Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/6107fd8a-150f-453f-a0f5-57ead41ed032/0/3130332e3231342e3138352e302f32342d3234203d3e203634303239.roa
File:                     3130332e3231342e3138352e302f32342d3234203d3e203634303239.roa (raw, json)
Hash identifier:          SZcb1mBv7DekH6untdETGe0D1z9cA9VcoDjOf2l6JsU=
Subject key identifier:   93:EE:A6:AC:75:F1:41:CA:B2:F0:6C:7F:ED:2E:F8:73:DE:74:EA:59
Certificate issuer:       /CN=C51F648FDD8891397EA20B34F6DE036DC2234E2F
Certificate serial:       5480D026D9E5BA121F05C967CAD49883ADE1A0D7
Authority key identifier: C5:1F:64:8F:DD:88:91:39:7E:A2:0B:34:F6:DE:03:6D:C2:23:4E:2F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C51F648FDD8891397EA20B34F6DE036DC2234E2F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6107fd8a-150f-453f-a0f5-57ead41ed032/0/3130332e3231342e3138352e302f32342d3234203d3e203634303239.roa
Signing time:             Fri 29 Aug 2025 16:00:01 +0000
ROA not before:           Fri 29 Aug 2025 15:55:01 +0000
ROA not after:            Fri 28 Aug 2026 16:00:01 +0000
asID:                     64029
IP address blocks:        103.214.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/6107fd8a-150f-453f-a0f5-57ead41ed032/0/C51F648FDD8891397EA20B34F6DE036DC2234E2F.crl
                          rsync://repo-rpki.idnic.net/repo/6107fd8a-150f-453f-a0f5-57ead41ed032/0/C51F648FDD8891397EA20B34F6DE036DC2234E2F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C51F648FDD8891397EA20B34F6DE036DC2234E2F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Sep 2025 17:48:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:80:d0:26:d9:e5:ba:12:1f:05:c9:67:ca:d4:98:83:ad:e1:a0:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C51F648FDD8891397EA20B34F6DE036DC2234E2F
        Validity
            Not Before: Aug 29 15:55:01 2025 GMT
            Not After : Aug 28 16:00:01 2026 GMT
        Subject: CN=93EEA6AC75F141CAB2F06C7FED2EF873DE74EA59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:5e:47:12:50:e6:92:e4:1c:73:2d:bd:c5:0a:
                    12:32:9b:45:9b:8c:c2:74:ed:ff:0e:bb:ec:96:ef:
                    04:8f:f7:99:8f:ca:be:50:66:1e:88:81:03:d5:58:
                    77:9b:4a:7c:5d:e1:3a:64:82:6e:55:43:bc:f1:4b:
                    8c:c0:d8:85:77:42:14:a1:37:55:b8:b8:99:92:70:
                    be:83:33:87:db:5a:d2:57:9d:f9:54:6e:51:86:ee:
                    35:2a:0f:b9:1a:e7:fd:1c:94:c4:fd:2d:83:2a:fe:
                    f7:17:38:0e:1c:e0:0c:a3:83:c3:79:c1:99:53:7f:
                    2b:42:d9:c4:8f:76:68:f5:24:83:38:36:be:53:08:
                    a6:8e:41:31:fd:14:7b:51:3f:ab:a2:5f:b6:88:07:
                    f9:ae:86:95:1c:39:ce:1a:d2:08:5b:15:43:b5:06:
                    ad:55:4e:5b:4a:c4:72:0b:73:f1:9d:44:80:cb:29:
                    8f:66:81:40:16:28:e9:01:74:dd:dd:a8:56:bb:b8:
                    50:98:47:56:8e:67:98:6a:30:20:2c:29:5b:c0:7f:
                    4f:48:07:05:d5:b0:31:22:07:fc:91:f0:71:fe:66:
                    ee:e1:1a:00:c4:43:57:0a:fe:a4:2a:bd:37:f4:3e:
                    04:2f:b6:95:b1:26:a9:22:59:b1:4b:17:85:6a:e1:
                    bb:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:EE:A6:AC:75:F1:41:CA:B2:F0:6C:7F:ED:2E:F8:73:DE:74:EA:59
            X509v3 Authority Key Identifier:
                keyid:C5:1F:64:8F:DD:88:91:39:7E:A2:0B:34:F6:DE:03:6D:C2:23:4E:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6107fd8a-150f-453f-a0f5-57ead41ed032/0/C51F648FDD8891397EA20B34F6DE036DC2234E2F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C51F648FDD8891397EA20B34F6DE036DC2234E2F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6107fd8a-150f-453f-a0f5-57ead41ed032/0/3130332e3231342e3138352e302f32342d3234203d3e203634303239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.214.185.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b4:14:ec:af:68:3e:2d:f6:62:e4:65:59:3f:33:7d:0a:0b:13:
         07:14:7e:bf:20:45:02:6c:88:ec:5d:54:85:e6:04:51:9d:21:
         7c:7d:da:94:b5:d1:b5:0c:ee:62:33:4e:fa:85:c2:02:95:3e:
         96:45:5d:ab:5d:4e:9d:85:1b:df:43:37:5c:a6:f6:bc:ce:10:
         71:dd:f2:a3:77:05:cd:f9:9f:74:c6:15:bf:ec:6e:dc:22:72:
         85:64:f3:fc:e3:6a:b7:13:b0:b9:65:96:2c:b0:82:be:a7:0e:
         50:57:03:ef:6d:fc:3a:fa:18:ea:e8:3c:54:88:32:46:ef:7c:
         f4:92:b4:98:f6:f5:d1:d3:23:06:4c:52:66:9f:fa:c7:21:dc:
         09:25:1a:5d:08:82:38:86:91:c0:40:30:56:7b:e7:16:93:2e:
         95:62:81:5d:2b:08:80:70:d4:db:6a:e0:ae:85:f6:b9:cb:4e:
         78:45:58:5b:71:3f:a2:42:44:79:36:0b:b3:1e:99:8b:17:6c:
         82:57:49:65:b5:53:45:88:6d:6c:ed:1f:57:f2:3a:fe:a5:ac:
         0f:12:f5:d7:d4:c3:8a:45:20:a1:ed:05:2e:33:61:cd:2e:4f:
         f8:8f:3e:ef:ef:fb:8c:85:93:e1:6d:7c:5b:cd:4e:1b:40:dd:
         6e:1c:fc:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 15:50:15 2025 by rpki-client