Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/8226b3e1-d7f6-465e-8302-7d52f5c340ff/0/3130332e3232342e37372e302f32342d3234203d3e203536323535.roa
File:                     3130332e3232342e37372e302f32342d3234203d3e203536323535.roa (raw, json)
Hash identifier:          p909d8VjhDkob+UXRoZRxJtZcS/lf4G9yDRtU4iVWWk=
Subject key identifier:   DF:60:0B:DF:7E:BB:7A:C6:BD:8E:07:78:66:11:21:19:E6:E8:2F:58
Certificate issuer:       /CN=E5B2AB049E75667C8F00ECB0EBF617859558571D
Certificate serial:       75D21997C15D67FB62FBF8C00360781BE51040AE
Authority key identifier: E5:B2:AB:04:9E:75:66:7C:8F:00:EC:B0:EB:F6:17:85:95:58:57:1D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E5B2AB049E75667C8F00ECB0EBF617859558571D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8226b3e1-d7f6-465e-8302-7d52f5c340ff/0/3130332e3232342e37372e302f32342d3234203d3e203536323535.roa
Signing time:             Thu 14 Aug 2025 07:00:00 +0000
ROA not before:           Thu 14 Aug 2025 06:55:00 +0000
ROA not after:            Thu 13 Aug 2026 07:00:00 +0000
asID:                     56255
IP address blocks:        103.224.77.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8226b3e1-d7f6-465e-8302-7d52f5c340ff/0/E5B2AB049E75667C8F00ECB0EBF617859558571D.crl
                          rsync://repo-rpki.idnic.net/repo/8226b3e1-d7f6-465e-8302-7d52f5c340ff/0/E5B2AB049E75667C8F00ECB0EBF617859558571D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E5B2AB049E75667C8F00ECB0EBF617859558571D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Aug 2025 16:44:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:d2:19:97:c1:5d:67:fb:62:fb:f8:c0:03:60:78:1b:e5:10:40:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5B2AB049E75667C8F00ECB0EBF617859558571D
        Validity
            Not Before: Aug 14 06:55:00 2025 GMT
            Not After : Aug 13 07:00:00 2026 GMT
        Subject: CN=DF600BDF7EBB7AC6BD8E077866112119E6E82F58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:04:85:7b:e7:1d:b5:9a:7b:bb:55:94:22:e4:
                    9e:50:5b:51:12:f1:32:c2:3c:22:c1:71:3c:61:a9:
                    95:f2:3b:63:08:18:e3:ea:87:27:62:f0:40:18:e7:
                    b1:71:d3:75:15:e0:41:ed:63:34:43:ae:24:47:3a:
                    27:8d:73:3c:e5:f5:53:24:8d:f9:e5:5b:8e:fe:6e:
                    95:a3:87:78:2b:9c:26:c8:b8:bc:0c:3c:25:f3:f2:
                    90:1c:2e:34:3c:81:97:e8:65:4d:73:38:62:0b:a1:
                    89:b2:e6:45:46:33:ed:a5:42:fc:dd:da:2a:c4:ee:
                    fe:f6:bc:05:15:49:2a:39:9b:ac:96:b8:7b:ad:34:
                    76:7e:d6:aa:55:70:1e:74:26:ce:66:ac:0d:1e:89:
                    6d:dc:0e:9a:c0:b4:54:5b:33:77:a3:b2:2b:e3:5c:
                    be:6c:76:6e:79:81:13:50:ee:22:46:66:f1:74:ca:
                    af:41:d6:ad:2b:d7:90:20:3e:70:ba:b2:3a:ef:04:
                    b7:a1:81:8b:cf:dd:2c:6d:89:80:23:d7:4d:3c:6d:
                    43:2c:63:aa:31:a8:4d:65:5c:b3:66:e0:f4:fc:f6:
                    44:7b:d1:b1:c8:9b:18:66:95:de:1d:cc:22:c2:9e:
                    30:6c:a4:06:1d:e3:58:b4:f2:42:5c:2b:c6:7c:44:
                    dd:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:60:0B:DF:7E:BB:7A:C6:BD:8E:07:78:66:11:21:19:E6:E8:2F:58
            X509v3 Authority Key Identifier:
                keyid:E5:B2:AB:04:9E:75:66:7C:8F:00:EC:B0:EB:F6:17:85:95:58:57:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8226b3e1-d7f6-465e-8302-7d52f5c340ff/0/E5B2AB049E75667C8F00ECB0EBF617859558571D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E5B2AB049E75667C8F00ECB0EBF617859558571D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8226b3e1-d7f6-465e-8302-7d52f5c340ff/0/3130332e3232342e37372e302f32342d3234203d3e203536323535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.224.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:34:9a:6b:c6:79:83:47:b5:e7:b8:fb:05:89:b2:d6:07:ce:
         f4:d0:d1:02:ae:04:9c:d7:e7:92:1f:74:44:16:7d:6d:b3:72:
         0c:aa:cc:d3:87:5c:9e:9a:ab:7a:a6:ec:49:ba:80:18:48:a6:
         ef:1b:75:78:4c:2f:86:44:0d:9f:62:75:6b:fb:14:34:51:23:
         6d:4c:0d:c5:1b:b3:c0:d9:e6:7d:f1:eb:43:6d:6f:a3:c4:f2:
         ac:82:9e:a2:25:6e:9c:47:3a:55:b2:d9:18:63:e9:c1:4d:57:
         8a:fa:a4:ed:c8:84:2d:3c:67:0a:5e:ea:4a:a4:db:9c:08:ee:
         b2:12:c4:96:73:74:62:76:3c:74:2a:df:e2:74:10:f0:09:b4:
         3d:53:78:52:47:ca:31:55:a5:1c:de:72:43:46:16:e2:d3:0d:
         84:a8:2d:a6:a2:6f:16:7c:7c:60:cb:86:b6:d2:e2:dc:b4:34:
         1e:99:ea:17:dd:37:1f:21:a8:2d:96:07:13:8b:01:9d:7d:f8:
         fb:bc:fe:e3:1d:9d:52:b2:5f:73:53:2b:f5:d8:c5:58:bf:d4:
         75:17:4f:90:b2:23:71:67:9d:2a:fc:5e:b0:09:2c:61:05:fe:
         89:93:af:d3:c5:b5:fe:e7:78:d2:54:3e:92:4f:61:ed:c3:fe:
         dc:6a:5c:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:34:10 2025 by rpki-client