Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3e19abc8-8507-41ed-8289-7e3ac7b24935/0/3130332e33392e37342e302f32332d3234203d3e20313530323732.roa
File:                     3130332e33392e37342e302f32332d3234203d3e20313530323732.roa (raw, json)
Hash identifier:          pekVrjodYi69uEjwrgeD1ua34vzyep4R8BPpULwsQiM=
Subject key identifier:   81:BD:EE:74:F5:DD:2C:06:B8:21:97:8E:C7:FF:A1:27:16:A7:CE:FE
Certificate issuer:       /CN=6AAF6E8D1C9A809446CBC076FE39083AF954708E
Certificate serial:       48646B708E0476B755AE8E73BD096FD5BA1B76F2
Authority key identifier: 6A:AF:6E:8D:1C:9A:80:94:46:CB:C0:76:FE:39:08:3A:F9:54:70:8E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AAF6E8D1C9A809446CBC076FE39083AF954708E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3e19abc8-8507-41ed-8289-7e3ac7b24935/0/3130332e33392e37342e302f32332d3234203d3e20313530323732.roa
Signing time:             Wed 24 Sep 2025 05:02:26 +0000
ROA not before:           Wed 24 Sep 2025 04:57:26 +0000
ROA not after:            Wed 23 Sep 2026 05:02:26 +0000
asID:                     150272
IP address blocks:        103.39.74.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/3e19abc8-8507-41ed-8289-7e3ac7b24935/0/6AAF6E8D1C9A809446CBC076FE39083AF954708E.crl
                          rsync://repo-rpki.idnic.net/repo/3e19abc8-8507-41ed-8289-7e3ac7b24935/0/6AAF6E8D1C9A809446CBC076FE39083AF954708E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AAF6E8D1C9A809446CBC076FE39083AF954708E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Oct 2025 20:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:64:6b:70:8e:04:76:b7:55:ae:8e:73:bd:09:6f:d5:ba:1b:76:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6AAF6E8D1C9A809446CBC076FE39083AF954708E
        Validity
            Not Before: Sep 24 04:57:26 2025 GMT
            Not After : Sep 23 05:02:26 2026 GMT
        Subject: CN=81BDEE74F5DD2C06B821978EC7FFA12716A7CEFE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:ce:11:bd:99:c2:ab:7e:8a:fe:6d:38:a8:a1:
                    b9:d9:c8:7a:d1:79:79:a3:b0:39:9a:b0:d9:4a:74:
                    53:9d:ca:d6:d7:8b:05:87:7c:8b:c3:8a:b1:26:ab:
                    6c:93:b2:0b:b3:a4:b0:3c:e3:ff:52:dc:cf:59:06:
                    62:f8:de:9f:db:6d:7d:af:27:49:47:a2:82:aa:38:
                    6d:a9:72:79:1d:26:44:35:df:76:f4:f3:b3:e9:27:
                    db:ef:8a:17:1e:1b:49:86:d2:4f:e8:40:b3:56:f3:
                    42:8f:52:25:cf:fe:06:7a:27:de:9f:11:88:18:a2:
                    03:25:83:77:86:c1:a4:e9:4f:a9:5a:d4:e1:27:b4:
                    be:87:e6:ab:39:65:23:89:74:a6:93:93:3e:96:35:
                    c1:b8:b0:57:c0:1b:72:3c:07:19:27:4d:00:c8:30:
                    d1:60:a9:9a:d7:28:d3:fe:a6:ad:df:dc:8c:31:da:
                    e3:e6:cb:60:98:cb:86:de:24:4d:e7:0d:e6:3e:94:
                    c0:5d:15:27:6c:d1:c4:53:17:5d:04:79:54:0f:cb:
                    ac:16:81:04:4d:f3:7b:9d:78:00:12:06:cd:55:ff:
                    55:c1:b6:5a:d6:d9:36:df:85:bc:28:fc:ad:3d:53:
                    19:25:b2:76:bf:4a:29:7d:10:9d:e8:6e:9f:0b:9d:
                    5a:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:BD:EE:74:F5:DD:2C:06:B8:21:97:8E:C7:FF:A1:27:16:A7:CE:FE
            X509v3 Authority Key Identifier:
                keyid:6A:AF:6E:8D:1C:9A:80:94:46:CB:C0:76:FE:39:08:3A:F9:54:70:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3e19abc8-8507-41ed-8289-7e3ac7b24935/0/6AAF6E8D1C9A809446CBC076FE39083AF954708E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AAF6E8D1C9A809446CBC076FE39083AF954708E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3e19abc8-8507-41ed-8289-7e3ac7b24935/0/3130332e33392e37342e302f32332d3234203d3e20313530323732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.39.74.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7b:94:fb:a7:15:e0:36:8b:2b:65:eb:00:0a:fb:76:23:6e:d3:
         da:a2:0f:3b:9d:fe:42:26:ea:e5:26:3b:a3:ef:fd:ff:08:7f:
         cb:8a:27:f1:61:ea:cf:72:a7:54:c1:dd:dc:dc:57:9d:9b:3a:
         a7:fd:78:6e:cf:52:fd:c3:4c:8d:9b:4e:f4:3a:3a:b8:9b:9a:
         82:b9:4a:00:79:b8:76:86:6d:6c:7d:dd:39:ca:36:88:6a:2f:
         61:0c:46:55:d8:ca:4d:26:af:e0:08:21:81:84:f0:a4:24:de:
         cd:33:aa:e3:94:73:8c:be:6d:20:14:31:53:a3:cc:01:95:f7:
         99:0e:93:a0:8b:38:99:b8:ae:5a:71:8b:b9:28:7a:9a:a8:0a:
         8c:0c:5d:46:7d:60:22:b8:3c:57:b5:59:28:90:7b:4e:d0:ea:
         37:e1:b3:f4:c5:21:0d:1d:ee:99:a4:65:48:71:92:24:94:ce:
         69:aa:87:cd:e4:98:91:40:69:db:f6:b3:93:22:01:de:26:5a:
         82:c9:2c:44:f8:66:8e:95:7e:67:e2:ca:80:e5:11:ec:4a:89:
         a6:d4:0f:3c:d1:a2:65:d3:ba:da:e0:99:f6:0c:62:88:58:57:
         c5:43:47:c7:d0:09:cf:a9:cd:b8:5a:f2:bd:0e:7f:88:f4:17:
         bd:13:44:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:24:59 2025 by rpki-client