Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/3130332e35312e3230342e302f32332d3234203d3e203435333035.roa
File:                     3130332e35312e3230342e302f32332d3234203d3e203435333035.roa (raw, json)
Hash identifier:          UrdeubFj8MJMBosQTjUTlkyTLJKd5ipS0sOIHGHNGXw=
Subject key identifier:   0A:CB:E3:02:D2:79:C7:0D:64:3F:7C:CE:8E:AE:17:A1:E0:71:52:3F
Certificate issuer:       /CN=63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07
Certificate serial:       68D9BDE1A63D6FD4A26A4453C43BC08F36965CE0
Authority key identifier: 63:E0:67:66:3A:09:E3:E8:4F:1C:5B:1C:31:DE:AB:FF:2A:4A:7C:07
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/3130332e35312e3230342e302f32332d3234203d3e203435333035.roa
Signing time:             Tue 30 Sep 2025 05:00:01 +0000
ROA not before:           Tue 30 Sep 2025 04:55:01 +0000
ROA not after:            Tue 29 Sep 2026 05:00:01 +0000
asID:                     45305
IP address blocks:        103.51.204.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07.crl
                          rsync://repo-rpki.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 21 Oct 2025 17:39:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:d9:bd:e1:a6:3d:6f:d4:a2:6a:44:53:c4:3b:c0:8f:36:96:5c:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07
        Validity
            Not Before: Sep 30 04:55:01 2025 GMT
            Not After : Sep 29 05:00:01 2026 GMT
        Subject: CN=0ACBE302D279C70D643F7CCE8EAE17A1E071523F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:ea:13:b9:09:79:6a:3b:46:00:cc:0b:ae:d0:
                    37:ea:f8:06:1a:28:f9:3b:ca:7d:85:7b:c0:b3:7c:
                    02:a8:2e:85:f3:89:36:5e:e4:a5:1c:62:50:2f:60:
                    1f:ef:45:33:66:58:d1:60:a8:96:48:f7:28:a4:95:
                    49:17:3c:90:b5:7e:1e:7d:f2:ee:66:0c:1b:1e:cb:
                    69:7e:f6:ff:65:6f:a3:c5:8d:37:5c:d3:34:18:bd:
                    70:10:30:19:a1:4e:fa:2e:16:4e:ec:b9:f9:45:59:
                    7d:3e:0e:7a:f2:59:33:e5:f1:19:b2:57:b9:6f:6c:
                    22:5f:7c:4a:79:da:fb:22:5f:6a:7b:0c:7e:79:74:
                    09:4d:96:22:d6:b5:e9:cc:a2:8d:b5:f6:e5:d3:85:
                    2a:d8:6c:a5:8a:36:69:05:e0:5e:6c:1d:17:0e:64:
                    25:a7:62:13:42:74:c8:d9:40:de:7b:1f:80:fe:89:
                    e3:e1:6e:50:cb:f9:10:45:e5:bb:fa:0c:85:bf:4a:
                    0a:b4:bf:5d:c0:89:3f:b2:bc:2d:71:25:38:2a:55:
                    f2:4a:75:cc:f7:bb:d3:f2:d8:24:b1:84:3e:27:3b:
                    22:c4:6c:e6:2a:48:59:3e:07:17:84:5b:75:69:9c:
                    4b:4b:af:5f:dc:88:16:27:a1:46:78:c1:78:5e:c6:
                    2d:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:CB:E3:02:D2:79:C7:0D:64:3F:7C:CE:8E:AE:17:A1:E0:71:52:3F
            X509v3 Authority Key Identifier:
                keyid:63:E0:67:66:3A:09:E3:E8:4F:1C:5B:1C:31:DE:AB:FF:2A:4A:7C:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/3130332e35312e3230342e302f32332d3234203d3e203435333035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.51.204.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6e:9a:35:bd:28:23:1a:e1:16:42:c3:68:2d:bd:4d:e5:2e:fc:
         74:30:66:7e:4d:d9:d2:2d:8b:59:64:2e:9e:78:fc:33:8e:ab:
         a8:67:09:15:89:ac:c6:b2:15:ca:09:99:e1:f6:b8:2e:ce:ec:
         55:c5:7c:8f:b5:cf:65:a0:86:53:61:7f:ee:32:0e:38:af:b8:
         60:31:da:57:7b:c2:39:2d:f0:db:1a:84:8a:82:1b:a2:42:23:
         81:1d:35:e0:05:4b:b2:db:7e:da:bc:53:96:30:f4:af:8e:86:
         17:37:f0:55:f1:e0:d8:4e:c0:37:7e:ea:c8:2f:22:21:6b:01:
         8b:5e:23:ba:a8:1c:b5:d5:3f:63:54:04:f1:5a:55:c9:20:42:
         0b:ba:11:34:a4:65:04:22:ba:fe:c1:ad:44:3a:fe:ed:11:31:
         55:69:5b:a3:34:88:2e:14:4e:91:39:5f:9a:38:a2:fa:5c:34:
         be:45:8b:80:81:7c:e4:c1:23:2c:b1:ba:d7:39:62:ed:b4:ee:
         d1:69:51:1a:30:b0:b5:d6:96:95:eb:52:14:e6:51:2f:d3:71:
         b6:69:36:99:2c:32:4f:78:8a:cc:ba:8a:80:fc:9e:35:f2:83:
         1b:cc:dd:83:17:f0:c7:db:12:27:bf:f0:a9:6f:0b:07:12:26:
         69:92:cf:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:23:34 2025 by rpki-client