Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/19879744-b818-46dc-8d9f-9c35793f4cbb/0/3130332e31362e3131382e302f32342d3234203d3e20313530323234.roa
File:                     3130332e31362e3131382e302f32342d3234203d3e20313530323234.roa (raw, json)
Hash identifier:          jGoedWD/HdT/XNGJYiilR3U313Ij63s087bSdLFU0QE=
Subject key identifier:   52:B4:DF:60:11:D5:84:5F:A6:0C:83:B5:34:4D:61:F1:A7:5E:01:96
Certificate issuer:       /CN=AB3C3FA1D3275E284B07A84EC95085DF9BC5A22A
Certificate serial:       75D18D815234D33E6514C71452DCE23B2B10FBE8
Authority key identifier: AB:3C:3F:A1:D3:27:5E:28:4B:07:A8:4E:C9:50:85:DF:9B:C5:A2:2A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AB3C3FA1D3275E284B07A84EC95085DF9BC5A22A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/19879744-b818-46dc-8d9f-9c35793f4cbb/0/3130332e31362e3131382e302f32342d3234203d3e20313530323234.roa
Signing time:             Wed 03 Sep 2025 11:56:22 +0000
ROA not before:           Wed 03 Sep 2025 11:51:22 +0000
ROA not after:            Wed 02 Sep 2026 11:56:22 +0000
asID:                     150224
IP address blocks:        103.16.118.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/19879744-b818-46dc-8d9f-9c35793f4cbb/0/AB3C3FA1D3275E284B07A84EC95085DF9BC5A22A.crl
                          rsync://repo-rpki.idnic.net/repo/19879744-b818-46dc-8d9f-9c35793f4cbb/0/AB3C3FA1D3275E284B07A84EC95085DF9BC5A22A.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AB3C3FA1D3275E284B07A84EC95085DF9BC5A22A.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 21 Oct 2025 15:31:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:d1:8d:81:52:34:d3:3e:65:14:c7:14:52:dc:e2:3b:2b:10:fb:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AB3C3FA1D3275E284B07A84EC95085DF9BC5A22A
        Validity
            Not Before: Sep  3 11:51:22 2025 GMT
            Not After : Sep  2 11:56:22 2026 GMT
        Subject: CN=52B4DF6011D5845FA60C83B5344D61F1A75E0196
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:08:69:e7:70:67:5d:b2:56:9c:c3:56:47:67:
                    5a:0f:0a:c5:9d:6c:84:76:7a:45:eb:71:c3:83:a2:
                    87:5f:d7:d3:79:39:b2:97:a9:b6:40:aa:23:aa:df:
                    33:04:b8:8e:9a:a1:8f:7f:7d:1b:6e:25:19:b3:9f:
                    00:3f:a8:94:3b:82:56:25:6f:6f:01:76:2f:97:a4:
                    de:ad:24:83:5a:28:a9:43:77:43:00:92:67:fe:88:
                    7d:d9:95:fe:96:2c:05:e4:7c:8a:21:81:80:e2:a3:
                    0b:ea:11:8c:0d:d2:90:ca:6b:39:c0:53:34:bb:b6:
                    d2:52:1e:14:5a:49:a1:e3:2b:37:c8:89:d5:76:cb:
                    47:98:51:d5:e1:09:b8:49:76:36:aa:7a:98:8d:1b:
                    a7:50:88:2d:c3:6b:ce:41:ad:92:d2:07:e0:2c:0c:
                    b5:06:69:0d:c8:2d:26:30:1b:1e:3b:3e:95:51:a2:
                    2d:86:cc:40:72:76:73:40:7d:16:88:a2:aa:5e:d6:
                    f7:b9:df:d7:39:53:cf:20:2f:c1:cd:f9:2d:42:f7:
                    7d:64:66:6f:85:ad:a8:3c:0f:8a:35:fd:42:77:ef:
                    60:7a:52:ed:f1:74:fd:13:da:27:f7:0e:05:e5:f7:
                    50:cd:37:fc:9d:9b:e7:b8:b2:85:e6:b3:1d:db:97:
                    4f:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:B4:DF:60:11:D5:84:5F:A6:0C:83:B5:34:4D:61:F1:A7:5E:01:96
            X509v3 Authority Key Identifier:
                keyid:AB:3C:3F:A1:D3:27:5E:28:4B:07:A8:4E:C9:50:85:DF:9B:C5:A2:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/19879744-b818-46dc-8d9f-9c35793f4cbb/0/AB3C3FA1D3275E284B07A84EC95085DF9BC5A22A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AB3C3FA1D3275E284B07A84EC95085DF9BC5A22A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/19879744-b818-46dc-8d9f-9c35793f4cbb/0/3130332e31362e3131382e302f32342d3234203d3e20313530323234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.16.118.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:b9:5c:5b:fd:0a:41:6d:88:1b:b9:60:95:10:eb:69:d1:59:
         f5:ad:f2:5b:91:0c:d9:77:99:24:2c:b0:c1:45:31:9f:0f:a0:
         df:db:56:18:3b:57:77:f2:46:46:fd:30:61:c4:a2:be:6e:be:
         e0:04:cb:fd:f6:00:b1:3b:40:fe:ff:54:2b:ed:d5:08:25:1a:
         ab:12:36:87:46:41:89:34:4f:ad:05:9b:a2:8a:52:2c:2b:f0:
         0a:be:15:40:8e:d3:e5:9b:3e:c9:34:00:cc:69:95:e4:9f:c2:
         f0:e8:48:de:57:b1:be:8b:ac:76:58:a1:85:a3:ca:b9:6d:8e:
         24:ae:4c:bd:50:71:5e:85:37:b0:ea:48:da:54:8e:2d:2f:cf:
         23:c4:2d:11:90:42:59:dd:69:29:d3:7c:db:03:9d:ca:71:b0:
         31:90:a7:d1:c1:40:70:c9:6d:76:e2:a6:c6:28:85:9d:67:da:
         03:f0:a7:96:93:18:0d:2e:ba:aa:b8:30:b5:c4:ed:7d:02:87:
         aa:e5:12:c6:1a:e6:0c:ce:c7:e9:b1:ba:28:60:79:7c:e9:e2:
         cb:5b:f8:32:ad:f7:28:de:53:bf:a7:68:a5:c2:a8:69:c2:20:
         b0:bf:48:30:8c:e5:41:a0:77:4e:13:02:f7:1c:d3:19:b1:87:
         30:6e:8d:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:23:06 2025 by rpki-client