Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/79abd869-935d-439d-8f83-dc765281cc9c/0/3130332e3136352e3135302e302f32342d3234203d3e20313431393232.roa
File:                     3130332e3136352e3135302e302f32342d3234203d3e20313431393232.roa (raw, json)
Hash identifier:          m1hw2GRN+iLpyVg6XiDt4RtT/6y32baLZ0nUXwtu9/Y=
Subject key identifier:   04:5D:55:E4:CB:BA:79:44:69:EF:3E:7C:8D:35:37:86:65:4F:8E:38
Certificate issuer:       /CN=31936DA02E6F1DB9C413C2CE31AF697BCB8A8F52
Certificate serial:       2DFC9E5083BE56FA4FBC352A6D5916FE17C90B04
Authority key identifier: 31:93:6D:A0:2E:6F:1D:B9:C4:13:C2:CE:31:AF:69:7B:CB:8A:8F:52
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/31936DA02E6F1DB9C413C2CE31AF697BCB8A8F52.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/79abd869-935d-439d-8f83-dc765281cc9c/0/3130332e3136352e3135302e302f32342d3234203d3e20313431393232.roa
Signing time:             Sat 18 Oct 2025 10:00:02 +0000
ROA not before:           Sat 18 Oct 2025 09:55:02 +0000
ROA not after:            Sat 17 Oct 2026 10:00:02 +0000
asID:                     141922
IP address blocks:        103.165.150.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/79abd869-935d-439d-8f83-dc765281cc9c/0/31936DA02E6F1DB9C413C2CE31AF697BCB8A8F52.crl
                          rsync://repo-rpki.idnic.net/repo/79abd869-935d-439d-8f83-dc765281cc9c/0/31936DA02E6F1DB9C413C2CE31AF697BCB8A8F52.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/31936DA02E6F1DB9C413C2CE31AF697BCB8A8F52.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Oct 2025 11:48:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:fc:9e:50:83:be:56:fa:4f:bc:35:2a:6d:59:16:fe:17:c9:0b:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31936DA02E6F1DB9C413C2CE31AF697BCB8A8F52
        Validity
            Not Before: Oct 18 09:55:02 2025 GMT
            Not After : Oct 17 10:00:02 2026 GMT
        Subject: CN=045D55E4CBBA794469EF3E7C8D353786654F8E38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:3f:bd:be:dd:1f:f5:ed:be:bc:b6:86:4f:e2:
                    d9:f2:c7:1a:0c:5b:14:1b:27:ff:78:fc:5f:db:18:
                    e7:f6:c2:f6:42:cb:5b:aa:5b:d1:b1:e3:bf:31:f1:
                    3d:4a:27:74:7f:68:59:34:a5:40:cb:28:ce:1f:99:
                    b7:ee:c9:c0:3d:78:68:29:7b:7d:fc:cd:51:2a:bc:
                    8d:b8:af:79:ce:87:31:ff:98:a4:e0:0a:2c:4c:c0:
                    18:c1:91:71:20:b1:30:b0:6b:40:d5:d4:14:04:5c:
                    2a:eb:76:fe:63:86:84:6d:aa:b1:b4:25:a6:2b:36:
                    f5:f9:24:c5:f6:2b:2a:a4:db:73:53:6c:2e:98:fe:
                    ae:3b:5a:14:fe:9f:4d:df:67:b0:6f:19:2a:35:5a:
                    8f:b4:1a:40:45:a8:a6:a6:b4:ae:9d:82:04:c1:af:
                    97:28:2b:25:91:54:e9:f3:4c:8d:16:61:a6:f5:00:
                    89:58:03:c3:9e:82:57:7b:29:55:0d:0d:7b:5b:38:
                    80:b9:fb:63:f4:ee:d7:3c:43:f3:dd:58:4a:c2:2e:
                    9a:62:b4:27:6d:eb:95:8e:ae:0d:6e:23:43:ef:85:
                    ef:81:e9:83:01:39:2f:19:53:eb:14:ac:b8:f4:a3:
                    d8:7e:3e:a9:a5:8e:5e:2b:2e:52:a3:33:2f:3f:c4:
                    8f:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:5D:55:E4:CB:BA:79:44:69:EF:3E:7C:8D:35:37:86:65:4F:8E:38
            X509v3 Authority Key Identifier:
                keyid:31:93:6D:A0:2E:6F:1D:B9:C4:13:C2:CE:31:AF:69:7B:CB:8A:8F:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/79abd869-935d-439d-8f83-dc765281cc9c/0/31936DA02E6F1DB9C413C2CE31AF697BCB8A8F52.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/31936DA02E6F1DB9C413C2CE31AF697BCB8A8F52.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/79abd869-935d-439d-8f83-dc765281cc9c/0/3130332e3136352e3135302e302f32342d3234203d3e20313431393232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.165.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:55:01:bd:c8:f9:a1:2d:6a:d9:ba:ca:65:74:44:31:7b:d5:
         cf:f9:1a:53:e5:a2:ae:95:86:67:e1:dc:28:a1:d8:90:ba:cf:
         a6:cd:36:e4:84:0a:16:46:12:ee:4a:67:db:0d:1e:6d:13:c4:
         dd:3c:39:25:8d:b6:e3:30:26:1a:92:0e:5a:f4:5c:85:8e:8e:
         65:2f:73:18:f9:c5:b9:16:40:e5:af:08:12:02:0b:3b:9f:49:
         81:21:1e:53:6f:95:1c:c6:8d:0c:06:e3:d6:63:0d:7d:1c:44:
         c6:e8:f7:6a:bf:84:8f:38:33:70:20:9d:1e:7f:79:19:a0:f6:
         a0:c9:77:36:63:bc:82:5c:78:cb:e1:f0:8d:59:e8:92:ec:2e:
         75:6a:b7:ef:39:2f:2d:ec:e3:29:e0:c4:12:74:d0:b5:c5:90:
         76:9c:13:66:c4:62:85:a3:85:76:72:ca:58:a9:07:79:f3:74:
         14:64:a8:0a:e3:37:b9:46:5c:4d:b0:ac:79:f8:4e:f1:78:be:
         d1:2d:43:62:a5:cd:07:16:a7:cd:ae:2d:55:b3:f8:e9:16:ad:
         74:dc:36:2e:3a:39:70:9c:ec:a7:73:d0:97:00:cc:1c:56:07:
         0a:35:8d:6d:21:7f:10:ce:28:0c:d0:87:14:23:a2:32:f6:ea:
         64:ed:40:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 20:41:28 2025 by rpki-client