Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/44b27303-9e3d-4d42-af25-6a0f11808f27/0/3130332e39372e352e302f32342d3234203d3e20313336313237.roa
File:                     3130332e39372e352e302f32342d3234203d3e20313336313237.roa (raw, json)
Hash identifier:          WKEiaTlm3HRRnumgx69gRc0fNHyTzs1yLm0l6WuuEfo=
Subject key identifier:   E5:9E:A1:13:81:F6:F9:64:5F:E4:50:2A:AB:58:19:26:35:83:22:DC
Certificate issuer:       /CN=8C888E996588527BC5EF8ABD293676C3463A1A22
Certificate serial:       02880B48FAC12107D17B5D8A05D9C7732F0A7603
Authority key identifier: 8C:88:8E:99:65:88:52:7B:C5:EF:8A:BD:29:36:76:C3:46:3A:1A:22
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C888E996588527BC5EF8ABD293676C3463A1A22.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/44b27303-9e3d-4d42-af25-6a0f11808f27/0/3130332e39372e352e302f32342d3234203d3e20313336313237.roa
Signing time:             Fri 19 Sep 2025 03:00:02 +0000
ROA not before:           Fri 19 Sep 2025 02:55:02 +0000
ROA not after:            Fri 18 Sep 2026 03:00:02 +0000
asID:                     136127
IP address blocks:        103.97.5.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/44b27303-9e3d-4d42-af25-6a0f11808f27/0/8C888E996588527BC5EF8ABD293676C3463A1A22.crl
                          rsync://repo-rpki.idnic.net/repo/44b27303-9e3d-4d42-af25-6a0f11808f27/0/8C888E996588527BC5EF8ABD293676C3463A1A22.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C888E996588527BC5EF8ABD293676C3463A1A22.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Oct 2025 08:26:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:88:0b:48:fa:c1:21:07:d1:7b:5d:8a:05:d9:c7:73:2f:0a:76:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C888E996588527BC5EF8ABD293676C3463A1A22
        Validity
            Not Before: Sep 19 02:55:02 2025 GMT
            Not After : Sep 18 03:00:02 2026 GMT
        Subject: CN=E59EA11381F6F9645FE4502AAB581926358322DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:49:ad:cb:3b:53:fa:74:75:3f:f6:39:d0:2b:
                    f5:0b:f6:a6:c7:6f:69:60:a2:29:33:60:58:2e:42:
                    b2:f7:b9:28:01:e5:64:ba:41:d7:8e:f8:57:e3:e9:
                    ed:72:96:e9:94:6e:0f:a5:47:60:ec:68:bb:d5:37:
                    99:2f:c1:18:5d:da:32:d9:75:87:9b:c2:ae:ba:b0:
                    f5:66:4e:80:17:9c:6f:be:02:fe:be:be:f7:2e:7f:
                    6d:6a:e1:42:66:4d:33:29:7c:32:fd:8b:c6:01:89:
                    e1:e1:7c:6e:60:f6:5e:a4:45:3b:74:88:2d:e3:e3:
                    40:16:cc:b6:69:6f:0a:38:4f:86:5a:51:dc:57:4c:
                    72:17:35:30:0d:ff:7d:92:7e:00:8e:d0:c4:8c:66:
                    ed:ef:72:13:12:fb:09:ab:64:07:f7:a4:1f:d3:21:
                    6b:c2:75:cc:42:28:ed:ea:48:5a:c7:ec:c8:c7:0f:
                    7a:04:3e:61:9b:dd:5f:e2:bb:8c:3b:75:e8:eb:40:
                    8a:d3:ae:c9:2e:24:e6:32:ce:c6:37:04:e4:a5:f3:
                    85:64:65:83:2a:25:e0:6e:02:c2:4e:ca:24:70:65:
                    13:dd:ef:76:6f:f8:c9:c7:91:29:7a:e9:c8:bc:81:
                    1c:74:c1:95:98:aa:34:21:be:58:ea:05:fd:fe:0c:
                    74:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:9E:A1:13:81:F6:F9:64:5F:E4:50:2A:AB:58:19:26:35:83:22:DC
            X509v3 Authority Key Identifier:
                keyid:8C:88:8E:99:65:88:52:7B:C5:EF:8A:BD:29:36:76:C3:46:3A:1A:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/44b27303-9e3d-4d42-af25-6a0f11808f27/0/8C888E996588527BC5EF8ABD293676C3463A1A22.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C888E996588527BC5EF8ABD293676C3463A1A22.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/44b27303-9e3d-4d42-af25-6a0f11808f27/0/3130332e39372e352e302f32342d3234203d3e20313336313237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.97.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:0a:00:8c:a1:ad:1c:64:3c:ef:b4:c9:60:7d:70:87:17:85:
         8e:73:1e:aa:ab:f7:fd:51:1c:c2:9d:07:72:cd:13:ab:72:47:
         a2:6e:bd:17:bf:70:c8:9c:93:b9:b2:cf:30:80:67:66:f2:a7:
         ef:16:6c:99:db:23:f3:38:b7:c1:ac:82:7e:92:60:33:38:53:
         79:54:ac:38:b6:40:82:ed:57:d5:10:32:54:b5:4c:c2:5a:05:
         6c:bf:c5:7c:7f:d9:f1:5b:81:91:31:28:cc:9e:05:a6:9d:7d:
         3d:99:da:81:eb:2e:7e:c6:2d:f9:87:e9:4d:27:17:01:bf:e0:
         e4:17:c5:69:ca:e6:5b:b8:a9:06:45:15:29:89:f7:a0:ac:db:
         f3:dd:75:de:84:51:fc:5c:cf:47:13:fa:db:9d:f2:8b:45:e1:
         d8:0f:e6:33:3d:ea:dc:94:40:46:a1:b4:5b:b1:f7:a5:c1:07:
         70:7f:3b:a5:33:0c:0a:ca:be:4f:70:20:f6:0a:7a:da:bf:fa:
         e6:a8:06:19:a5:f1:9e:2f:93:9a:2f:94:66:e5:78:4f:e4:02:
         8a:e2:a8:96:65:89:78:b7:4c:7d:09:3f:05:fc:74:e2:c3:f3:
         2b:87:12:5d:7a:d8:20:0c:f3:7c:af:46:f7:69:7c:92:0c:c2:
         d2:2b:1b:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:44:17 2025 by rpki-client