Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/ae7b9476-7e38-4c50-a624-b2443c70bb4d/0/3130332e3232372e352e302f32342d3234203d3e20313531353134.roa
File:                     3130332e3232372e352e302f32342d3234203d3e20313531353134.roa (raw, json)
Hash identifier:          MC2FHNE5WiXQAhloZ+T+wgfggYtEdxQ3c82BHu7jCHA=
Subject key identifier:   87:36:56:8D:32:39:58:E0:AA:F2:7B:A0:78:11:8B:4E:74:F5:24:26
Certificate issuer:       /CN=83FA427FFAE02D80047A8B5F44D938E2CA6DB609
Certificate serial:       55F6904D3D752414AA13A7502EF8ACF4542C7E97
Authority key identifier: 83:FA:42:7F:FA:E0:2D:80:04:7A:8B:5F:44:D9:38:E2:CA:6D:B6:09
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/83FA427FFAE02D80047A8B5F44D938E2CA6DB609.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ae7b9476-7e38-4c50-a624-b2443c70bb4d/0/3130332e3232372e352e302f32342d3234203d3e20313531353134.roa
Signing time:             Mon 01 Sep 2025 04:02:54 +0000
ROA not before:           Mon 01 Sep 2025 03:57:54 +0000
ROA not after:            Mon 31 Aug 2026 04:02:54 +0000
asID:                     151514
IP address blocks:        103.227.5.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ae7b9476-7e38-4c50-a624-b2443c70bb4d/0/83FA427FFAE02D80047A8B5F44D938E2CA6DB609.crl
                          rsync://repo-rpki.idnic.net/repo/ae7b9476-7e38-4c50-a624-b2443c70bb4d/0/83FA427FFAE02D80047A8B5F44D938E2CA6DB609.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/83FA427FFAE02D80047A8B5F44D938E2CA6DB609.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Sep 2025 05:54:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:f6:90:4d:3d:75:24:14:aa:13:a7:50:2e:f8:ac:f4:54:2c:7e:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83FA427FFAE02D80047A8B5F44D938E2CA6DB609
        Validity
            Not Before: Sep  1 03:57:54 2025 GMT
            Not After : Aug 31 04:02:54 2026 GMT
        Subject: CN=8736568D323958E0AAF27BA078118B4E74F52426
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:6f:7e:2e:32:0a:1e:a6:42:6e:65:0e:6f:18:
                    7b:14:4a:5b:0e:3d:87:44:d0:86:40:aa:8b:28:da:
                    a7:ed:b1:59:83:b5:9c:96:4f:cd:3d:fb:aa:8b:e8:
                    86:35:1d:a8:50:f7:40:f0:47:b8:d2:3f:16:8d:05:
                    c5:16:3f:d2:f9:a6:db:95:ad:45:7f:73:b7:44:58:
                    85:16:29:e3:94:cc:c1:24:89:0b:5e:29:cb:dc:26:
                    06:f1:17:a3:f7:07:91:6b:85:f4:1f:b0:b7:d4:7d:
                    8f:d7:dc:8d:50:04:0e:7f:96:44:c4:89:b1:01:d1:
                    5a:5d:23:60:ee:f1:78:b9:66:72:ab:01:27:10:5f:
                    b2:9b:81:d7:d1:de:d4:ad:4f:a0:95:0d:73:82:7d:
                    a6:ab:97:d9:40:19:bb:c7:02:d0:5b:35:13:35:cd:
                    cb:ff:8e:4e:cc:ec:f3:3c:43:3a:ff:a7:78:c0:75:
                    95:5d:1b:ad:fb:73:ee:32:e8:3a:40:ab:27:f0:de:
                    5a:ce:00:5a:79:8f:b1:fa:1e:9a:8b:f3:e4:7b:21:
                    4d:aa:ae:fe:b8:f8:22:40:c7:aa:c9:18:c2:e8:b5:
                    f5:58:fc:d7:40:52:83:dd:ab:74:7a:0a:24:b1:5d:
                    e1:1d:da:c5:4a:1f:9d:c0:db:12:83:9a:27:19:ce:
                    10:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:36:56:8D:32:39:58:E0:AA:F2:7B:A0:78:11:8B:4E:74:F5:24:26
            X509v3 Authority Key Identifier:
                keyid:83:FA:42:7F:FA:E0:2D:80:04:7A:8B:5F:44:D9:38:E2:CA:6D:B6:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ae7b9476-7e38-4c50-a624-b2443c70bb4d/0/83FA427FFAE02D80047A8B5F44D938E2CA6DB609.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/83FA427FFAE02D80047A8B5F44D938E2CA6DB609.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae7b9476-7e38-4c50-a624-b2443c70bb4d/0/3130332e3232372e352e302f32342d3234203d3e20313531353134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.227.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:5c:69:d0:b4:a0:d3:6b:c2:d8:86:75:0b:3e:24:92:c7:3d:
         b0:c4:3e:cf:85:5a:bc:a8:48:f2:52:87:11:a7:2b:8c:ba:b8:
         c5:1c:0b:cc:ea:1b:cc:2f:33:d3:a5:31:51:80:fc:d6:f3:d8:
         9f:11:7a:d8:82:b7:24:9c:82:17:a3:1d:f2:66:ae:11:e5:85:
         b8:cc:9a:ca:55:9e:a6:48:25:7c:9c:f3:c7:c6:2a:83:60:70:
         37:92:59:fa:ad:b5:e5:4a:35:59:2f:04:a3:6c:bb:6d:d8:7f:
         27:7c:b9:23:ef:bf:6a:a3:a2:86:14:6f:aa:c9:05:e4:ca:d1:
         54:14:b9:65:b7:bd:cf:07:fa:88:79:f6:8d:e9:56:f1:15:70:
         db:92:e1:02:76:d5:f6:8d:08:b8:12:64:45:5d:49:4d:46:bd:
         e4:36:23:0b:a3:7f:33:a3:0b:aa:4f:e4:e8:32:a5:c5:7c:6a:
         2b:f3:30:0d:96:70:2d:d1:f5:00:a5:ce:45:c3:a8:46:e8:91:
         7c:f9:b5:3e:20:f5:43:48:d8:60:19:5c:a4:5d:94:49:74:bd:
         85:ec:11:c1:02:82:21:db:de:ff:1f:66:d8:aa:a2:15:a5:a2:
         2f:b9:e4:06:5a:6c:1a:d7:e3:fe:d0:e2:bc:92:7d:5e:e8:04:
         e4:ba:35:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 10:28:49 2025 by rpki-client