Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/aa11e6d7-57a1-4936-b7a7-de093525cb27/0/3130332e3235352e3130382e302f32342d3234203d3e20313437313530.roa
File:                     3130332e3235352e3130382e302f32342d3234203d3e20313437313530.roa (raw, json)
Hash identifier:          +fO5TDM3co6TWyHEak4qQLIrEN8/2YmZcoMcyUXp4Tk=
Subject key identifier:   35:58:D6:4C:CA:B1:37:9A:2C:6B:77:30:B9:96:8A:F1:FE:72:B9:BA
Certificate issuer:       /CN=802B50E70791398C3EA43DDCECAA739EA01A638B
Certificate serial:       3E7FA3BC302BB40703347AEEE859BAF4236D172D
Authority key identifier: 80:2B:50:E7:07:91:39:8C:3E:A4:3D:DC:EC:AA:73:9E:A0:1A:63:8B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/802B50E70791398C3EA43DDCECAA739EA01A638B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/aa11e6d7-57a1-4936-b7a7-de093525cb27/0/3130332e3235352e3130382e302f32342d3234203d3e20313437313530.roa
Signing time:             Thu 04 Sep 2025 12:07:54 +0000
ROA not before:           Thu 04 Sep 2025 12:02:54 +0000
ROA not after:            Thu 03 Sep 2026 12:07:54 +0000
asID:                     147150
IP address blocks:        103.255.108.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/aa11e6d7-57a1-4936-b7a7-de093525cb27/0/802B50E70791398C3EA43DDCECAA739EA01A638B.crl
                          rsync://repo-rpki.idnic.net/repo/aa11e6d7-57a1-4936-b7a7-de093525cb27/0/802B50E70791398C3EA43DDCECAA739EA01A638B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/802B50E70791398C3EA43DDCECAA739EA01A638B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Oct 2025 22:39:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:7f:a3:bc:30:2b:b4:07:03:34:7a:ee:e8:59:ba:f4:23:6d:17:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=802B50E70791398C3EA43DDCECAA739EA01A638B
        Validity
            Not Before: Sep  4 12:02:54 2025 GMT
            Not After : Sep  3 12:07:54 2026 GMT
        Subject: CN=3558D64CCAB1379A2C6B7730B9968AF1FE72B9BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:d2:75:70:21:c7:a7:5b:62:8c:91:b2:8d:a3:
                    36:6c:57:06:20:fe:3e:8c:80:98:0d:87:5a:88:d5:
                    c4:63:1d:85:1e:37:8d:1a:47:35:1b:43:3e:42:fa:
                    73:cc:d9:25:2b:fc:fc:c5:75:52:f9:b5:52:51:3b:
                    c0:07:2e:b8:c1:0f:2b:cd:a4:c9:8a:bd:44:31:89:
                    a7:b4:74:55:d3:41:44:80:af:97:30:8c:92:b4:7d:
                    d6:42:be:80:e3:ed:a0:42:88:05:45:20:58:e4:40:
                    8a:68:a2:74:49:76:49:3e:a5:9d:ad:10:7a:72:cb:
                    c3:f6:0d:b4:2b:87:90:91:07:24:de:4f:38:d5:15:
                    70:be:51:f8:07:23:3d:69:c9:88:73:d7:e0:5f:aa:
                    c9:91:7d:eb:57:35:99:5c:98:10:80:86:8a:6f:6a:
                    64:2a:a7:4f:15:28:d8:9b:a5:52:ff:0e:a3:27:fd:
                    8c:77:2f:68:28:f4:89:0a:3b:07:5a:2f:13:a1:6a:
                    c7:45:a1:a7:43:36:85:3b:bb:f0:80:3c:64:5e:21:
                    a8:ca:a3:9e:47:d2:18:e0:24:1f:3c:f6:7e:b1:85:
                    72:b5:ae:c8:ec:d3:7e:bc:dc:8a:83:95:08:7a:d3:
                    be:c2:c2:0f:6c:c3:7d:45:91:62:df:d3:a6:bb:e9:
                    3a:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:58:D6:4C:CA:B1:37:9A:2C:6B:77:30:B9:96:8A:F1:FE:72:B9:BA
            X509v3 Authority Key Identifier:
                keyid:80:2B:50:E7:07:91:39:8C:3E:A4:3D:DC:EC:AA:73:9E:A0:1A:63:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/aa11e6d7-57a1-4936-b7a7-de093525cb27/0/802B50E70791398C3EA43DDCECAA739EA01A638B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/802B50E70791398C3EA43DDCECAA739EA01A638B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aa11e6d7-57a1-4936-b7a7-de093525cb27/0/3130332e3235352e3130382e302f32342d3234203d3e20313437313530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.255.108.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:42:5b:58:8a:06:70:27:df:83:9d:65:3d:ba:16:ca:59:de:
         1e:6d:8b:f3:48:60:f5:5b:1f:05:88:aa:af:6b:4f:58:fa:50:
         51:38:4f:19:de:49:14:4d:ae:0f:62:ef:b0:6b:91:c6:61:95:
         5b:6d:0b:bb:b9:5b:cf:de:52:07:e5:3e:63:14:49:00:9d:8b:
         ed:aa:cf:30:c7:f3:78:51:40:6a:46:ca:2c:64:ff:0a:9d:79:
         d8:30:9f:07:14:0b:8e:f1:b4:08:40:79:32:cb:89:89:0c:4e:
         72:f7:b6:bb:3b:16:18:b2:11:ad:e6:f8:1c:a8:ac:2f:d3:14:
         ec:c2:52:97:06:f7:71:62:64:6c:f2:69:c5:d8:50:eb:ef:63:
         c3:56:ed:c8:12:d5:3e:d2:fb:69:90:7f:4d:e3:de:87:86:cb:
         34:c6:6e:c7:ff:9b:f3:93:3b:a8:31:fb:70:74:34:c2:7a:cc:
         0d:a2:75:51:97:d2:78:f6:dd:bb:29:c3:3d:f2:17:51:2b:84:
         e1:9a:27:9e:e4:2d:b0:39:5b:e5:db:e1:38:20:ac:1f:19:00:
         a6:0d:54:aa:7e:cf:31:8f:0f:99:d7:a8:11:97:f6:2f:e8:26:
         f0:62:a3:f4:0f:76:7b:f6:db:2a:65:f3:3d:39:f7:70:ca:42:
         2a:cb:3d:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 03:32:04 2025 by rpki-client