Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/654607f0-1701-49b1-91ff-b1bed5cbded1/0/3130332e32322e3231372e302f32342d3234203d3e20313530323631.roa
File:                     3130332e32322e3231372e302f32342d3234203d3e20313530323631.roa (raw, json)
Hash identifier:          0YXLtWcrQqo3QF47I+KQwYusKJlUjyP7HqEp9u0fOCY=
Subject key identifier:   82:81:44:68:F5:67:61:36:61:45:93:3B:91:74:A7:6E:2F:21:70:C1
Certificate issuer:       /CN=755B61748263D4DD472C69CA7F1847254B03EBBC
Certificate serial:       0A61FC35F0A46C4E2602AD423AADC418AB7FB224
Authority key identifier: 75:5B:61:74:82:63:D4:DD:47:2C:69:CA:7F:18:47:25:4B:03:EB:BC
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/755B61748263D4DD472C69CA7F1847254B03EBBC.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/654607f0-1701-49b1-91ff-b1bed5cbded1/0/3130332e32322e3231372e302f32342d3234203d3e20313530323631.roa
Signing time:             Fri 10 Oct 2025 05:01:01 +0000
ROA not before:           Fri 10 Oct 2025 04:56:01 +0000
ROA not after:            Fri 09 Oct 2026 05:01:01 +0000
asID:                     150261
IP address blocks:        103.22.217.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/654607f0-1701-49b1-91ff-b1bed5cbded1/0/755B61748263D4DD472C69CA7F1847254B03EBBC.crl
                          rsync://repo-rpki.idnic.net/repo/654607f0-1701-49b1-91ff-b1bed5cbded1/0/755B61748263D4DD472C69CA7F1847254B03EBBC.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/755B61748263D4DD472C69CA7F1847254B03EBBC.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Oct 2025 05:19:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:61:fc:35:f0:a4:6c:4e:26:02:ad:42:3a:ad:c4:18:ab:7f:b2:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=755B61748263D4DD472C69CA7F1847254B03EBBC
        Validity
            Not Before: Oct 10 04:56:01 2025 GMT
            Not After : Oct  9 05:01:01 2026 GMT
        Subject: CN=82814468F56761366145933B9174A76E2F2170C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:ba:c2:30:f2:77:9d:9a:82:28:89:1d:22:80:
                    a7:75:91:68:38:5b:8a:e2:c7:5e:7a:67:30:22:ff:
                    a4:9d:39:06:e4:76:06:5c:27:53:99:eb:97:8f:63:
                    6a:23:6f:82:b5:04:b9:05:1c:bb:13:da:ac:03:fb:
                    b4:7f:7f:2c:fb:e4:75:ff:a6:25:69:db:52:8c:f0:
                    2b:a4:34:bf:3d:3a:93:a6:5d:b9:4d:81:40:1e:79:
                    ae:df:ac:1a:37:b8:73:6c:07:97:e6:0a:39:8c:98:
                    0b:c9:82:f5:b2:5c:f2:c6:2c:89:bd:80:df:6a:b7:
                    57:5a:86:7a:75:3b:d1:69:ed:84:19:3a:17:95:ec:
                    51:84:60:17:1c:fe:1a:1c:ce:a6:ea:71:c3:9e:56:
                    2b:9f:78:53:24:50:d8:f4:db:55:bd:1f:0d:92:b7:
                    0d:3a:00:26:e7:db:da:12:95:5c:18:42:2d:c9:ef:
                    fc:47:f9:81:f8:10:08:41:f1:b3:f5:31:6a:6c:7c:
                    e6:fc:68:a8:39:78:b8:cb:06:72:9f:da:82:43:bf:
                    ae:62:00:13:e8:0d:10:91:25:9a:f0:ae:62:e3:df:
                    20:e3:47:5f:94:cc:87:34:64:9a:3c:c2:27:99:46:
                    de:37:8f:ac:e9:54:a0:c6:d6:a8:ea:99:8f:59:ec:
                    40:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:81:44:68:F5:67:61:36:61:45:93:3B:91:74:A7:6E:2F:21:70:C1
            X509v3 Authority Key Identifier:
                keyid:75:5B:61:74:82:63:D4:DD:47:2C:69:CA:7F:18:47:25:4B:03:EB:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/654607f0-1701-49b1-91ff-b1bed5cbded1/0/755B61748263D4DD472C69CA7F1847254B03EBBC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/755B61748263D4DD472C69CA7F1847254B03EBBC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/654607f0-1701-49b1-91ff-b1bed5cbded1/0/3130332e32322e3231372e302f32342d3234203d3e20313530323631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.22.217.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:67:cf:e6:3a:7d:81:90:5a:43:dd:52:80:f7:4d:95:60:f1:
         87:6a:6a:4e:4b:f9:54:37:19:2a:d0:74:44:13:b1:24:a7:83:
         ad:bc:54:44:07:86:2c:c8:9e:0d:61:30:6c:74:09:5e:79:df:
         6c:5b:6d:ef:ae:8d:03:85:10:04:30:ca:75:04:ce:5c:34:1d:
         b2:58:05:42:73:1a:a3:d1:19:e8:f7:6a:52:8d:e7:9c:f5:69:
         90:68:cc:0b:95:a1:a5:8e:95:1e:7f:d2:09:e2:8f:0e:a7:53:
         16:07:72:ff:ea:13:bf:1b:f5:b5:9c:df:96:e5:68:5a:3a:d5:
         97:eb:39:e8:51:01:10:0e:81:8b:f5:49:bc:54:d8:9f:8e:21:
         a5:71:a5:71:db:a8:0a:af:27:6a:b6:0a:e6:90:c8:4e:5f:c6:
         35:df:66:40:69:0f:0b:bf:70:96:41:8f:dd:83:d8:9f:ff:89:
         77:81:21:4a:7a:6b:b0:e7:3c:e6:5c:dd:28:7e:a8:f9:ea:1e:
         d5:a5:78:40:36:2f:3c:d2:64:4b:78:be:f9:80:37:ba:76:2a:
         ff:dd:79:bb:fd:a2:62:4d:98:cc:a6:5d:41:d4:cc:8c:df:7f:
         a7:7a:fa:79:98:3f:04:87:9f:cb:ed:1b:91:e7:8c:cf:b2:e4:
         fa:41:c1:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 00:51:53 2025 by rpki-client