Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/9c700350-6632-49e2-b7e3-5d573224c56c/0/3130332e38352e31352e302f32342d3234203d3e20313338303936.roa
File:                     3130332e38352e31352e302f32342d3234203d3e20313338303936.roa (raw, json)
Hash identifier:          kKtyC8DvD1kFWPV1z+RnB0U+nvEXhXYqRj3464Lwcpo=
Subject key identifier:   FC:3F:79:44:BA:80:C3:9D:A8:1B:6D:34:65:B6:81:F6:AA:C9:5D:BC
Certificate issuer:       /CN=34C216B3A625831CC41C6A7A1460CF9DDF656B86
Certificate serial:       7D7C29DDE0EA63AB666144817E9C5BF48FD94221
Authority key identifier: 34:C2:16:B3:A6:25:83:1C:C4:1C:6A:7A:14:60:CF:9D:DF:65:6B:86
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34C216B3A625831CC41C6A7A1460CF9DDF656B86.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/9c700350-6632-49e2-b7e3-5d573224c56c/0/3130332e38352e31352e302f32342d3234203d3e20313338303936.roa
Signing time:             Tue 15 Jul 2025 11:00:02 +0000
ROA not before:           Tue 15 Jul 2025 10:55:02 +0000
ROA not after:            Tue 14 Jul 2026 11:00:02 +0000
asID:                     138096
IP address blocks:        103.85.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/9c700350-6632-49e2-b7e3-5d573224c56c/0/34C216B3A625831CC41C6A7A1460CF9DDF656B86.crl
                          rsync://repo-rpki.idnic.net/repo/9c700350-6632-49e2-b7e3-5d573224c56c/0/34C216B3A625831CC41C6A7A1460CF9DDF656B86.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34C216B3A625831CC41C6A7A1460CF9DDF656B86.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 25 Jul 2025 00:09:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:7c:29:dd:e0:ea:63:ab:66:61:44:81:7e:9c:5b:f4:8f:d9:42:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34C216B3A625831CC41C6A7A1460CF9DDF656B86
        Validity
            Not Before: Jul 15 10:55:02 2025 GMT
            Not After : Jul 14 11:00:02 2026 GMT
        Subject: CN=FC3F7944BA80C39DA81B6D3465B681F6AAC95DBC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:4f:03:fc:b4:3d:73:77:ca:f3:bd:98:03:09:
                    83:4f:f4:c3:48:1f:85:86:40:39:22:49:a8:98:82:
                    88:b4:9d:b3:79:a7:a5:dc:7d:81:33:c1:cf:5e:76:
                    51:1f:57:2a:a5:db:f8:3c:94:3a:f1:7b:90:02:fa:
                    9b:e4:d6:a6:ed:51:f8:e6:db:0f:62:42:d8:3d:9b:
                    11:2a:52:0e:c2:3c:6b:85:c9:a6:ae:6f:f1:8b:86:
                    5a:ce:bf:c5:43:cb:c1:58:d3:83:68:56:20:c4:a9:
                    ca:01:55:0c:f5:9e:b8:58:64:35:67:9e:54:a7:b1:
                    9a:cc:8e:6e:2a:8a:32:ef:1b:89:ca:13:18:67:9b:
                    80:04:52:71:61:ba:0e:00:cd:96:9e:70:53:1e:cc:
                    da:4a:82:b3:08:24:e6:9f:73:61:a0:da:de:84:4f:
                    0c:48:5e:e7:a6:0e:e3:fd:d8:4d:92:f4:dd:3e:20:
                    89:12:1a:58:dd:d2:23:b8:e7:b3:3e:5c:58:de:40:
                    26:e5:59:bb:fc:80:c8:fe:6a:34:62:1e:98:cd:f7:
                    21:4e:8f:0f:6a:d6:10:e2:0d:7a:d1:58:c7:ab:ed:
                    45:85:c9:a0:fc:e8:10:fd:cb:38:87:b9:59:1c:2c:
                    6f:20:ac:31:c3:da:49:47:0a:82:8f:bb:81:3e:82:
                    3b:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:3F:79:44:BA:80:C3:9D:A8:1B:6D:34:65:B6:81:F6:AA:C9:5D:BC
            X509v3 Authority Key Identifier:
                keyid:34:C2:16:B3:A6:25:83:1C:C4:1C:6A:7A:14:60:CF:9D:DF:65:6B:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/9c700350-6632-49e2-b7e3-5d573224c56c/0/34C216B3A625831CC41C6A7A1460CF9DDF656B86.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34C216B3A625831CC41C6A7A1460CF9DDF656B86.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9c700350-6632-49e2-b7e3-5d573224c56c/0/3130332e38352e31352e302f32342d3234203d3e20313338303936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.85.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:ef:d4:8a:04:51:e5:b9:26:7a:2f:68:25:d2:93:cf:e9:9e:
         25:f4:69:96:63:3f:dc:0a:67:fb:ed:eb:53:46:22:f7:6a:a8:
         3a:ce:b1:6e:cb:cb:a2:32:d2:b9:b9:48:c5:7f:d5:8a:c8:e0:
         67:93:90:13:f5:74:e1:6d:93:82:84:03:78:70:89:a1:22:b5:
         e5:b8:60:e5:c1:b0:d2:5f:06:09:29:af:9c:7b:4b:3a:b3:4a:
         0b:b1:9f:92:47:75:70:08:8d:85:89:85:10:c4:a7:e3:70:20:
         b7:b1:08:a9:73:cd:84:40:d3:a5:68:08:5d:93:d5:34:3c:51:
         23:26:ec:4e:29:31:28:8b:c5:97:3c:47:01:e2:cf:b5:21:a3:
         b6:a6:ad:1b:03:97:4b:7b:35:11:bc:f8:63:d1:79:8a:d5:ef:
         84:f0:73:6b:67:59:79:9c:2f:47:37:bd:4c:b3:cb:86:78:c7:
         53:33:4a:6c:56:85:d6:05:06:e1:a8:67:e2:14:38:a1:39:b7:
         29:eb:13:c9:84:0a:f2:d8:df:ed:ae:d9:5c:99:65:c5:78:68:
         29:d8:cb:74:8f:22:df:b7:8d:67:3a:ac:53:81:65:c2:6e:74:
         54:0d:46:75:dd:b9:67:6c:a7:28:70:ee:1d:08:12:ff:bf:eb:
         66:c0:39:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 12:03:12 2025 by rpki-client