Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/34acc0d8-b0c4-4737-9f44-29ff3241c79b/0/3130332e38372e3230312e302f32342d3234203d3e203538333639.roa
File:                     3130332e38372e3230312e302f32342d3234203d3e203538333639.roa (raw, json)
Hash identifier:          /bsoYwdDybVaxRYLdodfmTp8ZF3K0bEZOdDFvTt3y8c=
Subject key identifier:   64:15:AD:63:92:C4:9D:7C:F5:2A:27:D7:D7:B6:E1:85:AF:85:A9:C6
Certificate issuer:       /CN=B5CE42E3875141D10ED7AD1DD18DEDDCC4E1071E
Certificate serial:       3CC45C5D408CEA4DF598E69B3AF5C7213611836E
Authority key identifier: B5:CE:42:E3:87:51:41:D1:0E:D7:AD:1D:D1:8D:ED:DC:C4:E1:07:1E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B5CE42E3875141D10ED7AD1DD18DEDDCC4E1071E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/34acc0d8-b0c4-4737-9f44-29ff3241c79b/0/3130332e38372e3230312e302f32342d3234203d3e203538333639.roa
Signing time:             Thu 09 Oct 2025 12:02:25 +0000
ROA not before:           Thu 09 Oct 2025 11:57:25 +0000
ROA not after:            Thu 08 Oct 2026 12:02:25 +0000
asID:                     58369
IP address blocks:        103.87.201.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/34acc0d8-b0c4-4737-9f44-29ff3241c79b/0/B5CE42E3875141D10ED7AD1DD18DEDDCC4E1071E.crl
                          rsync://repo-rpki.idnic.net/repo/34acc0d8-b0c4-4737-9f44-29ff3241c79b/0/B5CE42E3875141D10ED7AD1DD18DEDDCC4E1071E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B5CE42E3875141D10ED7AD1DD18DEDDCC4E1071E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 21 Oct 2025 15:48:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:c4:5c:5d:40:8c:ea:4d:f5:98:e6:9b:3a:f5:c7:21:36:11:83:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5CE42E3875141D10ED7AD1DD18DEDDCC4E1071E
        Validity
            Not Before: Oct  9 11:57:25 2025 GMT
            Not After : Oct  8 12:02:25 2026 GMT
        Subject: CN=6415AD6392C49D7CF52A27D7D7B6E185AF85A9C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:ac:9d:4b:c0:58:82:b4:be:7a:f2:a0:d1:79:
                    db:5b:f0:27:8d:91:73:58:b1:2b:a3:26:8e:e8:cd:
                    c3:be:91:91:47:b4:47:82:f5:f3:d8:2a:5d:4e:e5:
                    6a:91:aa:0b:82:29:67:3d:68:f1:4b:c5:2a:07:c0:
                    f4:76:ff:31:3a:76:9c:1b:50:33:a3:62:d9:20:a2:
                    b3:00:f9:e9:cb:6c:2c:cd:c9:10:9a:fc:b2:89:5c:
                    71:09:47:a0:da:5d:17:ca:e4:92:ba:ef:08:32:99:
                    b4:8e:f8:a1:22:22:18:f8:89:6a:6a:1d:c0:52:71:
                    c8:28:41:6b:5f:e0:76:f8:db:78:c0:66:f6:41:ab:
                    ef:87:1d:42:bf:e1:66:6f:90:3e:50:32:3b:90:45:
                    61:86:06:60:91:2c:aa:7c:64:c1:ef:ea:a0:0b:05:
                    d6:20:97:91:90:c7:91:8d:62:53:5f:f9:1d:2c:de:
                    91:83:d8:ef:dd:2c:6c:1b:f2:0e:28:44:ff:bf:76:
                    aa:92:1b:08:2c:51:8a:0a:72:e0:2b:89:e8:cf:36:
                    36:ba:2f:34:f0:46:22:ef:cd:a0:3d:6f:d6:a6:c5:
                    a3:fd:d4:a6:7a:fb:fa:1c:6e:50:29:c5:b9:62:1d:
                    ac:a0:9a:63:28:8b:c2:dc:1e:e6:59:b7:28:14:e0:
                    1e:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:15:AD:63:92:C4:9D:7C:F5:2A:27:D7:D7:B6:E1:85:AF:85:A9:C6
            X509v3 Authority Key Identifier:
                keyid:B5:CE:42:E3:87:51:41:D1:0E:D7:AD:1D:D1:8D:ED:DC:C4:E1:07:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/34acc0d8-b0c4-4737-9f44-29ff3241c79b/0/B5CE42E3875141D10ED7AD1DD18DEDDCC4E1071E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B5CE42E3875141D10ED7AD1DD18DEDDCC4E1071E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/34acc0d8-b0c4-4737-9f44-29ff3241c79b/0/3130332e38372e3230312e302f32342d3234203d3e203538333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.87.201.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:fe:1e:42:ce:0b:24:a3:bc:aa:10:dd:67:4d:6c:7c:37:82:
         de:c5:99:2c:33:78:72:58:61:0a:c2:23:b9:ff:94:fb:cb:3f:
         64:8b:aa:23:ed:22:f4:40:a7:e2:1d:0f:50:f1:73:6b:21:b4:
         da:e8:58:6c:ef:af:27:de:f0:a3:a0:82:66:f4:05:02:b8:43:
         40:dc:ac:53:4f:73:e5:2c:44:ff:60:bb:94:c6:be:46:89:f6:
         c3:2e:e2:31:3d:7d:3f:08:8d:1e:e4:50:02:b7:1f:14:1d:38:
         d0:3e:d4:59:a9:e6:c4:ab:24:9e:c7:ea:48:91:98:3d:87:c9:
         c1:fc:95:ed:4b:9e:59:a0:e5:a1:09:96:dc:d2:6f:78:2f:1a:
         cd:21:42:7b:84:25:7c:3f:1a:4d:5b:4e:d4:56:7b:57:5e:92:
         28:a4:a2:06:0a:2b:8d:f3:26:ee:46:d4:ac:e7:79:31:8c:e3:
         c3:9f:6d:62:ba:fc:0f:d2:bd:eb:ad:21:0c:e6:d8:75:71:88:
         28:7c:88:3f:fd:27:2a:2e:da:4d:a6:3c:fc:7a:5f:38:29:13:
         c3:3c:1b:d1:b7:2f:e7:ba:2a:92:3e:dd:78:88:8c:d6:5a:52:
         d6:9e:0e:3c:49:bf:95:c3:5b:a6:db:6b:64:6c:50:4e:40:ec:
         51:57:2f:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:24:03 2025 by rpki-client