Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/b9f60927-1f34-4c54-9674-f9deaf75c2fc/0/3130332e3137352e3138382e302f32332d3234203d3e20313334363538.roa
File:                     3130332e3137352e3138382e302f32332d3234203d3e20313334363538.roa (raw, json)
Hash identifier:          vFZDJyrW7Nf7Z4DcMgOnKecQwvqUWGovWuuXKrThLwM=
Subject key identifier:   55:20:66:3F:DB:01:4D:F8:64:8E:8F:CF:AD:0C:29:F1:9D:51:F1:F6
Certificate issuer:       /CN=AFCEE1D439DB1441C4F21223918AC0811E65D56F
Certificate serial:       32118F6AFB8BB74D5B736D87B8FB885736BC89AF
Authority key identifier: AF:CE:E1:D4:39:DB:14:41:C4:F2:12:23:91:8A:C0:81:1E:65:D5:6F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFCEE1D439DB1441C4F21223918AC0811E65D56F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/b9f60927-1f34-4c54-9674-f9deaf75c2fc/0/3130332e3137352e3138382e302f32332d3234203d3e20313334363538.roa
Signing time:             Fri 22 Aug 2025 20:00:02 +0000
ROA not before:           Fri 22 Aug 2025 19:55:02 +0000
ROA not after:            Fri 21 Aug 2026 20:00:02 +0000
asID:                     134658
IP address blocks:        103.175.188.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/b9f60927-1f34-4c54-9674-f9deaf75c2fc/0/AFCEE1D439DB1441C4F21223918AC0811E65D56F.crl
                          rsync://repo-rpki.idnic.net/repo/b9f60927-1f34-4c54-9674-f9deaf75c2fc/0/AFCEE1D439DB1441C4F21223918AC0811E65D56F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFCEE1D439DB1441C4F21223918AC0811E65D56F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Aug 2025 22:23:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:11:8f:6a:fb:8b:b7:4d:5b:73:6d:87:b8:fb:88:57:36:bc:89:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFCEE1D439DB1441C4F21223918AC0811E65D56F
        Validity
            Not Before: Aug 22 19:55:02 2025 GMT
            Not After : Aug 21 20:00:02 2026 GMT
        Subject: CN=5520663FDB014DF8648E8FCFAD0C29F19D51F1F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:77:7b:16:a9:62:08:8e:8f:75:8f:ce:43:2d:
                    73:14:84:dc:7b:31:5e:f9:05:5a:29:20:f6:e4:ea:
                    08:07:23:b9:20:9e:93:8d:7b:85:09:16:6d:34:4c:
                    4e:01:bc:18:ef:6f:2e:7b:ef:16:c6:be:29:d5:6b:
                    b2:f7:00:53:3f:73:ea:42:f7:21:c6:1f:af:59:35:
                    11:5d:b0:ae:36:ba:4b:cd:dd:d8:f2:b0:14:ba:f4:
                    4b:ff:38:e6:8d:ec:3f:97:67:d2:95:cd:d7:dc:fd:
                    74:97:c7:d9:00:6a:94:cf:34:8b:3e:22:3e:4e:f4:
                    a5:7a:4c:a1:b9:85:43:1a:1d:bf:71:aa:85:37:82:
                    01:fe:0c:2f:26:ae:57:f6:01:f5:a0:3b:87:86:22:
                    bd:4d:76:10:3b:9f:43:d0:76:7c:6e:2b:b3:ca:75:
                    70:d2:2b:f3:74:7c:2a:5d:af:62:a6:d7:d8:d6:45:
                    45:66:e8:7b:3c:4d:79:57:85:af:f0:48:ba:3e:c1:
                    b6:41:31:47:bd:97:1a:51:b7:c0:be:a3:df:3c:fc:
                    06:61:c0:b5:24:d1:19:b4:f3:29:44:b2:16:4b:6b:
                    eb:a9:ce:0f:71:fc:d7:12:65:0e:f1:5f:40:46:98:
                    eb:48:b4:f5:32:0e:5e:24:b3:6d:cc:13:4f:b9:3d:
                    d8:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:20:66:3F:DB:01:4D:F8:64:8E:8F:CF:AD:0C:29:F1:9D:51:F1:F6
            X509v3 Authority Key Identifier:
