Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/7e1deb93-c190-46ee-ba83-2d91930a4395/0/3130332e3234352e3136382e302f32342d3234203d3e20313531353333.roa
File:                     3130332e3234352e3136382e302f32342d3234203d3e20313531353333.roa (raw, json)
Hash identifier:          kI4GK1miuL8zvjM4rLASPraKVyslKl4McqJeefiMXSg=
Subject key identifier:   F9:60:7E:97:93:C9:E0:C2:99:BE:7B:B1:E6:C2:31:C0:61:DB:A4:64
Certificate issuer:       /CN=6B3BA28FEC3689C8F88CE4137A3D645A51FE6D32
Certificate serial:       146D51B60C7ED2EC4E6B9E8E4C679EC0467E55A9
Authority key identifier: 6B:3B:A2:8F:EC:36:89:C8:F8:8C:E4:13:7A:3D:64:5A:51:FE:6D:32
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B3BA28FEC3689C8F88CE4137A3D645A51FE6D32.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/7e1deb93-c190-46ee-ba83-2d91930a4395/0/3130332e3234352e3136382e302f32342d3234203d3e20313531353333.roa
Signing time:             Fri 15 Aug 2025 18:25:55 +0000
ROA not before:           Fri 15 Aug 2025 18:20:55 +0000
ROA not after:            Fri 14 Aug 2026 18:25:55 +0000
asID:                     151533
IP address blocks:        103.245.168.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/7e1deb93-c190-46ee-ba83-2d91930a4395/0/6B3BA28FEC3689C8F88CE4137A3D645A51FE6D32.crl
                          rsync://repo-rpki.idnic.net/repo/7e1deb93-c190-46ee-ba83-2d91930a4395/0/6B3BA28FEC3689C8F88CE4137A3D645A51FE6D32.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B3BA28FEC3689C8F88CE4137A3D645A51FE6D32.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Aug 2025 01:57:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:6d:51:b6:0c:7e:d2:ec:4e:6b:9e:8e:4c:67:9e:c0:46:7e:55:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B3BA28FEC3689C8F88CE4137A3D645A51FE6D32
        Validity
            Not Before: Aug 15 18:20:55 2025 GMT
            Not After : Aug 14 18:25:55 2026 GMT
        Subject: CN=F9607E9793C9E0C299BE7BB1E6C231C061DBA464
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:36:97:d8:92:4f:13:36:2c:e2:52:4e:e1:2f:
                    af:89:aa:99:b5:74:e4:79:92:8c:dc:f2:3a:d1:d0:
                    ce:4d:69:2d:1c:c5:34:6b:e8:31:fd:4d:f8:31:53:
                    92:26:48:29:73:d6:ba:61:fa:12:e6:36:b5:4c:58:
                    ab:a1:df:74:66:16:e7:90:6e:ca:06:b0:70:76:77:
                    03:ed:e0:cd:99:20:ae:3f:47:4e:18:87:9e:05:e3:
                    a9:be:e1:17:40:55:77:c8:13:cc:0a:5a:31:e0:ec:
                    2b:1a:1f:77:38:92:d4:fc:13:5b:a4:85:11:31:b4:
                    73:a4:80:d7:a9:1e:c9:2b:c6:58:97:3a:c6:e7:ac:
                    5b:1a:9e:8c:f5:55:80:10:80:fb:c2:5e:59:01:c0:
                    af:96:50:db:36:c1:6a:a4:99:f6:36:19:8a:b4:63:
                    2d:63:01:8d:4c:45:a1:73:8d:d4:4f:73:77:3e:b8:
                    3f:50:fe:51:68:56:ef:08:f5:cd:f8:56:76:e6:36:
                    91:64:f2:96:2c:c1:55:2f:ca:78:ae:c7:65:ac:8c:
                    0b:45:44:49:42:14:d2:6a:4b:63:56:b5:8a:67:53:
                    e3:eb:46:09:2c:8b:1e:aa:4a:1f:dd:fc:a3:1d:df:
                    ec:bd:61:f3:0d:82:a5:b7:fd:22:15:be:be:ee:7d:
                    ec:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:60:7E:97:93:C9:E0:C2:99:BE:7B:B1:E6:C2:31:C0:61:DB:A4:64
            X509v3 Authority Key Identifier:
                keyid:6B:3B:A2:8F:EC:36:89:C8:F8:8C:E4:13:7A:3D:64:5A:51:FE:6D:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/7e1deb93-c190-46ee-ba83-2d91930a4395/0/6B3BA28FEC3689C8F88CE4137A3D645A51FE6D32.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B3BA28FEC3689C8F88CE4137A3D645A51FE6D32.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e1deb93-c190-46ee-ba83-2d91930a4395/0/3130332e3234352e3136382e302f32342d3234203d3e20313531353333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.245.168.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:41:3e:ad:ad:75:4b:2f:fb:34:34:91:3c:b7:23:4e:af:20:
         30:7e:38:a9:f6:41:5d:9e:21:20:c5:e4:4d:83:49:20:c8:51:
         f7:88:9f:3a:66:a9:73:d9:8e:09:df:fe:1b:55:21:3a:6f:05:
         da:7b:a6:f9:ab:13:a1:1c:ce:c9:9f:00:b9:7c:be:63:b4:08:
         bc:f4:58:ec:e8:e4:c0:3f:6d:2d:ae:5a:9d:40:16:db:f2:6b:
         98:e0:ad:31:f0:49:71:28:a7:59:05:49:3d:3f:0f:8b:78:3b:
         05:ba:fc:6d:4f:25:bd:bb:48:e1:9b:4b:a1:12:15:de:5f:1b:
         02:40:a2:e6:d1:97:88:cb:fa:ab:53:d6:14:1f:1f:fa:b2:2d:
         5a:a4:99:c2:7e:2b:b7:e2:26:47:7c:d6:87:de:31:22:1c:bc:
         c7:79:bc:ac:3a:85:96:65:6e:e7:e8:c6:19:e4:78:1d:91:0e:
         3f:82:9d:5e:e4:c0:83:ce:74:7c:23:2b:e1:b9:00:8f:63:a5:
         b0:9f:30:06:eb:af:01:0c:40:8e:21:4d:84:e3:d7:66:4d:40:
         51:96:46:1f:81:69:a4:be:a1:49:42:92:7b:2d:04:93:27:45:
         c0:8d:9a:3a:43:05:37:07:ce:05:1d:7e:b9:d4:36:9b:40:17:
         c6:33:aa:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:05:38 2025 by rpki-client