Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a682bca3-e858-4d52-b1a3-2f4bae47c9f2/0/3130332e3136302e3138342e302f32342d3234203d3e20313339393532.roa
File:                     3130332e3136302e3138342e302f32342d3234203d3e20313339393532.roa (raw, json)
Hash identifier:          lM92Y8NAq84+9u66XJy1rtkUnS0gYFJFy14ToZCCjs0=
Subject key identifier:   4D:09:4C:5C:77:6F:C6:EA:59:73:FC:D8:63:24:93:12:4A:45:AC:50
Certificate issuer:       /CN=6A6C813654E0C29339E6CAF522201F8E702FEAD3
Certificate serial:       5C3AF2BB0B031AE02384A203A7B291011A48C3CE
Authority key identifier: 6A:6C:81:36:54:E0:C2:93:39:E6:CA:F5:22:20:1F:8E:70:2F:EA:D3
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A6C813654E0C29339E6CAF522201F8E702FEAD3.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a682bca3-e858-4d52-b1a3-2f4bae47c9f2/0/3130332e3136302e3138342e302f32342d3234203d3e20313339393532.roa
Signing time:             Wed 06 Aug 2025 10:00:00 +0000
ROA not before:           Wed 06 Aug 2025 09:55:00 +0000
ROA not after:            Wed 05 Aug 2026 10:00:00 +0000
asID:                     139952
IP address blocks:        103.160.184.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a682bca3-e858-4d52-b1a3-2f4bae47c9f2/0/6A6C813654E0C29339E6CAF522201F8E702FEAD3.crl
                          rsync://repo-rpki.idnic.net/repo/a682bca3-e858-4d52-b1a3-2f4bae47c9f2/0/6A6C813654E0C29339E6CAF522201F8E702FEAD3.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A6C813654E0C29339E6CAF522201F8E702FEAD3.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 09 Aug 2025 17:47:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:3a:f2:bb:0b:03:1a:e0:23:84:a2:03:a7:b2:91:01:1a:48:c3:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A6C813654E0C29339E6CAF522201F8E702FEAD3
        Validity
            Not Before: Aug  6 09:55:00 2025 GMT
            Not After : Aug  5 10:00:00 2026 GMT
        Subject: CN=4D094C5C776FC6EA5973FCD8632493124A45AC50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:3a:17:3d:c4:13:c0:57:62:a0:a4:2e:50:ed:
                    20:56:7b:88:2f:34:f4:f2:ad:64:0a:fa:f3:27:5c:
                    a2:86:de:54:fd:8f:0d:ef:8f:e6:f7:51:59:e5:3b:
                    64:66:d8:68:47:a9:83:c0:a3:7e:ba:2b:ee:dd:0f:
                    a3:e8:72:2e:0b:e5:60:52:0f:ad:8a:43:a1:ea:48:
                    b9:30:8e:df:30:79:0e:a0:66:dc:36:44:d9:2c:1a:
                    46:28:de:c4:31:5a:8f:b3:ff:e7:79:e8:ea:06:e5:
                    90:97:b2:e1:78:f7:a3:ad:ad:6d:d0:01:2b:35:6c:
                    1b:e4:e5:1c:5a:39:5e:3b:ba:9f:8a:da:77:3f:a6:
                    fa:34:b9:b6:7c:e3:ae:4b:d8:86:de:ac:d1:fe:7a:
                    32:b5:fc:d5:1d:92:79:9b:84:f4:97:b7:f7:54:82:
                    27:0a:ea:90:91:70:c9:e9:97:94:12:26:bb:76:a0:
                    a9:5f:35:af:7d:7b:28:20:8e:65:ed:76:93:7f:03:
                    bc:53:03:ca:fe:3f:b8:54:bc:53:9a:22:c5:0e:a0:
                    ef:bd:d1:cb:0d:62:c8:93:9f:22:2c:a5:c3:de:ce:
                    ae:82:8e:0e:62:84:b9:1f:64:38:a6:55:24:05:55:
                    e9:ca:63:f4:40:56:77:86:60:af:1d:ee:8f:9d:25:
                    19:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:09:4C:5C:77:6F:C6:EA:59:73:FC:D8:63:24:93:12:4A:45:AC:50
            X509v3 Authority Key Identifier:
                keyid:6A:6C:81:36:54:E0:C2:93:39:E6:CA:F5:22:20:1F:8E:70:2F:EA:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a682bca3-e858-4d52-b1a3-2f4bae47c9f2/0/6A6C813654E0C29339E6CAF522201F8E702FEAD3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A6C813654E0C29339E6CAF522201F8E702FEAD3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a682bca3-e858-4d52-b1a3-2f4bae47c9f2/0/3130332e3136302e3138342e302f32342d3234203d3e20313339393532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.160.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:82:a0:ad:3a:c0:5f:63:2d:8a:19:60:a4:af:4b:6a:39:d6:
         1d:44:52:3f:01:39:94:f8:88:87:a8:de:4f:ec:4d:cf:e2:38:
         30:8e:b2:9f:bc:83:ba:97:43:b4:9b:0f:ff:d1:9f:70:39:82:
         8c:b1:f1:2a:0a:81:f3:77:4b:49:bb:08:13:87:72:a3:91:b3:
         75:34:68:cb:4b:3b:c5:6d:7e:15:6d:29:43:8a:53:04:e8:25:
         de:ae:59:a1:2f:82:ea:11:d9:8c:44:69:43:5f:d3:0a:7b:a8:
         e9:e4:d8:18:19:f9:2c:34:79:c1:db:37:e0:53:a8:01:28:d7:
         a5:77:75:d8:44:8f:a4:c3:8d:7a:88:57:f0:03:40:c3:ef:06:
         f1:8e:35:db:9e:7d:81:7c:6b:b7:6d:b0:74:aa:19:91:6d:41:
         7d:63:23:17:de:5d:2d:ba:a8:65:13:26:93:57:ec:f4:2b:2a:
         f4:20:07:3b:d7:e9:c1:48:6a:e9:01:9e:db:3f:5f:28:a9:39:
         1a:5d:88:f3:e7:6f:b4:e3:46:0f:ef:52:75:94:0e:28:0d:0f:
         47:a7:2c:f5:3f:7e:b4:70:e6:91:89:b6:ed:42:54:a6:14:ed:
         b7:0f:42:d0:84:8c:3c:76:30:40:3d:07:60:49:bc:b9:39:76:
         25:7a:0e:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 01:04:35 2025 by rpki-client