Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/3130332e37352e35352e302f32342d3234203d3e203436303233.roa
File:                     3130332e37352e35352e302f32342d3234203d3e203436303233.roa (raw, json)
Hash identifier:          BOb9anLJdpDwlKD+KK0kxGNWqYzi/fXunRvflhVgFzc=
Subject key identifier:   ED:5F:68:16:1F:81:B8:E4:3A:B4:C3:95:79:13:69:17:78:09:9D:58
Certificate issuer:       /CN=154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A
Certificate serial:       19CB9D3DEF0600C556C464AEC998DD63BFACC291
Authority key identifier: 15:4C:AF:94:6B:4F:EF:9C:2E:E0:FF:A2:45:BB:A4:29:C0:3B:4D:2A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/3130332e37352e35352e302f32342d3234203d3e203436303233.roa
Signing time:             Wed 15 Oct 2025 10:02:05 +0000
ROA not before:           Wed 15 Oct 2025 09:57:05 +0000
ROA not after:            Wed 14 Oct 2026 10:02:05 +0000
asID:                     46023
IP address blocks:        103.75.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.crl
                          rsync://repo-rpki.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Oct 2025 04:18:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:cb:9d:3d:ef:06:00:c5:56:c4:64:ae:c9:98:dd:63:bf:ac:c2:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A
        Validity
            Not Before: Oct 15 09:57:05 2025 GMT
            Not After : Oct 14 10:02:05 2026 GMT
        Subject: CN=ED5F68161F81B8E43AB4C3957913691778099D58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:d5:4f:12:01:fb:c8:3f:3f:86:61:51:86:6a:
                    89:b3:5a:20:f4:ef:9d:a2:c2:77:64:29:51:4c:6b:
                    e3:2d:22:46:44:34:e3:8e:01:77:86:6d:b7:e7:ff:
                    c4:86:dd:fa:ee:ce:44:14:4b:c6:43:0b:01:79:70:
                    27:1d:7f:41:35:97:fe:40:41:ae:ae:17:2f:98:b4:
                    ab:57:b8:3d:58:01:9c:39:54:0c:93:78:72:03:6d:
                    38:72:af:60:2f:a7:e4:4d:b4:83:e3:42:b7:c2:29:
                    8a:d5:36:01:ac:26:b5:8c:87:68:34:ea:1f:e9:4f:
                    a9:1c:93:6a:b3:90:38:8b:8c:f9:1c:ad:37:43:59:
                    11:62:70:48:fa:a4:39:5c:65:c4:4e:ed:09:45:be:
                    18:1d:eb:01:05:bc:f4:af:a8:89:8e:2a:7a:c4:16:
                    da:3a:c0:cb:b2:bd:0a:7b:65:e5:4b:6c:35:96:3b:
                    be:b4:15:b7:5d:3e:33:54:19:bb:fd:1e:24:91:ba:
                    99:61:b7:64:6c:0b:2b:8d:b8:8f:52:7f:f8:15:18:
                    9b:bc:55:b1:da:1b:45:0a:c2:eb:0e:e1:3e:e4:6f:
                    ca:eb:5e:10:c2:73:70:32:dc:46:26:7a:fe:e4:34:
                    20:a5:62:89:be:b1:1b:c1:fd:c6:b9:74:9d:ae:86:
                    e9:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:5F:68:16:1F:81:B8:E4:3A:B4:C3:95:79:13:69:17:78:09:9D:58
            X509v3 Authority Key Identifier:
                keyid:15:4C:AF:94:6B:4F:EF:9C:2E:E0:FF:A2:45:BB:A4:29:C0:3B:4D:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/3130332e37352e35352e302f32342d3234203d3e203436303233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.75.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:34:8f:52:e6:a6:34:0f:a4:06:9f:c6:aa:f2:fa:e4:dc:9a:
         58:f7:d0:c9:17:33:fc:58:7f:10:13:81:48:1c:6a:06:8a:50:
         17:f9:e5:5b:87:a9:a9:1a:0f:0a:fc:f3:40:c3:ee:42:63:a4:
         b5:19:ff:69:43:5c:45:13:bb:e3:d2:98:80:5b:2d:50:40:4f:
         e5:f6:87:6b:93:33:11:85:19:70:2d:eb:d0:fb:33:08:d2:97:
         a6:26:42:ae:e5:36:e3:35:ac:73:ad:0d:3e:8b:3f:ef:b0:e0:
         71:0a:1b:e2:fd:4c:1f:5f:27:19:d3:78:34:25:fc:4a:05:6e:
         38:2b:ec:c9:48:05:bd:25:a2:b5:89:84:55:14:4f:7d:f5:b3:
         72:15:94:6c:bd:81:24:ae:7c:ad:1a:0c:59:3d:59:92:0f:1b:
         e9:19:bc:7d:1b:d4:6f:58:42:c7:8f:e4:58:d7:07:ce:26:6d:
         e6:f8:92:0c:a3:a9:f6:88:16:8f:a9:a3:ad:41:02:24:2e:ca:
         c1:7c:21:f9:67:b0:fd:e3:17:30:11:fb:d0:5d:bb:5d:66:03:
         95:8c:89:97:18:cb:d2:10:78:ee:54:b7:3e:42:c1:93:e8:1e:
         e4:b2:f2:f7:40:50:55:7d:ca:94:af:14:f7:17:57:40:3f:ae:
         26:a8:22:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 04:48:04 2025 by rpki-client