Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/654607f0-1701-49b1-91ff-b1bed5cbded1/0/3130332e32322e3231362e302f32342d3234203d3e20313530323631.roa
File:                     3130332e32322e3231362e302f32342d3234203d3e20313530323631.roa (raw, json)
Hash identifier:          O/zlYAvAs7v4wgG3NM581/meU2MKG9Ug+TtqOP46WoM=
Subject key identifier:   D8:15:CC:9C:11:FB:21:6F:A3:09:44:8D:F7:B3:EA:B3:CD:B7:40:2F
Certificate issuer:       /CN=755B61748263D4DD472C69CA7F1847254B03EBBC
Certificate serial:       242C48A28F3ACDD71268B6D399C1DEFBB9BFDCAF
Authority key identifier: 75:5B:61:74:82:63:D4:DD:47:2C:69:CA:7F:18:47:25:4B:03:EB:BC
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/755B61748263D4DD472C69CA7F1847254B03EBBC.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/654607f0-1701-49b1-91ff-b1bed5cbded1/0/3130332e32322e3231362e302f32342d3234203d3e20313530323631.roa
Signing time:             Fri 10 Oct 2025 05:01:01 +0000
ROA not before:           Fri 10 Oct 2025 04:56:01 +0000
ROA not after:            Fri 09 Oct 2026 05:01:01 +0000
asID:                     150261
IP address blocks:        103.22.216.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/654607f0-1701-49b1-91ff-b1bed5cbded1/0/755B61748263D4DD472C69CA7F1847254B03EBBC.crl
                          rsync://repo-rpki.idnic.net/repo/654607f0-1701-49b1-91ff-b1bed5cbded1/0/755B61748263D4DD472C69CA7F1847254B03EBBC.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/755B61748263D4DD472C69CA7F1847254B03EBBC.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Oct 2025 05:19:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:2c:48:a2:8f:3a:cd:d7:12:68:b6:d3:99:c1:de:fb:b9:bf:dc:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=755B61748263D4DD472C69CA7F1847254B03EBBC
        Validity
            Not Before: Oct 10 04:56:01 2025 GMT
            Not After : Oct  9 05:01:01 2026 GMT
        Subject: CN=D815CC9C11FB216FA309448DF7B3EAB3CDB7402F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:f6:1b:74:e7:ea:f2:37:d7:5f:b4:cd:ac:b6:
                    43:dd:13:b6:6d:ce:92:0c:46:ac:8a:82:fd:c8:67:
                    eb:b5:73:ae:e2:ab:41:02:b9:de:6e:5c:2d:d9:ed:
                    e2:9b:88:fc:fc:63:fd:71:e2:53:fd:ed:00:9d:27:
                    19:86:29:fd:12:14:3f:3e:a4:48:f8:2f:22:bb:7d:
                    54:05:36:2a:8a:a7:3b:0b:80:c3:f0:74:c2:fc:04:
                    59:73:70:7c:8d:d7:8b:d2:92:78:57:f6:98:6a:5a:
                    eb:b7:31:3f:ce:10:29:d4:8d:84:a0:68:0a:2a:06:
                    59:f7:5c:22:36:7c:97:01:d8:f3:b8:a7:95:66:75:
                    4c:75:58:7a:a1:0e:a4:d9:96:11:6d:8b:5d:db:9c:
                    4c:90:37:62:7e:83:1b:4c:6e:5a:dd:1c:5a:75:5d:
                    0d:80:4b:17:1f:34:98:13:71:25:e5:28:f3:cc:0b:
                    9c:53:0a:df:a6:99:e9:20:64:6b:16:09:89:ae:d0:
                    9f:a1:0a:a2:c8:8c:94:de:04:84:d3:47:c1:34:b6:
                    60:8e:c1:1e:c1:ce:09:94:8e:0d:d5:2a:d7:d9:2b:
                    47:24:1a:cf:85:89:27:5d:7b:3e:81:d5:2a:0c:24:
                    13:cc:db:86:67:47:22:ec:5c:13:23:04:9f:07:36:
                    52:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:15:CC:9C:11:FB:21:6F:A3:09:44:8D:F7:B3:EA:B3:CD:B7:40:2F
            X509v3 Authority Key Identifier:
