Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e17bd502-42c2-400d-a2ad-d1754365a45d/0/3130332e3130362e3231362e302f32322d3232203d3e20313337333239.roa
File:                     3130332e3130362e3231362e302f32322d3232203d3e20313337333239.roa (raw, json)
Hash identifier:          q4WFCaiQmAzAaQj4nP7IWYXfOXbnr1y6bJzPyRDDyHU=
Subject key identifier:   F5:92:E6:DB:92:DC:7D:4C:C4:71:B3:DD:DB:5C:0B:91:6A:83:D0:38
Certificate issuer:       /CN=19093F7761A9E337D03405604750BFD4ADC2121E
Certificate serial:       0611EFD8D3C995775295B4D5562537260EB34C3A
Authority key identifier: 19:09:3F:77:61:A9:E3:37:D0:34:05:60:47:50:BF:D4:AD:C2:12:1E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19093F7761A9E337D03405604750BFD4ADC2121E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e17bd502-42c2-400d-a2ad-d1754365a45d/0/3130332e3130362e3231362e302f32322d3232203d3e20313337333239.roa
Signing time:             Wed 06 Aug 2025 18:00:03 +0000
ROA not before:           Wed 06 Aug 2025 17:55:03 +0000
ROA not after:            Wed 05 Aug 2026 18:00:03 +0000
asID:                     137329
IP address blocks:        103.106.216.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e17bd502-42c2-400d-a2ad-d1754365a45d/0/19093F7761A9E337D03405604750BFD4ADC2121E.crl
                          rsync://repo-rpki.idnic.net/repo/e17bd502-42c2-400d-a2ad-d1754365a45d/0/19093F7761A9E337D03405604750BFD4ADC2121E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19093F7761A9E337D03405604750BFD4ADC2121E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Aug 2025 20:24:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:11:ef:d8:d3:c9:95:77:52:95:b4:d5:56:25:37:26:0e:b3:4c:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19093F7761A9E337D03405604750BFD4ADC2121E
        Validity
            Not Before: Aug  6 17:55:03 2025 GMT
            Not After : Aug  5 18:00:03 2026 GMT
        Subject: CN=F592E6DB92DC7D4CC471B3DDDB5C0B916A83D038
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:5d:9b:84:01:08:34:ef:2d:37:91:a6:47:8f:
                    9a:6b:c2:1b:12:d0:fe:c9:10:68:d3:45:8c:ef:b7:
                    92:cb:16:bf:3b:8f:ab:16:10:5b:94:1d:a9:12:ff:
                    52:0b:0a:b3:00:b3:86:6d:a3:37:d2:27:9b:1e:ca:
                    1b:a0:e3:77:67:75:6d:99:b4:9c:f5:46:b7:d4:85:
                    45:92:91:42:c9:94:92:b7:8a:de:82:db:86:a7:20:
                    cc:5a:28:40:bd:08:2a:f9:9d:95:a3:49:b6:aa:99:
                    d5:3a:9b:ca:61:c0:05:c4:ac:f2:5e:5b:05:5a:f5:
                    43:fb:c2:95:0b:b0:c1:24:d5:38:0f:58:6e:60:4c:
                    c2:2d:d7:a2:b8:ef:2a:4a:0b:65:38:65:f3:95:3f:
                    31:82:bf:b6:ab:6b:dc:76:e1:a6:6b:5f:22:3c:14:
                    19:f1:11:de:6f:ea:94:c6:38:64:c7:97:ca:74:d2:
                    a8:d9:cd:97:11:1f:95:57:b4:43:55:79:f3:d5:6a:
                    15:c2:32:1a:4a:29:b4:d8:0b:db:a2:0e:9d:84:0f:
                    c9:52:68:91:45:ba:65:3a:d7:d9:6e:0a:96:05:c5:
                    d0:14:0c:f6:22:6e:df:bb:e8:f6:17:59:a5:36:a4:
                    93:f3:43:a8:74:f5:34:67:4c:0a:f7:22:5e:a0:09:
                    da:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:92:E6:DB:92:DC:7D:4C:C4:71:B3:DD:DB:5C:0B:91:6A:83:D0:38
            X509v3 Authority Key Identifier:
                keyid:19:09:3F:77:61:A9:E3:37:D0:34:05:60:47:50:BF:D4:AD:C2:12:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e17bd502-42c2-400d-a2ad-d1754365a45d/0/19093F7761A9E337D03405604750BFD4ADC2121E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19093F7761A9E337D03405604750BFD4ADC2121E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e17bd502-42c2-400d-a2ad-d1754365a45d/0/3130332e3130362e3231362e302f32322d3232203d3e20313337333239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.106.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2b:2d:70:47:e6:c4:31:cf:97:5e:7f:82:ad:82:05:93:eb:52:
         68:a4:10:3d:8a:67:c7:9c:11:22:c4:4d:84:20:43:c7:4a:53:
         2c:45:d5:61:2e:f1:3c:95:00:7d:52:1d:3f:97:93:c6:1e:ec:
         7f:36:9a:36:d2:ef:b4:b2:42:74:34:33:dd:8c:77:1a:4c:4d:
         d7:6f:75:a2:2e:f0:f6:13:d0:d8:30:fa:7e:2a:e1:88:14:04:
         a1:68:39:6b:94:d7:8c:8d:9a:48:3d:e4:14:b7:75:5a:d4:cf:
         57:45:d9:ca:0f:c3:aa:6f:b9:f3:b2:57:27:5f:64:6b:fb:36:
         98:0a:ea:23:bf:76:7f:bb:b7:7e:3f:1c:6f:2b:a1:49:ce:f8:
         d2:27:a7:c2:92:bf:cb:97:52:c4:87:91:98:8c:8b:35:ff:5a:
         03:74:95:c5:b6:5f:d3:36:77:14:0e:04:44:9c:fc:c5:72:8b:
         3f:d3:13:24:d0:44:db:63:65:fe:38:a9:3e:c9:f2:20:e5:a6:
         91:b8:69:2a:89:69:21:ac:e8:d8:05:20:bb:17:05:41:55:c5:
         7f:49:b4:bf:db:33:d7:ec:1a:c3:83:31:77:22:5a:22:e0:ac:
         4b:66:d8:39:c0:0b:93:de:c4:b5:c0:9d:34:98:23:28:f0:80:
         d4:bb:25:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:57:47 2025 by rpki-client