Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/3130332e372e38342e302f32342d3234203d3e20313331363934.roa
File:                     3130332e372e38342e302f32342d3234203d3e20313331363934.roa (raw, json)
Hash identifier:          +OuFRQQCgw1PD5PrziLmo5M1zEaNfWHIcGtXO9rN0mk=
Subject key identifier:   33:D9:5D:96:72:DC:22:27:01:CF:AD:FB:D5:EB:7F:14:0D:EE:D1:5F
Certificate issuer:       /CN=A9ECE2086AFC3046DE0F6A07858FF1851AD68517
Certificate serial:       696B2D2267491E0C82816594023FC0BE82C5D307
Authority key identifier: A9:EC:E2:08:6A:FC:30:46:DE:0F:6A:07:85:8F:F1:85:1A:D6:85:17
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/3130332e372e38342e302f32342d3234203d3e20313331363934.roa
Signing time:             Tue 15 Jul 2025 10:02:25 +0000
ROA not before:           Tue 15 Jul 2025 09:57:25 +0000
ROA not after:            Tue 14 Jul 2026 10:02:25 +0000
asID:                     131694
IP address blocks:        103.7.84.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.crl
                          rsync://repo-rpki.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 08 Aug 2025 14:29:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:6b:2d:22:67:49:1e:0c:82:81:65:94:02:3f:c0:be:82:c5:d3:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9ECE2086AFC3046DE0F6A07858FF1851AD68517
        Validity
            Not Before: Jul 15 09:57:25 2025 GMT
            Not After : Jul 14 10:02:25 2026 GMT
        Subject: CN=33D95D9672DC222701CFADFBD5EB7F140DEED15F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:b1:bc:45:11:c2:f0:8e:4a:f6:84:7e:e9:ca:
                    b2:13:89:35:84:f5:51:6d:19:fa:cb:50:ce:25:25:
                    98:5a:c4:67:75:e0:bb:51:eb:6a:4c:1e:2e:be:13:
                    13:56:31:c7:40:d7:62:2e:81:8d:58:e4:88:cf:75:
                    57:ef:1b:f6:db:17:dd:78:03:f0:37:4f:7a:a4:1d:
                    39:97:3e:42:83:30:d2:bc:2a:67:ce:31:12:fa:2c:
                    7f:e1:40:1e:8a:7b:47:a9:cd:45:70:60:1a:42:ff:
                    ec:84:e6:75:88:13:a3:e7:c9:45:1e:2e:03:c5:f9:
                    1d:b5:99:b9:ad:92:f7:59:99:96:6c:bd:eb:72:5e:
                    75:75:a8:90:ea:15:f2:9c:63:04:19:cd:ef:ff:4e:
                    4b:ce:0c:89:c8:54:c8:dc:6d:70:83:e9:10:4b:05:
                    98:37:f6:c1:19:6b:51:a0:46:61:84:54:93:fe:ea:
                    1a:c8:6f:2d:52:35:32:fa:2d:34:f7:a3:03:c1:73:
                    92:f5:7b:b9:36:3f:89:b4:c2:20:19:f8:fd:08:ea:
                    05:d0:0c:0d:3b:df:f7:8b:43:7a:c5:14:6f:a0:5a:
                    1e:b3:4a:49:3d:bf:42:6f:93:a5:78:4f:85:00:31:
                    fe:7e:1c:db:43:4f:5f:c7:58:7a:cd:2b:ab:4f:4a:
                    59:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:D9:5D:96:72:DC:22:27:01:CF:AD:FB:D5:EB:7F:14:0D:EE:D1:5F
            X509v3 Authority Key Identifier:
                keyid:A9:EC:E2:08:6A:FC:30:46:DE:0F:6A:07:85:8F:F1:85:1A:D6:85:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/3130332e372e38342e302f32342d3234203d3e20313331363934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.7.84.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:0c:18:4f:7d:62:8e:aa:7f:66:ec:a4:fe:fe:6a:a6:7a:ad:
         79:14:d8:79:5a:3f:ef:8f:80:10:5a:77:1d:a4:26:4d:4e:d0:
         1e:9b:4d:65:73:dd:93:10:3f:89:f6:cd:2f:8c:43:73:c3:57:
         9d:c9:54:da:c2:43:23:54:9a:69:a3:66:2d:8a:9d:e8:ac:cf:
         74:b9:a7:7a:04:18:47:ed:71:c2:f8:72:56:d7:65:66:76:da:
         3c:25:6a:f8:cf:b8:6f:62:99:4e:f4:db:e8:10:23:f2:eb:46:
         5e:cf:40:d7:56:df:aa:8d:1c:c5:19:96:e7:44:e1:4c:86:e6:
         5f:f0:b6:97:60:0c:ce:af:01:32:6a:76:b9:cc:8e:97:7f:ef:
         c5:a9:40:6c:fc:14:95:67:b7:e1:1a:25:97:af:b7:57:c3:ee:
         17:1c:fb:73:39:70:16:f8:cc:68:fa:8c:99:07:68:83:1c:97:
         f4:db:64:3f:6f:cc:a5:14:7c:b5:61:90:f7:33:4b:5b:fc:92:
         bd:03:90:75:bc:22:47:77:c6:c7:ec:d5:cc:15:96:da:b3:13:
         7c:ad:06:82:ee:c6:11:6f:e7:8d:30:d2:60:f7:8e:f1:af:26:
         9b:f2:62:31:7a:98:55:1e:9b:4f:ec:24:aa:7e:8a:a5:e1:e1:
         fe:c7:18:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 11:14:48 2025 by rpki-client