Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/44b27303-9e3d-4d42-af25-6a0f11808f27/0/3130332e39372e342e302f32342d3234203d3e20313336313237.roa
File:                     3130332e39372e342e302f32342d3234203d3e20313336313237.roa (raw, json)
Hash identifier:          oyn1Uio0Qvr9sm/GPuAcnqkMPKHi72fQr6RvUU829kw=
Subject key identifier:   4F:0F:04:CD:5E:56:01:16:29:6C:46:B9:75:8C:CA:08:7A:F7:2F:F7
Certificate issuer:       /CN=8C888E996588527BC5EF8ABD293676C3463A1A22
Certificate serial:       5209013B7CFADF63FD3BE58B3028F42606A416DB
Authority key identifier: 8C:88:8E:99:65:88:52:7B:C5:EF:8A:BD:29:36:76:C3:46:3A:1A:22
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C888E996588527BC5EF8ABD293676C3463A1A22.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/44b27303-9e3d-4d42-af25-6a0f11808f27/0/3130332e39372e342e302f32342d3234203d3e20313336313237.roa
Signing time:             Fri 19 Sep 2025 03:00:02 +0000
ROA not before:           Fri 19 Sep 2025 02:55:02 +0000
ROA not after:            Fri 18 Sep 2026 03:00:02 +0000
asID:                     136127
IP address blocks:        103.97.4.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/44b27303-9e3d-4d42-af25-6a0f11808f27/0/8C888E996588527BC5EF8ABD293676C3463A1A22.crl
                          rsync://repo-rpki.idnic.net/repo/44b27303-9e3d-4d42-af25-6a0f11808f27/0/8C888E996588527BC5EF8ABD293676C3463A1A22.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C888E996588527BC5EF8ABD293676C3463A1A22.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Oct 2025 08:26:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:09:01:3b:7c:fa:df:63:fd:3b:e5:8b:30:28:f4:26:06:a4:16:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C888E996588527BC5EF8ABD293676C3463A1A22
        Validity
            Not Before: Sep 19 02:55:02 2025 GMT
            Not After : Sep 18 03:00:02 2026 GMT
        Subject: CN=4F0F04CD5E560116296C46B9758CCA087AF72FF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:c1:d0:c6:eb:e8:65:c9:6b:1c:4d:ca:9d:d8:
                    e4:58:da:fc:42:e5:60:86:38:2b:b9:25:16:b0:fa:
                    9f:c9:da:cb:00:44:89:55:bc:ed:e6:c9:85:b8:09:
                    17:ba:d6:46:90:81:fc:fb:0d:36:49:e9:fe:f3:53:
                    75:5f:96:e0:89:76:22:64:26:01:f0:80:98:5b:74:
                    40:57:71:81:7a:b6:bd:90:56:d3:52:39:08:ea:9e:
                    8d:cf:2e:b6:da:e6:48:f8:1f:be:db:bd:f3:61:26:
                    29:78:ef:f0:55:46:34:21:a5:11:cc:77:51:8e:91:
                    f6:28:54:bf:0e:cb:f3:7d:5d:fc:bf:6c:f1:6b:2c:
                    48:97:ef:66:3f:7b:39:bb:48:6a:b8:00:c4:05:55:
                    15:f9:4c:8c:f9:d2:e2:c8:81:45:3d:49:8a:a2:61:
                    2c:07:fe:eb:9b:6b:1d:98:f1:f3:91:28:58:81:c2:
                    98:ef:cd:8f:f9:34:8c:2e:1b:bd:da:39:bd:a6:b4:
                    26:e1:d2:ff:9a:27:b2:e1:27:f4:af:01:9a:f0:b0:
                    60:b2:3c:48:5d:66:de:31:bb:54:c6:fb:2b:f5:1c:
                    f4:13:51:b0:ec:b1:c6:c6:c9:03:c6:3c:f5:c2:b9:
                    1b:dd:cc:b8:bf:7d:f4:07:e0:b2:27:15:34:82:87:
                    35:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:0F:04:CD:5E:56:01:16:29:6C:46:B9:75:8C:CA:08:7A:F7:2F:F7
            X509v3 Authority Key Identifier:
                keyid:8C:88:8E:99:65:88:52:7B:C5:EF:8A:BD:29:36:76:C3:46:3A:1A:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/44b27303-9e3d-4d42-af25-6a0f11808f27/0/8C888E996588527BC5EF8ABD293676C3463A1A22.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C888E996588527BC5EF8ABD293676C3463A1A22.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/44b27303-9e3d-4d42-af25-6a0f11808f27/0/3130332e39372e342e302f32342d3234203d3e20313336313237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.97.4.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:7d:cb:7c:fd:7b:20:9b:09:84:60:e3:ee:7f:d8:97:fb:4b:
         d0:dd:35:b3:a3:20:97:25:59:66:68:f2:63:de:b7:08:29:a6:
         3d:3f:fa:6b:ec:0f:a8:5d:24:e8:e0:a4:6c:1d:a1:96:c0:c0:
         07:e1:fc:d6:10:ef:7f:5c:cf:59:7d:d8:52:65:77:8e:55:9b:
         73:d1:8a:a4:07:74:6d:ef:6e:cb:bc:29:30:9f:3e:11:e3:0a:
         47:90:0f:f4:c5:5f:18:d7:bf:b2:a2:70:c5:15:9b:c0:b2:b2:
         0c:f2:c9:cb:4e:e8:9a:42:21:01:71:10:c3:a7:52:bc:7b:7a:
         2f:7c:90:bc:86:1f:92:ce:5c:92:f8:87:92:58:7f:c4:cf:8e:
         37:08:fc:52:6d:17:4d:26:8a:93:45:41:b2:68:af:0b:e7:dc:
         75:5b:32:7b:88:4f:92:44:c1:aa:d6:bc:f0:29:32:bd:53:ec:
         b2:ec:93:86:bf:7a:de:5a:fe:15:a3:04:f7:a1:0d:9a:ce:28:
         d0:a8:cf:47:44:c6:a1:fd:ab:d8:6c:54:2e:e8:9b:a8:bb:77:
         1b:63:56:a1:82:4e:3d:4a:3c:dc:00:fe:9d:b5:48:0f:e9:10:
         f7:19:14:f4:61:e9:95:e1:f3:c0:ca:ed:44:41:9e:62:64:26:
         0d:e0:4e:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:48:17 2025 by rpki-client