Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/eb81bcea-b70f-4374-924b-b6c778109837/0/3130332e3130382e3234312e302f32342d3234203d3e20313333373936.roa
File:                     3130332e3130382e3234312e302f32342d3234203d3e20313333373936.roa (raw, json)
Hash identifier:          kunQ1kMqm5dCsvOsI1+HGGCtiZ5NKsilDdmi0e2JkQE=
Subject key identifier:   B6:8E:2E:FE:2E:DB:56:CA:A3:70:F1:14:36:90:DC:30:CF:6D:86:46
Certificate issuer:       /CN=CA47BA6D9780611AEA68BC9BF72724AE94799AA6
Certificate serial:       62E2A2F6160ECEAE3A13CF9A9C2D9C62CF1601CC
Authority key identifier: CA:47:BA:6D:97:80:61:1A:EA:68:BC:9B:F7:27:24:AE:94:79:9A:A6
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA47BA6D9780611AEA68BC9BF72724AE94799AA6.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/eb81bcea-b70f-4374-924b-b6c778109837/0/3130332e3130382e3234312e302f32342d3234203d3e20313333373936.roa
Signing time:             Wed 10 Sep 2025 15:00:49 +0000
ROA not before:           Wed 10 Sep 2025 14:55:49 +0000
ROA not after:            Wed 09 Sep 2026 15:00:49 +0000
asID:                     133796
IP address blocks:        103.108.241.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/eb81bcea-b70f-4374-924b-b6c778109837/0/CA47BA6D9780611AEA68BC9BF72724AE94799AA6.crl
                          rsync://repo-rpki.idnic.net/repo/eb81bcea-b70f-4374-924b-b6c778109837/0/CA47BA6D9780611AEA68BC9BF72724AE94799AA6.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA47BA6D9780611AEA68BC9BF72724AE94799AA6.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Oct 2025 06:46:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:e2:a2:f6:16:0e:ce:ae:3a:13:cf:9a:9c:2d:9c:62:cf:16:01:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA47BA6D9780611AEA68BC9BF72724AE94799AA6
        Validity
            Not Before: Sep 10 14:55:49 2025 GMT
            Not After : Sep  9 15:00:49 2026 GMT
        Subject: CN=B68E2EFE2EDB56CAA370F1143690DC30CF6D8646
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:23:f5:69:a3:ed:6e:53:cd:e4:57:e8:9b:b2:
                    cc:3d:17:90:9c:eb:35:4d:ea:1d:a9:d0:19:7c:de:
                    a5:69:76:aa:ce:55:1f:6b:af:ef:ab:cb:83:7a:76:
                    b1:77:9e:03:46:f6:51:e2:f2:e8:44:00:8a:51:80:
                    fa:ad:30:ba:54:a1:7d:97:02:9e:c2:66:16:89:dd:
                    0e:fa:1e:09:fe:8b:53:33:6a:c8:c5:96:be:30:53:
                    85:d9:2f:c5:85:d4:ca:e7:92:c8:c5:3e:de:3e:84:
                    5a:9f:8f:c3:9c:a4:b1:e5:6d:5d:de:e9:30:47:71:
                    9a:40:19:9c:d0:bb:d9:33:ad:2c:f5:d4:47:b5:68:
                    5a:6a:fd:ea:b4:d4:80:67:a6:65:d9:6e:e0:5f:71:
                    8a:a9:d8:9c:1e:e9:c9:16:55:58:32:82:e3:e7:92:
                    a9:30:a8:21:9b:4b:c6:4c:ab:08:70:6a:15:2d:5e:
                    0d:9a:21:9e:1d:4e:09:2a:bb:51:3d:d9:b8:a9:9d:
                    1b:c4:bb:d3:72:7d:0e:95:d5:72:ce:18:d4:22:c5:
                    a0:fe:85:46:5d:ee:ba:c4:fa:ed:75:ce:88:ae:72:
                    db:80:50:a2:d6:3a:f7:0b:40:39:51:7c:32:93:b3:
                    91:27:0f:17:e0:49:0b:76:e1:95:6e:e6:87:3f:a2:
                    06:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:8E:2E:FE:2E:DB:56:CA:A3:70:F1:14:36:90:DC:30:CF:6D:86:46
            X509v3 Authority Key Identifier:
                keyid:CA:47:BA:6D:97:80:61:1A:EA:68:BC:9B:F7:27:24:AE:94:79:9A:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/eb81bcea-b70f-4374-924b-b6c778109837/0/CA47BA6D9780611AEA68BC9BF72724AE94799AA6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA47BA6D9780611AEA68BC9BF72724AE94799AA6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/eb81bcea-b70f-4374-924b-b6c778109837/0/3130332e3130382e3234312e302f32342d3234203d3e20313333373936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.108.241.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:fe:0d:b7:4d:2e:f1:91:a1:ef:ce:34:f9:ae:01:a0:3d:bc:
         d7:5e:2c:f1:6c:59:14:c2:63:70:f1:fe:21:5f:1a:9e:9f:9a:
         12:1e:3b:54:93:81:04:9e:d9:31:79:61:7b:72:52:e8:e9:63:
         6e:e7:e9:93:e6:19:53:bc:92:2f:17:94:f5:17:e7:8f:5e:ad:
         b0:49:6d:66:ec:16:f2:74:29:3f:8d:ba:64:12:57:88:d3:71:
         82:1e:b6:e1:79:6f:89:e4:22:12:d8:f6:c5:92:48:c4:c7:1b:
         91:31:31:28:f0:37:13:94:e9:72:2c:4a:ec:72:3f:da:c1:96:
         9f:78:7b:8b:0a:35:8b:3b:e0:2f:99:97:2b:ed:ad:45:7a:9e:
         94:78:74:d2:dc:04:bd:f5:8c:a3:62:85:d5:ea:0b:ee:e4:dd:
         7f:2c:82:a8:60:ef:e4:ec:bb:46:52:0e:c8:de:81:12:47:9c:
         bd:2d:52:f5:1c:84:48:f0:22:02:f2:84:be:e0:9f:fe:97:f7:
         28:e0:2d:3e:6c:97:7b:ab:db:48:84:a7:53:e3:07:6f:92:03:
         0b:52:ac:d4:6a:d5:14:a7:fe:35:e0:15:4d:37:41:cf:4c:d0:
         69:91:1c:27:e9:a4:a9:9d:8b:97:c7:00:19:72:8c:ab:d9:8b:
         74:a4:1c:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:18:09 2025 by rpki-client