Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/52ac0ca5-5ce7-4e6e-9fff-7213ef1ef364/0/3130332e3233362e3230312e302f32342d3234203d3e20313336303532.roa
File:                     3130332e3233362e3230312e302f32342d3234203d3e20313336303532.roa (raw, json)
Hash identifier:          NJ/fZulIyr1e7dyoj8v3tiz901wVBYZYjvKtkVFLK3I=
Subject key identifier:   4A:61:02:DF:75:08:AD:96:BB:C3:EB:FE:E2:9F:5A:A9:76:29:31:2E
Certificate issuer:       /CN=AF52E716DE71EEA9353FEA92FBF72DA2106A594C
Certificate serial:       079AECDDCDFB122E2289464DDC978C9633D06EA0
Authority key identifier: AF:52:E7:16:DE:71:EE:A9:35:3F:EA:92:FB:F7:2D:A2:10:6A:59:4C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF52E716DE71EEA9353FEA92FBF72DA2106A594C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/52ac0ca5-5ce7-4e6e-9fff-7213ef1ef364/0/3130332e3233362e3230312e302f32342d3234203d3e20313336303532.roa
Signing time:             Tue 22 Jul 2025 06:02:24 +0000
ROA not before:           Tue 22 Jul 2025 05:57:24 +0000
ROA not after:            Tue 21 Jul 2026 06:02:24 +0000
asID:                     136052
IP address blocks:        103.236.201.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/52ac0ca5-5ce7-4e6e-9fff-7213ef1ef364/0/AF52E716DE71EEA9353FEA92FBF72DA2106A594C.crl
                          rsync://repo-rpki.idnic.net/repo/52ac0ca5-5ce7-4e6e-9fff-7213ef1ef364/0/AF52E716DE71EEA9353FEA92FBF72DA2106A594C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF52E716DE71EEA9353FEA92FBF72DA2106A594C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Jul 2025 15:19:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:9a:ec:dd:cd:fb:12:2e:22:89:46:4d:dc:97:8c:96:33:d0:6e:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF52E716DE71EEA9353FEA92FBF72DA2106A594C
        Validity
            Not Before: Jul 22 05:57:24 2025 GMT
            Not After : Jul 21 06:02:24 2026 GMT
        Subject: CN=4A6102DF7508AD96BBC3EBFEE29F5AA97629312E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:30:3f:d1:83:b0:4f:d2:f8:a0:ea:96:fd:2a:
                    16:b3:13:f7:4a:8c:98:24:4e:8e:b8:53:20:f6:f8:
                    dd:88:93:b0:b5:df:6f:ec:28:b8:db:02:f5:ad:12:
                    4a:a6:19:81:10:e9:02:29:8d:77:68:b9:37:83:93:
                    fc:ab:82:13:df:71:86:ad:a9:c8:95:f7:b3:d3:bf:
                    a2:22:3b:dd:f0:e8:db:2c:15:47:32:ff:c2:24:41:
                    eb:81:71:db:ad:eb:c1:1e:b9:96:a1:f6:ad:a5:fa:
                    1d:91:77:08:57:eb:a5:25:c1:00:f7:df:18:90:6d:
                    cf:42:a3:ce:6e:1a:d0:63:d7:45:e2:f3:e5:ed:56:
                    5d:33:59:78:94:70:96:9a:5c:2d:32:47:a6:32:26:
                    5e:3b:93:96:d6:2b:22:9e:4c:20:5c:4f:51:98:f2:
                    a6:05:8c:73:af:f9:55:e2:58:45:0b:85:3b:f5:e7:
                    a7:a0:b9:37:68:42:90:54:22:23:9e:38:06:5e:ec:
                    58:b1:dc:7f:f9:76:02:07:f2:db:c0:42:d6:e0:a1:
                    33:50:05:a1:68:aa:97:ac:b5:72:f8:dd:41:47:34:
                    87:d0:cd:57:3d:92:e3:66:0f:f4:d8:25:48:61:4d:
                    b7:06:99:58:6a:9a:b2:0c:1d:40:1a:a3:63:c6:1b:
                    6c:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:61:02:DF:75:08:AD:96:BB:C3:EB:FE:E2:9F:5A:A9:76:29:31:2E
            X509v3 Authority Key Identifier:
                keyid:AF:52:E7:16:DE:71:EE:A9:35:3F:EA:92:FB:F7:2D:A2:10:6A:59:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/52ac0ca5-5ce7-4e6e-9fff-7213ef1ef364/0/AF52E716DE71EEA9353FEA92FBF72DA2106A594C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF52E716DE71EEA9353FEA92FBF72DA2106A594C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/52ac0ca5-5ce7-4e6e-9fff-7213ef1ef364/0/3130332e3233362e3230312e302f32342d3234203d3e20313336303532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.236.201.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:b3:d9:31:4a:19:18:d5:48:7d:18:b0:9c:0c:58:98:db:8d:
         8c:13:86:67:dd:d5:f8:2d:03:fe:bb:e9:c5:87:38:51:f7:83:
         a5:23:d2:37:05:ff:03:c8:6a:ee:44:2d:1c:3e:8b:67:c5:85:
         fa:13:7f:0c:ed:c4:83:99:83:30:27:c1:23:7d:7e:0a:cc:ef:
         a5:94:da:b0:66:fa:b6:9d:57:2b:67:e5:fb:ab:3a:f9:45:0f:
         fb:60:ef:a0:38:bc:17:d4:e9:32:52:58:fc:5b:ff:03:1b:ab:
         f1:c5:89:6b:cd:57:ea:5d:d3:56:60:89:91:69:50:3f:28:22:
         c4:72:2a:2f:6d:cb:0b:20:8a:ef:75:e9:82:f2:2b:cf:f2:a0:
         c4:9b:6e:ab:25:5a:36:d6:14:20:a1:fb:26:cf:22:fd:73:a3:
         91:9d:20:61:75:6d:ca:b0:d0:a9:6d:fd:cf:d8:7a:91:1f:ce:
         1c:5a:d3:be:f6:0f:21:39:34:c6:bf:c8:f6:22:54:25:7e:4b:
         bf:2e:80:ab:5b:ec:10:f9:0c:a8:48:a0:9b:25:45:38:7a:65:
         99:f7:1e:04:f1:ed:e4:fd:e2:e7:44:60:dd:d0:7e:64:1f:5c:
         b8:f8:97:64:45:c7:3c:6d:4c:34:b9:8b:3f:3b:34:25:93:34:
         d6:2a:05:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 17:10:39 2025 by rpki-client