Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/3130332e35312e3230342e302f32342d3234203d3e203435333035.roa
File:                     3130332e35312e3230342e302f32342d3234203d3e203435333035.roa (raw, json)
Hash identifier:          fJYZwNXP9c0qCqp/KxrF/x9WsoAi9ZRyA7KgfjlBJW0=
Subject key identifier:   1B:F1:B2:71:44:20:FD:26:EC:BA:ED:31:A6:8A:47:DD:A6:90:7E:79
Certificate issuer:       /CN=63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07
Certificate serial:       6C6AD1588CF5A36BD6174F9C4026E6759522992D
Authority key identifier: 63:E0:67:66:3A:09:E3:E8:4F:1C:5B:1C:31:DE:AB:FF:2A:4A:7C:07
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/3130332e35312e3230342e302f32342d3234203d3e203435333035.roa
Signing time:             Tue 30 Sep 2025 04:02:25 +0000
ROA not before:           Tue 30 Sep 2025 03:57:25 +0000
ROA not after:            Tue 29 Sep 2026 04:02:25 +0000
asID:                     45305
IP address blocks:        103.51.204.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07.crl
                          rsync://repo-rpki.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 21 Oct 2025 17:39:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:6a:d1:58:8c:f5:a3:6b:d6:17:4f:9c:40:26:e6:75:95:22:99:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07
        Validity
            Not Before: Sep 30 03:57:25 2025 GMT
            Not After : Sep 29 04:02:25 2026 GMT
        Subject: CN=1BF1B2714420FD26ECBAED31A68A47DDA6907E79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:f2:50:07:b9:66:f8:80:3b:24:67:0e:f5:11:
                    5b:17:91:6a:29:dc:9f:3a:e7:bd:e9:2b:61:f4:d1:
                    d7:48:17:78:ef:fd:ed:26:45:6e:8f:4a:0d:f1:f0:
                    8b:ce:c2:4c:df:97:4a:00:c5:50:ef:1d:17:47:d3:
                    91:17:84:94:de:c2:1d:0f:e7:ae:ea:5c:3f:69:ce:
                    d9:d3:ca:40:3a:04:d5:d6:5d:7d:c9:91:6a:b9:0a:
                    9e:e2:a7:5b:f1:dc:fb:91:38:44:f1:63:79:43:59:
                    d1:41:f2:cf:fa:b6:1f:da:3a:13:5c:62:5e:fd:c0:
                    7c:0f:28:b2:10:00:e4:fd:b6:71:76:f3:49:24:c2:
                    86:02:3b:71:53:08:3e:4a:5b:1f:98:9b:f9:13:cc:
                    ef:ea:11:c7:23:e2:f9:88:34:19:03:0d:8b:85:05:
                    4a:b1:e7:0e:5b:46:27:26:42:83:64:56:7c:06:85:
                    9a:5e:48:bb:b0:f0:73:ce:b1:68:a1:72:ed:6e:fa:
                    af:d1:9e:1c:67:76:24:86:15:75:fb:0f:fc:21:d5:
                    a0:06:90:18:56:89:62:12:9b:0b:0f:55:58:8e:dd:
                    23:1f:f2:c9:df:4e:89:a3:4a:8c:80:64:54:92:39:
                    fe:7f:7e:2e:c5:47:d0:fd:83:85:2b:45:cb:8b:de:
                    81:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:F1:B2:71:44:20:FD:26:EC:BA:ED:31:A6:8A:47:DD:A6:90:7E:79
            X509v3 Authority Key Identifier:
                keyid:63:E0:67:66:3A:09:E3:E8:4F:1C:5B:1C:31:DE:AB:FF:2A:4A:7C:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/3130332e35312e3230342e302f32342d3234203d3e203435333035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.51.204.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:86:99:40:9d:fd:95:c0:d5:32:4a:60:d8:7a:7d:7f:b7:86:
         94:01:9c:b0:c8:fc:d1:72:a8:2b:72:6f:4d:44:bc:02:48:6c:
         ce:77:85:d0:98:82:3e:4a:23:ee:3d:86:02:47:cc:31:95:8f:
         18:04:b1:4d:c1:42:0b:e3:e7:66:57:86:08:80:e1:4a:57:15:
         47:ad:82:c9:a1:47:4f:41:34:2c:2e:a7:fa:e2:8c:6e:c8:d1:
         5a:3c:59:87:72:08:61:af:2b:d6:90:a5:af:66:9d:14:00:df:
         14:f9:88:0a:7d:13:ac:73:19:59:33:50:f8:ab:e3:dc:45:6e:
         ae:2e:85:64:6b:15:c4:db:99:6b:23:bf:cb:2f:c7:13:2a:22:
         c6:1e:68:81:20:bc:93:77:2a:88:21:6b:09:50:77:57:cb:98:
         3d:1a:6f:02:a8:85:2a:66:2f:8d:ea:99:0c:01:7f:dd:a1:71:
         4d:ed:cf:69:68:d5:8b:70:48:aa:00:60:d2:84:4b:8d:8d:f9:
         e3:69:3a:75:09:94:d8:26:8c:58:dc:f1:86:a2:ae:64:47:66:
         a4:d4:0a:10:04:ff:ed:d7:63:5f:ca:2b:ae:ee:6b:09:9f:e0:
         6d:db:b1:31:73:df:6f:0d:36:28:d2:ca:06:5c:c4:7d:cb:d3:
         5e:59:64:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:24:05 2025 by rpki-client