                keyid:AF:CE:E1:D4:39:DB:14:41:C4:F2:12:23:91:8A:C0:81:1E:65:D5:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/b9f60927-1f34-4c54-9674-f9deaf75c2fc/0/AFCEE1D439DB1441C4F21223918AC0811E65D56F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFCEE1D439DB1441C4F21223918AC0811E65D56F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b9f60927-1f34-4c54-9674-f9deaf75c2fc/0/3130332e3137352e3138382e302f32332d3234203d3e20313334363538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.175.188.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3a:66:a7:2f:02:c8:e1:a4:ab:60:dc:d1:43:fa:c5:86:e2:db:
         8b:ca:7a:1a:71:c5:22:dd:5d:c2:f0:b2:4f:0b:1e:40:c0:98:
         9e:6b:3c:da:ac:a8:f6:96:e2:4a:e6:86:2f:32:59:c4:58:01:
         a7:49:df:80:92:83:12:23:91:47:cf:99:8c:23:6c:35:1d:cb:
         bb:ae:4a:e8:c3:2e:d4:74:f3:5a:4c:3c:ed:54:b6:01:81:37:
         7a:a0:96:70:b9:10:5b:8d:0a:18:8e:65:97:ee:07:d2:ad:d7:
         6e:cb:ea:ab:4c:81:bc:5d:87:d7:8d:03:55:1d:47:eb:25:b8:
         fb:b9:6c:32:10:89:16:0c:e0:e9:3f:ad:ba:d4:3e:10:12:ed:
         d1:73:e2:52:bd:7e:7d:9d:a7:1b:47:12:55:db:90:1c:18:5a:
         0f:94:ea:f6:4f:1a:5a:5b:9d:f5:f5:eb:39:72:24:91:f6:a2:
         19:bf:11:0e:31:0f:17:ac:1d:f9:fd:53:f8:49:05:87:84:3b:
         ca:82:95:59:ac:cc:02:93:6f:30:02:d0:0f:3b:a3:2a:3d:52:
         30:e1:ca:01:22:72:54:3a:90:20:8d:b2:79:fe:9e:cb:ea:a5:
         e0:da:0e:b9:d9:b3:68:b2:71:9f:0c:ce:de:a9:59:73:31:f0:
         a4:65:45:d6
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUMhGPavuLt01bc22HuPuIVza8ia8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUZDRUUxRDQzOURCMTQ0MUM0RjIxMjIzOTE4QUMwODEx
RTY1RDU2RjAeFw0yNTA4MjIxOTU1MDJaFw0yNjA4MjEyMDAwMDJaMDMxMTAvBgNV
BAMTKDU1MjA2NjNGREIwMTRERjg2NDhFOEZDRkFEMEMyOUYxOUQ1MUYxRjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjd3sWqWIIjo91j85DLXMUhNx7
MV75BVopIPbk6ggHI7kgnpONe4UJFm00TE4BvBjvby577xbGvinVa7L3AFM/c+pC
9yHGH69ZNRFdsK42ukvN3djysBS69Ev/OOaN7D+XZ9KVzdfc/XSXx9kAapTPNIs+
Ij5O9KV6TKG5hUMaHb9xqoU3ggH+DC8mrlf2AfWgO4eGIr1NdhA7n0PQdnxuK7PK
dXDSK/N0fCpdr2Km19jWRUVm6Hs8TXlXha/wSLo+wbZBMUe9lxpRt8C+o988/AZh
wLUk0Rm08ylEshZLa+upzg9x/NcSZQ7xX0BGmOtItPUyDl4ks23ME0+5Pdh/AgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUVSBmP9sBTfhkjo/PrQwp8Z1R8fYwHwYDVR0j
BBgwFoAUr87h1DnbFEHE8hIjkYrAgR5l1W8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i
OWY2MDkyNy0xZjM0LTRjNTQtOTY3NC1mOWRlYWY3NWMyZmMvMC9BRkNFRTFENDM5
REIxNDQxQzRGMjEyMjM5MThBQzA4MTFFNjVENTZGLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQUZDRUUxRDQzOURCMTQ0MUM0RjIxMjIzOTE4QUMwODExRTY1
RDU2Ri5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2I5ZjYwOTI3LTFmMzQtNGM1NC05
Njc0LWY5ZGVhZjc1YzJmYy8wLzMxMzAzMzJlMzEzNzM1MmUzMTM4MzgyZTMwMmYz
MjMzMmQzMjM0MjAzZDNlMjAzMTMzMzQzNjM1Mzgucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnr7wwDQYJ
KoZIhvcNAQELBQADggEBADpmpy8CyOGkq2Dc0UP6xYbi24vKehpxxSLdXcLwsk8L
HkDAmJ5rPNqsqPaW4krmhi8yWcRYAadJ34CSgxIjkUfPmYwjbDUdy7uuSujDLtR0
81pMPO1UtgGBN3qglnC5EFuNChiOZZfuB9Kt127L6qtMgbxdh9eNA1UdR+sluPu5
bDIQiRYM4Ok/rbrUPhAS7dFz4lK9fn2dpxtHElXbkBwYWg+U6vZPGlpbnfX16zly
JJH2ohm/EQ4xDxesHfn9U/hJBYeEO8qClVmszAKTbzAC0A87oyo9UjDhygEiclQ6
kCCNsnn+nsvqpeDaDrnZs2iycZ8Mzt6pWXMx8KRlRdY=
-----END CERTIFICATE-----
Generated at Sat Aug 23 20:18:56 2025 by rpki-client