Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/fe4ace11-9139-4485-aba9-04beddc5bc26/0/3130332e33312e34332e302f32342d3234203d3e2039333431.roa
File:                     3130332e33312e34332e302f32342d3234203d3e2039333431.roa (raw, json)
Hash identifier:          uM0XA0AM+x7njeHld4x4WvIPIQYCBW6QBEs97/wT47g=
Subject key identifier:   55:CB:8F:3B:DD:E4:0E:53:35:56:48:20:B9:7F:99:91:67:02:1E:9B
Certificate issuer:       /CN=977D89E37F6F6C3815B2BC731E694AB878F26F30
Certificate serial:       4BD7B00B3BE46E8D78B71CB835024E1CD35F547D
Authority key identifier: 97:7D:89:E3:7F:6F:6C:38:15:B2:BC:73:1E:69:4A:B8:78:F2:6F:30
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/977D89E37F6F6C3815B2BC731E694AB878F26F30.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/fe4ace11-9139-4485-aba9-04beddc5bc26/0/3130332e33312e34332e302f32342d3234203d3e2039333431.roa
Signing time:             Fri 05 Sep 2025 08:02:24 +0000
ROA not before:           Fri 05 Sep 2025 07:57:24 +0000
ROA not after:            Fri 04 Sep 2026 08:02:24 +0000
asID:                     9341
IP address blocks:        103.31.43.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/fe4ace11-9139-4485-aba9-04beddc5bc26/0/977D89E37F6F6C3815B2BC731E694AB878F26F30.crl
                          rsync://repo-rpki.idnic.net/repo/fe4ace11-9139-4485-aba9-04beddc5bc26/0/977D89E37F6F6C3815B2BC731E694AB878F26F30.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/977D89E37F6F6C3815B2BC731E694AB878F26F30.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 10 Sep 2025 20:02:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:d7:b0:0b:3b:e4:6e:8d:78:b7:1c:b8:35:02:4e:1c:d3:5f:54:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=977D89E37F6F6C3815B2BC731E694AB878F26F30
        Validity
            Not Before: Sep  5 07:57:24 2025 GMT
            Not After : Sep  4 08:02:24 2026 GMT
        Subject: CN=55CB8F3BDDE40E5335564820B97F999167021E9B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e5:ae:70:f5:c8:c7:f6:0a:df:33:34:91:66:
                    97:4e:22:8e:c5:e4:7b:4e:3a:24:d1:f0:fc:59:ad:
                    dd:6e:b7:4c:bd:df:41:87:c2:04:3e:95:b5:61:52:
                    ad:fe:4f:77:41:cd:65:84:4d:e6:ec:da:64:5e:41:
                    3b:cf:6a:fe:42:6e:6a:6f:c7:1c:9a:45:9b:1e:14:
                    f2:32:3e:e7:39:97:86:97:e3:0f:48:42:84:87:ce:
                    ab:7f:a6:5d:e2:69:83:f6:4d:63:25:89:87:9b:9e:
                    c5:0b:4c:cd:9f:38:6a:26:88:ad:88:45:d9:78:95:
                    34:27:e9:06:b6:2e:f4:98:e0:0f:a8:75:2b:e3:ad:
                    32:45:57:30:6c:a2:b0:39:a4:24:77:84:59:8b:cb:
                    ff:af:23:58:43:3c:3b:4e:91:5e:ac:5a:1a:92:25:
                    c7:d7:eb:b5:90:05:65:64:42:e7:7b:37:e5:57:02:
                    b5:af:87:75:22:9b:13:55:0b:31:ed:62:f3:7e:e1:
                    5e:a9:57:f1:24:3e:ac:d6:0f:3e:63:b5:f4:76:f6:
                    91:18:c8:9f:b2:5b:36:76:7a:52:97:69:a3:fa:fc:
                    4e:fe:8c:ae:eb:33:ed:26:14:0a:31:32:6f:68:3b:
                    2c:60:d7:86:20:d0:b2:2c:65:e3:da:23:72:f3:13:
                    3f:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:CB:8F:3B:DD:E4:0E:53:35:56:48:20:B9:7F:99:91:67:02:1E:9B
            X509v3 Authority Key Identifier:
                keyid:97:7D:89:E3:7F:6F:6C:38:15:B2:BC:73:1E:69:4A:B8:78:F2:6F:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/fe4ace11-9139-4485-aba9-04beddc5bc26/0/977D89E37F6F6C3815B2BC731E694AB878F26F30.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/977D89E37F6F6C3815B2BC731E694AB878F26F30.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fe4ace11-9139-4485-aba9-04beddc5bc26/0/3130332e33312e34332e302f32342d3234203d3e2039333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.31.43.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:c3:df:8e:26:d1:0a:82:6f:01:9b:18:da:2c:ca:d9:44:3b:
         3c:39:6f:c0:4c:b3:b0:3e:f7:c1:be:4f:9c:c0:0d:2a:51:d0:
         84:49:a8:5e:a2:fc:50:d8:30:37:be:01:cb:b9:1f:8e:ce:d8:
         6e:dc:d6:61:24:15:ed:25:9c:64:ee:30:34:c3:ed:d6:51:8c:
         9d:d3:34:6b:c4:df:76:c7:9b:ed:9a:42:52:6f:c5:39:0c:b5:
         b7:26:0c:77:3f:6f:2e:66:db:d8:97:f3:51:6e:d0:6a:7f:13:
         56:8e:31:d4:a6:43:05:0c:ff:9b:b1:a3:8c:ff:77:09:77:e2:
         8b:66:df:75:5a:00:f7:55:e1:f2:e5:e6:74:9f:a9:bc:ad:ad:
         a1:89:cb:73:6a:e8:9e:04:b5:9a:90:cd:83:a8:d9:94:06:bf:
         70:f0:80:7f:0a:9e:2b:06:2b:17:ae:df:c6:76:c6:7d:bf:70:
         0d:73:5d:44:e3:38:8b:a9:53:fd:32:00:cc:46:2c:48:7e:95:
         b1:ad:d7:99:98:e0:e6:be:b7:12:4f:10:a5:2a:bf:a2:56:eb:
         59:bd:e2:ee:38:54:e3:fc:a4:bc:46:bb:21:38:96:7d:63:36:
         d9:69:ef:7b:63:fd:a6:6a:01:5d:52:81:2d:97:4d:d3:03:29:
         78:d4:d6:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 09:33:22 2025 by rpki-client