Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/d043a889-c861-4d29-9d77-923d927e7634/0/3130332e33362e35332e302f32342d3234203d3e2039333431.roa
File:                     3130332e33362e35332e302f32342d3234203d3e2039333431.roa (raw, json)
Hash identifier:          9XabV5C+bxTzwQpxWRFJ2J0ODxVlFWpwxY4ZIRRll5s=
Subject key identifier:   E0:12:DC:5F:A2:10:41:58:3E:C9:14:81:A2:EA:68:8F:0D:96:2E:45
Certificate issuer:       /CN=DD68C98D519CC8D624F664B026AEB9B289EE819C
Certificate serial:       71545735EE66FB277BA7F76B6039AC9DB94D5323
Authority key identifier: DD:68:C9:8D:51:9C:C8:D6:24:F6:64:B0:26:AE:B9:B2:89:EE:81:9C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD68C98D519CC8D624F664B026AEB9B289EE819C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d043a889-c861-4d29-9d77-923d927e7634/0/3130332e33362e35332e302f32342d3234203d3e2039333431.roa
Signing time:             Tue 26 Aug 2025 17:00:01 +0000
ROA not before:           Tue 26 Aug 2025 16:55:01 +0000
ROA not after:            Tue 25 Aug 2026 17:00:01 +0000
asID:                     9341
IP address blocks:        103.36.53.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d043a889-c861-4d29-9d77-923d927e7634/0/DD68C98D519CC8D624F664B026AEB9B289EE819C.crl
                          rsync://repo-rpki.idnic.net/repo/d043a889-c861-4d29-9d77-923d927e7634/0/DD68C98D519CC8D624F664B026AEB9B289EE819C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD68C98D519CC8D624F664B026AEB9B289EE819C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Sep 2025 11:35:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:54:57:35:ee:66:fb:27:7b:a7:f7:6b:60:39:ac:9d:b9:4d:53:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DD68C98D519CC8D624F664B026AEB9B289EE819C
        Validity
            Not Before: Aug 26 16:55:01 2025 GMT
            Not After : Aug 25 17:00:01 2026 GMT
        Subject: CN=E012DC5FA21041583EC91481A2EA688F0D962E45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:3a:67:55:a6:cd:21:5a:d6:7b:35:d5:eb:4b:
                    7f:fd:8b:19:86:0f:f9:40:ce:fb:0e:57:f3:76:8c:
                    dc:e0:ab:32:e9:9b:43:76:b6:f3:c4:80:93:d8:24:
                    fb:65:3b:1c:a9:0d:c8:6f:fc:2a:76:f6:69:75:54:
                    8a:13:04:10:ef:22:87:c2:8d:9b:26:8f:32:92:ce:
                    6a:a4:ff:95:16:5b:cf:78:75:c0:23:98:4e:89:ae:
                    94:59:97:65:0f:a9:1f:cd:77:41:d9:8f:4b:31:e8:
                    81:03:7f:33:79:c6:98:be:f4:57:eb:c0:9e:99:e2:
                    fd:11:c2:33:b2:b7:cd:5d:94:99:bb:71:e4:0a:f6:
                    7a:b7:f4:4f:e3:dd:ee:56:0a:c7:d9:85:7c:d6:bf:
                    41:77:a8:b8:b9:5e:0b:cf:25:6e:8b:62:c5:3c:d8:
                    5d:18:76:5b:7e:60:24:0c:ed:29:ea:e1:1f:22:31:
                    5d:c5:d4:ba:4e:b9:56:dd:01:29:4f:ea:c4:ea:35:
                    36:57:b5:78:f6:34:ea:2f:53:6c:52:3f:78:11:b6:
                    77:b2:87:ff:3c:b2:ad:db:81:ca:1f:8a:01:b9:a1:
                    56:0c:ab:f6:45:34:5f:bf:d4:f0:b5:1e:49:73:50:
                    8b:ff:6f:c7:ce:95:8c:d2:45:64:1f:38:11:62:e5:
                    bc:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:12:DC:5F:A2:10:41:58:3E:C9:14:81:A2:EA:68:8F:0D:96:2E:45
            X509v3 Authority Key Identifier:
                keyid:DD:68:C9:8D:51:9C:C8:D6:24:F6:64:B0:26:AE:B9:B2:89:EE:81:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d043a889-c861-4d29-9d77-923d927e7634/0/DD68C98D519CC8D624F664B026AEB9B289EE819C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD68C98D519CC8D624F664B026AEB9B289EE819C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d043a889-c861-4d29-9d77-923d927e7634/0/3130332e33362e35332e302f32342d3234203d3e2039333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.36.53.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:32:7d:67:58:a9:3a:a4:70:20:8a:cf:c2:58:3e:17:aa:96:
         51:8c:81:42:06:aa:1c:00:8f:57:27:12:84:9c:e2:52:fd:10:
         07:8b:bf:4e:ec:13:f8:e3:aa:7e:e9:44:d0:98:e3:c0:69:4c:
         f7:26:7d:62:92:ee:08:f1:5b:18:76:aa:f4:99:a6:b3:bd:74:
         f2:bc:e0:2a:48:4d:a6:c3:3b:f0:81:6d:56:06:d0:4e:d7:5f:
         20:08:d4:eb:4a:58:54:57:be:2b:77:fc:e5:a9:53:ea:65:62:
         90:fb:45:d7:9a:aa:75:1f:78:73:d4:eb:3e:68:36:82:29:db:
         2b:ad:d3:25:72:a9:4c:20:6d:9f:32:3c:5f:10:89:e8:85:bc:
         3b:04:0b:15:6e:87:ff:62:ea:cc:5b:a0:57:cd:19:d1:7e:f5:
         b8:41:77:fc:7e:6c:6f:69:1a:5b:2a:44:0c:61:09:a1:58:84:
         69:7f:f0:d1:d4:1a:b9:b7:68:e0:c3:d6:08:a8:f4:93:8d:6e:
         5d:78:38:4e:79:83:49:e5:fa:f0:16:07:69:c2:78:6f:4c:50:
         c3:75:a9:25:a5:b5:f7:24:e7:96:cc:80:07:45:cc:c8:86:2d:
         73:06:5c:99:73:34:7a:af:a6:92:25:b3:8d:d2:42:68:d4:f2:
         ad:04:39:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 12:46:47 2025 by rpki-client