Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/0e57991a-156d-4b55-90cb-79b876cf6a4a/0/3130332e3138342e3138312e302f32342d3234203d3e203435333035.roa
File:                     3130332e3138342e3138312e302f32342d3234203d3e203435333035.roa (raw, json)
Hash identifier:          +6suBy02VBYIADpzrjVT+EfPKFC0O5f32zxYKkvXd28=
Subject key identifier:   DC:7C:6F:E2:11:6A:64:45:C2:3C:34:47:68:F9:29:AF:51:82:BE:EA
Certificate issuer:       /CN=1678828C849BDE3472FE846308767F54ED7F8232
Certificate serial:       72222C71ECA40B89DFAF7F7CCA1F3AC3F35151A9
Authority key identifier: 16:78:82:8C:84:9B:DE:34:72:FE:84:63:08:76:7F:54:ED:7F:82:32
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1678828C849BDE3472FE846308767F54ED7F8232.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/0e57991a-156d-4b55-90cb-79b876cf6a4a/0/3130332e3138342e3138312e302f32342d3234203d3e203435333035.roa
Signing time:             Tue 19 Aug 2025 08:00:00 +0000
ROA not before:           Tue 19 Aug 2025 07:55:00 +0000
ROA not after:            Tue 18 Aug 2026 08:00:00 +0000
asID:                     45305
IP address blocks:        103.184.181.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/0e57991a-156d-4b55-90cb-79b876cf6a4a/0/1678828C849BDE3472FE846308767F54ED7F8232.crl
                          rsync://repo-rpki.idnic.net/repo/0e57991a-156d-4b55-90cb-79b876cf6a4a/0/1678828C849BDE3472FE846308767F54ED7F8232.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1678828C849BDE3472FE846308767F54ED7F8232.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Aug 2025 04:17:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:22:2c:71:ec:a4:0b:89:df:af:7f:7c:ca:1f:3a:c3:f3:51:51:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1678828C849BDE3472FE846308767F54ED7F8232
        Validity
            Not Before: Aug 19 07:55:00 2025 GMT
            Not After : Aug 18 08:00:00 2026 GMT
        Subject: CN=DC7C6FE2116A6445C23C344768F929AF5182BEEA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:6e:38:25:0b:6b:c2:f8:96:7c:29:2f:89:a8:
                    b0:60:53:c9:08:2e:b5:b3:53:a7:21:8e:45:89:e9:
                    f9:4d:f9:28:27:de:a6:e5:ba:1e:e3:2a:2d:cf:0b:
                    52:b7:43:39:13:81:1e:fa:77:99:26:8c:8a:e5:ba:
                    6c:38:91:10:5f:fe:36:26:ff:19:d6:5b:66:f7:e8:
                    d3:47:95:9e:c7:dc:f4:a6:95:ec:3a:e0:2e:ea:46:
                    32:40:39:cc:ab:31:38:5f:e6:d8:89:87:9b:dd:3d:
                    62:b2:1a:f8:2a:19:28:ef:fb:06:50:bf:da:c7:13:
                    68:ef:5b:2f:c6:0f:4a:a2:3c:2e:2f:96:20:1e:db:
                    c3:36:fe:15:48:ca:b4:9b:cd:ca:1a:c1:6a:47:4a:
                    3a:14:49:b8:e2:62:b6:4b:53:8c:78:a7:5a:21:68:
                    f1:f2:53:5e:77:5f:df:52:0f:81:cf:18:67:b6:86:
                    2e:45:cd:b6:ca:9d:43:fd:4b:f9:20:e2:13:8b:46:
                    94:79:96:1e:8d:25:ca:2c:b3:0c:b9:98:93:67:bd:
                    55:a9:6d:cd:ad:56:47:ff:01:d4:eb:11:63:aa:f9:
                    0f:8c:5e:73:de:b6:d5:dc:bb:05:da:de:5a:b1:bc:
                    d0:43:9b:b5:0e:2a:bc:da:55:01:51:57:82:9c:06:
                    29:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:7C:6F:E2:11:6A:64:45:C2:3C:34:47:68:F9:29:AF:51:82:BE:EA
            X509v3 Authority Key Identifier:
                keyid:16:78:82:8C:84:9B:DE:34:72:FE:84:63:08:76:7F:54:ED:7F:82:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/0e57991a-156d-4b55-90cb-79b876cf6a4a/0/1678828C849BDE3472FE846308767F54ED7F8232.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1678828C849BDE3472FE846308767F54ED7F8232.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0e57991a-156d-4b55-90cb-79b876cf6a4a/0/3130332e3138342e3138312e302f32342d3234203d3e203435333035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.184.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:93:1b:53:1e:4d:65:8a:7f:22:30:8b:c5:9e:af:0b:60:8a:
         4a:53:22:36:6a:c4:dd:d7:aa:0b:06:92:49:d5:93:3c:8f:99:
         12:72:f6:bd:f8:b3:bb:46:54:27:56:2a:e9:11:46:a4:e9:ac:
         40:4b:a8:58:02:3f:5b:e1:ef:7b:e0:ea:e9:1a:02:e9:b1:39:
         70:2d:77:35:72:df:f8:cb:bd:34:a4:35:00:3a:ba:f1:46:12:
         a5:b8:85:94:34:ff:8c:25:1a:a4:71:b7:10:f5:b2:6a:c8:c6:
         51:2c:09:f5:d3:5b:f8:06:ca:24:17:30:da:5e:5d:88:a1:d0:
         1a:41:20:e3:ff:8b:ec:e5:23:7b:6a:d8:19:12:2e:83:36:f9:
         48:2a:0d:f6:59:11:fd:47:7d:f4:1a:66:11:4f:b1:2e:2b:1f:
         76:d0:25:dd:72:84:13:ea:8e:df:22:16:70:ac:29:9e:ac:ae:
         fb:93:cc:cf:dd:5d:20:f4:b8:99:40:c9:2b:a0:22:39:a7:2c:
         45:e3:82:26:e3:67:37:28:32:ab:e6:66:df:1e:82:ab:82:a2:
         08:17:4c:e6:da:7c:57:8d:31:b0:0c:65:49:33:fa:f5:f6:e8:
         af:84:e5:b8:01:4e:9d:a1:54:b2:95:c8:78:03:ab:22:78:96:
         0f:04:76:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:50:21 2025 by rpki-client