Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/3130332e37352e35342e302f32342d3234203d3e203436303233.roa
File:                     3130332e37352e35342e302f32342d3234203d3e203436303233.roa (raw, json)
Hash identifier:          itzoTElJfDBgRSPccVv4bZDERMP8o0I1zPcdqucno78=
Subject key identifier:   4C:8B:12:4E:62:9D:E1:31:3F:FE:C0:8B:EC:37:FC:FF:F6:EE:AF:1F
Certificate issuer:       /CN=154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A
Certificate serial:       6A532DA34A2C97695298DEBBE4004AD81D1B8BB7
Authority key identifier: 15:4C:AF:94:6B:4F:EF:9C:2E:E0:FF:A2:45:BB:A4:29:C0:3B:4D:2A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/3130332e37352e35342e302f32342d3234203d3e203436303233.roa
Signing time:             Wed 15 Oct 2025 10:02:05 +0000
ROA not before:           Wed 15 Oct 2025 09:57:05 +0000
ROA not after:            Wed 14 Oct 2026 10:02:05 +0000
asID:                     46023
IP address blocks:        103.75.54.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.crl
                          rsync://repo-rpki.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Oct 2025 04:18:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:53:2d:a3:4a:2c:97:69:52:98:de:bb:e4:00:4a:d8:1d:1b:8b:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A
        Validity
            Not Before: Oct 15 09:57:05 2025 GMT
            Not After : Oct 14 10:02:05 2026 GMT
        Subject: CN=4C8B124E629DE1313FFEC08BEC37FCFFF6EEAF1F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:3c:ac:62:06:e4:e4:ff:b8:b0:9e:46:97:1b:
                    38:33:3c:8b:32:b7:89:e9:6d:17:8b:89:6a:f2:88:
                    82:bc:0a:0b:75:67:bb:7a:f2:4d:86:68:61:54:40:
                    9c:4b:23:23:24:05:98:17:d4:2f:be:4b:30:ab:3f:
                    72:17:84:cd:07:f8:0f:a3:52:e6:76:a9:f0:9d:51:
                    f3:73:e4:ee:05:38:cd:95:17:92:84:60:ea:66:81:
                    92:9a:1a:d2:fa:03:fd:4e:43:a3:8b:95:c3:f6:8d:
                    36:5d:36:41:66:80:53:fb:01:ea:3f:ad:c4:33:c4:
                    df:51:c5:72:64:72:e8:35:fe:40:6e:69:02:57:dc:
                    c2:49:f9:fe:86:78:67:17:7b:b9:54:81:56:d7:e9:
                    54:d3:c7:d3:2f:a4:a6:4d:d0:24:1b:e6:b1:b5:b6:
                    28:8d:0a:c5:fd:49:72:92:aa:38:46:18:35:52:10:
                    e6:06:4f:da:a4:f9:74:f6:8e:9d:bd:1e:de:7d:3b:
                    7d:0b:10:fc:65:95:6b:71:ca:ef:a3:46:d8:45:01:
                    13:21:5b:68:15:3d:b7:56:d9:27:5e:5c:fd:4a:f9:
                    d1:0f:34:32:d8:4b:9a:86:91:2f:0b:b6:df:ea:66:
                    17:17:2d:ae:65:de:45:33:3e:77:35:ca:43:de:c8:
                    b2:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:8B:12:4E:62:9D:E1:31:3F:FE:C0:8B:EC:37:FC:FF:F6:EE:AF:1F
            X509v3 Authority Key Identifier:
                keyid:15:4C:AF:94:6B:4F:EF:9C:2E:E0:FF:A2:45:BB:A4:29:C0:3B:4D:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/3130332e37352e35342e302f32342d3234203d3e203436303233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.75.54.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a2:20:74:d0:ec:93:ea:ac:d9:2f:99:23:17:fc:38:6d:35:bf:
         40:96:9f:6c:e3:e0:22:9e:05:d9:bf:a1:92:ae:23:73:fb:1e:
         c6:fb:93:bb:16:3b:b7:55:46:75:47:26:b5:93:8c:11:07:57:
         89:2b:f3:89:7c:6d:cc:3b:ee:e1:63:e6:b8:b4:19:c8:e2:85:
         35:40:5b:1c:0c:0b:50:66:80:7e:4c:03:e4:b7:a6:2c:3b:71:
         c4:f7:99:aa:e9:d4:6a:23:3c:1a:dd:c9:af:68:2d:e2:5d:cb:
         5c:60:0a:d7:9f:78:26:d7:fa:e7:df:a1:f5:03:60:86:c4:3a:
         18:b2:d8:f6:e3:d3:7f:ff:d1:fe:3d:fa:56:43:d5:75:3a:66:
         f9:8d:22:a5:29:5a:d8:f5:e6:bb:3c:c7:38:d7:94:95:72:a2:
         4b:3c:38:54:55:5b:5c:bc:be:cf:de:5e:a0:33:70:e1:21:fc:
         8d:02:51:0b:e8:47:23:b1:ea:a9:83:f2:b6:57:e4:a5:9f:70:
         87:72:94:a8:4a:12:ce:25:46:c9:de:04:a4:00:a6:cc:8f:b6:
         b1:fb:02:4b:c9:4f:57:61:84:bc:10:39:3d:46:82:58:c0:25:
         44:1c:f5:ac:de:8b:d0:bb:5e:1f:6c:1b:45:dd:16:fd:8a:a7:
         22:27:09:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 04:22:43 2025 by rpki-client