Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/3130332e3234352e31362e302f32332d3234203d3e203436303233.roa
File:                     3130332e3234352e31362e302f32332d3234203d3e203436303233.roa (raw, json)
Hash identifier:          0APaiG4EPBJHGaX3y0J+GecXQsnJ2nU7GWM7XyiSeBU=
Subject key identifier:   0B:6C:86:6B:84:1B:B0:D5:30:D8:53:66:9F:48:16:F6:90:17:60:1A
Certificate issuer:       /CN=6D2120D281865021E16D49A2451DC53A851B5BBD
Certificate serial:       616C7EBC81BC55A0D2CDE9744276E6CEFC28BD70
Authority key identifier: 6D:21:20:D2:81:86:50:21:E1:6D:49:A2:45:1D:C5:3A:85:1B:5B:BD
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D2120D281865021E16D49A2451DC53A851B5BBD.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/3130332e3234352e31362e302f32332d3234203d3e203436303233.roa
Signing time:             Wed 15 Oct 2025 10:02:09 +0000
ROA not before:           Wed 15 Oct 2025 09:57:09 +0000
ROA not after:            Wed 14 Oct 2026 10:02:09 +0000
asID:                     46023
IP address blocks:        103.245.16.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/6D2120D281865021E16D49A2451DC53A851B5BBD.crl
                          rsync://repo-rpki.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/6D2120D281865021E16D49A2451DC53A851B5BBD.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D2120D281865021E16D49A2451DC53A851B5BBD.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Oct 2025 05:10:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:6c:7e:bc:81:bc:55:a0:d2:cd:e9:74:42:76:e6:ce:fc:28:bd:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D2120D281865021E16D49A2451DC53A851B5BBD
        Validity
            Not Before: Oct 15 09:57:09 2025 GMT
            Not After : Oct 14 10:02:09 2026 GMT
        Subject: CN=0B6C866B841BB0D530D853669F4816F69017601A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:40:0c:d8:5b:45:36:7e:bf:e3:36:1f:91:56:
                    4f:1b:7d:79:22:c7:4f:09:ae:62:61:19:6b:ef:5f:
                    91:25:3b:45:28:b9:c7:9a:3a:a8:d3:02:de:5d:31:
                    30:26:0d:dd:f7:df:0c:f5:e5:16:87:fb:0f:2d:36:
                    38:82:f8:c8:9e:87:d3:d5:ef:3f:7d:a1:e5:85:14:
                    40:18:78:44:f3:50:0e:16:a6:e0:f6:81:7d:54:b7:
                    2b:8c:59:8b:8b:33:1d:88:5f:43:c9:ac:00:39:3e:
                    51:b4:74:88:8d:bb:ad:48:7c:e0:78:c3:5b:a6:84:
                    5c:73:4e:d2:66:5e:a0:35:70:91:03:c8:3f:73:84:
                    a4:5c:b7:b4:c3:a0:18:3d:7a:60:42:59:0f:97:cc:
                    70:07:02:7d:f1:9a:ab:c0:3f:5e:99:b0:70:8b:cd:
                    34:6e:dc:dd:0a:63:a4:e6:e9:f9:6a:2e:f6:00:e8:
                    0e:8b:4a:0a:88:bb:07:a4:d6:9d:53:bf:83:8a:c0:
                    25:b3:19:61:82:38:dc:53:59:39:28:75:12:43:37:
                    ff:b5:dd:cc:d2:06:33:d4:e5:b6:86:c5:90:57:b4:
                    1d:e6:09:e9:bb:a1:03:2e:45:ba:0b:1a:07:9b:ca:
                    49:42:08:f8:4a:ae:9c:1a:b8:7c:a9:d7:c1:fa:89:
                    44:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:6C:86:6B:84:1B:B0:D5:30:D8:53:66:9F:48:16:F6:90:17:60:1A
            X509v3 Authority Key Identifier:
                keyid:6D:21:20:D2:81:86:50:21:E1:6D:49:A2:45:1D:C5:3A:85:1B:5B:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/6D2120D281865021E16D49A2451DC53A851B5BBD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D2120D281865021E16D49A2451DC53A851B5BBD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/3130332e3234352e31362e302f32332d3234203d3e203436303233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.245.16.0/23

    Signature Algorithm: sha256WithRSAEncryption
         43:82:6a:99:7d:5c:c4:b8:77:50:b0:2e:e5:88:4e:fb:1c:cb:
         39:4e:04:cc:d7:35:a1:38:85:9f:7a:1b:e4:29:b4:22:23:98:
         50:a4:b4:85:f8:34:b3:3f:5c:37:64:be:53:4e:d8:3f:83:36:
         ca:fd:7f:5d:42:05:dc:a7:20:2a:fb:20:e9:c1:f6:19:bc:26:
         28:6b:ee:fb:ce:35:44:39:81:eb:53:7e:a1:dd:00:fa:33:d2:
         bd:cb:b2:ac:b3:e9:e7:c7:a1:a0:4d:9b:94:6a:73:d7:36:c8:
         4b:54:e1:6c:ed:90:aa:85:8a:cd:da:0e:4c:e5:f3:64:64:e4:
         e6:84:8d:4a:33:d0:6a:a2:93:3e:f7:67:d1:3c:26:9b:74:bc:
         1c:a9:22:d9:49:f9:c9:e0:7b:04:2c:d5:a2:25:ba:79:1b:fa:
         48:40:c9:e4:7b:73:ba:6f:8e:33:6f:25:c1:da:5b:31:13:21:
         d3:13:9c:7d:d7:c6:fd:83:7f:84:20:db:cf:ff:b9:e1:e0:20:
         03:d1:92:56:73:f2:4d:29:09:66:db:77:96:21:8f:24:e6:55:
         3a:94:35:86:51:f3:eb:12:54:f6:e4:e7:be:e5:bd:b8:1b:bb:
         89:bc:8e:7a:28:49:41:7b:65:1f:43:9f:13:53:e8:b2:be:d6:
         c1:c0:41:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:55:25 2025 by rpki-client