Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/3130332e33312e34372e302f32342d3234203d3e20313338383431.roa
File:                     3130332e33312e34372e302f32342d3234203d3e20313338383431.roa (raw, json)
Hash identifier:          YMWlS+XLktPzc+iiLpc1pY22uQjU4HPnqS2BrLMkXm0=
Subject key identifier:   AF:A3:51:22:0D:AA:A2:0E:2F:20:3A:AE:D3:3E:AE:C3:67:44:2F:BC
Certificate issuer:       /CN=552B31A26E92A9DD6A585B92375B7FCA4FA66984
Certificate serial:       0FDA9C1B09E389AC55724D5C9546BA8F554AD7DE
Authority key identifier: 55:2B:31:A2:6E:92:A9:DD:6A:58:5B:92:37:5B:7F:CA:4F:A6:69:84
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/3130332e33312e34372e302f32342d3234203d3e20313338383431.roa
Signing time:             Fri 25 Jul 2025 06:01:31 +0000
ROA not before:           Fri 25 Jul 2025 05:56:31 +0000
ROA not after:            Fri 24 Jul 2026 06:01:31 +0000
asID:                     138841
IP address blocks:        103.31.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.crl
                          rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Jul 2025 09:06:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:da:9c:1b:09:e3:89:ac:55:72:4d:5c:95:46:ba:8f:55:4a:d7:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=552B31A26E92A9DD6A585B92375B7FCA4FA66984
        Validity
            Not Before: Jul 25 05:56:31 2025 GMT
            Not After : Jul 24 06:01:31 2026 GMT
        Subject: CN=AFA351220DAAA20E2F203AAED33EAEC367442FBC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:88:b6:5e:4f:14:c0:18:76:c7:28:dd:ad:40:
                    da:cd:e9:f2:0c:60:f7:69:12:d5:ac:90:fb:5c:98:
                    cf:79:4a:6c:1f:cc:59:1b:43:8c:3a:13:df:ff:40:
                    dc:ae:03:50:82:73:3d:8f:16:3a:1c:78:98:d4:ec:
                    9e:df:6f:da:a6:3b:36:a9:14:08:02:b0:8a:57:03:
                    ed:55:08:a5:f2:14:e9:05:d6:93:8c:6a:9e:35:00:
                    f4:40:18:a4:4d:c3:85:03:5d:ae:9d:f2:e9:44:eb:
                    ab:ad:f8:c4:9e:3a:83:b1:3b:25:67:56:85:99:2c:
                    b9:aa:d6:56:28:91:9c:50:d3:94:98:eb:b3:54:2c:
                    94:26:12:f4:f6:c8:72:6a:d8:d5:cd:bc:03:49:66:
                    97:cc:7c:20:15:60:51:38:73:79:17:38:c9:53:77:
                    a8:d6:ae:98:21:82:50:04:08:2b:e1:c4:26:74:eb:
                    78:c1:de:c9:74:23:f8:b0:7f:af:76:9a:42:f6:be:
                    33:30:6b:c0:7a:f6:47:00:b3:ca:aa:0b:10:c5:29:
                    b8:53:61:5b:0c:d2:f9:52:59:00:cf:b0:97:8b:16:
                    e6:a6:3f:86:6f:9e:fa:fd:97:97:84:d5:e3:0e:32:
                    e8:b5:e4:f2:21:b2:d4:4c:38:c7:c4:9e:a2:1d:d0:
                    06:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:A3:51:22:0D:AA:A2:0E:2F:20:3A:AE:D3:3E:AE:C3:67:44:2F:BC
            X509v3 Authority Key Identifier:
                keyid:55:2B:31:A2:6E:92:A9:DD:6A:58:5B:92:37:5B:7F:CA:4F:A6:69:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/3130332e33312e34372e302f32342d3234203d3e20313338383431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.31.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:bc:95:c1:d2:1f:42:95:77:85:69:ae:a0:94:d3:ad:1d:7f:
         bb:5d:21:dc:52:38:67:2d:42:14:95:3d:ca:ab:46:ad:d3:ee:
         de:34:18:c5:70:9f:ed:95:37:55:11:f8:e4:20:c3:c4:d0:ed:
         49:ed:b6:d8:f0:39:04:0c:90:b5:fe:d9:6a:19:44:11:03:3d:
         bc:28:64:7d:80:6b:b9:e3:05:e0:ad:d1:af:7f:53:db:fe:f7:
         ab:cf:56:7f:88:d0:03:9b:05:6e:e9:3e:3b:06:02:31:c2:78:
         83:c1:d4:f3:14:62:37:4d:8f:04:5d:d4:9d:38:5e:66:be:df:
         a1:a1:ca:38:77:bb:b3:de:bf:6d:a9:bb:f7:35:e2:b9:69:63:
         25:91:09:71:cc:ed:b4:37:16:b9:c2:f9:6a:3e:06:3b:ad:24:
         fc:35:43:85:93:b9:9f:ee:2b:a1:cd:1c:75:75:93:cc:58:d2:
         df:01:46:51:83:11:84:c8:65:c4:94:0d:61:cd:e6:bc:d3:08:
         42:6f:13:c2:ea:a1:2b:b5:d2:01:0f:7c:73:a4:fb:7c:b3:c8:
         d0:1b:4b:a7:b0:f9:9b:a2:c4:e2:70:0c:77:b8:09:10:24:18:
         ff:74:c8:9f:ce:a6:36:4b:2b:5e:8c:f5:33:71:7c:fb:e6:e1:
         03:f2:23:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 18:15:07 2025 by rpki-client