Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/1b5a47b6-5513-4610-94cf-1feec4eeecf3/0/3130332e3135312e32342e302f32342d3234203d3e20313530353332.roa
File:                     3130332e3135312e32342e302f32342d3234203d3e20313530353332.roa (raw, json)
Hash identifier:          dNnoIXKVhmyapC9qepVTmmkVYB2sWKjzCXWE7DAeobc=
Subject key identifier:   F5:C7:23:92:25:67:6D:3B:75:17:4F:7E:98:28:4E:5D:B3:1E:E9:7E
Certificate issuer:       /CN=2A06B429F70B869F9E70FB36951674F7D8A4AC4E
Certificate serial:       1A12B046D33F95C523C0E49F1AA0CF1E7BDA902C
Authority key identifier: 2A:06:B4:29:F7:0B:86:9F:9E:70:FB:36:95:16:74:F7:D8:A4:AC:4E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2A06B429F70B869F9E70FB36951674F7D8A4AC4E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/1b5a47b6-5513-4610-94cf-1feec4eeecf3/0/3130332e3135312e32342e302f32342d3234203d3e20313530353332.roa
Signing time:             Mon 15 Sep 2025 08:00:01 +0000
ROA not before:           Mon 15 Sep 2025 07:55:01 +0000
ROA not after:            Mon 14 Sep 2026 08:00:01 +0000
asID:                     150532
IP address blocks:        103.151.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/1b5a47b6-5513-4610-94cf-1feec4eeecf3/0/2A06B429F70B869F9E70FB36951674F7D8A4AC4E.crl
                          rsync://repo-rpki.idnic.net/repo/1b5a47b6-5513-4610-94cf-1feec4eeecf3/0/2A06B429F70B869F9E70FB36951674F7D8A4AC4E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2A06B429F70B869F9E70FB36951674F7D8A4AC4E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Oct 2025 02:07:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:12:b0:46:d3:3f:95:c5:23:c0:e4:9f:1a:a0:cf:1e:7b:da:90:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A06B429F70B869F9E70FB36951674F7D8A4AC4E
        Validity
            Not Before: Sep 15 07:55:01 2025 GMT
            Not After : Sep 14 08:00:01 2026 GMT
        Subject: CN=F5C7239225676D3B75174F7E98284E5DB31EE97E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:d1:3a:4b:b3:5d:11:c9:78:b8:bf:16:3b:51:
                    7f:49:8d:08:43:3c:ca:8a:6d:d3:ac:0a:cd:3d:d3:
                    2b:ee:b2:00:da:f9:2a:cf:51:19:3f:85:e0:b8:49:
                    ce:f9:33:cd:4d:cb:af:1d:52:a1:53:89:cf:e7:dd:
                    c6:d6:ef:82:27:d7:e1:22:4b:fa:bf:77:7f:99:82:
                    c4:e1:ab:d3:82:ec:5d:61:50:ed:57:5f:ba:fd:82:
                    ce:6c:96:e9:fd:44:d9:c1:e5:4d:55:f7:a5:4d:96:
                    44:14:65:35:9e:34:07:23:ad:fb:33:8c:06:f7:8a:
                    9c:3b:1a:57:28:dc:58:c0:86:dd:5a:e2:f4:8f:e1:
                    b1:af:ae:0a:07:c7:d9:57:c4:87:4e:2d:14:62:30:
                    50:46:6a:4f:0b:76:32:70:3c:84:2f:28:ef:df:ad:
                    48:d2:d7:76:f1:c5:6d:a0:2b:7b:8c:e2:6e:ee:a0:
                    2a:e5:95:ae:86:c9:36:34:20:4c:be:ea:a0:2c:5a:
                    4f:7d:15:f4:b5:3a:14:3d:49:d3:21:82:9a:8a:76:
                    c3:67:e1:d8:d9:98:d8:7d:fb:e1:df:65:e6:6f:f9:
                    9a:4f:e5:3d:ba:bd:5b:e4:2a:23:d2:54:90:dc:99:
                    8c:3c:2c:c8:c1:a4:f0:a7:2f:02:a5:ea:91:9f:e9:
                    22:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:C7:23:92:25:67:6D:3B:75:17:4F:7E:98:28:4E:5D:B3:1E:E9:7E
            X509v3 Authority Key Identifier:
                keyid:2A:06:B4:29:F7:0B:86:9F:9E:70:FB:36:95:16:74:F7:D8:A4:AC:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/1b5a47b6-5513-4610-94cf-1feec4eeecf3/0/2A06B429F70B869F9E70FB36951674F7D8A4AC4E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2A06B429F70B869F9E70FB36951674F7D8A4AC4E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1b5a47b6-5513-4610-94cf-1feec4eeecf3/0/3130332e3135312e32342e302f32342d3234203d3e20313530353332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.151.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:ad:b6:cc:dc:ee:97:c8:e6:4f:16:d8:df:cb:80:a8:a4:27:
         37:72:46:bb:45:1d:37:65:b0:4e:15:73:14:d1:96:c1:01:ba:
         a1:d7:97:2a:ac:4e:9b:20:46:a4:03:44:a2:d2:12:4c:d3:0c:
         3f:06:47:df:c1:a2:15:41:e2:7b:e0:17:6e:c7:4f:0a:a3:64:
         d3:eb:1d:14:76:5d:fe:d9:d7:c4:79:a2:05:ed:83:e2:c6:69:
         cb:39:33:c3:a7:2e:71:2e:2b:80:9e:e2:57:76:56:cc:69:da:
         8a:57:64:42:13:0a:fb:fd:70:1f:f9:8a:6f:8b:fe:50:20:19:
         b0:96:e8:39:74:fa:3d:f4:75:98:06:63:50:0f:cf:6d:cf:5b:
         87:f5:8d:02:12:44:82:9f:f5:0a:3d:b1:aa:4e:3c:fc:d8:a4:
         31:c1:ed:1d:54:6d:85:e1:38:8b:1d:43:f2:e8:3f:d5:10:35:
         7c:c5:5c:66:ee:a3:7f:d6:17:de:31:5a:e1:6b:86:ac:9c:50:
         57:34:ae:29:be:e1:a7:e5:21:dc:78:86:3e:01:19:48:a8:f8:
         25:b3:0c:5e:c7:98:32:13:f9:75:a8:bf:93:3e:57:5a:ae:25:
         92:5b:bb:25:b6:81:99:7f:3f:36:51:bb:78:c7:63:2c:60:0f:
         fd:bd:15:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:56:12 2025 by rpki-client