Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/52127feb-9615-4c58-a3bb-eef7b7a6547e/0/3130332e3135342e3233302e302f32332d3233203d3e20313336313231.roa
File:                     3130332e3135342e3233302e302f32332d3233203d3e20313336313231.roa (raw, json)
Hash identifier:          JK9uWyUnlTBAvV8zViZB2Kcjau/dBn/KG0P7Jc9dFGg=
Subject key identifier:   F7:4B:D6:69:39:EB:C6:9F:80:1E:42:34:77:3E:17:37:D2:BC:8B:2B
Certificate issuer:       /CN=94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383
Certificate serial:       07B6BFB9286DA44713E562430D00F622C8BC109F
Authority key identifier: 94:F7:5B:04:CE:BE:0D:F1:D0:B9:24:EC:F1:AD:9C:9C:13:99:23:83
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/52127feb-9615-4c58-a3bb-eef7b7a6547e/0/3130332e3135342e3233302e302f32332d3233203d3e20313336313231.roa
Signing time:             Thu 18 Sep 2025 09:02:56 +0000
ROA not before:           Thu 18 Sep 2025 08:57:56 +0000
ROA not after:            Thu 17 Sep 2026 09:02:56 +0000
asID:                     136121
IP address blocks:        103.154.230.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/52127feb-9615-4c58-a3bb-eef7b7a6547e/0/94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383.crl
                          rsync://repo-rpki.idnic.net/repo/52127feb-9615-4c58-a3bb-eef7b7a6547e/0/94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Oct 2025 12:51:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:b6:bf:b9:28:6d:a4:47:13:e5:62:43:0d:00:f6:22:c8:bc:10:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383
        Validity
            Not Before: Sep 18 08:57:56 2025 GMT
            Not After : Sep 17 09:02:56 2026 GMT
        Subject: CN=F74BD66939EBC69F801E4234773E1737D2BC8B2B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:13:5c:77:37:91:e6:4a:61:6f:c4:ac:d6:8d:
                    17:75:64:1d:50:29:ae:ad:35:b5:a5:6a:6c:24:f6:
                    58:fb:44:d1:43:2b:76:d4:6a:47:d3:c8:71:8c:fe:
                    24:3b:39:16:6c:87:7a:5b:57:27:09:fe:02:7b:8e:
                    3d:56:3e:04:f5:28:9a:b2:3b:37:0f:6c:f3:f8:65:
                    3b:f5:91:9b:b7:79:01:9e:9a:24:7e:b8:7f:76:4f:
                    1d:2b:04:31:c5:fd:f2:d9:f4:d4:07:68:bf:0b:27:
                    53:64:ba:d8:0c:c8:b1:84:8d:08:da:26:0a:22:8c:
                    26:70:3a:60:b9:55:9e:5e:19:0e:36:1b:b4:8a:ab:
                    a1:3a:3e:60:08:cc:e2:02:17:59:6d:ec:47:21:69:
                    e8:38:32:80:54:d4:ba:d9:39:04:eb:d2:c4:cd:df:
                    56:9c:01:62:1d:f1:40:8b:4a:c0:0b:e5:7b:ac:f0:
                    33:78:08:86:17:56:12:ad:2d:89:d7:29:ca:e3:af:
                    6c:2f:43:84:e3:f9:98:4a:d5:8f:a5:42:46:3f:92:
                    fc:92:15:30:6a:8c:e7:4d:ce:14:ff:b8:57:dc:64:
                    b1:a0:a8:a9:9a:52:6b:34:a3:70:60:1d:98:05:20:
                    75:e8:05:e6:f5:1d:7d:e7:c7:ab:c5:d4:6f:3a:8b:
                    14:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:4B:D6:69:39:EB:C6:9F:80:1E:42:34:77:3E:17:37:D2:BC:8B:2B
            X509v3 Authority Key Identifier:
                keyid:94:F7:5B:04:CE:BE:0D:F1:D0:B9:24:EC:F1:AD:9C:9C:13:99:23:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/52127feb-9615-4c58-a3bb-eef7b7a6547e/0/94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/52127feb-9615-4c58-a3bb-eef7b7a6547e/0/3130332e3135342e3233302e302f32332d3233203d3e20313336313231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.154.230.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3d:a5:d3:31:b1:c6:9f:bc:d4:05:2b:18:8b:4b:27:89:db:ed:
         bd:b7:33:71:2b:af:71:69:f8:27:0d:fb:40:be:1e:56:6a:54:
         b7:61:0e:da:91:63:77:1a:33:6b:14:52:ae:38:28:1c:d1:87:
         fe:dc:c2:64:e8:89:ff:f0:73:f7:4b:14:b9:6e:61:b6:72:6d:
         66:17:e6:7a:3e:e2:69:01:36:0f:cf:7f:1e:a5:80:39:fd:1f:
         5a:ad:29:25:e1:bf:d7:b8:85:af:80:19:5a:92:21:31:1f:7a:
         ae:64:e7:f2:1d:b8:5f:7d:7e:38:88:94:36:26:1c:b6:a6:62:
         19:fb:83:16:87:72:32:41:81:00:71:4d:12:f1:d9:07:47:21:
         9e:03:17:d2:99:18:52:ad:e8:e9:7f:c7:e8:41:5b:57:04:34:
         fe:04:fe:d9:50:f2:75:3b:ee:fd:0f:88:d8:7e:98:02:16:ef:
         91:c4:e0:f4:91:da:52:db:76:cd:f7:2e:58:6d:a3:ba:c2:fc:
         a8:d2:f1:48:cc:4c:7d:41:e1:50:55:2f:52:51:00:e7:f5:81:
         cd:e3:f9:f1:d9:99:c4:b5:06:16:23:ad:1a:c2:39:be:a4:bd:
         64:3b:8f:3c:b4:d1:4c:87:21:6b:6f:f1:ed:fe:5f:28:66:52:
         49:37:d1:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 11:40:39 2025 by rpki-client