                keyid:75:5B:61:74:82:63:D4:DD:47:2C:69:CA:7F:18:47:25:4B:03:EB:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/654607f0-1701-49b1-91ff-b1bed5cbded1/0/755B61748263D4DD472C69CA7F1847254B03EBBC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/755B61748263D4DD472C69CA7F1847254B03EBBC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/654607f0-1701-49b1-91ff-b1bed5cbded1/0/3130332e32322e3231362e302f32342d3234203d3e20313530323631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.22.216.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:26:39:2e:9c:0e:01:23:14:53:fb:80:85:0d:06:eb:2d:be:
         4a:77:f6:52:95:81:bd:70:42:be:c5:1f:9c:6d:80:3f:57:14:
         11:e1:df:58:e4:b6:e7:e5:2e:bc:63:b3:9b:f2:73:f9:48:06:
         ea:36:79:a0:37:88:2e:fc:66:81:63:6d:78:fa:c5:41:2d:ef:
         2a:24:bd:0d:10:c6:8b:53:4f:94:b8:bc:ff:17:8c:25:a4:7a:
         d8:ea:86:83:d4:33:9d:de:d4:39:de:e4:0b:9c:6c:b0:5b:dc:
         a6:e6:74:2c:09:e9:e7:5f:33:a3:ff:6d:e8:15:5b:6d:e6:8f:
         25:a2:ea:f9:2f:c4:4d:93:4a:77:e2:93:2a:0a:a3:dd:fa:20:
         01:ce:e1:3f:8c:c1:05:b2:95:b9:d0:b0:60:47:54:46:e9:bd:
         49:15:d5:ef:e7:86:69:e5:ee:6f:6a:ac:75:0a:ba:af:65:e4:
         7c:28:e7:63:29:31:5f:d7:15:9a:ab:cf:4d:e4:83:be:5d:13:
         58:35:ac:e3:d2:4b:e9:2e:08:1e:c9:4b:4c:9e:7b:9d:de:67:
         02:77:96:30:60:e6:54:85:38:92:a8:9e:74:b4:c7:d9:d0:43:
         c7:88:ab:97:4e:47:13:ce:05:b9:c1:6f:d4:51:e4:68:94:25:
         c6:b9:d3:c5
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUJCxIoo86zdcSaLbTmcHe+7m/3K8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzU1QjYxNzQ4MjYzRDRERDQ3MkM2OUNBN0YxODQ3MjU0
QjAzRUJCQzAeFw0yNTEwMTAwNDU2MDFaFw0yNjEwMDkwNTAxMDFaMDMxMTAvBgNV
BAMTKEQ4MTVDQzlDMTFGQjIxNkZBMzA5NDQ4REY3QjNFQUIzQ0RCNzQwMkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+9ht05+ryN9dftM2stkPdE7Zt
zpIMRqyKgv3IZ+u1c67iq0ECud5uXC3Z7eKbiPz8Y/1x4lP97QCdJxmGKf0SFD8+
pEj4LyK7fVQFNiqKpzsLgMPwdML8BFlzcHyN14vSknhX9phqWuu3MT/OECnUjYSg
aAoqBln3XCI2fJcB2PO4p5VmdUx1WHqhDqTZlhFti13bnEyQN2J+gxtMblrdHFp1
XQ2ASxcfNJgTcSXlKPPMC5xTCt+mmekgZGsWCYmu0J+hCqLIjJTeBITTR8E0tmCO
wR7BzgmUjg3VKtfZK0ckGs+FiSddez6B1SoMJBPM24ZnRyLsXBMjBJ8HNlILAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQU2BXMnBH7IW+jCUSN97Pqs823QC8wHwYDVR0j
BBgwFoAUdVthdIJj1N1HLGnKfxhHJUsD67wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82
NTQ2MDdmMC0xNzAxLTQ5YjEtOTFmZi1iMWJlZDVjYmRlZDEvMC83NTVCNjE3NDgy
NjNENERENDcyQzY5Q0E3RjE4NDcyNTRCMDNFQkJDLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNzU1QjYxNzQ4MjYzRDRERDQ3MkM2OUNBN0YxODQ3MjU0QjAz
RUJCQy5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzY1NDYwN2YwLTE3MDEtNDliMS05
MWZmLWIxYmVkNWNiZGVkMS8wLzMxMzAzMzJlMzIzMjJlMzIzMTM2MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzNTMwMzIzNjMxLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZxbYMA0GCSqG
SIb3DQEBCwUAA4IBAQBCJjkunA4BIxRT+4CFDQbrLb5Kd/ZSlYG9cEK+xR+cbYA/
VxQR4d9Y5Lbn5S68Y7Ob8nP5SAbqNnmgN4gu/GaBY214+sVBLe8qJL0NEMaLU0+U
uLz/F4wlpHrY6oaD1DOd3tQ53uQLnGywW9ym5nQsCennXzOj/23oFVtt5o8lour5
L8RNk0p34pMqCqPd+iABzuE/jMEFspW50LBgR1RG6b1JFdXv54Zp5e5vaqx1Crqv
ZeR8KOdjKTFf1xWaq89N5IO+XRNYNazj0kvpLggeyUtMnnud3mcCd5YwYOZUhTiS
qJ50tMfZ0EPHiKuXTkcTzgW5wW/UUeRolCXGudPF
-----END CERTIFICATE-----
Generated at Tue Oct 21 00:51:40 2025 by rpki-client