Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/3130332e37352e35322e302f32332d3234203d3e203436303233.roa
File:                     3130332e37352e35322e302f32332d3234203d3e203436303233.roa (raw, json)
Hash identifier:          T0MXrhbK6xjnBNdXhOMqxz1Yf/0TdUbbbVSQf9Bnwwk=
Subject key identifier:   B8:F8:01:DE:0B:BB:18:D3:64:1E:45:C0:F2:21:AB:C1:24:96:6A:4D
Certificate issuer:       /CN=154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A
Certificate serial:       7C469F17B3BBB9788EB1D57EFA9E584A8109C4B1
Authority key identifier: 15:4C:AF:94:6B:4F:EF:9C:2E:E0:FF:A2:45:BB:A4:29:C0:3B:4D:2A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/3130332e37352e35322e302f32332d3234203d3e203436303233.roa
Signing time:             Wed 15 Oct 2025 10:02:06 +0000
ROA not before:           Wed 15 Oct 2025 09:57:06 +0000
ROA not after:            Wed 14 Oct 2026 10:02:06 +0000
asID:                     46023
IP address blocks:        103.75.52.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.crl
                          rsync://repo-rpki.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Oct 2025 04:18:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:46:9f:17:b3:bb:b9:78:8e:b1:d5:7e:fa:9e:58:4a:81:09:c4:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A
        Validity
            Not Before: Oct 15 09:57:06 2025 GMT
            Not After : Oct 14 10:02:06 2026 GMT
        Subject: CN=B8F801DE0BBB18D3641E45C0F221ABC124966A4D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:4c:82:2e:b9:c7:b6:63:cc:a9:d0:93:4e:a5:
                    cd:22:74:c0:a5:b3:79:42:c8:2b:ab:26:1c:ae:57:
                    37:11:4e:c1:99:fd:ce:9f:cd:0b:44:c4:c4:96:2d:
                    99:94:23:19:3f:7b:44:a7:90:b3:95:49:51:fd:b2:
                    cc:bf:31:a3:70:47:19:7e:9c:98:e5:15:cf:bf:20:
                    82:c6:4f:d5:60:5a:ad:4d:30:ac:83:9e:80:ea:e5:
                    d9:c2:85:ad:bf:c3:be:33:fd:73:64:78:4e:b9:1d:
                    20:73:16:f9:c0:97:03:c2:fb:02:b2:dc:3e:b1:e6:
                    81:43:e8:64:6c:d6:b3:94:cf:22:8a:58:05:68:27:
                    bf:4d:e4:a9:16:a3:c1:5b:d1:59:0d:50:c4:07:52:
                    9a:b1:14:fb:d2:d6:7c:74:e3:4b:7e:5f:b2:0d:c7:
                    bf:21:f5:5f:ef:97:70:59:e6:f5:07:7b:0e:2c:71:
                    a4:88:3f:55:11:93:37:75:a6:ff:7c:4e:74:dd:34:
                    9b:3f:2c:61:4d:d8:7e:48:66:d4:e8:4a:4c:9d:2c:
                    8d:e6:54:1b:f2:b8:bb:00:94:8f:5e:6d:eb:4a:90:
                    77:0f:07:18:9b:59:d5:30:0b:0d:09:79:36:d4:9a:
                    3b:25:de:60:8a:9a:3e:81:7d:ed:f0:d9:d8:ee:2f:
                    cc:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:F8:01:DE:0B:BB:18:D3:64:1E:45:C0:F2:21:AB:C1:24:96:6A:4D
            X509v3 Authority Key Identifier:
                keyid:15:4C:AF:94:6B:4F:EF:9C:2E:E0:FF:A2:45:BB:A4:29:C0:3B:4D:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/3130332e37352e35322e302f32332d3234203d3e203436303233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.75.52.0/23

    Signature Algorithm: sha256WithRSAEncryption
         88:91:36:22:a0:fd:7d:36:39:49:bd:bf:45:b9:dc:99:5e:ce:
         e9:2f:58:9a:8b:10:73:d1:5b:16:16:5c:2e:bd:aa:92:9d:84:
         f4:27:1b:8d:35:0e:c0:92:5f:5e:12:31:69:49:57:d5:0e:b2:
         50:dc:25:91:ff:37:2c:0d:e4:63:ba:3b:35:8a:cf:5e:78:18:
         d4:3a:8c:ba:41:7a:47:a1:06:f4:8e:11:8e:00:37:2d:c4:18:
         64:7b:cf:f0:7c:fd:81:a3:e7:83:78:e1:f5:f6:0b:12:27:e3:
         45:a0:0c:f5:09:29:12:d3:34:99:cc:87:0f:c6:02:1a:19:c9:
         43:a5:53:f7:06:7b:a9:ab:ad:38:09:40:7c:5c:31:73:86:87:
         f0:9e:ca:52:d2:bf:26:ab:d3:95:e7:56:a8:e5:33:58:be:22:
         a5:5a:69:41:88:1f:ea:e3:81:c2:c6:ab:12:02:a7:9a:5e:0a:
         f8:89:aa:c8:b6:f0:4f:4b:be:85:b3:a9:55:10:cd:a8:bc:4d:
         e6:fe:20:e4:94:0d:34:55:92:f1:36:29:6b:2d:7c:0f:26:f5:
         cb:1a:90:75:15:b1:37:23:95:e9:48:e2:89:12:37:b7:02:fa:
         c0:4d:51:fe:bf:e3:0e:7a:88:c7:79:57:42:ca:c5:32:f5:4d:
         93:56:3a:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 01:59:24 2025 by rpki-client