Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/3130332e37352e35332e302f32342d3234203d3e203436303233.roa
File:                     3130332e37352e35332e302f32342d3234203d3e203436303233.roa (raw, json)
Hash identifier:          u/Rqg/DBL28ST9LkFtb756oaQy6poB4UdD9nfAM75kQ=
Subject key identifier:   AE:A3:10:E9:F7:46:EE:E4:3E:96:87:12:69:FD:13:10:79:19:39:9E
Certificate issuer:       /CN=154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A
Certificate serial:       0A0E40E7026EC1C1DC596F03EC13B297D8EAD585
Authority key identifier: 15:4C:AF:94:6B:4F:EF:9C:2E:E0:FF:A2:45:BB:A4:29:C0:3B:4D:2A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/3130332e37352e35332e302f32342d3234203d3e203436303233.roa
Signing time:             Wed 15 Oct 2025 10:02:05 +0000
ROA not before:           Wed 15 Oct 2025 09:57:05 +0000
ROA not after:            Wed 14 Oct 2026 10:02:05 +0000
asID:                     46023
IP address blocks:        103.75.53.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.crl
                          rsync://repo-rpki.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Oct 2025 04:18:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:0e:40:e7:02:6e:c1:c1:dc:59:6f:03:ec:13:b2:97:d8:ea:d5:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A
        Validity
            Not Before: Oct 15 09:57:05 2025 GMT
            Not After : Oct 14 10:02:05 2026 GMT
        Subject: CN=AEA310E9F746EEE43E96871269FD13107919399E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:e5:59:7c:ba:91:80:22:4d:1f:e1:ed:7b:3a:
                    6a:08:38:20:94:da:ce:14:30:4a:fe:3a:f5:ed:e6:
                    92:10:05:0a:6d:00:d4:00:84:4e:c5:7c:b2:07:07:
                    84:8e:b1:f4:6a:a9:d2:50:4a:c1:7e:cf:a4:45:e1:
                    db:d1:fa:ff:83:79:c5:7f:0a:48:51:c9:53:6b:60:
                    f5:16:da:fb:e9:6d:76:cb:41:76:bc:0b:da:74:fd:
                    94:e6:a8:db:6b:50:af:95:56:ec:2b:73:66:0c:72:
                    20:07:3b:2e:f1:cf:05:75:11:2d:33:5c:4b:19:7a:
                    04:19:8e:fc:15:eb:0c:20:fe:c7:65:c3:70:ad:a0:
                    c7:10:c4:b2:06:cc:6a:42:57:8a:27:67:60:e8:0f:
                    66:9a:c8:f3:38:c4:25:67:34:22:23:e5:56:c4:4e:
                    e7:3d:f4:66:a3:95:08:e9:ee:8d:e9:e8:bf:9b:b3:
                    5e:4e:25:a1:05:6b:9b:f6:a6:e1:ef:ae:20:c5:67:
                    c0:5e:96:62:77:d7:58:80:85:b7:e1:4a:b5:3c:9e:
                    5f:5f:4f:8d:59:71:4b:19:8e:c7:86:50:31:42:6d:
                    3e:a4:01:7c:67:82:48:54:51:c4:32:87:d2:53:d3:
                    8d:f5:5a:83:b0:42:f1:01:ec:d0:85:ca:fe:00:00:
                    e4:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:A3:10:E9:F7:46:EE:E4:3E:96:87:12:69:FD:13:10:79:19:39:9E
            X509v3 Authority Key Identifier:
                keyid:15:4C:AF:94:6B:4F:EF:9C:2E:E0:FF:A2:45:BB:A4:29:C0:3B:4D:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/3130332e37352e35332e302f32342d3234203d3e203436303233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.75.53.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:8b:c9:99:f9:bf:d4:a6:34:19:90:e3:34:33:16:a4:c3:2b:
         1b:a7:8e:54:d5:45:a6:4e:00:fb:b9:d0:6e:a6:9c:c5:b6:1f:
         a2:50:87:a8:ec:a1:56:22:44:00:9a:78:6e:ba:3a:e2:27:57:
         df:e8:bc:42:12:21:7a:4a:bc:34:f7:a3:31:e0:11:a8:c7:a5:
         b8:d6:46:db:74:97:b8:eb:27:d3:ef:f9:27:af:46:7a:b9:50:
         c1:65:d8:50:b2:6f:07:2f:71:f0:f1:b7:ec:7c:1c:fa:72:dc:
         56:6a:aa:cd:e5:2b:ed:b0:dd:22:29:23:46:d5:15:ad:c9:9c:
         1f:aa:b4:4c:61:a1:42:5c:9e:3a:ed:06:37:06:25:58:06:a6:
         7d:c8:ff:b8:63:2e:95:10:67:43:49:eb:a2:0b:70:2a:9c:b5:
         e7:6d:2c:35:27:66:a2:ec:26:cd:0d:37:29:03:68:a8:44:d0:
         36:35:bf:f9:f1:1d:01:6a:07:3a:28:8c:56:14:2a:ec:7b:ca:
         73:5a:e0:a9:40:4e:9b:cf:6f:cc:98:96:fa:6c:24:6d:23:28:
         a6:cd:50:b0:4b:0b:13:58:c8:51:14:92:7e:44:94:24:82:e6:
         e2:d0:dd:67:87:27:84:db:e6:84:bd:76:8d:c8:be:e6:42:8f:
         8b:3e:f4:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 01:59:23 2025 by rpki-client