Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3900208b-32ac-4a26-9d92-609ad76183c1/0/3130332e3133392e3137352e302f32342d3234203d3e20313331373435.roa
File:                     3130332e3133392e3137352e302f32342d3234203d3e20313331373435.roa (raw, json)
Hash identifier:          /z/ZhPaw5F3TCZQvmgqcleuF3rFMMJYxb+Mr//w9yXY=
Subject key identifier:   6A:6F:B8:53:2B:EF:2E:DD:B7:05:43:8B:1F:ED:96:19:45:1F:49:8F
Certificate issuer:       /CN=22825A0BEE926683AC41A0486AEF55AF8C1C228F
Certificate serial:       7A6690B0792224D6F1C4ACC2307CD406840C6A65
Authority key identifier: 22:82:5A:0B:EE:92:66:83:AC:41:A0:48:6A:EF:55:AF:8C:1C:22:8F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/22825A0BEE926683AC41A0486AEF55AF8C1C228F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3900208b-32ac-4a26-9d92-609ad76183c1/0/3130332e3133392e3137352e302f32342d3234203d3e20313331373435.roa
Signing time:             Fri 22 Aug 2025 11:00:00 +0000
ROA not before:           Fri 22 Aug 2025 10:55:00 +0000
ROA not after:            Fri 21 Aug 2026 11:00:00 +0000
asID:                     131745
IP address blocks:        103.139.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/3900208b-32ac-4a26-9d92-609ad76183c1/0/22825A0BEE926683AC41A0486AEF55AF8C1C228F.crl
                          rsync://repo-rpki.idnic.net/repo/3900208b-32ac-4a26-9d92-609ad76183c1/0/22825A0BEE926683AC41A0486AEF55AF8C1C228F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/22825A0BEE926683AC41A0486AEF55AF8C1C228F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Aug 2025 16:42:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:66:90:b0:79:22:24:d6:f1:c4:ac:c2:30:7c:d4:06:84:0c:6a:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22825A0BEE926683AC41A0486AEF55AF8C1C228F
        Validity
            Not Before: Aug 22 10:55:00 2025 GMT
            Not After : Aug 21 11:00:00 2026 GMT
        Subject: CN=6A6FB8532BEF2EDDB705438B1FED9619451F498F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:cd:ac:78:6d:ec:7d:95:f5:75:ac:ab:ab:02:
                    ee:52:90:0f:d1:87:70:4a:64:c4:d2:97:c8:10:fd:
                    1b:1b:fd:ec:24:7c:5c:a8:40:6d:d3:c4:aa:6a:16:
                    e5:c1:b0:c7:ff:4f:c6:62:73:e0:47:2f:4b:b3:0e:
                    c2:77:6e:01:3b:57:83:40:cf:17:ca:09:6b:af:cf:
                    0c:79:99:42:29:f0:1d:2c:92:ba:b2:60:ab:c4:a1:
                    3e:73:e0:10:29:de:79:a5:bf:b2:78:76:1c:55:c2:
                    02:fe:06:d2:17:f5:56:87:9d:25:69:18:c2:ba:06:
                    f2:f4:2b:4b:6d:76:11:38:c4:43:9e:1d:de:0f:3a:
                    04:59:94:0d:e6:b2:79:98:16:6c:48:0b:12:27:2f:
                    85:dc:7f:1d:76:a2:7d:ec:00:f8:08:3f:1c:e5:c4:
                    56:fd:a8:7c:ae:60:42:34:2a:94:71:b9:22:d7:99:
                    50:0f:32:35:c3:29:bd:8d:bf:7b:53:15:78:42:c9:
                    3e:9d:11:b5:7e:61:53:d1:30:64:85:ba:c3:76:99:
                    73:37:ee:ee:8a:ab:f6:88:22:c5:2f:28:01:c8:07:
                    d1:ad:21:d0:75:cf:5a:90:b7:0f:22:82:82:64:58:
                    0a:5b:57:f9:0b:a5:30:d5:2d:ee:ab:6d:d9:99:51:
                    71:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:6F:B8:53:2B:EF:2E:DD:B7:05:43:8B:1F:ED:96:19:45:1F:49:8F
            X509v3 Authority Key Identifier:
                keyid:22:82:5A:0B:EE:92:66:83:AC:41:A0:48:6A:EF:55:AF:8C:1C:22:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3900208b-32ac-4a26-9d92-609ad76183c1/0/22825A0BEE926683AC41A0486AEF55AF8C1C228F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/22825A0BEE926683AC41A0486AEF55AF8C1C228F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3900208b-32ac-4a26-9d92-609ad76183c1/0/3130332e3133392e3137352e302f32342d3234203d3e20313331373435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.139.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:68:a0:3a:7d:f2:fb:89:36:b1:96:a3:3e:9d:95:48:74:75:
         1e:06:cd:53:78:ee:13:a8:2a:7e:16:ec:b5:f0:d4:f8:d9:74:
         9a:ff:66:e7:43:5c:76:8a:62:30:66:4d:e6:3e:08:06:48:47:
         2b:3a:a3:c4:3f:b5:8c:0b:cf:9d:34:9d:3a:12:a4:c4:07:65:
         00:2b:8f:8d:d9:71:e2:da:eb:2c:97:59:10:28:ed:87:c6:f6:
         55:45:c6:cc:26:1d:5c:b2:06:14:7e:21:18:9d:6c:7f:37:3e:
         f4:d8:57:cd:32:9c:e8:89:38:d4:18:ca:4b:6a:a4:7c:73:6c:
         c4:8a:b0:52:10:14:91:9f:d0:01:f6:4e:1f:3f:61:70:b3:c1:
         61:eb:27:70:35:fb:66:cd:02:22:d3:ca:53:af:f1:f0:27:3b:
         c8:51:7c:8a:57:9c:0e:21:6d:21:b5:0b:8a:18:46:63:b1:c4:
         de:c7:79:13:ab:fb:e4:6b:ed:64:1b:bf:d0:a0:7c:39:6d:6b:
         75:26:5b:bd:ee:c7:2d:3c:62:7c:50:dd:cc:53:b4:a9:b7:a4:
         a0:21:89:a8:06:4c:e3:44:fd:05:10:29:f8:04:72:25:71:1b:
         5b:65:95:d1:fa:51:2b:9e:b5:96:16:a2:d4:71:c3:d1:b3:09:
         db:8f:08:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:35:47 2025 by rpki-client