Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/54c77666-4c74-440d-9167-af63faa6eb9e/0/3130332e3137352e38352e302f32342d3234203d3e20313437313137.roa
File:                     3130332e3137352e38352e302f32342d3234203d3e20313437313137.roa (raw, json)
Hash identifier:          dQkihMhWzN2ARo3TbtERAeJ3TdDzeXt9eRFpYMTxe1s=
Subject key identifier:   80:AB:43:5E:9B:DF:4D:84:70:8D:57:F5:D5:56:A0:5B:03:E2:B0:E3
Certificate issuer:       /CN=1A88815F25C9ADC8E68E2145CC20A00096657347
Certificate serial:       0A67F9DE3B6BDD9F46F98378BCD71D7A2D8DF1A5
Authority key identifier: 1A:88:81:5F:25:C9:AD:C8:E6:8E:21:45:CC:20:A0:00:96:65:73:47
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A88815F25C9ADC8E68E2145CC20A00096657347.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/54c77666-4c74-440d-9167-af63faa6eb9e/0/3130332e3137352e38352e302f32342d3234203d3e20313437313137.roa
Signing time:             Wed 07 May 2025 07:04:07 +0000
ROA not before:           Wed 07 May 2025 06:59:07 +0000
ROA not after:            Wed 06 May 2026 07:04:07 +0000
asID:                     147117
IP address blocks:        103.175.85.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/54c77666-4c74-440d-9167-af63faa6eb9e/0/1A88815F25C9ADC8E68E2145CC20A00096657347.crl
                          rsync://repo-rpki.idnic.net/repo/54c77666-4c74-440d-9167-af63faa6eb9e/0/1A88815F25C9ADC8E68E2145CC20A00096657347.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A88815F25C9ADC8E68E2145CC20A00096657347.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Jun 2025 23:02:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:67:f9:de:3b:6b:dd:9f:46:f9:83:78:bc:d7:1d:7a:2d:8d:f1:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A88815F25C9ADC8E68E2145CC20A00096657347
        Validity
            Not Before: May  7 06:59:07 2025 GMT
            Not After : May  6 07:04:07 2026 GMT
        Subject: CN=80AB435E9BDF4D84708D57F5D556A05B03E2B0E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:93:2c:d2:94:58:55:5a:2a:db:f3:2c:80:38:
                    ae:bc:8b:69:3f:4f:a1:7b:a4:f4:04:89:a3:e7:d9:
                    44:0b:00:7c:ac:93:47:68:73:7e:8e:8a:42:3a:11:
                    b2:e0:57:05:85:3e:8f:2f:cd:89:9d:48:b0:2e:22:
                    5b:26:47:f0:00:2b:7a:c3:00:9e:07:d1:d4:8c:a5:
                    d6:e6:7d:b1:6a:f5:a6:b7:fb:b8:28:2f:3a:7c:ee:
                    73:8d:c9:44:7c:a6:92:ab:1a:b2:d5:35:b5:b4:e6:
                    d1:a9:67:94:96:a3:96:31:15:42:f2:d9:77:a8:6e:
                    04:44:55:45:d5:b5:ef:17:ae:0b:b2:52:e3:cb:57:
                    3f:14:b8:f6:82:72:9a:e6:37:f0:39:86:ea:c3:c2:
                    e4:73:6a:c5:25:0f:ac:3c:39:fa:b3:66:24:1b:7f:
                    82:29:e7:b9:ce:08:f8:d9:54:ee:cd:63:fb:f3:78:
                    96:65:f4:62:c7:63:00:0d:0c:b9:ef:44:c7:01:83:
                    6e:71:c4:f9:d1:54:02:03:15:1e:23:13:97:ef:49:
                    f8:88:05:57:a8:f2:90:f8:b8:c2:72:09:79:45:43:
                    9b:de:5a:89:31:37:a5:7a:2f:2b:f5:59:69:78:b5:
                    cf:19:a7:0a:fd:05:44:44:bb:a5:66:df:43:1d:d0:
                    04:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:AB:43:5E:9B:DF:4D:84:70:8D:57:F5:D5:56:A0:5B:03:E2:B0:E3
            X509v3 Authority Key Identifier:
                keyid:1A:88:81:5F:25:C9:AD:C8:E6:8E:21:45:CC:20:A0:00:96:65:73:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/54c77666-4c74-440d-9167-af63faa6eb9e/0/1A88815F25C9ADC8E68E2145CC20A00096657347.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A88815F25C9ADC8E68E2145CC20A00096657347.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/54c77666-4c74-440d-9167-af63faa6eb9e/0/3130332e3137352e38352e302f32342d3234203d3e20313437313137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.175.85.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:92:5a:db:ca:f1:22:f8:47:62:0c:e1:61:82:64:0e:95:63:
         14:2a:21:c0:b4:59:b3:4c:8c:a0:fe:b4:b2:20:4a:4e:31:27:
         81:2e:6c:15:c2:47:b3:5c:ae:58:55:c4:d5:2d:4a:bc:f1:c6:
         30:54:2f:22:46:c9:45:c0:83:46:46:16:8e:bb:7e:4d:6c:29:
         31:b2:19:00:32:1c:ad:aa:24:c9:4a:a0:51:cb:66:62:c1:b5:
         38:40:d1:cb:a3:a7:a0:a5:e6:5b:cb:76:0a:a8:64:07:5b:75:
         28:48:dc:bb:91:4c:a5:83:f1:57:1a:98:98:6b:ea:d9:75:b1:
         7a:21:35:2b:55:ee:d0:61:8b:0b:27:92:c7:a7:54:bd:51:ab:
         92:04:8d:17:ec:ac:d7:b9:76:88:9d:93:e9:e3:94:3c:80:04:
         c4:6b:16:4c:f4:7e:b3:8a:47:63:e4:35:43:7a:d5:f0:aa:3f:
         a0:76:4e:18:e1:ff:a7:3b:73:27:02:3a:a5:00:5a:d7:2b:cf:
         87:0b:e1:a9:65:9f:cb:7d:8c:dc:2d:cd:62:8a:28:d4:c9:7b:
         ae:be:be:85:70:4a:1d:fa:43:25:26:f9:8d:f4:6e:f7:6d:c0:
         1b:d8:04:a9:f3:cc:ed:83:85:64:10:fb:da:d0:3c:04:da:8c:
         03:0b:88:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 14:59:41 2025 by rpki-client