Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/3130332e372e38342e302f32332d3234203d3e20313331363934.roa
File:                     3130332e372e38342e302f32332d3234203d3e20313331363934.roa (raw, json)
Hash identifier:          JILAlyEUCKaQwya6IqmIgI2ApwRDLktJQgK62DvR8co=
Subject key identifier:   9A:2C:DC:AE:A8:C3:30:38:E7:F5:BE:C0:0E:4D:84:C5:DA:F1:B5:48
Certificate issuer:       /CN=A9ECE2086AFC3046DE0F6A07858FF1851AD68517
Certificate serial:       259857829373D480C390EBBB004F2E0FAF28A815
Authority key identifier: A9:EC:E2:08:6A:FC:30:46:DE:0F:6A:07:85:8F:F1:85:1A:D6:85:17
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/3130332e372e38342e302f32332d3234203d3e20313331363934.roa
Signing time:             Tue 15 Jul 2025 10:02:25 +0000
ROA not before:           Tue 15 Jul 2025 09:57:25 +0000
ROA not after:            Tue 14 Jul 2026 10:02:25 +0000
asID:                     131694
IP address blocks:        103.7.84.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.crl
                          rsync://repo-rpki.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 08 Aug 2025 14:29:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:98:57:82:93:73:d4:80:c3:90:eb:bb:00:4f:2e:0f:af:28:a8:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9ECE2086AFC3046DE0F6A07858FF1851AD68517
        Validity
            Not Before: Jul 15 09:57:25 2025 GMT
            Not After : Jul 14 10:02:25 2026 GMT
        Subject: CN=9A2CDCAEA8C33038E7F5BEC00E4D84C5DAF1B548
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ad:e6:36:99:bc:3f:71:58:72:70:a3:12:dd:
                    22:e5:ac:f3:5c:c4:d9:88:07:67:e0:17:8a:44:6b:
                    94:56:8a:49:78:c0:68:b2:a2:99:e1:cb:33:ff:cd:
                    1a:72:76:98:d6:e6:10:2e:df:8d:59:38:c4:ab:9b:
                    78:58:bb:34:3e:b8:44:b1:a5:fd:c5:49:15:fb:43:
                    a2:22:b2:22:fc:21:b9:b9:f8:75:78:91:ed:91:72:
                    15:11:22:86:aa:48:04:90:5a:85:36:af:96:ac:99:
                    0a:4d:c8:a8:d1:0c:a0:44:24:26:4a:c8:e6:20:98:
                    16:f2:e0:1b:07:ff:3d:da:75:f9:a1:19:1b:42:16:
                    4d:00:76:24:e7:57:f5:ab:f1:45:4e:87:22:df:18:
                    f7:6c:49:4f:d7:12:da:cc:f5:b7:ca:eb:17:1c:d6:
                    35:05:5c:f5:6f:ad:0a:1d:e1:a7:fa:b6:de:58:59:
                    0a:a2:ea:1c:a0:cc:44:31:0d:80:32:29:a4:0b:84:
                    81:98:49:46:38:ce:ef:54:a6:a4:51:23:bb:9a:fe:
                    80:7f:1c:f6:b6:e8:0e:21:3c:62:0a:fe:5d:89:46:
                    df:63:8f:4d:e7:1c:13:6c:67:8b:34:19:17:66:ad:
                    ac:e8:47:3e:a0:07:29:f5:79:a3:91:90:9e:db:8e:
                    fd:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:2C:DC:AE:A8:C3:30:38:E7:F5:BE:C0:0E:4D:84:C5:DA:F1:B5:48
            X509v3 Authority Key Identifier:
                keyid:A9:EC:E2:08:6A:FC:30:46:DE:0F:6A:07:85:8F:F1:85:1A:D6:85:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/3130332e372e38342e302f32332d3234203d3e20313331363934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.7.84.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8b:89:ec:90:44:03:27:03:73:7b:3c:f6:43:5e:ec:c6:e1:fb:
         7b:b3:c6:c0:31:35:18:7e:22:d5:df:b1:ef:24:bf:6e:b4:30:
         7c:20:17:63:e2:e4:eb:48:d1:6d:51:9e:86:f7:48:28:90:e0:
         6a:91:aa:55:33:29:17:43:76:3c:d4:a8:28:c2:6a:02:e3:f4:
         95:d5:8a:68:ec:0a:f2:38:dd:e3:5f:29:04:26:df:8f:ff:ed:
         14:00:55:d3:e1:37:93:81:94:c9:8b:8c:aa:67:69:b5:5f:2c:
         96:cf:d0:f9:65:71:df:40:3b:ce:2f:2f:da:47:f1:49:c7:2b:
         de:67:42:06:95:92:80:08:5c:8b:d3:2a:78:76:0e:e7:6b:b5:
         67:87:06:6f:59:2b:4b:14:32:39:8d:11:e5:27:d3:66:78:14:
         7f:03:4d:4b:f8:c5:1b:31:f7:59:9b:89:c1:8b:c6:67:e2:09:
         8a:98:bd:a5:ce:ec:27:e8:6e:e2:18:6c:b7:93:70:0c:d3:a0:
         06:21:19:54:47:6c:54:03:dd:ff:d5:ed:0a:c2:4d:e0:af:5a:
         26:99:79:74:bf:ac:eb:d4:55:29:c2:65:34:bc:5c:e4:68:cc:
         bb:1b:75:2e:c2:a8:b8:8b:33:e8:65:b1:fb:f9:fa:ad:a7:5e:
         a0:d9:d3:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 07:25:37 2025 by rpki-client