Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a40fccb2-ce1c-4862-8edf-8c35273011c2/0/3130332e3131362e3131302e302f32342d3234203d3e20313337333634.roa
File:                     3130332e3131362e3131302e302f32342d3234203d3e20313337333634.roa (raw, json)
Hash identifier:          pdmfugYEj65Crz309oxNUT8Zr4xfygCpSwRusfz0tXY=
Subject key identifier:   2D:01:FD:74:CF:18:24:FF:10:65:DA:6C:B5:27:55:84:E8:67:F0:06
Certificate issuer:       /CN=469E6FE6725709FD0CDCD16B0CF84682AFBCBF76
Certificate serial:       6A85D4844436240113024175FB2559801B6DB09D
Authority key identifier: 46:9E:6F:E6:72:57:09:FD:0C:DC:D1:6B:0C:F8:46:82:AF:BC:BF:76
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/469E6FE6725709FD0CDCD16B0CF84682AFBCBF76.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a40fccb2-ce1c-4862-8edf-8c35273011c2/0/3130332e3131362e3131302e302f32342d3234203d3e20313337333634.roa
Signing time:             Wed 15 Oct 2025 08:02:28 +0000
ROA not before:           Wed 15 Oct 2025 07:57:28 +0000
ROA not after:            Wed 14 Oct 2026 08:02:28 +0000
asID:                     137364
IP address blocks:        103.116.110.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a40fccb2-ce1c-4862-8edf-8c35273011c2/0/469E6FE6725709FD0CDCD16B0CF84682AFBCBF76.crl
                          rsync://repo-rpki.idnic.net/repo/a40fccb2-ce1c-4862-8edf-8c35273011c2/0/469E6FE6725709FD0CDCD16B0CF84682AFBCBF76.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/469E6FE6725709FD0CDCD16B0CF84682AFBCBF76.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Oct 2025 23:55:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:85:d4:84:44:36:24:01:13:02:41:75:fb:25:59:80:1b:6d:b0:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=469E6FE6725709FD0CDCD16B0CF84682AFBCBF76
        Validity
            Not Before: Oct 15 07:57:28 2025 GMT
            Not After : Oct 14 08:02:28 2026 GMT
        Subject: CN=2D01FD74CF1824FF1065DA6CB5275584E867F006
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:4d:f2:bd:50:d7:fd:eb:5a:90:20:74:fb:5a:
                    ae:2a:39:ad:b2:8f:02:f0:48:83:ae:5b:b5:d1:f7:
                    28:88:dc:64:9f:8a:17:73:3e:6c:f4:d4:03:ba:cd:
                    b9:09:28:dc:7a:71:8f:14:49:dd:3e:23:7f:2d:7d:
                    57:b3:b1:56:e0:8b:20:22:90:3d:6e:ca:2d:2c:1c:
                    fa:c9:b1:64:65:d5:ff:e6:d8:e4:98:ec:85:2b:43:
                    9f:99:54:a8:ac:1d:91:47:10:3b:42:65:e2:ea:06:
                    ce:ce:0b:0c:9a:05:fb:ca:17:97:63:e6:8b:3a:6d:
                    a9:cc:93:31:9a:68:51:34:8a:8d:7a:7b:89:a2:fa:
                    f5:0f:79:7b:8d:8a:56:28:1d:83:a1:26:ba:2b:9b:
                    8a:40:df:56:04:a7:93:1d:01:0d:62:03:b6:66:35:
                    19:12:48:8d:c7:e8:d6:1d:03:a3:4d:57:c8:ba:92:
                    08:10:e4:b8:60:67:68:9b:ec:9b:59:b0:5e:7e:0d:
                    64:bc:3f:63:32:f8:a6:fd:9e:24:99:b6:68:98:99:
                    88:03:1d:50:9d:ec:24:bd:52:fc:ba:c9:e6:79:ce:
                    e0:10:5d:04:5e:00:32:80:b9:6f:7f:e9:a1:82:ed:
                    de:f0:cf:9a:6d:98:e0:53:8c:cb:2a:8f:67:7a:a1:
                    84:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:01:FD:74:CF:18:24:FF:10:65:DA:6C:B5:27:55:84:E8:67:F0:06
            X509v3 Authority Key Identifier:
                keyid:46:9E:6F:E6:72:57:09:FD:0C:DC:D1:6B:0C:F8:46:82:AF:BC:BF:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a40fccb2-ce1c-4862-8edf-8c35273011c2/0/469E6FE6725709FD0CDCD16B0CF84682AFBCBF76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/469E6FE6725709FD0CDCD16B0CF84682AFBCBF76.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a40fccb2-ce1c-4862-8edf-8c35273011c2/0/3130332e3131362e3131302e302f32342d3234203d3e20313337333634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.116.110.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:e5:bc:57:aa:10:6e:58:4d:bd:9b:58:2c:fe:d5:a7:6a:3b:
         cc:48:71:b7:83:98:07:28:0e:77:fe:7f:38:0e:a4:09:47:e3:
         e8:2b:79:61:06:6a:1f:21:ca:aa:60:4a:78:74:92:21:ec:0c:
         17:b6:00:94:67:50:25:72:39:27:76:7e:37:a7:ce:a0:c5:5c:
         e6:e5:7a:79:79:78:e7:80:b1:7f:08:39:da:f4:c0:a1:e7:c4:
         11:aa:8a:7d:96:80:7f:96:99:c0:9c:8d:93:a5:ee:4b:b5:d6:
         c9:a7:51:f9:a3:d0:02:bf:52:7e:f6:eb:62:db:f0:a4:1f:02:
         a5:13:43:fb:b7:84:e2:ce:0a:97:f0:d5:60:3b:b8:3e:f6:60:
         fe:07:c6:20:31:3f:90:87:81:76:b3:52:69:be:0c:1f:17:5b:
         75:92:f4:00:55:ab:b1:31:97:6d:3a:7f:dc:71:29:b5:50:be:
         b9:e2:f2:6c:55:66:74:0c:04:6c:34:eb:4a:90:bb:87:d7:7b:
         ef:73:b3:70:15:db:40:26:d8:3c:54:ef:f0:9f:0b:e0:6f:c5:
         21:7c:29:2b:e4:3e:f7:43:de:3b:e2:82:09:30:0f:ff:bf:f0:
         bb:76:ea:f9:c5:37:05:8a:c1:d8:fc:94:cf:e2:f5:ae:4a:11:
         d5:37:d3:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:22:34 2025 by rpki-client