Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3b905766-440e-4bcb-ae72-3e78831ce9dc/0/3130332e31372e33322e302f32342d3234203d3e20313530323238.roa
File:                     3130332e31372e33322e302f32342d3234203d3e20313530323238.roa (raw, json)
Hash identifier:          IFrFNgL9nGnkBy6pVhjob4v5DLOWZyxcdQ+rkKOm7OM=
Subject key identifier:   F4:F4:0F:C8:E1:DE:36:3C:92:4E:9A:43:F7:15:AA:AB:46:04:13:37
Certificate issuer:       /CN=B2650BD2D997B6C198A4B362B7395AC364683312
Certificate serial:       2B712784388AD0D9D8865F3561F17978045EABF0
Authority key identifier: B2:65:0B:D2:D9:97:B6:C1:98:A4:B3:62:B7:39:5A:C3:64:68:33:12
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2650BD2D997B6C198A4B362B7395AC364683312.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3b905766-440e-4bcb-ae72-3e78831ce9dc/0/3130332e31372e33322e302f32342d3234203d3e20313530323238.roa
Signing time:             Tue 09 Sep 2025 15:00:01 +0000
ROA not before:           Tue 09 Sep 2025 14:55:01 +0000
ROA not after:            Tue 08 Sep 2026 15:00:01 +0000
asID:                     150228
IP address blocks:        103.17.32.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/3b905766-440e-4bcb-ae72-3e78831ce9dc/0/B2650BD2D997B6C198A4B362B7395AC364683312.crl
                          rsync://repo-rpki.idnic.net/repo/3b905766-440e-4bcb-ae72-3e78831ce9dc/0/B2650BD2D997B6C198A4B362B7395AC364683312.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2650BD2D997B6C198A4B362B7395AC364683312.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Oct 2025 05:13:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:71:27:84:38:8a:d0:d9:d8:86:5f:35:61:f1:79:78:04:5e:ab:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B2650BD2D997B6C198A4B362B7395AC364683312
        Validity
            Not Before: Sep  9 14:55:01 2025 GMT
            Not After : Sep  8 15:00:01 2026 GMT
        Subject: CN=F4F40FC8E1DE363C924E9A43F715AAAB46041337
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:e0:92:6a:6e:53:2f:01:02:a6:85:9a:4e:a9:
                    70:90:51:08:72:a9:7d:96:10:e9:ea:de:8b:d9:f7:
                    d5:d4:f8:55:71:55:51:18:f3:d9:b9:34:bf:6b:33:
                    52:32:70:e4:56:fa:6a:ba:c9:c0:32:a2:04:cc:1a:
                    cb:82:00:55:d2:30:69:82:29:fc:32:0d:1d:ac:16:
                    05:93:5f:33:b6:71:d8:34:c0:92:7f:5d:d1:82:39:
                    00:0e:31:94:90:0d:4b:0d:7e:ad:52:78:29:00:cb:
                    fd:2e:c7:98:b4:df:f0:c0:df:d1:c2:11:50:49:de:
                    5c:17:6e:68:97:dd:e3:5e:89:15:45:08:f8:ff:69:
                    ea:6b:da:b0:a7:cc:53:d5:f9:62:a7:5e:ad:6b:b0:
                    1e:3a:7b:bc:ab:b9:8d:c4:bd:1b:25:d3:66:c0:7b:
                    46:57:4f:5a:00:65:3b:eb:a4:3e:b5:61:15:89:b8:
                    cc:03:f5:76:f7:c2:a0:2f:35:f5:d6:fb:46:06:6d:
                    39:f2:56:11:84:e4:dd:56:ea:23:b9:ce:f1:1b:86:
                    75:fc:a5:10:81:33:23:1f:29:50:6f:e1:01:0a:97:
                    3d:4c:c3:26:92:d5:45:9c:3a:82:c1:fd:81:16:8e:
                    30:88:03:60:9a:b8:ab:b8:cb:e5:4b:00:39:f9:1b:
                    ba:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:F4:0F:C8:E1:DE:36:3C:92:4E:9A:43:F7:15:AA:AB:46:04:13:37
            X509v3 Authority Key Identifier:
                keyid:B2:65:0B:D2:D9:97:B6:C1:98:A4:B3:62:B7:39:5A:C3:64:68:33:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3b905766-440e-4bcb-ae72-3e78831ce9dc/0/B2650BD2D997B6C198A4B362B7395AC364683312.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2650BD2D997B6C198A4B362B7395AC364683312.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3b905766-440e-4bcb-ae72-3e78831ce9dc/0/3130332e31372e33322e302f32342d3234203d3e20313530323238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.17.32.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:ac:51:d0:a4:7b:9c:a9:2a:9f:d7:cb:b3:f2:39:55:40:8f:
         92:e6:af:b2:5a:40:ec:f1:34:3a:b6:ee:8b:2e:db:7a:ef:9b:
         86:dc:da:c2:85:51:7b:c3:c7:f2:bd:f9:82:97:9e:96:ef:30:
         e7:2f:97:d5:34:d8:ac:fe:8a:bd:f1:66:c2:f4:d5:a3:a4:fa:
         e7:3e:86:ec:4f:4a:43:cb:56:f1:d5:08:31:f3:b8:c9:ea:c7:
         b9:00:22:7a:67:83:23:d9:4a:3f:92:9b:47:0c:16:ef:aa:a9:
         f5:7e:ab:a6:e3:af:d4:51:5a:e3:9e:7f:1c:17:05:91:2e:f8:
         61:85:1a:a1:5e:10:40:8a:81:18:bf:b3:d7:2e:4b:54:b4:38:
         cb:0d:4a:a1:b7:5a:7d:d5:77:8e:07:33:ae:dd:88:9c:c2:ff:
         5d:fa:e3:5f:4b:10:70:e5:61:48:21:19:9a:0d:a0:0d:8d:d6:
         3a:be:45:e3:2a:a8:72:b0:8c:75:e4:fc:2a:c6:5f:0d:12:cf:
         8b:1f:18:9e:f1:47:c7:e2:ea:29:48:d6:9d:84:bc:43:31:00:
         98:85:64:14:d3:e3:88:f8:68:70:5b:c8:58:21:32:42:fb:70:
         14:5e:7c:f5:5f:d9:5e:ab:f5:f3:4b:94:3e:dd:fd:f0:e3:77:
         a5:8b:37:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:00:51 2025 by rpki-client