Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/3130332e332e3231352e302f32342d3234203d3e20313331373435.roa
File:                     3130332e332e3231352e302f32342d3234203d3e20313331373435.roa (raw, json)
Hash identifier:          DCq8NWxNUdZYR2PU43lxvyiXQg84ScqhviiyUTDm8RE=
Subject key identifier:   7F:A6:26:6C:E4:D0:3F:08:EA:8E:70:B5:9A:C3:B2:79:99:1A:B0:53
Certificate issuer:       /CN=5058CBC5AF21280546887DEF6CFA4341A8F99150
Certificate serial:       1B9EE256392E57EB302BA697D2787BF99E7C12F9
Authority key identifier: 50:58:CB:C5:AF:21:28:05:46:88:7D:EF:6C:FA:43:41:A8:F9:91:50
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5058CBC5AF21280546887DEF6CFA4341A8F99150.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/3130332e332e3231352e302f32342d3234203d3e20313331373435.roa
Signing time:             Tue 02 Sep 2025 07:01:46 +0000
ROA not before:           Tue 02 Sep 2025 06:56:46 +0000
ROA not after:            Tue 01 Sep 2026 07:01:46 +0000
asID:                     131745
IP address blocks:        103.3.215.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/5058CBC5AF21280546887DEF6CFA4341A8F99150.crl
                          rsync://repo-rpki.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/5058CBC5AF21280546887DEF6CFA4341A8F99150.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5058CBC5AF21280546887DEF6CFA4341A8F99150.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 10 Sep 2025 05:31:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:9e:e2:56:39:2e:57:eb:30:2b:a6:97:d2:78:7b:f9:9e:7c:12:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5058CBC5AF21280546887DEF6CFA4341A8F99150
        Validity
            Not Before: Sep  2 06:56:46 2025 GMT
            Not After : Sep  1 07:01:46 2026 GMT
        Subject: CN=7FA6266CE4D03F08EA8E70B59AC3B279991AB053
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:5c:10:d2:e9:68:a1:f8:56:91:26:78:1f:59:
                    47:b2:22:11:f3:77:30:fc:dc:28:70:4e:da:4c:f4:
                    d5:06:2c:46:ef:b9:51:2a:a2:87:83:2a:3b:d3:74:
                    40:35:6b:5d:e2:af:d2:eb:2a:ef:10:24:3e:46:72:
                    1c:0b:08:fe:08:fa:9b:8b:31:14:79:2f:e1:01:2a:
                    64:86:8f:17:6a:82:5b:30:b6:99:bb:81:20:5f:50:
                    05:ef:73:4f:df:70:d2:0b:db:b8:d8:7c:ce:c6:c8:
                    fa:6c:d3:4d:65:46:66:94:c4:56:c4:64:60:18:9c:
                    1e:7d:2b:e0:71:9d:ab:fa:b5:6b:38:3a:ec:d4:c7:
                    e8:2c:d9:4b:fc:02:7a:91:8e:0e:68:52:b9:5d:8c:
                    6d:6b:76:ac:27:3e:bb:42:b1:bf:db:f5:ba:08:89:
                    ed:c6:d3:a3:21:6d:0e:3b:5f:a0:08:52:6f:9e:28:
                    a5:b1:95:1d:d4:86:98:b7:cb:68:21:16:41:5b:65:
                    84:35:34:f6:5d:b8:94:fe:83:eb:3f:ee:e3:19:41:
                    b9:b7:5a:8c:fb:23:e7:a3:ac:fe:2f:dc:39:24:29:
                    a2:82:4c:87:60:d7:ca:97:46:fe:8d:18:45:95:f9:
                    c9:db:dc:1c:13:7e:ae:27:93:f2:b4:53:70:13:44:
                    ad:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:A6:26:6C:E4:D0:3F:08:EA:8E:70:B5:9A:C3:B2:79:99:1A:B0:53
            X509v3 Authority Key Identifier:
                keyid:50:58:CB:C5:AF:21:28:05:46:88:7D:EF:6C:FA:43:41:A8:F9:91:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/5058CBC5AF21280546887DEF6CFA4341A8F99150.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5058CBC5AF21280546887DEF6CFA4341A8F99150.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/3130332e332e3231352e302f32342d3234203d3e20313331373435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.3.215.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:a8:6a:85:0a:0d:57:5e:aa:09:1e:85:89:f8:aa:e1:df:09:
         f5:ca:84:2d:7a:d1:b6:25:d5:7f:9f:69:12:76:55:1e:d3:91:
         13:71:7b:8c:c1:c5:84:3d:df:8b:08:91:89:7f:33:e2:92:29:
         23:2a:e8:4c:39:33:c5:4d:03:13:56:1f:40:4d:3a:25:21:a1:
         67:7e:2b:3f:70:62:36:35:f9:ce:31:01:b8:cb:73:b7:f4:42:
         e3:8d:3b:04:75:49:8d:60:e3:33:14:79:71:8f:0e:9c:6d:45:
         72:82:94:e0:40:3c:49:53:5e:be:9c:3a:0b:61:7d:fc:c5:35:
         f6:38:99:77:76:9f:5e:7f:9d:ae:ed:8b:6c:b5:fe:87:57:8c:
         6e:1a:10:d9:ab:91:75:7d:31:ad:75:88:a5:15:d3:2c:de:f4:
         a8:82:ac:ee:b7:f0:fe:b8:1f:47:23:01:f9:00:15:8c:e1:5b:
         19:48:2c:e8:7e:33:6f:b8:b2:1a:6c:95:1a:3e:3d:b7:b0:a5:
         d1:51:26:2b:bf:2f:45:e1:ec:1d:66:e3:85:3d:13:81:44:8d:
         00:63:62:43:0a:b9:f8:86:d7:11:db:ae:9d:25:40:e9:11:53:
         82:b9:8a:72:51:33:c9:90:d1:22:c5:fc:b5:c6:d0:7a:0b:69:
         08:43:79:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 09:45:58 2025 by rpki-client