Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/3130332e37352e35342e302f32332d3234203d3e203436303233.roa
File:                     3130332e37352e35342e302f32332d3234203d3e203436303233.roa (raw, json)
Hash identifier:          W72scnHA7zHvPLJz5BxsoijLHmQFgwe9kKm/vIV1T+I=
Subject key identifier:   A3:3E:DE:22:C7:97:BF:17:03:7E:E9:D0:C0:A1:96:1B:8A:9E:92:8A
Certificate issuer:       /CN=154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A
Certificate serial:       165284BD48A14208ED86B2F28B231843620DD209
Authority key identifier: 15:4C:AF:94:6B:4F:EF:9C:2E:E0:FF:A2:45:BB:A4:29:C0:3B:4D:2A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/3130332e37352e35342e302f32332d3234203d3e203436303233.roa
Signing time:             Wed 15 Oct 2025 10:02:06 +0000
ROA not before:           Wed 15 Oct 2025 09:57:06 +0000
ROA not after:            Wed 14 Oct 2026 10:02:06 +0000
asID:                     46023
IP address blocks:        103.75.54.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.crl
                          rsync://repo-rpki.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Oct 2025 04:18:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:52:84:bd:48:a1:42:08:ed:86:b2:f2:8b:23:18:43:62:0d:d2:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A
        Validity
            Not Before: Oct 15 09:57:06 2025 GMT
            Not After : Oct 14 10:02:06 2026 GMT
        Subject: CN=A33EDE22C797BF17037EE9D0C0A1961B8A9E928A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:d1:ab:db:db:37:b9:32:bf:47:1e:13:82:76:
                    fa:28:c0:0d:e7:12:14:89:ad:b9:85:04:52:30:61:
                    01:64:9d:61:78:49:8b:a5:79:89:5d:ee:14:38:ee:
                    2c:4f:a4:ab:e2:27:3b:66:66:c5:e5:2a:fe:15:1b:
                    6c:0f:06:4f:eb:36:b9:ee:f5:75:04:de:f1:60:74:
                    bb:33:69:e1:6b:2e:a7:26:22:1d:26:d7:be:da:50:
                    ab:a6:1e:35:1b:95:49:46:3e:2f:de:33:eb:fd:e2:
                    e9:19:fe:94:ed:3f:98:15:8f:d6:bd:de:a2:1e:c1:
                    81:e1:64:e6:c2:5a:75:c6:f3:a8:9a:f9:d8:46:94:
                    b4:b8:80:f0:64:5f:d2:fd:8e:53:a5:f9:7c:ef:0b:
                    a2:bf:07:0e:ae:19:55:2a:3c:81:40:e8:2c:1a:04:
                    cc:59:2c:23:8f:3b:9c:94:4e:6e:33:fa:e0:06:d3:
                    91:53:d1:f9:1e:e3:72:ce:e1:d5:ca:aa:85:a9:f6:
                    06:ab:29:1b:bd:a4:68:cb:dd:a6:f3:14:ce:52:87:
                    2b:67:e3:ea:59:a0:72:51:07:3c:16:eb:12:89:79:
                    71:3c:e9:68:44:e0:6b:bf:b6:39:d7:87:66:ab:8e:
                    57:45:5a:60:6e:29:51:e7:d7:94:87:9e:de:fa:3a:
                    70:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:3E:DE:22:C7:97:BF:17:03:7E:E9:D0:C0:A1:96:1B:8A:9E:92:8A
            X509v3 Authority Key Identifier:
                keyid:15:4C:AF:94:6B:4F:EF:9C:2E:E0:FF:A2:45:BB:A4:29:C0:3B:4D:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/3130332e37352e35342e302f32332d3234203d3e203436303233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.75.54.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8e:47:55:22:63:d0:73:f4:de:c0:01:7c:11:ff:34:bf:be:ed:
         02:80:bf:e9:dd:7b:f2:bb:7a:c6:e6:4a:db:ec:52:41:81:39:
         85:bd:8a:44:27:32:3a:a6:1b:98:e3:52:49:62:eb:74:81:2e:
         b5:67:ae:9c:fa:6f:ca:16:12:bb:60:e8:e4:ba:20:58:d5:45:
         84:56:37:0f:e9:52:2d:a6:5a:14:9e:94:2c:d0:27:92:95:8c:
         11:d4:18:5a:ee:13:3e:20:df:dd:f0:03:3c:ff:70:f4:e5:f6:
         cb:a8:ac:45:69:25:13:66:d1:5f:d7:6e:15:cb:78:2e:2e:56:
         0e:2c:c8:11:ee:3f:7e:93:af:95:a1:04:f0:03:3d:77:0f:cc:
         1a:c8:01:42:9a:31:17:37:b2:57:62:eb:76:59:11:0b:0d:d4:
         86:bf:f4:63:fc:80:40:3f:7c:a8:7c:2a:6e:d9:0a:0a:c0:31:
         19:2b:86:d0:ce:37:28:69:63:ec:73:2e:40:5c:aa:7b:57:be:
         4b:ba:ce:ba:1c:2d:65:39:b1:5e:d0:20:ae:df:99:7a:e6:4c:
         96:f6:31:be:87:1a:b7:4e:64:ac:eb:db:6f:41:ef:4d:2f:9e:
         29:20:c2:c5:53:52:ea:7c:26:2d:0c:9d:83:b1:e4:fc:e4:e5:
         eb:27:dd:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 04:48:09 2025 by rpki-client