Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/3130332e3135312e33342e302f32332d3233203d3e20313430343133.roa
File:                     3130332e3135312e33342e302f32332d3233203d3e20313430343133.roa (raw, json)
Hash identifier:          pWG6S1U7mazV8YnSvTsXbW1HfQiM8AMh4bxaqVSo3rk=
Subject key identifier:   E7:C9:07:18:39:E6:A6:7D:BF:F6:77:D0:C1:D2:2B:C9:FB:07:B5:03
Certificate issuer:       /CN=5AB2F048BCF9D60D6323A72EF7255F38A81A93BE
Certificate serial:       5626168EDEB008FFBCEF8E88C0214970E651AD87
Authority key identifier: 5A:B2:F0:48:BC:F9:D6:0D:63:23:A7:2E:F7:25:5F:38:A8:1A:93:BE
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/3130332e3135312e33342e302f32332d3233203d3e20313430343133.roa
Signing time:             Mon 08 Sep 2025 07:03:22 +0000
ROA not before:           Mon 08 Sep 2025 06:58:22 +0000
ROA not after:            Mon 07 Sep 2026 07:03:22 +0000
asID:                     140413
IP address blocks:        103.151.34.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.crl
                          rsync://repo-rpki.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Sep 2025 12:12:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:26:16:8e:de:b0:08:ff:bc:ef:8e:88:c0:21:49:70:e6:51:ad:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5AB2F048BCF9D60D6323A72EF7255F38A81A93BE
        Validity
            Not Before: Sep  8 06:58:22 2025 GMT
            Not After : Sep  7 07:03:22 2026 GMT
        Subject: CN=E7C9071839E6A67DBFF677D0C1D22BC9FB07B503
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:88:53:11:4b:a3:0d:61:bf:c3:c7:23:3a:8f:
                    28:33:c1:a4:0f:6e:f5:2f:62:65:69:ac:c6:d8:80:
                    e9:62:82:47:44:2a:8c:9e:65:3a:5e:be:e6:ed:b0:
                    ad:60:ae:13:ea:00:f0:69:33:2c:1e:81:0d:22:96:
                    a0:cc:58:22:a2:2d:a4:8d:df:9e:45:66:7d:78:a6:
                    44:5d:57:df:fd:6a:91:4e:90:c4:ba:93:14:b6:27:
                    72:56:3c:6f:06:3d:50:d4:3b:96:17:46:f7:5d:b7:
                    14:b1:5c:6b:0a:52:f3:dd:c9:a8:9e:83:48:e1:0b:
                    7f:26:a0:88:e1:07:67:28:ae:91:a7:0e:a2:88:dc:
                    ab:25:95:30:23:25:31:f9:c1:fd:c7:56:1f:d7:b5:
                    3c:97:aa:be:63:6f:b2:4e:d6:de:a2:b0:88:9d:39:
                    99:f4:12:2d:0f:34:37:67:20:01:1b:5b:b7:23:87:
                    a4:5b:8d:51:32:2f:89:db:44:af:e7:38:d9:bd:b0:
                    9a:92:4c:6b:9b:8b:6f:9a:24:92:7c:54:bb:30:67:
                    0f:63:ad:f9:51:f1:48:85:0e:2c:f4:4a:b6:be:32:
                    97:d4:0f:4e:f3:3b:42:54:22:d8:47:95:5e:ab:e9:
                    1f:b8:bc:5f:4e:45:4b:c6:84:d1:98:48:50:84:a8:
                    5d:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:C9:07:18:39:E6:A6:7D:BF:F6:77:D0:C1:D2:2B:C9:FB:07:B5:03
            X509v3 Authority Key Identifier:
                keyid:5A:B2:F0:48:BC:F9:D6:0D:63:23:A7:2E:F7:25:5F:38:A8:1A:93:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/3130332e3135312e33342e302f32332d3233203d3e20313430343133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.151.34.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3e:24:55:81:09:f0:c1:3c:0b:dd:f1:9a:d2:8d:25:d2:d1:ba:
         e8:e4:0e:e4:79:0d:53:38:df:e3:49:82:a6:17:ec:46:6a:29:
         de:06:ef:54:e8:9e:42:c8:2e:c2:d8:b3:18:7b:5a:95:af:97:
         3e:0e:04:8d:0b:3e:65:1e:34:f6:10:06:1b:dc:32:eb:ee:2e:
         9c:cd:9f:94:a1:58:9a:d2:33:a1:0e:82:53:8a:f2:e4:7f:aa:
         4f:20:10:3d:5b:fe:1e:d1:74:49:df:2b:57:f6:3a:ef:96:99:
         88:b9:cb:28:35:03:99:26:81:1d:2f:06:b4:74:2d:66:9c:2c:
         33:73:e8:e1:f1:0b:db:4e:3c:81:56:25:f8:5a:24:4d:69:c4:
         97:63:bd:b4:ed:44:cf:36:ef:9a:97:38:0b:67:94:64:5c:6c:
         72:43:a9:f3:7b:1a:dc:c7:11:8c:78:43:fb:3c:ce:18:36:4f:
         c1:d0:63:af:7c:e7:e0:1d:8c:c0:16:8e:22:39:60:3b:a9:6f:
         9a:a2:88:b1:5e:45:40:dc:62:b8:f1:66:27:b0:13:c8:ef:63:
         65:6e:2c:84:0b:73:66:a7:84:c5:97:fc:71:9f:3c:10:b3:ce:
         61:bf:50:98:c6:70:e1:79:85:ba:a0:f5:b0:49:e7:2d:4a:b9:
         07:85:45:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 09:32:10 2025 by rpki-client