Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/14885525-cb0f-46a0-8253-042d7d7aff38/0/3130332e33352e3135332e302f32342d3234203d3e2039333431.roa
File:                     3130332e33352e3135332e302f32342d3234203d3e2039333431.roa (raw, json)
Hash identifier:          4gA0Ayh4wc+enuZjfM5cvXtF4KS/wz/Vl+eaNQabdGI=
Subject key identifier:   B1:7F:1E:20:FA:4E:12:AF:04:DE:19:79:64:DE:EB:FC:61:60:65:72
Certificate issuer:       /CN=0100A7F6C4D58C3867F9CED7E7D46DCED0A57804
Certificate serial:       14B7AD88D8799360D82CD59F63EEE5A62BD96031
Authority key identifier: 01:00:A7:F6:C4:D5:8C:38:67:F9:CE:D7:E7:D4:6D:CE:D0:A5:78:04
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0100A7F6C4D58C3867F9CED7E7D46DCED0A57804.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/14885525-cb0f-46a0-8253-042d7d7aff38/0/3130332e33352e3135332e302f32342d3234203d3e2039333431.roa
Signing time:             Fri 05 Sep 2025 07:00:00 +0000
ROA not before:           Fri 05 Sep 2025 06:55:00 +0000
ROA not after:            Fri 04 Sep 2026 07:00:00 +0000
asID:                     9341
IP address blocks:        103.35.153.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/14885525-cb0f-46a0-8253-042d7d7aff38/0/0100A7F6C4D58C3867F9CED7E7D46DCED0A57804.crl
                          rsync://repo-rpki.idnic.net/repo/14885525-cb0f-46a0-8253-042d7d7aff38/0/0100A7F6C4D58C3867F9CED7E7D46DCED0A57804.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0100A7F6C4D58C3867F9CED7E7D46DCED0A57804.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 10 Sep 2025 09:59:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:b7:ad:88:d8:79:93:60:d8:2c:d5:9f:63:ee:e5:a6:2b:d9:60:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0100A7F6C4D58C3867F9CED7E7D46DCED0A57804
        Validity
            Not Before: Sep  5 06:55:00 2025 GMT
            Not After : Sep  4 07:00:00 2026 GMT
        Subject: CN=B17F1E20FA4E12AF04DE197964DEEBFC61606572
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:6f:ce:2f:2e:a1:e0:48:54:ee:c5:3a:d0:57:
                    a1:21:73:90:de:4b:84:8f:be:99:8e:1f:12:ee:37:
                    b5:c4:09:17:19:34:9c:c7:c9:9d:67:91:a7:40:6b:
                    0d:06:6e:73:24:95:17:a4:bb:10:94:6b:f3:0b:a4:
                    ab:31:1d:4f:a4:ae:ed:5b:72:0d:84:07:31:15:5a:
                    d3:40:35:6a:b1:2c:5a:80:c0:2c:d6:d9:92:6b:79:
                    7f:cf:55:57:98:f3:d8:20:d9:e3:46:20:68:45:67:
                    89:2f:13:71:a2:54:0c:bc:ac:56:26:e0:0f:c1:83:
                    61:aa:05:17:46:54:2d:3c:28:1b:6d:6a:fe:39:aa:
                    d7:f8:ef:ca:80:7d:26:cb:26:fe:1e:ae:ef:b8:ca:
                    6a:15:b5:7a:1c:35:b8:b0:c8:1a:90:9b:77:83:d5:
                    89:0c:cc:f1:fb:15:85:e9:e3:8c:35:57:97:f9:00:
                    82:ec:88:f7:16:2e:ea:f6:9d:52:9a:cd:db:c9:2c:
                    e8:20:21:6c:7a:85:b2:79:77:b1:18:25:1f:25:67:
                    86:1a:3b:9b:50:99:9b:04:68:d4:00:14:ad:88:16:
                    a4:c4:d0:69:ba:86:d7:0a:8a:5a:ae:e2:ab:3b:06:
                    5c:68:d4:55:8b:49:a2:dd:73:cd:85:88:65:70:8f:
                    75:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:7F:1E:20:FA:4E:12:AF:04:DE:19:79:64:DE:EB:FC:61:60:65:72
            X509v3 Authority Key Identifier:
                keyid:01:00:A7:F6:C4:D5:8C:38:67:F9:CE:D7:E7:D4:6D:CE:D0:A5:78:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/14885525-cb0f-46a0-8253-042d7d7aff38/0/0100A7F6C4D58C3867F9CED7E7D46DCED0A57804.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0100A7F6C4D58C3867F9CED7E7D46DCED0A57804.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/14885525-cb0f-46a0-8253-042d7d7aff38/0/3130332e33352e3135332e302f32342d3234203d3e2039333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.35.153.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:3b:0c:6f:bc:cb:df:a0:09:53:05:29:f8:39:85:33:6f:6f:
         b5:da:0e:25:5b:af:d0:d0:da:29:79:30:5b:fc:c5:01:9c:d6:
         62:60:fc:c6:2f:8d:87:6d:df:8d:f4:af:e5:34:29:74:b7:fb:
         a5:33:b3:15:8d:33:23:9b:60:f0:bb:41:cc:6d:1f:bc:7e:2b:
         da:f4:68:5d:5f:d3:1e:ed:d2:1e:ab:0b:08:ee:e4:ff:ef:23:
         99:6d:9a:4b:ee:ea:b8:92:46:d9:a2:b4:4a:86:69:70:75:56:
         c3:a5:4f:ca:19:8f:75:d1:84:6c:e0:74:46:74:15:fa:13:94:
         42:51:04:83:e4:5a:45:25:47:94:d6:da:8c:c2:c9:9d:f8:d6:
         4c:b1:4f:01:a6:cf:52:49:94:33:b3:43:81:c7:89:ac:41:43:
         7a:b4:4e:56:5e:3a:4d:68:d7:1d:c2:84:a2:3d:31:7f:00:0b:
         c0:a5:9a:bc:7b:c3:a9:69:ff:25:e4:d2:9a:8b:f3:2b:7b:28:
         86:40:5f:12:6b:f5:62:bc:7a:7e:5b:5d:35:29:07:5d:d7:16:
         95:ca:a3:af:b7:c8:31:36:b2:3c:4b:80:ff:96:92:d7:79:9c:
         ba:51:4a:81:42:b4:28:d7:80:40:ac:79:f3:77:32:06:55:be:
         8d:ec:69:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 15:32:20 2025 by rpki-client