Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/dfc30c71-df2d-4fc7-b435-7511df287a6b/0/3130332e3231302e322e302f32342d3234203d3e20313530393935.roa
File:                     3130332e3231302e322e302f32342d3234203d3e20313530393935.roa (raw, json)
Hash identifier:          0Dp8E4LSLWldobjFKfVvudN74JKOjxQzpOolgbOemt0=
Subject key identifier:   9E:77:71:A9:B6:E8:15:95:5D:F9:BC:AE:57:DB:00:3F:91:F3:B3:BA
Certificate issuer:       /CN=C619643EEB518333DAE2A79933BEB1320C89CA87
Certificate serial:       4A68522CB6B6FC77A1EC81D59A693831EBD3F540
Authority key identifier: C6:19:64:3E:EB:51:83:33:DA:E2:A7:99:33:BE:B1:32:0C:89:CA:87
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C619643EEB518333DAE2A79933BEB1320C89CA87.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/dfc30c71-df2d-4fc7-b435-7511df287a6b/0/3130332e3231302e322e302f32342d3234203d3e20313530393935.roa
Signing time:             Tue 23 Sep 2025 18:00:01 +0000
ROA not before:           Tue 23 Sep 2025 17:55:01 +0000
ROA not after:            Tue 22 Sep 2026 18:00:01 +0000
asID:                     150995
IP address blocks:        103.210.2.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/dfc30c71-df2d-4fc7-b435-7511df287a6b/0/C619643EEB518333DAE2A79933BEB1320C89CA87.crl
                          rsync://repo-rpki.idnic.net/repo/dfc30c71-df2d-4fc7-b435-7511df287a6b/0/C619643EEB518333DAE2A79933BEB1320C89CA87.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C619643EEB518333DAE2A79933BEB1320C89CA87.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Oct 2025 10:34:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:68:52:2c:b6:b6:fc:77:a1:ec:81:d5:9a:69:38:31:eb:d3:f5:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C619643EEB518333DAE2A79933BEB1320C89CA87
        Validity
            Not Before: Sep 23 17:55:01 2025 GMT
            Not After : Sep 22 18:00:01 2026 GMT
        Subject: CN=9E7771A9B6E815955DF9BCAE57DB003F91F3B3BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:d5:6e:ae:d6:db:cb:54:e6:d9:11:db:80:b5:
                    a9:d9:cd:9f:46:e8:78:47:02:72:d2:5b:1a:8b:85:
                    04:7f:80:ba:f9:3e:6b:8c:4d:1d:da:01:9f:c4:41:
                    d5:b2:14:b1:ed:9c:17:a7:76:4f:7c:f6:92:4b:41:
                    da:78:8d:2d:1f:33:f7:65:d3:9b:eb:79:2c:59:04:
                    b7:bc:bc:bf:5e:cc:c5:e3:a7:04:6a:82:42:ba:b3:
                    f9:b4:5e:df:1b:7d:5c:54:fb:9a:03:6e:a5:b5:76:
                    d7:80:b7:bb:81:7e:2a:04:d9:d8:9a:7f:e8:30:22:
                    8c:47:f6:99:89:f9:4c:4f:da:5e:31:d2:11:19:a7:
                    da:c1:84:76:17:9a:52:4b:5e:bd:97:d1:6f:08:e4:
                    ea:d1:3d:c2:a8:f8:1e:02:a8:5a:27:4f:dd:59:94:
                    03:64:d5:ee:b4:46:fc:a9:e1:53:d3:d5:83:f5:58:
                    4a:84:b8:a7:07:0b:d0:7b:c6:1e:e5:d5:60:ce:3b:
                    00:7d:4c:c2:de:36:4f:de:3b:a5:1b:3f:a7:f3:c1:
                    73:3b:c3:8d:4b:d7:ab:4b:ea:37:6c:2c:b5:a4:d8:
                    81:35:05:17:84:89:2e:2c:b4:54:7e:04:b9:94:c4:
                    28:38:9e:e3:b5:b6:a5:6c:4d:c7:cf:4a:63:9a:ac:
                    ad:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:77:71:A9:B6:E8:15:95:5D:F9:BC:AE:57:DB:00:3F:91:F3:B3:BA
            X509v3 Authority Key Identifier:
                keyid:C6:19:64:3E:EB:51:83:33:DA:E2:A7:99:33:BE:B1:32:0C:89:CA:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/dfc30c71-df2d-4fc7-b435-7511df287a6b/0/C619643EEB518333DAE2A79933BEB1320C89CA87.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C619643EEB518333DAE2A79933BEB1320C89CA87.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dfc30c71-df2d-4fc7-b435-7511df287a6b/0/3130332e3231302e322e302f32342d3234203d3e20313530393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.210.2.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:16:19:74:e5:ef:4d:a2:18:de:fb:97:73:df:8c:16:8e:7b:
         17:02:dd:66:af:ac:8c:2c:21:a4:f3:67:85:d4:35:fe:24:e4:
         83:ab:d8:d0:49:59:8a:a1:04:bd:d1:86:05:35:3c:6f:b3:81:
         47:70:68:02:50:29:93:46:4f:36:55:22:82:2f:7b:64:77:e3:
         27:87:6e:09:8b:79:89:8a:ea:62:02:14:a2:45:cc:29:86:00:
         42:50:be:d8:f4:71:42:ff:79:70:a6:69:42:0d:c6:dc:a6:77:
         7e:44:ec:58:df:be:88:c7:0c:26:49:04:51:00:58:85:c1:96:
         b8:e4:66:4e:75:2a:f5:72:07:da:37:49:fd:65:b9:3c:a8:7b:
         50:c0:67:2d:8c:c5:f9:6e:89:51:68:0f:1e:02:e3:74:c5:9c:
         ee:db:22:62:4b:b4:0b:2a:c8:7b:30:ab:cb:68:7e:fe:37:34:
         da:7d:40:f5:16:32:fe:51:87:5f:38:cb:d2:a7:53:a9:f7:25:
         95:e3:07:da:cd:00:61:4e:6a:ec:74:bf:09:1f:89:89:2f:89:
         b5:ed:c7:4e:42:81:4d:51:9b:5a:b4:d6:0f:21:19:b6:f0:e0:
         be:e1:1d:48:3d:82:36:9a:d2:a9:2c:09:49:0e:cc:ee:f1:69:
         19:b1:82:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:10:10 2025 by rpki-client