Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/8226b3e1-d7f6-465e-8302-7d52f5c340ff/0/3130332e3232342e37362e302f32342d3234203d3e203536323535.roa
File:                     3130332e3232342e37362e302f32342d3234203d3e203536323535.roa (raw, json)
Hash identifier:          pWyEMJB2NECQjGD21jXFIhV6AewDgUPpxcuSNxlavYI=
Subject key identifier:   39:E5:0E:D2:DA:58:29:72:19:8E:12:D6:DF:38:E3:F7:64:E7:12:B0
Certificate issuer:       /CN=E5B2AB049E75667C8F00ECB0EBF617859558571D
Certificate serial:       1D511798B5C818D9AD902185474F83718F2192FF
Authority key identifier: E5:B2:AB:04:9E:75:66:7C:8F:00:EC:B0:EB:F6:17:85:95:58:57:1D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E5B2AB049E75667C8F00ECB0EBF617859558571D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8226b3e1-d7f6-465e-8302-7d52f5c340ff/0/3130332e3232342e37362e302f32342d3234203d3e203536323535.roa
Signing time:             Thu 14 Aug 2025 07:00:00 +0000
ROA not before:           Thu 14 Aug 2025 06:55:00 +0000
ROA not after:            Thu 13 Aug 2026 07:00:00 +0000
asID:                     56255
IP address blocks:        103.224.76.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8226b3e1-d7f6-465e-8302-7d52f5c340ff/0/E5B2AB049E75667C8F00ECB0EBF617859558571D.crl
                          rsync://repo-rpki.idnic.net/repo/8226b3e1-d7f6-465e-8302-7d52f5c340ff/0/E5B2AB049E75667C8F00ECB0EBF617859558571D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E5B2AB049E75667C8F00ECB0EBF617859558571D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Aug 2025 16:44:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:51:17:98:b5:c8:18:d9:ad:90:21:85:47:4f:83:71:8f:21:92:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5B2AB049E75667C8F00ECB0EBF617859558571D
        Validity
            Not Before: Aug 14 06:55:00 2025 GMT
            Not After : Aug 13 07:00:00 2026 GMT
        Subject: CN=39E50ED2DA582972198E12D6DF38E3F764E712B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:0f:ed:7f:f9:a4:3b:89:dc:a5:25:21:4c:3e:
                    98:a2:c6:f9:0c:a5:ad:38:34:d0:78:d3:9a:ea:f8:
                    2e:e8:5b:4b:89:fa:3a:56:b9:1d:80:99:36:e1:6b:
                    d4:ab:37:22:11:e9:ff:c5:fe:2e:95:37:2a:4d:8c:
                    09:47:e3:01:da:5a:45:da:01:76:5c:63:fb:c7:df:
                    71:82:7d:17:14:87:6d:af:ab:8f:21:a6:47:70:e5:
                    3c:c7:97:dd:b9:0a:39:fe:69:80:dc:ce:90:08:9d:
                    0d:c7:e7:f6:36:3c:08:f4:97:bc:7c:f7:b3:19:c4:
                    b0:f2:52:93:e5:65:00:10:7c:80:59:72:30:5f:0e:
                    13:d7:6d:79:f6:d2:75:b1:2b:ce:a6:e9:28:b3:29:
                    ac:a1:0e:da:b2:80:18:7c:34:0f:ab:44:70:3b:95:
                    d6:cb:aa:72:69:e9:13:78:b6:0d:69:a0:dd:3d:44:
                    40:cf:c5:de:21:c2:88:78:25:26:aa:1e:07:e7:8a:
                    34:bf:6d:f5:46:07:59:d1:23:72:f5:8b:f8:1f:d8:
                    c9:ee:4b:7f:0d:ba:f6:c3:6f:51:46:60:40:53:0d:
                    7a:52:6c:6c:f4:57:52:f8:0d:c4:35:76:42:69:14:
                    5b:64:f6:05:2f:da:25:53:b9:56:67:b0:aa:4d:11:
                    a0:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:E5:0E:D2:DA:58:29:72:19:8E:12:D6:DF:38:E3:F7:64:E7:12:B0
            X509v3 Authority Key Identifier:
                keyid:E5:B2:AB:04:9E:75:66:7C:8F:00:EC:B0:EB:F6:17:85:95:58:57:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8226b3e1-d7f6-465e-8302-7d52f5c340ff/0/E5B2AB049E75667C8F00ECB0EBF617859558571D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E5B2AB049E75667C8F00ECB0EBF617859558571D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8226b3e1-d7f6-465e-8302-7d52f5c340ff/0/3130332e3232342e37362e302f32342d3234203d3e203536323535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.224.76.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:a9:d0:9c:5f:c4:d1:b9:47:41:b4:2e:e7:ec:0e:e3:8f:78:
         08:e4:09:a9:7f:16:f1:0d:80:1a:75:ac:14:52:24:3c:fc:ec:
         ea:41:7d:dc:bb:61:5d:dc:e0:e7:dc:79:e4:73:34:3a:78:aa:
         df:87:fb:23:f6:02:ca:4f:68:41:76:22:e4:84:c7:c0:bd:da:
         3f:a1:7c:21:6c:d9:38:3d:62:61:40:07:96:c6:86:dd:24:9c:
         3b:37:d1:7e:50:6f:47:c7:6d:9f:07:6a:0c:02:b8:43:45:72:
         13:24:43:00:62:a3:fb:d5:63:83:92:83:ed:a4:56:7f:ff:30:
         ca:f4:78:be:c0:47:b9:6e:75:4a:0b:7c:1a:b2:c6:07:c9:3d:
         2d:28:27:97:de:cf:0e:28:bf:29:26:92:67:17:25:97:21:3a:
         cb:7c:f2:26:8b:1d:3d:60:a2:2f:e0:22:ed:ac:74:af:a6:d8:
         a8:35:52:0c:66:16:b5:ec:bd:9a:8f:de:86:72:0e:f4:f3:75:
         9a:f0:6e:c0:a2:c4:58:0a:ce:b5:c6:1c:c1:44:db:16:02:d1:
         82:00:7b:74:53:e3:1c:62:76:44:61:31:1d:cf:20:ad:d7:52:
         0c:82:82:2d:58:a9:68:11:61:ba:86:3a:f3:de:a1:e7:f4:31:
         dd:e0:71:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 02:30:06 2025 by rpki-client