Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/52127feb-9615-4c58-a3bb-eef7b7a6547e/0/3130332e3135342e3233302e302f32342d3234203d3e20313336313231.roa
File:                     3130332e3135342e3233302e302f32342d3234203d3e20313336313231.roa (raw, json)
Hash identifier:          R7KLsJOo3soCPav40P+K3pNlUVu9SA4Q96TRuJpOj+E=
Subject key identifier:   05:79:3C:6B:AA:5F:E2:29:D4:2D:40:5F:66:4B:4C:D2:83:EB:B3:01
Certificate issuer:       /CN=94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383
Certificate serial:       5F155E8DB9664F2CE665CAB7AF4DA6B90BAC00E0
Authority key identifier: 94:F7:5B:04:CE:BE:0D:F1:D0:B9:24:EC:F1:AD:9C:9C:13:99:23:83
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/52127feb-9615-4c58-a3bb-eef7b7a6547e/0/3130332e3135342e3233302e302f32342d3234203d3e20313336313231.roa
Signing time:             Thu 18 Sep 2025 09:02:56 +0000
ROA not before:           Thu 18 Sep 2025 08:57:56 +0000
ROA not after:            Thu 17 Sep 2026 09:02:56 +0000
asID:                     136121
IP address blocks:        103.154.230.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/52127feb-9615-4c58-a3bb-eef7b7a6547e/0/94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383.crl
                          rsync://repo-rpki.idnic.net/repo/52127feb-9615-4c58-a3bb-eef7b7a6547e/0/94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Oct 2025 12:51:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:15:5e:8d:b9:66:4f:2c:e6:65:ca:b7:af:4d:a6:b9:0b:ac:00:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383
        Validity
            Not Before: Sep 18 08:57:56 2025 GMT
            Not After : Sep 17 09:02:56 2026 GMT
        Subject: CN=05793C6BAA5FE229D42D405F664B4CD283EBB301
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:86:7e:7e:b5:92:4e:b5:98:65:b0:c6:26:af:
                    b4:27:2c:ae:5c:aa:cd:ef:ce:1c:d6:02:3c:82:b1:
                    56:17:1c:ab:91:7a:f7:5d:02:bb:da:c9:09:36:2e:
                    f3:0f:f1:6b:8d:a4:53:62:6a:8d:76:59:f6:42:26:
                    56:3d:fc:4e:26:a3:bb:4d:92:1e:01:36:28:ce:f2:
                    a5:06:e4:41:b6:c8:ac:33:7c:4f:0d:bc:ee:67:ca:
                    8c:8c:3b:65:bf:5a:01:46:8b:0a:64:51:67:2a:08:
                    c9:02:9f:8c:a6:a8:5f:f1:d1:98:bf:56:b1:8e:81:
                    f1:18:81:fa:ac:e8:b1:ca:d3:5f:6f:b4:7c:92:46:
                    56:09:3d:76:fa:19:7b:d7:b3:9c:a7:1c:ed:7e:00:
                    58:16:f5:e3:b6:50:20:fe:0a:4d:e2:25:e0:dc:e3:
                    30:c7:b4:02:9c:b4:69:4d:79:60:97:93:ee:ba:2d:
                    d7:44:35:54:df:b9:1f:f4:19:03:fb:b2:ee:64:c1:
                    fc:69:1a:33:f8:e9:fc:ef:99:6d:43:9c:fe:ec:6a:
                    3b:28:ab:12:4f:ad:00:3f:56:98:23:45:0f:e7:5a:
                    db:16:2f:4e:b4:16:6c:32:2d:36:d0:12:5e:ac:d8:
                    41:ce:38:da:de:21:2a:04:b7:0f:ad:9d:36:79:87:
                    c6:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:79:3C:6B:AA:5F:E2:29:D4:2D:40:5F:66:4B:4C:D2:83:EB:B3:01
            X509v3 Authority Key Identifier:
                keyid:94:F7:5B:04:CE:BE:0D:F1:D0:B9:24:EC:F1:AD:9C:9C:13:99:23:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/52127feb-9615-4c58-a3bb-eef7b7a6547e/0/94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/52127feb-9615-4c58-a3bb-eef7b7a6547e/0/3130332e3135342e3233302e302f32342d3234203d3e20313336313231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.154.230.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b3:8e:92:3d:d0:e9:cf:0c:61:d5:1a:91:9c:9b:ca:be:76:ae:
         7f:d6:de:bd:d8:35:a2:c3:26:c8:76:a2:15:93:90:cf:aa:27:
         08:68:c4:90:00:20:43:dd:ba:26:3b:64:69:a3:89:0a:46:1c:
         1b:5e:8d:8e:cd:1f:ac:19:fa:53:9f:15:77:eb:92:f5:af:ec:
         2d:45:a6:12:07:59:22:82:48:65:9a:3d:17:a6:30:6a:c7:5a:
         c3:82:4e:b0:6d:78:38:6b:7e:90:8c:f8:c9:ed:10:3e:88:b9:
         75:c0:bf:c0:9e:21:9e:3c:49:ce:ed:a7:99:ae:66:6a:90:64:
         92:8f:f9:ff:47:2a:f3:08:63:db:f8:ef:c2:63:00:a2:dc:5d:
         21:10:b5:41:06:7e:61:53:5f:92:dd:cd:36:7e:dc:90:05:f3:
         42:65:30:17:61:8a:d6:22:8b:9d:26:27:a3:11:9b:b9:d5:9a:
         60:2e:82:dc:64:c2:82:c8:1e:0d:3b:d2:27:bc:19:b7:f2:7b:
         49:4b:28:5b:41:87:5f:93:20:da:4d:d6:a5:cb:7d:3e:b3:7c:
         5c:4f:cf:08:04:a9:6a:76:32:95:37:31:78:6d:3a:0e:c8:2c:
         ae:84:df:72:f3:3f:8e:9a:41:50:84:28:dd:21:80:e8:e5:09:
         54:eb:4d:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 11:40:35 2025 by rpki-client