Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/57280400-9654-4d45-888b-9067bada190b/0/3130332e38312e36342e302f32322d3234203d3e20313336303535.roa
File:                     3130332e38312e36342e302f32322d3234203d3e20313336303535.roa (raw, json)
Hash identifier:          G2lV5U9+p39d6xSgHB2TJ310g1uTGGU7EbB7g2ly4zQ=
Subject key identifier:   52:EB:15:BC:5A:B2:94:1D:FE:16:6F:5C:17:61:77:56:6D:10:7D:13
Certificate issuer:       /CN=A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F
Certificate serial:       695BE6D3B3B3ED2DE1DF5801F6D2AE980499570B
Authority key identifier: A4:AC:49:C4:F5:5B:F5:D4:AF:3D:42:10:4A:8A:5E:C1:F2:12:3E:6F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/57280400-9654-4d45-888b-9067bada190b/0/3130332e38312e36342e302f32322d3234203d3e20313336303535.roa
Signing time:             Wed 09 Jul 2025 17:00:00 +0000
ROA not before:           Wed 09 Jul 2025 16:55:00 +0000
ROA not after:            Wed 08 Jul 2026 17:00:00 +0000
asID:                     136055
IP address blocks:        103.81.64.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/57280400-9654-4d45-888b-9067bada190b/0/A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F.crl
                          rsync://repo-rpki.idnic.net/repo/57280400-9654-4d45-888b-9067bada190b/0/A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Jul 2025 09:50:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:5b:e6:d3:b3:b3:ed:2d:e1:df:58:01:f6:d2:ae:98:04:99:57:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F
        Validity
            Not Before: Jul  9 16:55:00 2025 GMT
            Not After : Jul  8 17:00:00 2026 GMT
        Subject: CN=52EB15BC5AB2941DFE166F5C176177566D107D13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:15:26:03:f3:31:c0:74:11:04:a1:ed:e4:fb:
                    ef:98:c3:30:e3:90:5b:35:62:79:cc:b0:eb:d3:d4:
                    65:3f:08:d0:03:c6:c6:e6:0a:df:69:bb:15:c7:5a:
                    f6:bf:45:b8:1d:9c:29:58:9a:8a:80:7b:a4:37:d2:
                    69:87:8e:84:ae:96:01:84:0e:f4:1c:1b:73:ab:f2:
                    a1:01:ab:53:13:b9:06:b6:c9:96:b1:28:5b:ef:a2:
                    1c:6d:53:c5:2b:9c:22:ce:47:4f:49:b6:84:2e:1f:
                    e9:3f:f9:54:a2:ba:a6:1e:8f:c4:1a:88:2a:01:c8:
                    43:b4:b6:55:c9:bf:5e:72:9d:36:e8:db:7d:e1:0c:
                    78:7f:87:7c:df:87:7d:a7:df:3d:64:d9:0a:0a:d1:
                    46:48:8f:5f:a9:b8:39:48:d4:37:4d:64:26:59:18:
                    91:e5:71:46:35:d4:e2:1b:b6:77:dc:47:81:db:6d:
                    85:d6:a6:7e:27:aa:2c:ce:34:e3:f6:05:7e:29:b5:
                    de:3b:e6:88:fa:bb:f6:14:d1:f9:c3:c2:41:04:2b:
                    da:75:a3:9e:7c:74:5c:03:d7:76:b2:33:bc:2c:39:
                    00:2f:bf:5d:cf:45:81:a3:ab:be:0a:f2:fe:7f:48:
                    71:26:08:bb:6b:ec:ee:eb:34:a3:e7:5f:80:e4:a1:
                    02:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:EB:15:BC:5A:B2:94:1D:FE:16:6F:5C:17:61:77:56:6D:10:7D:13
            X509v3 Authority Key Identifier:
                keyid:A4:AC:49:C4:F5:5B:F5:D4:AF:3D:42:10:4A:8A:5E:C1:F2:12:3E:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/57280400-9654-4d45-888b-9067bada190b/0/A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/57280400-9654-4d45-888b-9067bada190b/0/3130332e38312e36342e302f32322d3234203d3e20313336303535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.81.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         cc:51:32:de:77:8b:db:d8:25:d4:90:da:91:e3:00:dd:2d:01:
         a0:f8:6c:3a:0e:32:df:7c:b7:95:e0:a4:3c:3c:0f:07:38:fd:
         c7:73:7b:df:cd:69:ed:1a:1c:c0:9c:ad:1c:22:23:f3:c9:04:
         30:8a:5d:f0:b6:c6:1a:c2:fe:1b:33:15:ed:bb:60:b0:05:d1:
         fe:a6:e1:17:d5:b3:26:6c:c7:95:93:93:88:42:56:09:2e:f5:
         42:67:d8:e6:ea:ae:3e:40:60:67:7b:94:2d:1c:d1:70:19:e3:
         6f:da:1a:79:59:1f:cf:50:77:6f:a6:ca:51:8a:47:6d:34:8d:
         78:38:aa:83:5c:a2:c6:cf:2a:22:de:e4:12:c6:ae:20:ee:ed:
         a8:91:a6:1f:f3:1c:06:76:7e:23:3d:8a:8c:16:42:07:d0:3e:
         b0:3b:86:f7:ab:00:48:c7:a1:6b:51:4d:b9:db:e8:55:7f:b0:
         e5:22:5a:d8:e8:3b:3b:6e:76:b8:e6:e2:f0:91:97:34:76:91:
         6f:d3:fd:6b:86:a7:db:31:00:78:da:93:d9:c3:18:46:71:c9:
         37:0f:f1:d7:4a:c7:ff:d3:49:fc:b8:28:ef:52:07:30:5f:e7:
         ac:12:7c:bd:41:bb:0c:27:1e:7b:bd:84:96:c0:5b:20:a2:d3:
         ed:b5:29:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 02:11:19 2025 by rpki-client