061D7D27
Certificate serial:       07C0AEA79DDCD0D6E823D278203CE2F49CE5F928
Authority key identifier: A6:22:02:F8:8C:E6:1D:6B:D4:71:95:FB:36:10:3C:DD:06:1D:7D:27
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A62202F88CE61D6BD47195FB36103CDD061D7D27.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/7d738314-a975-4fd1-9bc9-52138f83b56e/0/3130332e3137382e38362e302f32332d3233203d3e20313439333230.roa
Signing time:             Tue 04 Nov 2025 07:02:29 +0000
ROA not before:           Tue 04 Nov 2025 06:57:29 +0000
ROA not after:            Tue 03 Nov 2026 07:02:29 +0000
asID:                     149320
IP address blocks:        103.178.86.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/7d738314-a975-4fd1-9bc9-52138f83b56e/0/A62202F88CE61D6BD47195FB36103CDD061D7D27.crl
                          rsync://repo-rpki.idnic.net/repo/7d738314-a975-4fd1-9bc9-52138f83b56e/0/A62202F88CE61D6BD47195FB36103CDD061D7D27.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A62202F88CE61D6BD47195FB36103CDD061D7D27.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Nov 2025 10:58:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:c0:ae:a7:9d:dc:d0:d6:e8:23:d2:78:20:3c:e2:f4:9c:e5:f9:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A62202F88CE61D6BD47195FB36103CDD061D7D27
        Validity
            Not Before: Nov  4 06:57:29 2025 GMT
            Not After : Nov  3 07:02:29 2026 GMT
        Subject: CN=8A8CE7E1CE42BB192EFCF5341C114CBA5DE81C5F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:97:fc:ac:68:1f:3b:18:ae:14:0f:c5:30:29:
                    63:44:de:69:6f:b6:03:a5:32:b3:9b:5f:ac:6e:39:
                    3f:f5:1d:82:cb:b7:ba:1d:0c:86:ee:e1:ec:a6:5f:
                    31:79:4a:ab:73:29:e9:0b:78:41:75:fb:40:f4:f5:
                    c0:87:ba:b6:41:38:b8:9b:41:a1:8b:fd:a8:7f:b2:
                    51:7a:7c:f0:80:33:03:f6:77:b4:3b:54:fc:d2:c1:
                    fd:3c:db:ec:21:de:16:2f:61:78:e0:0c:e2:8c:3f:
                    87:12:39:fd:82:6a:85:fb:83:9d:ed:73:3e:e4:d3:
                    bb:6a:a6:47:51:76:2e:e8:77:8b:87:f8:7c:8c:ac:
                    7a:72:01:1f:97:5c:eb:7f:06:db:12:92:59:41:1b:
                    72:9a:42:c5:65:bf:c4:0e:cb:27:25:0c:14:80:a9:
                    cb:f3:d2:67:6c:6b:27:4b:e3:85:a6:5b:f1:74:43:
                    29:4b:a9:fa:67:f3:d3:76:4b:1f:e5:c1:7a:90:f8:
                    4d:6d:ae:27:da:ed:ef:e2:3a:31:d7:b5:51:cb:4b:
                    0d:9c:86:20:d8:f6:33:6e:60:57:aa:a1:22:ee:54:
                    bf:f2:c3:dc:ac:2e:15:5e:1e:99:be:27:70:51:eb:
                    55:8b:e4:ba:62:94:2a:83:a8:aa:e6:f5:cb:48:a4:
                    6d:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:8C:E7:E1:CE:42:BB:19:2E:FC:F5:34:1C:11:4C:BA:5D:E8:1C:5F
            X509v3 Authority Key Identifier:
                keyid:A6:22:02:F8:8C:E6:1D:6B:D4:71:95:FB:36:10:3C:DD:06:1D:7D:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/7d738314-a975-4fd1-9bc9-52138f83b56e/0/A62202F88CE61D6BD47195FB36103CDD061D7D27.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A62202F88CE61D6BD47195FB36103CDD061D7D27.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7d738314-a975-4fd1-9bc9-52138f83b56e/0/3130332e3137382e38362e302f32332d3233203d3e20313439333230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.178.86.0/23

    Signature Algorithm: sha256WithRSAEncryption
         53:26:4b:48:b1:89:04:01:ed:db:ca:92:85:3e:cb:52:29:42:
         38:fe:0a:bd:a7:88:b9:68:e9:0e:a8:19:85:cd:f6:26:31:28:
         45:b9:0d:57:99:2c:4d:34:e1:67:03:45:68:f5:7f:f4:40:f3:
         1e:9d:a4:7d:50:b0:a5:2d:ca:7e:99:ca:9e:0d:20:cf:bd:cf:
         33:bd:0d:54:55:88:ca:89:d3:1e:0e:4c:a4:ae:60:f9:64:a8:
         7d:81:d5:a4:6f:f1:65:28:5f:18:88:44:90:84:21:83:8a:9d:
         25:65:76:54:31:4f:59:49:b6:f7:48:28:61:cd:92:86:20:bb:
         5e:92:1e:43:4e:80:25:5c:0f:62:38:20:ef:9b:29:3e:e2:57:
         d9:cd:0e:7d:5f:f0:83:0a:a6:fb:58:1d:63:b6:9b:ed:0e:b8:
         80:13:29:0f:cc:9b:7b:cc:cc:0a:2a:87:7b:c8:f9:cc:e7:1b:
         9a:7a:0c:ac:09:63:be:25:ee:42:a0:3a:ef:3c:2b:b5:07:25:
         cc:53:19:dd:60:7c:30:ca:c5:3a:88:db:64:2c:65:d7:90:db:
         7f:88:a4:e5:d7:05:86:97:eb:d1:df:8b:52:2d:63:2d:fe:80:
         e0:fd:11:84:35:5b:7a:73:e4:08:c3:61:0e:8c:be:a3:d9:c9:
         6b:cb:8d:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:22:03 2025 by rpki-client