Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/69e2f3bd-d4ec-42cb-aacf-adc2825c184b/0/3130332e32382e3232372e302f32342d3234203d3e203538343832.roa
File:                     3130332e32382e3232372e302f32342d3234203d3e203538343832.roa (raw, json)
Hash identifier:          9Ew1E8zQmp44/WcA6xsjn9DG+Pj2XFS0Nowbj2INal8=
Subject key identifier:   70:C9:C5:33:EF:9A:92:D4:0A:98:9A:7C:D4:6E:BC:BB:B8:AC:D2:C1
Certificate issuer:       /CN=CDC8674326238BE355329012E1CFDDB99EC5B6BA
Certificate serial:       79A3D9CDECC2D6CC19E2FFF946F5BC27415DB031
Authority key identifier: CD:C8:67:43:26:23:8B:E3:55:32:90:12:E1:CF:DD:B9:9E:C5:B6:BA
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CDC8674326238BE355329012E1CFDDB99EC5B6BA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/69e2f3bd-d4ec-42cb-aacf-adc2825c184b/0/3130332e32382e3232372e302f32342d3234203d3e203538343832.roa
Signing time:             Wed 03 Sep 2025 12:06:36 +0000
ROA not before:           Wed 03 Sep 2025 12:01:36 +0000
ROA not after:            Wed 02 Sep 2026 12:06:36 +0000
asID:                     58482
IP address blocks:        103.28.227.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/69e2f3bd-d4ec-42cb-aacf-adc2825c184b/0/CDC8674326238BE355329012E1CFDDB99EC5B6BA.crl
                          rsync://repo-rpki.idnic.net/repo/69e2f3bd-d4ec-42cb-aacf-adc2825c184b/0/CDC8674326238BE355329012E1CFDDB99EC5B6BA.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CDC8674326238BE355329012E1CFDDB99EC5B6BA.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Sep 2025 15:02:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:a3:d9:cd:ec:c2:d6:cc:19:e2:ff:f9:46:f5:bc:27:41:5d:b0:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CDC8674326238BE355329012E1CFDDB99EC5B6BA
        Validity
            Not Before: Sep  3 12:01:36 2025 GMT
            Not After : Sep  2 12:06:36 2026 GMT
        Subject: CN=70C9C533EF9A92D40A989A7CD46EBCBBB8ACD2C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:1e:2f:86:b8:74:0c:52:c5:9b:ce:f3:ce:28:
                    e8:91:e4:7c:20:3a:ad:fd:a7:1b:b3:c4:e9:47:25:
                    45:5f:18:f3:d8:4a:c2:f7:12:4c:21:6c:94:ae:d9:
                    91:41:2b:0d:5b:05:5a:ee:0b:a5:31:82:af:e3:3a:
                    8f:46:74:a6:35:7e:08:08:23:9c:a1:4c:0d:e2:ed:
                    9d:d3:04:0f:0f:1c:4c:69:37:1a:81:be:a1:2d:03:
                    c1:8d:56:6a:75:c6:da:69:98:57:70:00:16:0b:3b:
                    f4:c7:13:52:54:c2:d6:10:32:30:1d:af:c7:e4:b2:
                    f4:23:2f:30:c4:3a:44:3a:e0:94:e9:18:b8:2d:db:
                    99:4d:f5:fd:42:1d:ed:db:bb:34:74:2f:33:70:35:
                    e8:4b:bf:75:ec:e4:cf:5f:4e:d0:5b:e3:27:9b:82:
                    a3:b1:c7:02:50:cc:ab:67:cf:96:8a:9a:fc:d1:10:
                    22:9e:4a:48:3c:9b:91:9b:1d:d8:02:86:83:6b:24:
                    f2:a4:03:95:28:35:34:d6:4b:53:3a:e4:8c:b7:bc:
                    ff:ac:20:2d:49:cb:63:39:6b:25:39:a8:e6:32:8c:
                    72:bc:d2:97:4a:17:bc:2f:a4:0a:0c:b3:4e:70:a1:
                    36:a5:c4:3b:90:82:cd:a0:ba:28:ab:68:92:02:41:
                    19:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:C9:C5:33:EF:9A:92:D4:0A:98:9A:7C:D4:6E:BC:BB:B8:AC:D2:C1
            X509v3 Authority Key Identifier:
                keyid:CD:C8:67:43:26:23:8B:E3:55:32:90:12:E1:CF:DD:B9:9E:C5:B6:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/69e2f3bd-d4ec-42cb-aacf-adc2825c184b/0/CDC8674326238BE355329012E1CFDDB99EC5B6BA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CDC8674326238BE355329012E1CFDDB99EC5B6BA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/69e2f3bd-d4ec-42cb-aacf-adc2825c184b/0/3130332e32382e3232372e302f32342d3234203d3e203538343832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.28.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:98:25:8d:2c:50:19:3f:f6:a0:ee:67:4c:92:a1:1d:b9:1e:
         12:c4:2d:fb:57:f8:18:f5:88:27:6c:bb:74:07:f3:45:c4:76:
         31:07:ec:9f:84:2e:b2:a0:47:f2:83:97:3d:b7:66:d3:ed:f6:
         d4:6f:53:52:6f:99:44:90:fb:fe:89:80:51:f7:9b:06:97:ec:
         19:54:ce:44:eb:33:48:7c:a9:a0:17:eb:76:a3:fa:ea:e1:ad:
         db:f5:75:e4:9b:e8:c6:8e:be:b2:07:fc:b3:20:da:47:fe:83:
         7a:e6:2f:16:06:69:44:96:94:60:4b:1f:90:75:76:41:40:7d:
         45:fc:15:24:59:66:4d:23:37:e0:2d:00:85:04:83:c9:f0:b0:
         6e:17:88:67:e3:0e:01:bf:6f:81:4e:02:b1:42:2f:dd:6d:94:
         a2:4d:49:18:ea:fc:8d:89:6d:72:0a:d3:1a:da:04:76:7a:1a:
         89:cd:9a:28:28:d6:11:94:c1:b8:29:c4:85:d0:17:57:a0:5f:
         bd:e5:2a:96:d4:56:f6:43:a1:88:75:fb:10:2e:c8:82:27:5b:
         e3:f1:4c:1f:14:d8:04:c1:8f:ac:15:ab:8f:52:90:08:e5:ac:
         25:49:fc:15:4b:22:3c:c2:4f:3c:86:3e:90:6b:c2:1a:76:1d:
         d9:7e:f5:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 11:28:59 2025 by rpki-client