Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/93dc1b05-2a69-45b0-8c44-626772276bd9/0/3130332e36382e3133362e302f32332d3233203d3e203338353131.roa
File:                     3130332e36382e3133362e302f32332d3233203d3e203338353131.roa (raw, json)
Hash identifier:          Xfgb/bosimr9cD6CvubfYOrFF8ltCqJCXBNQnnNDr+E=
Subject key identifier:   56:B3:F4:F4:ED:59:13:EC:23:78:A2:16:6B:3D:DF:45:41:8B:07:B1
Certificate issuer:       /CN=B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416
Certificate serial:       55A18DEC71CFC5831E769F992A160E396E2E95D2
Authority key identifier: B2:C1:8E:11:C8:53:0B:DF:4E:E3:33:F5:DE:BD:0B:05:5F:9D:A4:16
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/93dc1b05-2a69-45b0-8c44-626772276bd9/0/3130332e36382e3133362e302f32332d3233203d3e203338353131.roa
Signing time:             Mon 22 Sep 2025 14:02:24 +0000
ROA not before:           Mon 22 Sep 2025 13:57:24 +0000
ROA not after:            Mon 21 Sep 2026 14:02:24 +0000
asID:                     38511
IP address blocks:        103.68.136.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/93dc1b05-2a69-45b0-8c44-626772276bd9/0/B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416.crl
                          rsync://repo-rpki.idnic.net/repo/93dc1b05-2a69-45b0-8c44-626772276bd9/0/B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Oct 2025 21:16:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:a1:8d:ec:71:cf:c5:83:1e:76:9f:99:2a:16:0e:39:6e:2e:95:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416
        Validity
            Not Before: Sep 22 13:57:24 2025 GMT
            Not After : Sep 21 14:02:24 2026 GMT
        Subject: CN=56B3F4F4ED5913EC2378A2166B3DDF45418B07B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:94:7b:42:0f:77:3d:b3:2c:4a:fe:2d:7f:c1:
                    74:db:35:21:93:44:80:f8:61:fa:ee:5b:9d:a9:1c:
                    f8:bf:28:e8:45:c6:dc:2c:32:0c:2a:2f:6d:ee:23:
                    63:02:b2:97:7f:24:f2:25:9b:22:23:18:9f:cc:53:
                    c8:7f:a1:e1:81:c2:e9:ef:bb:ec:67:67:31:f8:75:
                    7b:0f:8e:c7:db:a9:d6:7b:ef:33:0f:1b:40:38:16:
                    67:6b:95:b9:73:0b:22:f9:15:ba:c1:86:f7:50:df:
                    77:b0:bb:f3:44:22:6d:06:59:72:e7:10:b9:23:bf:
                    57:a7:03:39:27:d9:16:80:c2:05:40:c7:82:76:cf:
                    96:9a:56:47:1e:26:1f:3f:6c:6c:0b:c6:64:e2:38:
                    ba:5f:2d:5d:8d:de:d5:47:4c:96:c7:6d:67:c1:d5:
                    df:72:d1:a6:81:d8:94:3e:cd:b0:f1:25:3a:3a:82:
                    7f:7a:7e:67:3e:9c:42:21:09:87:9b:d4:ad:42:cf:
                    89:a0:67:77:6a:99:7f:84:b5:ac:5f:83:d7:dc:30:
                    72:1b:be:96:02:8c:ba:3f:01:86:97:22:f0:75:20:
                    b9:57:ae:7b:94:ed:df:6c:11:85:34:b5:a3:0a:af:
                    1e:55:ba:c1:6d:e2:9f:52:4b:6a:2f:37:87:b0:a7:
                    a0:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:B3:F4:F4:ED:59:13:EC:23:78:A2:16:6B:3D:DF:45:41:8B:07:B1
            X509v3 Authority Key Identifier:
                keyid:B2:C1:8E:11:C8:53:0B:DF:4E:E3:33:F5:DE:BD:0B:05:5F:9D:A4:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/93dc1b05-2a69-45b0-8c44-626772276bd9/0/B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/93dc1b05-2a69-45b0-8c44-626772276bd9/0/3130332e36382e3133362e302f32332d3233203d3e203338353131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.68.136.0/23

    Signature Algorithm: sha256WithRSAEncryption
         91:60:eb:e5:d4:95:67:ee:32:e0:a9:cb:da:9e:79:a8:f2:5f:
         99:2f:7f:0a:cc:bd:5c:83:66:06:05:02:d7:4f:ed:99:df:0a:
         ad:44:ad:10:89:81:2b:4a:34:1c:02:a1:3e:bc:39:6d:77:58:
         ce:0a:46:e9:9a:0d:c6:85:b4:2e:22:62:b5:16:ac:14:55:7a:
         64:18:1f:39:f5:ff:7d:e3:15:9b:ff:23:1f:af:df:7a:ee:5b:
         82:f1:75:ea:42:a7:cd:7f:ed:70:53:40:be:28:47:f9:35:28:
         46:95:18:40:80:2c:14:fc:49:82:08:55:a6:b6:6b:5a:a3:2b:
         a8:b4:55:52:8f:c6:04:82:92:65:19:7b:36:45:b9:3a:f4:5f:
         30:42:17:b0:48:fc:f1:96:99:aa:43:71:e8:5b:fc:ae:07:59:
         f9:f5:10:93:b6:b7:6a:14:7c:73:75:62:a8:04:c1:89:7d:9e:
         9e:58:fb:8d:e3:47:74:29:ea:c7:5d:33:b4:34:c8:23:49:41:
         64:dd:07:4f:5f:71:f4:f0:b4:fc:c9:02:38:2d:4c:ae:69:a9:
         c6:46:49:6d:b0:da:12:dd:7a:a9:bc:15:7b:42:69:d4:d6:a1:
         79:15:d4:1b:18:85:a4:b3:72:3f:bb:f1:bd:b2:1e:85:e5:74:
         10:20:d9:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 20:41:41 2025 by rpki-client