Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/ed70cc37-1fa6-4fa0-a88c-408aed28d9aa/0/3130332e3231352e31392e302f32342d3234203d3e203634303331.roa
File:                     3130332e3231352e31392e302f32342d3234203d3e203634303331.roa (raw, json)
Hash identifier:          ye+cYX2bhxXPeuSvU8p0xT1eC4Vs1OuUE3wcpd1xNMY=
Subject key identifier:   80:F3:83:A2:2F:84:B5:EE:45:71:C8:B8:A4:6B:30:C2:88:81:9C:01
Certificate issuer:       /CN=A781200DA8EA5D34C742642B1E502D67A5B2279E
Certificate serial:       39C00AE9E6C596D4110E93F5FE14A9EAEF211A65
Authority key identifier: A7:81:20:0D:A8:EA:5D:34:C7:42:64:2B:1E:50:2D:67:A5:B2:27:9E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A781200DA8EA5D34C742642B1E502D67A5B2279E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ed70cc37-1fa6-4fa0-a88c-408aed28d9aa/0/3130332e3231352e31392e302f32342d3234203d3e203634303331.roa
Signing time:             Sat 16 Aug 2025 04:02:27 +0000
ROA not before:           Sat 16 Aug 2025 03:57:27 +0000
ROA not after:            Sat 15 Aug 2026 04:02:27 +0000
asID:                     64031
IP address blocks:        103.215.19.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ed70cc37-1fa6-4fa0-a88c-408aed28d9aa/0/A781200DA8EA5D34C742642B1E502D67A5B2279E.crl
                          rsync://repo-rpki.idnic.net/repo/ed70cc37-1fa6-4fa0-a88c-408aed28d9aa/0/A781200DA8EA5D34C742642B1E502D67A5B2279E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A781200DA8EA5D34C742642B1E502D67A5B2279E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Aug 2025 03:51:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:c0:0a:e9:e6:c5:96:d4:11:0e:93:f5:fe:14:a9:ea:ef:21:1a:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A781200DA8EA5D34C742642B1E502D67A5B2279E
        Validity
            Not Before: Aug 16 03:57:27 2025 GMT
            Not After : Aug 15 04:02:27 2026 GMT
        Subject: CN=80F383A22F84B5EE4571C8B8A46B30C288819C01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:59:dd:33:7c:79:ba:b8:e6:40:44:49:4a:11:
                    39:86:6a:90:7f:33:23:77:4e:67:84:2e:d0:61:ff:
                    13:71:1f:6b:38:04:5b:78:89:42:89:29:84:64:e7:
                    1a:85:a7:1f:b9:14:c2:26:7f:dd:90:c7:b8:a8:18:
                    db:fd:39:6b:04:62:e0:c3:e3:c0:eb:b7:85:e3:08:
                    21:8c:9c:89:cb:1a:a2:45:b1:81:d7:5c:51:1c:ae:
                    9d:f2:4d:5a:00:a5:f7:2d:fe:e2:f7:34:0d:22:ab:
                    04:14:42:4a:4c:71:a8:af:e4:12:f3:66:58:fe:2d:
                    b4:d0:9c:8d:e8:70:9b:82:52:05:7e:88:7d:1c:0b:
                    af:71:ad:a6:73:e2:59:a8:0d:99:76:8c:5a:47:51:
                    22:31:89:0f:87:e7:a6:b6:15:e4:35:73:fe:51:62:
                    e0:75:ff:4d:07:f4:bc:69:ff:e1:a5:83:08:86:08:
                    4c:57:8e:8c:b0:b8:f5:4c:fe:cd:60:76:b2:1a:15:
                    e0:10:b6:2f:51:a3:5d:7f:ca:9a:a4:15:a7:a1:3a:
                    46:52:68:64:31:25:71:74:00:53:79:a7:a6:47:86:
                    c3:40:72:f1:0c:23:1a:ba:ef:8c:8b:0a:3d:9f:7f:
                    01:1b:c9:42:24:61:64:a1:fc:a4:74:ac:78:93:ac:
                    d9:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:F3:83:A2:2F:84:B5:EE:45:71:C8:B8:A4:6B:30:C2:88:81:9C:01
            X509v3 Authority Key Identifier:
                keyid:A7:81:20:0D:A8:EA:5D:34:C7:42:64:2B:1E:50:2D:67:A5:B2:27:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ed70cc37-1fa6-4fa0-a88c-408aed28d9aa/0/A781200DA8EA5D34C742642B1E502D67A5B2279E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A781200DA8EA5D34C742642B1E502D67A5B2279E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ed70cc37-1fa6-4fa0-a88c-408aed28d9aa/0/3130332e3231352e31392e302f32342d3234203d3e203634303331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.215.19.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:6a:b9:c7:b6:0b:48:6b:70:06:93:ed:45:e2:de:43:a1:56:
         25:26:f5:97:a8:d8:82:d6:7b:ff:8e:fc:d4:73:7b:f9:c6:e5:
         9a:f3:a8:5e:48:e8:1f:42:94:34:ce:f2:45:b1:1f:d7:ea:3d:
         e1:2d:63:83:d3:94:65:7f:0d:e7:3e:c3:c7:2f:d2:f0:22:84:
         d4:21:97:63:5b:9a:30:c5:94:a0:18:ef:d1:21:1d:68:fb:be:
         27:7b:d0:86:9c:ea:75:66:2e:90:39:81:6c:84:20:47:c9:a9:
         06:fa:bc:1a:7f:c1:80:90:cc:7b:d8:8c:92:d5:75:01:13:8e:
         e9:ea:82:6a:4d:c0:7f:ec:c3:4c:2b:4d:dd:0f:8f:6d:83:dd:
         93:81:0d:2f:01:df:5c:4a:1a:9d:42:76:72:57:53:66:a6:e0:
         0e:2a:03:8b:97:36:13:ca:7e:43:d1:72:26:52:34:98:f8:fa:
         4c:ef:a5:ec:3a:0d:f9:54:41:f7:a0:e2:34:e4:56:64:00:8c:
         07:6a:21:2b:ce:9a:30:44:6f:86:26:93:2a:01:9a:2a:2f:43:
         38:15:91:8d:5c:f5:c3:e0:9e:78:07:04:b3:fe:ac:5e:9c:31:
         81:77:94:60:ff:e3:9d:f3:04:ca:e2:08:3b:1d:3c:05:1c:85:
         21:60:d4:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:22:24 2025 by rpki-client