Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/3130332e3234352e31382e302f32342d3234203d3e203436303233.roa
File:                     3130332e3234352e31382e302f32342d3234203d3e203436303233.roa (raw, json)
Hash identifier:          Fc0MX+JArFKhMRFuhW8MKgfQ8zyeDdlWFyn08XsgRD0=
Subject key identifier:   9B:72:87:26:74:4F:C1:8E:1A:D0:32:B2:C8:0C:96:DC:EC:CC:E1:C2
Certificate issuer:       /CN=6D2120D281865021E16D49A2451DC53A851B5BBD
Certificate serial:       779E7EFB4FC1B841B4EF9341598C664ACA88FC5C
Authority key identifier: 6D:21:20:D2:81:86:50:21:E1:6D:49:A2:45:1D:C5:3A:85:1B:5B:BD
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D2120D281865021E16D49A2451DC53A851B5BBD.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/3130332e3234352e31382e302f32342d3234203d3e203436303233.roa
Signing time:             Wed 15 Oct 2025 10:02:09 +0000
ROA not before:           Wed 15 Oct 2025 09:57:09 +0000
ROA not after:            Wed 14 Oct 2026 10:02:09 +0000
asID:                     46023
IP address blocks:        103.245.18.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/6D2120D281865021E16D49A2451DC53A851B5BBD.crl
                          rsync://repo-rpki.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/6D2120D281865021E16D49A2451DC53A851B5BBD.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D2120D281865021E16D49A2451DC53A851B5BBD.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Oct 2025 05:10:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:9e:7e:fb:4f:c1:b8:41:b4:ef:93:41:59:8c:66:4a:ca:88:fc:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D2120D281865021E16D49A2451DC53A851B5BBD
        Validity
            Not Before: Oct 15 09:57:09 2025 GMT
            Not After : Oct 14 10:02:09 2026 GMT
        Subject: CN=9B728726744FC18E1AD032B2C80C96DCECCCE1C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ac:2b:ae:93:5b:50:34:c5:5e:5a:45:34:1c:
                    0f:c5:04:a3:5e:92:69:38:f3:66:9e:ca:2e:55:00:
                    ec:f6:c4:03:1d:47:5a:98:1b:c8:70:e3:cd:82:fc:
                    66:aa:5f:80:b2:83:4c:36:9a:70:1d:78:64:51:2a:
                    72:9a:3f:46:e3:fd:41:db:97:74:5c:70:71:92:f1:
                    ef:0d:65:f6:0f:cb:80:ae:d1:ce:05:ac:f1:95:17:
                    b8:c7:cd:a3:2d:e1:05:12:d1:9a:5c:99:23:c3:3f:
                    11:af:74:fb:75:5c:ad:80:55:bc:53:0a:f9:58:f4:
                    d0:f8:ed:98:72:86:ca:31:1a:84:7f:32:75:20:49:
                    7b:b2:90:76:8a:24:f8:d6:00:95:84:92:a3:8a:87:
                    6e:d6:3e:81:a3:86:88:c5:f9:c1:37:df:66:18:61:
                    3e:0b:2f:67:09:0c:84:5d:27:0d:5e:09:e0:91:74:
                    fe:b2:9a:68:30:87:f0:b4:aa:b2:bd:2b:52:cb:a6:
                    58:1c:0c:92:e7:6e:69:a8:90:2f:03:a1:8c:a5:92:
                    bc:20:51:02:52:ba:0a:e4:15:ac:41:6c:a6:ab:87:
                    ab:5a:4a:f5:de:f3:2a:17:a9:ee:de:77:42:e8:cb:
                    a3:ae:7b:70:b0:94:12:3c:a8:93:ab:6d:32:73:60:
                    4d:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:72:87:26:74:4F:C1:8E:1A:D0:32:B2:C8:0C:96:DC:EC:CC:E1:C2
            X509v3 Authority Key Identifier:
                keyid:6D:21:20:D2:81:86:50:21:E1:6D:49:A2:45:1D:C5:3A:85:1B:5B:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/6D2120D281865021E16D49A2451DC53A851B5BBD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D2120D281865021E16D49A2451DC53A851B5BBD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/3130332e3234352e31382e302f32342d3234203d3e203436303233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.245.18.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:00:79:8c:67:9b:66:71:e1:fe:19:a7:5b:9e:dd:68:cf:85:
         26:94:66:a6:d0:3c:3d:a7:7b:1d:19:d5:ea:62:28:54:ad:97:
         ac:11:e2:21:22:32:94:67:02:73:2a:df:c2:3b:1f:44:d0:e7:
         6d:85:b7:10:18:37:f6:a4:f9:fe:fa:b6:cd:f1:6d:2c:a8:d2:
         e1:39:2c:b5:ee:b8:73:ce:37:21:01:96:35:1b:71:d1:73:9f:
         71:be:b5:f6:80:19:86:e6:49:3b:60:75:d8:40:3b:62:c8:35:
         fd:4e:7f:2f:6d:8f:e8:a1:8b:68:4a:39:88:5d:21:43:58:ad:
         9b:d1:61:aa:ee:fd:e8:01:e1:da:bf:85:58:d7:ca:7e:46:34:
         42:f7:81:46:7b:23:8f:83:d5:19:7f:a0:24:5e:c1:cb:0b:43:
         ce:67:6d:cf:f7:5a:e2:a1:58:9e:b3:c2:81:2e:1e:b7:13:e8:
         1f:be:79:83:7b:4d:e9:20:17:a2:34:9b:d4:b6:e3:ad:eb:1b:
         17:d1:bc:75:be:85:54:00:a4:7a:fd:26:d3:d0:a1:20:ae:38:
         45:27:0c:c4:09:8a:4d:4b:2a:e0:5c:f6:21:f0:3d:22:17:4d:
         5b:a5:e8:69:ba:ce:a2:b0:8a:63:74:24:ee:98:71:74:f6:57:
         9c:28:df:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:55:29 2025 by rpki-client