Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/7bdbbc08-4e8e-44ba-a4cf-05e233dda3a5/0/3130332e362e35322e302f32322d3234203d3e203435373331.roa
File:                     3130332e362e35322e302f32322d3234203d3e203435373331.roa (raw, json)
Hash identifier:          6tOL4hJTfKy0QTohf2XnIaRbJ/5EvxeyWw/OGANzGm8=
Subject key identifier:   99:30:00:DC:83:9D:5C:B5:A7:62:0D:13:1E:C7:EC:B0:81:76:74:EA
Certificate issuer:       /CN=8115D30091F8948B76AE0AAC8B4F68550DA321CD
Certificate serial:       7372E40403FFC0A8A903F7739104671D6EF85AA6
Authority key identifier: 81:15:D3:00:91:F8:94:8B:76:AE:0A:AC:8B:4F:68:55:0D:A3:21:CD
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8115D30091F8948B76AE0AAC8B4F68550DA321CD.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/7bdbbc08-4e8e-44ba-a4cf-05e233dda3a5/0/3130332e362e35322e302f32322d3234203d3e203435373331.roa
Signing time:             Mon 14 Jul 2025 10:00:02 +0000
ROA not before:           Mon 14 Jul 2025 09:55:02 +0000
ROA not after:            Mon 13 Jul 2026 10:00:02 +0000
asID:                     45731
IP address blocks:        103.6.52.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/7bdbbc08-4e8e-44ba-a4cf-05e233dda3a5/0/8115D30091F8948B76AE0AAC8B4F68550DA321CD.crl
                          rsync://repo-rpki.idnic.net/repo/7bdbbc08-4e8e-44ba-a4cf-05e233dda3a5/0/8115D30091F8948B76AE0AAC8B4F68550DA321CD.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8115D30091F8948B76AE0AAC8B4F68550DA321CD.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Aug 2025 09:47:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:72:e4:04:03:ff:c0:a8:a9:03:f7:73:91:04:67:1d:6e:f8:5a:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8115D30091F8948B76AE0AAC8B4F68550DA321CD
        Validity
            Not Before: Jul 14 09:55:02 2025 GMT
            Not After : Jul 13 10:00:02 2026 GMT
        Subject: CN=993000DC839D5CB5A7620D131EC7ECB0817674EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:4e:44:10:d8:2c:84:51:c7:4b:77:35:94:30:
                    df:0e:60:81:4d:ff:46:7f:42:b6:a5:98:75:63:c3:
                    55:d7:4d:35:dc:0d:a3:bc:da:c3:cb:d1:05:45:d0:
                    2f:b1:87:f4:e7:1d:4b:3f:9c:04:30:e6:dd:7d:9c:
                    78:4e:79:31:6e:e1:e8:79:ad:70:86:45:a1:89:79:
                    bd:bd:de:37:18:4f:e5:7a:0b:9b:09:e2:54:c1:88:
                    32:7e:d7:0e:cd:75:37:97:c1:55:a4:14:ce:8e:a2:
                    05:e8:0d:69:fa:d9:ff:fa:b5:81:c8:e7:da:6e:6e:
                    81:34:63:ae:26:f0:51:10:93:26:64:05:0a:37:47:
                    d0:fe:28:23:74:99:01:5e:9d:1f:73:e5:a1:31:d3:
                    97:43:d8:ef:7e:05:97:13:45:f5:ac:82:c9:f9:01:
                    e6:9e:e7:f1:f5:dd:7a:2c:76:b3:29:dd:be:8e:7e:
                    51:9b:e7:f6:35:ff:5d:9a:45:41:ae:31:bd:7d:6e:
                    49:71:e0:96:d1:f0:b2:db:b3:2d:7d:61:2c:e1:6b:
                    bb:55:98:a7:cb:56:1e:14:bd:22:8b:c4:dc:c6:11:
                    8d:32:6e:a6:bb:b2:66:78:4a:11:a6:09:4e:fb:40:
                    1f:b7:f5:f5:a2:b2:e3:4b:ea:29:16:2b:46:d9:10:
                    1d:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:30:00:DC:83:9D:5C:B5:A7:62:0D:13:1E:C7:EC:B0:81:76:74:EA
            X509v3 Authority Key Identifier:
                keyid:81:15:D3:00:91:F8:94:8B:76:AE:0A:AC:8B:4F:68:55:0D:A3:21:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/7bdbbc08-4e8e-44ba-a4cf-05e233dda3a5/0/8115D30091F8948B76AE0AAC8B4F68550DA321CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8115D30091F8948B76AE0AAC8B4F68550DA321CD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7bdbbc08-4e8e-44ba-a4cf-05e233dda3a5/0/3130332e362e35322e302f32322d3234203d3e203435373331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.6.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2b:c1:92:61:75:9c:8b:df:ea:b4:6d:a1:0e:aa:c9:fc:67:86:
         49:52:e1:c1:ff:f6:3a:32:08:15:3e:62:65:d9:56:d2:fa:01:
         fb:87:ae:14:79:96:21:55:09:ca:28:98:a7:9c:e7:b5:e0:e7:
         bc:c5:c6:a1:ec:58:0a:1f:f9:66:fd:06:68:e3:8d:a4:35:a5:
         18:94:c0:19:b0:9a:47:40:08:ba:92:dc:c2:e0:28:9f:f4:90:
         c0:4b:1a:35:63:16:be:8f:24:d3:6b:5b:19:1b:e6:cc:5d:4a:
         38:e9:58:12:ea:99:25:cc:51:51:19:38:24:d3:46:1f:8d:ba:
         08:23:06:0b:51:2a:85:aa:30:fb:75:08:05:21:f1:61:86:65:
         97:e5:4a:51:d0:84:db:12:d9:81:e8:00:05:0b:b1:20:4f:93:
         ba:1b:27:b3:4f:60:c3:b3:a7:0b:0d:49:34:0f:3a:45:01:c0:
         0c:ad:97:7e:36:0c:a0:f2:2f:bf:32:9b:ed:49:45:60:57:1a:
         07:2c:8f:28:c8:cc:0d:0f:35:3a:d6:66:ac:72:a0:b9:e4:35:
         39:ab:82:b8:1a:9f:c2:d9:65:2c:35:37:f3:89:f8:ff:e3:3d:
         8b:fd:6a:8c:8b:0b:a4:9b:69:c7:54:3f:47:39:70:68:8f:ee:
         9c:fb:83:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:36:59 2025 by rpki-client