Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/3130332e33392e31322e302f32332d3233203d3e203633383237.roa
File:                     3130332e33392e31322e302f32332d3233203d3e203633383237.roa (raw, json)
Hash identifier:          NFgbHOWF09e2UJQTu6ELDWDZsspY1ki/AkPp6Ba87/o=
Subject key identifier:   AC:CC:2A:2F:2F:65:8F:58:48:7A:93:DC:BE:CC:20:F7:81:50:71:A7
Certificate issuer:       /CN=F69B637EA94DE4CC9150BDFD5327BE03A033784B
Certificate serial:       2778207D36305F232FBB5C2697E4FD54FE7967EA
Authority key identifier: F6:9B:63:7E:A9:4D:E4:CC:91:50:BD:FD:53:27:BE:03:A0:33:78:4B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F69B637EA94DE4CC9150BDFD5327BE03A033784B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/3130332e33392e31322e302f32332d3233203d3e203633383237.roa
Signing time:             Sat 30 Aug 2025 04:00:01 +0000
ROA not before:           Sat 30 Aug 2025 03:55:01 +0000
ROA not after:            Sat 29 Aug 2026 04:00:01 +0000
asID:                     63827
IP address blocks:        103.39.12.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/F69B637EA94DE4CC9150BDFD5327BE03A033784B.crl
                          rsync://repo-rpki.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/F69B637EA94DE4CC9150BDFD5327BE03A033784B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F69B637EA94DE4CC9150BDFD5327BE03A033784B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Sep 2025 15:25:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:78:20:7d:36:30:5f:23:2f:bb:5c:26:97:e4:fd:54:fe:79:67:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F69B637EA94DE4CC9150BDFD5327BE03A033784B
        Validity
            Not Before: Aug 30 03:55:01 2025 GMT
            Not After : Aug 29 04:00:01 2026 GMT
        Subject: CN=ACCC2A2F2F658F58487A93DCBECC20F7815071A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:3a:04:f4:07:81:15:9e:7b:a2:0e:db:06:bf:
                    39:6f:45:76:6a:24:e0:7a:99:09:dd:ba:00:37:78:
                    9e:00:75:8b:b3:c8:b3:9f:21:76:ca:2c:cc:07:b7:
                    45:f4:e1:37:a5:43:b1:d8:1f:3d:1d:04:ae:39:21:
                    5c:d3:e3:91:17:6f:30:8b:01:91:3d:48:77:b4:cd:
                    44:48:b6:d3:d0:6a:2e:a1:fe:7f:62:a4:78:2f:30:
                    a2:3f:3d:e0:9f:31:0b:7b:d0:23:fc:2f:93:68:bd:
                    af:bc:83:21:0f:0c:96:29:ae:59:a1:1d:bd:cb:fe:
                    ee:64:a6:e4:66:a9:49:ed:51:45:ba:b0:08:00:ea:
                    04:18:68:12:29:e6:93:11:b8:52:05:8c:42:1f:6c:
                    e0:16:3a:d4:92:7a:e6:94:0b:13:6d:44:6d:7f:10:
                    a5:31:22:a5:b1:43:2b:18:43:3c:e1:af:31:d2:3d:
                    34:57:dd:7e:bb:7c:69:df:c2:12:ee:e6:ab:cb:44:
                    56:09:65:7c:ba:05:54:08:bd:09:96:0e:13:28:8b:
                    3a:28:ca:d4:cb:63:02:b9:9d:a5:b9:b1:89:90:db:
                    f6:3a:89:e8:0b:f4:ab:2b:eb:31:19:02:56:08:10:
                    18:0e:85:40:b2:e9:d1:15:f5:0d:ec:47:a6:44:fd:
                    c6:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:CC:2A:2F:2F:65:8F:58:48:7A:93:DC:BE:CC:20:F7:81:50:71:A7
            X509v3 Authority Key Identifier:
                keyid:F6:9B:63:7E:A9:4D:E4:CC:91:50:BD:FD:53:27:BE:03:A0:33:78:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/F69B637EA94DE4CC9150BDFD5327BE03A033784B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F69B637EA94DE4CC9150BDFD5327BE03A033784B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/3130332e33392e31322e302f32332d3233203d3e203633383237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.39.12.0/23

    Signature Algorithm: sha256WithRSAEncryption
         48:88:87:69:28:60:88:df:0e:ce:ec:ae:f5:2a:49:66:fc:43:
         8c:e7:5e:97:9e:7f:5c:79:5c:70:f1:a9:d6:05:bd:77:2e:97:
         39:36:58:e5:4d:83:be:a6:84:98:c7:f0:06:15:00:27:da:80:
         b1:c7:e0:18:d3:84:44:79:9d:d8:64:7c:ca:e4:b1:1c:55:4a:
         bc:e4:e3:47:9b:f4:f4:4a:f6:59:8e:2d:4c:1a:16:b3:0e:83:
         4e:d3:a5:3d:98:bd:36:cf:1a:87:3a:0b:34:df:b0:05:f6:3b:
         b3:06:88:2c:69:91:d0:78:3d:4b:ff:7c:54:1b:f5:41:60:9d:
         c8:5a:2f:6f:fa:1f:78:dd:3f:99:bb:04:e6:c9:0b:54:31:fd:
         92:99:85:76:4d:83:79:6a:33:18:f1:f4:2b:11:4b:51:23:65:
         38:91:90:78:d9:e6:7b:ef:c3:b2:5b:38:7e:05:c2:86:5c:f5:
         c3:00:d0:2a:2a:2a:95:2f:d7:46:fc:c2:8c:f8:60:ec:c0:83:
         e4:9e:f7:b6:32:6e:3e:30:01:91:f4:6a:c9:36:62:ed:97:cf:
         cb:61:91:fc:ca:e1:c3:f2:42:7d:67:b0:18:8a:e1:3b:28:1d:
         68:d3:64:5b:87:ae:03:9d:4d:2f:28:b2:bd:a9:13:02:17:44:
         ca:43:c9:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 15:32:24 2025 by rpki-client