Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/1000e23e-f44a-4cfc-bf56-d99a092d7314/0/3130332e31342e37352e302f32342d3234203d3e20313334363332.roa
File:                     3130332e31342e37352e302f32342d3234203d3e20313334363332.roa (raw, json)
Hash identifier:          cUGwrSXZUX2qOLkBWd7R0ACNVFWfbZ7/VTDRqT5KjoY=
Subject key identifier:   DA:D2:18:4A:CA:5B:2D:13:A9:85:99:50:70:51:EA:8B:8B:73:62:E7
Certificate issuer:       /CN=1EEA71B4C70A47D53BE3204FE2C48CEF927EC731
Certificate serial:       07D6B4D78AC90138C5AE242C909AADC5920AB116
Authority key identifier: 1E:EA:71:B4:C7:0A:47:D5:3B:E3:20:4F:E2:C4:8C:EF:92:7E:C7:31
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1EEA71B4C70A47D53BE3204FE2C48CEF927EC731.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/1000e23e-f44a-4cfc-bf56-d99a092d7314/0/3130332e31342e37352e302f32342d3234203d3e20313334363332.roa
Signing time:             Fri 03 Oct 2025 04:01:37 +0000
ROA not before:           Fri 03 Oct 2025 03:56:37 +0000
ROA not after:            Fri 02 Oct 2026 04:01:37 +0000
asID:                     134632
IP address blocks:        103.14.75.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/1000e23e-f44a-4cfc-bf56-d99a092d7314/0/1EEA71B4C70A47D53BE3204FE2C48CEF927EC731.crl
                          rsync://repo-rpki.idnic.net/repo/1000e23e-f44a-4cfc-bf56-d99a092d7314/0/1EEA71B4C70A47D53BE3204FE2C48CEF927EC731.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1EEA71B4C70A47D53BE3204FE2C48CEF927EC731.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Oct 2025 05:06:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:d6:b4:d7:8a:c9:01:38:c5:ae:24:2c:90:9a:ad:c5:92:0a:b1:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1EEA71B4C70A47D53BE3204FE2C48CEF927EC731
        Validity
            Not Before: Oct  3 03:56:37 2025 GMT
            Not After : Oct  2 04:01:37 2026 GMT
        Subject: CN=DAD2184ACA5B2D13A98599507051EA8B8B7362E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:75:39:4a:2a:6f:6a:62:71:d0:4c:b1:ba:d2:
                    44:02:f0:f3:4e:d9:7f:c3:e3:ff:57:b6:6f:1f:4f:
                    15:c3:44:38:ef:91:af:27:c4:78:b5:cf:c9:4a:c5:
                    0d:d7:d2:34:cf:54:47:f8:33:7e:7b:f0:19:c0:8b:
                    eb:7b:fb:98:05:19:6f:f6:e8:bf:4e:ba:6c:45:71:
                    54:78:14:da:f1:84:12:e4:31:27:16:a7:4a:78:46:
                    24:7b:c1:aa:c6:a1:0d:a3:7c:6a:92:9c:8a:7b:49:
                    a8:85:0b:90:b1:40:ff:1d:17:a7:8e:45:ba:0d:52:
                    e1:1e:ed:df:21:41:c1:82:ff:7d:d5:9a:a8:96:09:
                    49:3d:f7:99:99:0e:5e:3f:ba:a2:e3:73:63:c3:f4:
                    78:cb:6f:3b:32:13:f0:f9:de:d9:70:fc:5b:e5:e9:
                    b9:89:5b:37:73:33:46:6b:d1:e8:3f:55:80:01:3c:
                    64:9d:1e:f8:6d:e4:7a:71:71:23:3d:a5:c7:d6:c7:
                    85:47:99:6b:4c:ec:0d:de:7d:4a:6f:ec:6b:67:63:
                    dc:34:09:a9:aa:59:bb:2c:3b:d9:8f:dc:91:10:77:
                    2a:83:50:41:3e:81:1b:69:e7:e2:39:0a:f1:ad:41:
                    b2:59:cb:ca:41:8a:ad:1a:fa:21:b6:4e:5f:c9:44:
                    5b:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:D2:18:4A:CA:5B:2D:13:A9:85:99:50:70:51:EA:8B:8B:73:62:E7
            X509v3 Authority Key Identifier:
                keyid:1E:EA:71:B4:C7:0A:47:D5:3B:E3:20:4F:E2:C4:8C:EF:92:7E:C7:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/1000e23e-f44a-4cfc-bf56-d99a092d7314/0/1EEA71B4C70A47D53BE3204FE2C48CEF927EC731.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1EEA71B4C70A47D53BE3204FE2C48CEF927EC731.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1000e23e-f44a-4cfc-bf56-d99a092d7314/0/3130332e31342e37352e302f32342d3234203d3e20313334363332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.14.75.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:5a:69:36:de:02:dd:58:9c:f1:58:7f:c7:0c:ce:a8:79:b1:
         04:dd:90:b9:e0:9e:52:fd:95:21:54:82:3e:af:e1:4f:81:2a:
         2a:5f:9a:09:52:31:7d:d1:4f:d2:5f:07:2d:b6:7d:c9:c0:a4:
         a9:e8:41:11:d7:17:72:b7:69:5b:cf:c1:fe:ce:cb:10:b5:10:
         13:ed:d0:78:8a:ec:85:bb:cb:4b:5a:fc:87:a7:d2:a0:11:38:
         e8:47:25:dc:27:b5:1f:78:f7:ae:ce:4e:f4:90:2b:9f:1f:68:
         38:78:2e:81:13:74:cb:34:85:5a:6b:e9:a5:e5:16:46:31:31:
         09:ac:ee:99:46:fd:dd:ad:b3:9c:45:fc:94:d9:82:ec:ba:dc:
         91:d5:96:fc:5b:aa:26:79:0d:ac:64:60:1d:e6:4a:fb:06:67:
         1d:06:f6:70:96:f6:dc:11:d6:8c:d4:f2:6f:62:dd:7a:0c:88:
         28:57:c2:85:cc:dc:8c:da:f6:f0:07:e6:f6:ab:c8:53:97:65:
         2d:74:c7:da:74:34:a5:69:b2:69:51:9f:00:5a:fb:55:21:e2:
         4a:86:55:7e:0f:1d:5a:57:b6:d0:b0:c7:cc:46:8a:fe:9c:d9:
         04:c3:0a:be:c4:f7:ea:af:60:32:4f:27:10:f7:80:fc:b5:a9:
         4f:88:a5:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:02:37 2025 by rpki-client