Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/ad440c85-3471-4461-b590-1601e19f5318/0/3130332e3136352e3134362e302f32332d3233203d3e20313431393236.roa
File:                     3130332e3136352e3134362e302f32332d3233203d3e20313431393236.roa (raw, json)
Hash identifier:          mfc1MWJrfS0i4jbp54vUDYFOgjfPW5TyC5UPp0KzzWY=
Subject key identifier:   F0:D8:C3:9B:7F:DB:53:06:07:15:C0:36:92:C6:6A:05:27:B2:B5:10
Certificate issuer:       /CN=C5930A139BC72A04603E7234E6AA3938C4FAE3BC
Certificate serial:       3E11DA3794EBC7CD9FA6758699DC92CAD62A7D86
Authority key identifier: C5:93:0A:13:9B:C7:2A:04:60:3E:72:34:E6:AA:39:38:C4:FA:E3:BC
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5930A139BC72A04603E7234E6AA3938C4FAE3BC.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ad440c85-3471-4461-b590-1601e19f5318/0/3130332e3136352e3134362e302f32332d3233203d3e20313431393236.roa
Signing time:             Mon 16 Jun 2025 18:00:00 +0000
ROA not before:           Mon 16 Jun 2025 17:55:00 +0000
ROA not after:            Mon 15 Jun 2026 18:00:00 +0000
asID:                     141926
IP address blocks:        103.165.146.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ad440c85-3471-4461-b590-1601e19f5318/0/C5930A139BC72A04603E7234E6AA3938C4FAE3BC.crl
                          rsync://repo-rpki.idnic.net/repo/ad440c85-3471-4461-b590-1601e19f5318/0/C5930A139BC72A04603E7234E6AA3938C4FAE3BC.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5930A139BC72A04603E7234E6AA3938C4FAE3BC.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Jun 2025 23:33:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:11:da:37:94:eb:c7:cd:9f:a6:75:86:99:dc:92:ca:d6:2a:7d:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C5930A139BC72A04603E7234E6AA3938C4FAE3BC
        Validity
            Not Before: Jun 16 17:55:00 2025 GMT
            Not After : Jun 15 18:00:00 2026 GMT
        Subject: CN=F0D8C39B7FDB53060715C03692C66A0527B2B510
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:16:13:07:1a:36:9f:f7:17:2e:d7:b9:f1:42:
                    41:46:72:ec:53:af:b4:d6:5d:74:d7:f6:44:8a:b6:
                    ed:b8:9a:18:4f:f6:f9:18:aa:18:34:9f:62:53:7b:
                    a8:56:d7:b0:b0:dc:91:06:38:c0:a5:d0:13:26:51:
                    7e:2a:3d:b1:49:70:4f:2c:ab:6f:fe:a9:3b:2c:da:
                    90:b4:57:4c:7b:ce:62:74:62:a8:1e:60:11:85:7f:
                    83:d3:2f:ab:c2:e3:00:52:8e:c4:f4:60:18:c0:95:
                    14:3a:14:4b:10:7b:5e:5c:ff:ad:9a:7f:9b:71:d9:
                    ed:80:f3:72:03:33:12:01:47:d8:b6:12:7d:36:a7:
                    1f:15:e5:f8:5d:20:65:66:89:87:04:5f:6e:f7:b2:
                    a7:7b:dc:4b:2f:f3:a3:41:75:a0:28:48:b2:71:46:
                    6b:0c:e5:80:51:ea:3e:48:2f:26:4d:53:bb:61:06:
                    a5:73:73:20:d6:9e:0b:4d:90:5d:1d:ff:d0:0c:14:
                    c0:a9:60:2a:2f:bc:0b:13:19:fb:3d:c8:9d:b7:d6:
                    fe:9e:d9:f3:84:b6:fa:c5:89:ed:72:3b:f3:87:61:
                    aa:9b:f7:6d:03:b9:84:39:d1:8e:74:82:79:e0:fc:
                    79:a3:b8:4c:bd:d3:a7:6f:8d:5b:00:e5:b6:f8:5d:
                    53:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:D8:C3:9B:7F:DB:53:06:07:15:C0:36:92:C6:6A:05:27:B2:B5:10
            X509v3 Authority Key Identifier:
                keyid:C5:93:0A:13:9B:C7:2A:04:60:3E:72:34:E6:AA:39:38:C4:FA:E3:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ad440c85-3471-4461-b590-1601e19f5318/0/C5930A139BC72A04603E7234E6AA3938C4FAE3BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5930A139BC72A04603E7234E6AA3938C4FAE3BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ad440c85-3471-4461-b590-1601e19f5318/0/3130332e3136352e3134362e302f32332d3233203d3e20313431393236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.165.146.0/23

    Signature Algorithm: sha256WithRSAEncryption
         25:68:0a:8d:5f:cc:b0:ea:3a:cf:41:c0:c6:bb:45:42:46:25:
         1c:9b:e0:ae:53:23:47:6f:3a:e1:e3:f4:54:fd:4b:c4:e2:76:
         7c:95:cc:d1:23:99:94:02:24:52:d9:b4:34:e5:bf:45:92:56:
         b2:c8:a7:6f:5a:31:02:96:1c:17:43:a5:58:75:53:1e:20:63:
         6f:43:61:38:47:73:59:f6:c9:5b:00:4a:c1:c0:5d:2a:46:63:
         1e:53:f9:78:10:18:32:67:28:07:6d:1a:71:f9:2f:0e:bf:52:
         04:64:25:65:ce:0f:99:5a:ce:14:25:f6:f5:11:3a:27:ce:36:
         38:84:3f:52:94:76:0c:55:7e:a1:2f:74:6f:97:70:00:f5:8a:
         71:82:b6:d2:4e:a8:eb:de:cb:93:49:eb:f7:fc:50:db:5e:07:
         7d:f0:54:a0:c3:b7:ad:9e:db:06:71:fb:3a:d9:0d:c1:5c:4f:
         d6:a6:a9:b7:3d:f8:da:8d:d2:a5:65:8e:0a:ca:fd:13:d5:bc:
         77:01:4f:31:1f:0a:31:e5:d3:d6:3e:38:d4:60:bf:df:cf:d8:
         db:2d:76:56:33:1a:7c:45:ab:35:14:29:20:e8:eb:90:ad:22:
         56:98:c4:60:ff:a4:69:c7:4d:ce:40:55:dc:0f:2e:98:66:f2:
         d1:bc:ce:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 03:19:39 2025 by rpki-client