Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/3130332e3234352e31392e302f32342d3234203d3e203436303233.roa
File:                     3130332e3234352e31392e302f32342d3234203d3e203436303233.roa (raw, json)
Hash identifier:          OP9t4BATr719tJwNacPpBjZgjvtQIUgiKYybPvtxo7U=
Subject key identifier:   EE:39:F8:5B:F0:E8:ED:0E:6B:E6:A4:A9:19:1D:6A:7F:9E:33:A2:E1
Certificate issuer:       /CN=6D2120D281865021E16D49A2451DC53A851B5BBD
Certificate serial:       0D8E26B3822467829866C73F1F7A3FD70DDFF9D5
Authority key identifier: 6D:21:20:D2:81:86:50:21:E1:6D:49:A2:45:1D:C5:3A:85:1B:5B:BD
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D2120D281865021E16D49A2451DC53A851B5BBD.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/3130332e3234352e31392e302f32342d3234203d3e203436303233.roa
Signing time:             Wed 15 Oct 2025 10:02:09 +0000
ROA not before:           Wed 15 Oct 2025 09:57:09 +0000
ROA not after:            Wed 14 Oct 2026 10:02:09 +0000
asID:                     46023
IP address blocks:        103.245.19.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/6D2120D281865021E16D49A2451DC53A851B5BBD.crl
                          rsync://repo-rpki.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/6D2120D281865021E16D49A2451DC53A851B5BBD.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D2120D281865021E16D49A2451DC53A851B5BBD.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Oct 2025 05:10:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:8e:26:b3:82:24:67:82:98:66:c7:3f:1f:7a:3f:d7:0d:df:f9:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D2120D281865021E16D49A2451DC53A851B5BBD
        Validity
            Not Before: Oct 15 09:57:09 2025 GMT
            Not After : Oct 14 10:02:09 2026 GMT
        Subject: CN=EE39F85BF0E8ED0E6BE6A4A9191D6A7F9E33A2E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:98:f7:36:73:8d:49:01:33:80:31:8b:3b:58:
                    7e:e4:5d:76:f4:c8:47:6a:fd:11:2c:95:f1:3a:2b:
                    12:d2:76:4e:53:95:eb:1c:39:e3:97:72:2f:15:98:
                    d9:2e:68:15:4e:03:ce:bc:e9:35:11:8a:34:72:88:
                    fa:ed:97:38:26:7d:2f:21:32:d9:5c:53:56:84:7a:
                    5f:12:cc:ab:bd:d2:91:ba:d7:a4:5f:2e:82:5e:1f:
                    60:42:3f:da:49:15:4c:59:ca:82:d2:ae:57:14:7b:
                    b4:ca:f5:0f:9b:fb:de:02:98:93:91:f5:09:66:88:
                    e4:32:59:f4:15:c0:ef:05:8d:3e:99:53:56:18:d3:
                    9d:40:3c:9d:5e:de:50:ff:05:42:47:86:69:2c:d3:
                    58:6e:ee:2f:49:b7:3e:34:96:ae:e9:49:50:80:4f:
                    2d:96:a3:1c:62:4d:ab:47:36:b6:2f:af:cf:f5:16:
                    b6:f6:ae:7d:2a:66:c6:d2:0e:11:42:82:3a:57:d5:
                    59:cc:06:93:35:ce:91:1d:a7:cb:dc:eb:6c:3c:99:
                    0d:ce:61:79:ed:39:cb:33:37:8f:33:c6:d2:b1:48:
                    4a:77:7c:aa:f1:cf:c8:63:95:a1:41:1c:03:45:a8:
                    a1:bf:3b:14:e3:68:0d:9e:05:6b:ea:c0:1a:c1:44:
                    f3:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:39:F8:5B:F0:E8:ED:0E:6B:E6:A4:A9:19:1D:6A:7F:9E:33:A2:E1
            X509v3 Authority Key Identifier:
                keyid:6D:21:20:D2:81:86:50:21:E1:6D:49:A2:45:1D:C5:3A:85:1B:5B:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/6D2120D281865021E16D49A2451DC53A851B5BBD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D2120D281865021E16D49A2451DC53A851B5BBD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/3130332e3234352e31392e302f32342d3234203d3e203436303233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.245.19.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:43:34:af:d8:83:e1:ec:56:7b:4e:1c:0b:95:cd:dd:f5:31:
         ed:19:d8:26:9b:ea:05:98:5b:fc:77:23:49:82:8f:7b:a4:c6:
         81:b2:ae:36:50:ca:73:47:2c:fb:22:1a:4e:f7:c8:cb:11:1b:
         3c:e5:b9:5c:eb:bb:a3:5c:b7:89:ba:00:d0:0e:54:f9:c7:81:
         0b:e4:b8:1f:3d:19:10:3b:81:9b:73:31:ca:b0:ae:58:7e:8f:
         2f:ba:d8:aa:32:3b:3f:eb:28:3f:1b:b0:ea:02:dc:21:79:dc:
         50:12:c6:91:41:4a:f5:c9:d9:b4:05:e7:25:54:b8:a6:95:a7:
         36:52:66:be:06:89:0e:fa:23:ba:28:88:04:91:15:08:b3:a2:
         ad:4b:c4:f9:cd:40:77:ee:da:9f:7d:43:e2:d6:20:e7:c0:be:
         08:f8:e3:87:f8:0e:5e:7f:24:c7:7c:e5:2c:2d:d1:e1:3f:00:
         a1:e2:03:aa:52:6c:ed:14:5a:9e:5d:86:72:50:66:e2:74:7e:
         eb:f4:9b:10:79:97:1e:52:23:9f:6c:3e:c6:d5:08:2c:ad:ae:
         44:d2:ec:7d:fd:0e:d4:5c:1a:12:6d:4c:53:fc:cc:55:64:fd:
         5c:4b:4a:35:b6:35:15:2c:ce:53:8b:7d:37:b2:d4:b5:33:00:
         24:a9:9b:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:55:28 2025 by rpki-client