Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/5ce6ac01-8eac-46c5-9469-35efa36099fd/0/3130332e3232352e34342e302f32332d3234203d3e2034383030.roa
File:                     3130332e3232352e34342e302f32332d3234203d3e2034383030.roa (raw, json)
Hash identifier:          OSaJ9H+pyoyoyW3zEewmfSIETQNngkI7dg9yZKfTzxI=
Subject key identifier:   DA:EC:0A:E5:D5:A8:F0:D9:C0:19:C5:5C:73:6D:DD:A8:CE:1C:AD:F6
Certificate issuer:       /CN=7892183ECB217EAEF2D3DD16491BE535CA5C5A61
Certificate serial:       5F2D17ED2532CCE9B68F21CEBFBF795D7FBB331D
Authority key identifier: 78:92:18:3E:CB:21:7E:AE:F2:D3:DD:16:49:1B:E5:35:CA:5C:5A:61
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7892183ECB217EAEF2D3DD16491BE535CA5C5A61.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5ce6ac01-8eac-46c5-9469-35efa36099fd/0/3130332e3232352e34342e302f32332d3234203d3e2034383030.roa
Signing time:             Mon 30 Jun 2025 05:02:51 +0000
ROA not before:           Mon 30 Jun 2025 04:57:51 +0000
ROA not after:            Mon 29 Jun 2026 05:02:51 +0000
asID:                     4800
IP address blocks:        103.225.44.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/5ce6ac01-8eac-46c5-9469-35efa36099fd/0/7892183ECB217EAEF2D3DD16491BE535CA5C5A61.crl
                          rsync://repo-rpki.idnic.net/repo/5ce6ac01-8eac-46c5-9469-35efa36099fd/0/7892183ECB217EAEF2D3DD16491BE535CA5C5A61.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7892183ECB217EAEF2D3DD16491BE535CA5C5A61.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 23 Jul 2025 16:35:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:2d:17:ed:25:32:cc:e9:b6:8f:21:ce:bf:bf:79:5d:7f:bb:33:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7892183ECB217EAEF2D3DD16491BE535CA5C5A61
        Validity
            Not Before: Jun 30 04:57:51 2025 GMT
            Not After : Jun 29 05:02:51 2026 GMT
        Subject: CN=DAEC0AE5D5A8F0D9C019C55C736DDDA8CE1CADF6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:35:64:da:1c:f4:6f:99:36:1d:fa:73:ef:c2:
                    4f:9a:ce:11:df:42:8b:f9:7d:14:bc:49:7a:89:44:
                    e1:07:09:55:68:f4:2a:42:0a:c3:5b:c2:c5:7f:e1:
                    29:d5:ab:bb:fe:47:4e:b0:53:d3:dd:b5:d0:d1:09:
                    94:64:91:13:64:51:c3:9d:ee:a4:d7:8a:f4:c5:8b:
                    eb:5c:36:e9:eb:c3:3b:90:5e:dd:d5:84:d5:34:7a:
                    ed:10:f7:9a:3f:94:96:60:9f:bc:f1:c8:a8:01:1a:
                    93:29:3f:01:e6:af:a4:05:85:7c:2d:0b:80:11:42:
                    2d:12:7b:43:6b:c5:53:20:b0:d5:b4:f1:87:43:9f:
                    20:2d:6c:e3:20:05:9a:5c:56:ad:ca:7f:80:ad:b4:
                    7a:52:12:73:b0:42:51:b3:7f:61:ae:d4:30:6e:19:
                    32:b1:aa:49:c2:a5:85:66:a2:ee:4f:4e:ce:b5:b3:
                    47:2c:bb:ac:6c:7b:f2:4b:86:d9:43:37:ab:04:c2:
                    ef:9b:02:53:4b:ac:0f:26:50:2f:d5:d9:67:42:6e:
                    ff:bd:1b:39:9a:88:02:c6:53:4c:0e:93:b0:9c:2f:
                    6e:4c:2f:96:2b:be:27:75:5d:4c:94:65:9c:a0:f1:
                    01:42:eb:5a:47:c0:26:b8:68:36:4c:be:56:82:23:
                    8f:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:EC:0A:E5:D5:A8:F0:D9:C0:19:C5:5C:73:6D:DD:A8:CE:1C:AD:F6
            X509v3 Authority Key Identifier:
                keyid:78:92:18:3E:CB:21:7E:AE:F2:D3:DD:16:49:1B:E5:35:CA:5C:5A:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5ce6ac01-8eac-46c5-9469-35efa36099fd/0/7892183ECB217EAEF2D3DD16491BE535CA5C5A61.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7892183ECB217EAEF2D3DD16491BE535CA5C5A61.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5ce6ac01-8eac-46c5-9469-35efa36099fd/0/3130332e3232352e34342e302f32332d3234203d3e2034383030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.225.44.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7f:15:15:e4:92:cc:7c:32:f0:c3:3e:9c:a0:24:b4:76:3b:64:
         f2:99:82:51:e9:b8:92:93:83:3c:b9:3e:1d:58:4d:12:bc:2d:
         c2:23:bd:a8:40:fc:44:32:b6:23:32:a2:5c:e8:3e:82:ef:13:
         b3:52:b2:23:b4:98:df:e5:6f:f1:0d:8b:43:e6:ef:f7:8d:b1:
         bb:69:02:c2:48:85:f2:10:73:ea:7f:25:d9:09:f4:c7:e3:ba:
         72:df:39:b0:d9:2c:3f:ff:db:98:0d:3f:2e:98:88:28:45:93:
         08:26:a9:9e:56:51:09:4b:28:5e:ef:64:6e:b0:b9:6a:31:b9:
         3b:e9:2d:d8:09:0d:7f:b3:e0:47:f6:68:54:e5:01:66:a0:4f:
         f9:62:4c:2c:60:d5:50:ee:76:ec:82:69:43:a9:a4:ed:44:3c:
         21:3e:00:53:f6:25:43:fd:60:70:6e:5e:9f:a2:93:9f:82:18:
         87:f6:11:ab:f6:b7:f3:6e:9a:72:79:4a:b0:bb:e3:66:b7:b8:
         03:33:7e:0c:b0:d9:fe:98:8a:c6:4b:a4:c6:2b:2c:3b:a3:14:
         f9:d2:0f:fb:80:52:e4:12:c4:89:e3:29:41:23:47:05:ae:5e:
         15:76:80:c3:c1:3e:93:29:9d:02:6e:95:a5:b0:ef:92:19:3b:
         31:3b:ab:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 11:50:17 2025 by rpki-client