Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/ad440c85-3471-4461-b590-1601e19f5318/0/3130332e3136352e3134362e302f32342d3234203d3e20313431393236.roa
File:                     3130332e3136352e3134362e302f32342d3234203d3e20313431393236.roa (raw, json)
Hash identifier:          1DftqP7fwg1IcfyuMNUOovuIMKeX+ETObWgg15HcP+g=
Subject key identifier:   C4:EB:8B:F9:1A:21:34:76:D2:15:55:99:F6:53:A5:3F:6D:08:18:A1
Certificate issuer:       /CN=C5930A139BC72A04603E7234E6AA3938C4FAE3BC
Certificate serial:       0D98EF34555E414A97A46650E7689EE320BFD40A
Authority key identifier: C5:93:0A:13:9B:C7:2A:04:60:3E:72:34:E6:AA:39:38:C4:FA:E3:BC
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5930A139BC72A04603E7234E6AA3938C4FAE3BC.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ad440c85-3471-4461-b590-1601e19f5318/0/3130332e3136352e3134362e302f32342d3234203d3e20313431393236.roa
Signing time:             Mon 16 Jun 2025 17:00:00 +0000
ROA not before:           Mon 16 Jun 2025 16:55:00 +0000
ROA not after:            Mon 15 Jun 2026 17:00:00 +0000
asID:                     141926
IP address blocks:        103.165.146.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ad440c85-3471-4461-b590-1601e19f5318/0/C5930A139BC72A04603E7234E6AA3938C4FAE3BC.crl
                          rsync://repo-rpki.idnic.net/repo/ad440c85-3471-4461-b590-1601e19f5318/0/C5930A139BC72A04603E7234E6AA3938C4FAE3BC.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5930A139BC72A04603E7234E6AA3938C4FAE3BC.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 20 Jun 2025 05:10:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:98:ef:34:55:5e:41:4a:97:a4:66:50:e7:68:9e:e3:20:bf:d4:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C5930A139BC72A04603E7234E6AA3938C4FAE3BC
        Validity
            Not Before: Jun 16 16:55:00 2025 GMT
            Not After : Jun 15 17:00:00 2026 GMT
        Subject: CN=C4EB8BF91A213476D2155599F653A53F6D0818A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:a2:31:52:fc:aa:b6:04:3e:43:81:e1:9a:ed:
                    fb:cd:2f:1b:4a:6d:32:af:bf:d4:9a:1d:82:91:9b:
                    7c:4a:e6:89:ee:8d:80:c5:ab:19:d1:32:0a:17:ad:
                    8c:b7:d7:cf:b8:61:9d:61:62:0d:f1:31:ec:a6:53:
                    2a:15:1f:c0:50:02:b0:5e:f3:8f:ba:34:60:ee:9f:
                    11:db:00:9e:f8:47:95:9d:c5:67:f1:59:07:d7:97:
                    0f:67:98:7c:5f:fd:d4:9c:21:12:2d:fb:23:8a:e4:
                    21:56:b9:f9:c1:c3:7f:af:3f:41:19:89:3a:58:e4:
                    93:c0:11:56:14:3f:98:b6:1c:28:c0:43:ce:c2:1d:
                    19:ac:b7:ed:83:bf:57:7f:de:d2:d8:db:2e:bb:5c:
                    74:d9:df:7c:fc:72:1e:24:c5:b2:a5:47:51:af:c1:
                    22:01:4a:03:2b:aa:8f:d3:7f:fa:bd:36:7c:93:cc:
                    93:41:b5:d8:2c:2a:5c:a1:79:44:f3:00:30:d6:a2:
                    79:c2:26:49:68:5a:bc:1a:b7:b7:2e:7b:a1:2a:cb:
                    35:d9:4a:c4:d6:c5:42:23:58:21:3d:03:22:3e:89:
                    1f:76:7d:00:ac:28:64:6d:96:6a:d3:2e:b8:4a:a9:
                    11:0f:cf:56:d3:e1:b6:d1:78:e7:fa:19:f1:c1:ef:
                    38:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:EB:8B:F9:1A:21:34:76:D2:15:55:99:F6:53:A5:3F:6D:08:18:A1
            X509v3 Authority Key Identifier:
                keyid:C5:93:0A:13:9B:C7:2A:04:60:3E:72:34:E6:AA:39:38:C4:FA:E3:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ad440c85-3471-4461-b590-1601e19f5318/0/C5930A139BC72A04603E7234E6AA3938C4FAE3BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5930A139BC72A04603E7234E6AA3938C4FAE3BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ad440c85-3471-4461-b590-1601e19f5318/0/3130332e3136352e3134362e302f32342d3234203d3e20313431393236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.165.146.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:ad:f7:d9:86:a5:8c:d3:3a:63:1e:1a:49:13:c6:05:75:ac:
         9b:6a:b1:b6:4d:56:e6:14:25:97:81:c4:11:35:69:fb:ba:96:
         15:29:f9:dd:64:34:46:30:cb:fd:ab:2a:40:88:21:23:0a:9d:
         6c:d1:2a:87:72:c6:21:de:b6:57:23:8d:7d:77:1b:72:85:3c:
         07:8f:2f:f5:e9:c9:85:af:bb:ab:7f:95:b3:fa:23:70:f6:00:
         bd:97:cd:67:a0:80:04:fe:52:fa:a9:22:29:e1:79:89:bb:2d:
         87:07:af:de:ca:5e:50:cb:dc:ec:f7:ef:f6:ed:0a:0f:33:0d:
         6b:ae:7a:c8:c0:91:e6:3f:4f:9e:23:f6:13:8d:f6:ac:b7:76:
         d0:1c:c0:14:a0:ac:90:62:79:33:7e:15:56:78:e8:91:61:6f:
         eb:9c:0f:7f:c4:07:75:96:3a:2c:38:c7:ef:f0:ae:49:50:8e:
         c0:a5:d9:2e:14:04:76:3d:cd:5d:4a:b4:85:6e:12:b3:41:d5:
         9e:11:f3:9d:50:82:f1:61:34:a4:ef:43:b6:22:dc:b6:e1:a8:
         cf:f8:25:d3:00:81:40:f5:2d:62:60:b4:f4:33:83:1d:73:fe:
         70:10:29:bc:8b:94:bd:9e:17:1a:52:7c:78:81:a4:81:ed:2e:
         d1:7c:56:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 09:00:21 2025 by rpki-client