Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/3130332e37352e35322e302f32322d3234203d3e203436303233.roa
File:                     3130332e37352e35322e302f32322d3234203d3e203436303233.roa (raw, json)
Hash identifier:          qyDdwv5epobK+GRznDOnZgdcRlyuSTrE0I2ZxAmsKz4=
Subject key identifier:   A8:7C:F2:13:2C:5A:59:19:7F:EE:32:66:A7:7C:64:19:17:28:CA:0C
Certificate issuer:       /CN=154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A
Certificate serial:       1C9878CFBF49A6AAA9E69A6CC35AD601D8134DED
Authority key identifier: 15:4C:AF:94:6B:4F:EF:9C:2E:E0:FF:A2:45:BB:A4:29:C0:3B:4D:2A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/3130332e37352e35322e302f32322d3234203d3e203436303233.roa
Signing time:             Wed 15 Oct 2025 10:02:05 +0000
ROA not before:           Wed 15 Oct 2025 09:57:05 +0000
ROA not after:            Wed 14 Oct 2026 10:02:05 +0000
asID:                     46023
IP address blocks:        103.75.52.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.crl
                          rsync://repo-rpki.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Oct 2025 04:18:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:98:78:cf:bf:49:a6:aa:a9:e6:9a:6c:c3:5a:d6:01:d8:13:4d:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A
        Validity
            Not Before: Oct 15 09:57:05 2025 GMT
            Not After : Oct 14 10:02:05 2026 GMT
        Subject: CN=A87CF2132C5A59197FEE3266A77C64191728CA0C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:92:9c:a9:98:a0:a8:3c:68:f9:4a:0f:1e:7d:
                    54:56:38:09:c3:f8:b3:ad:e7:90:1f:6f:64:7c:f3:
                    36:3b:23:15:91:44:d6:78:26:31:fe:7a:c8:76:65:
                    1d:a5:05:da:46:d7:98:7b:21:8a:c1:0e:be:28:09:
                    cb:a5:16:f1:7f:d8:7a:a4:fa:06:4a:e5:9c:3b:62:
                    ca:ef:93:89:ca:39:12:ca:f0:6d:91:29:ed:fd:2a:
                    02:48:20:c9:48:e8:56:8a:6c:82:67:d4:a9:df:74:
                    ec:80:7e:38:86:54:1c:86:df:bb:17:fa:14:97:ae:
                    d3:5b:2f:b5:3e:8b:8f:e2:56:64:34:2d:83:0f:c6:
                    c3:6c:74:1b:91:ac:a9:6d:f6:52:00:bc:94:3d:81:
                    3c:b5:c4:73:2d:e4:cc:bd:81:ae:33:61:96:e4:e8:
                    87:13:22:ee:97:61:0e:97:47:dc:4d:58:92:4e:59:
                    fe:dc:be:20:6f:58:f5:58:80:73:d5:40:cf:fd:c1:
                    06:37:42:88:d2:aa:76:1d:8a:8a:6e:31:a9:b1:e2:
                    95:e3:3d:90:56:19:09:d6:62:16:cc:e5:2e:39:7a:
                    b1:9c:e0:9e:10:02:8e:73:71:7f:27:b2:51:b8:ea:
                    6b:c6:98:b3:95:72:74:7a:a6:90:73:77:f9:c7:5b:
                    d6:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:7C:F2:13:2C:5A:59:19:7F:EE:32:66:A7:7C:64:19:17:28:CA:0C
            X509v3 Authority Key Identifier:
                keyid:15:4C:AF:94:6B:4F:EF:9C:2E:E0:FF:A2:45:BB:A4:29:C0:3B:4D:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/3130332e37352e35322e302f32322d3234203d3e203436303233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.75.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9a:a7:90:ba:71:a1:a8:9b:dd:81:80:7e:39:57:e9:18:fb:f1:
         b5:a7:8e:cc:05:44:87:60:1d:67:25:6c:bf:54:ad:2d:73:df:
         f8:86:44:86:8d:cb:31:c3:1c:89:2e:9b:28:50:b2:39:e9:dd:
         d2:64:5f:35:24:f7:4f:5e:46:e8:35:19:7b:ef:39:3a:84:ac:
         38:37:ee:c3:f5:bf:76:a6:65:5a:77:97:97:18:90:17:73:a9:
         68:a6:ac:2f:ca:4e:97:b5:4e:52:b2:ac:ae:f2:b3:5b:25:fe:
         91:df:81:9f:54:db:0a:4f:9d:b6:bf:57:8f:4e:2c:f2:7a:58:
         80:f5:f4:81:5e:0b:44:e8:b7:88:77:fd:5c:a8:96:d6:b3:b1:
         58:5e:f6:c5:54:59:9b:1e:33:29:53:93:e8:be:79:ff:fe:c7:
         cc:88:92:3f:35:48:91:2d:0a:65:f6:e4:6e:98:35:eb:19:cf:
         9a:f3:22:3e:2b:d6:28:f6:8e:07:2e:df:15:dd:4e:51:4f:9b:
         e9:65:ca:2d:3b:84:54:50:c9:05:26:3f:70:43:0a:d6:b1:55:
         46:ed:db:40:56:a2:ea:0d:9e:73:e8:3f:67:27:40:d9:ec:fc:
         54:71:b9:0e:a7:03:ab:d1:c6:aa:8a:32:6a:c2:78:04:70:37:
         10:83:d2:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 04:48:09 2025 by rpki-client