Route Origin Authorization

$ rpki-client -vvf rpki.roa.net/rrdp/xTom/56/3130332e3139332e3133312e302f32342d3234203d3e2039333132.roa
File:                     3130332e3139332e3133312e302f32342d3234203d3e2039333132.roa (raw, json)
Hash identifier:          jHmsGnIx5S5BnpJ8LEdP4ssJ3+QbRLS8foBKmccCWWA=
Subject key identifier:   0F:CE:CE:09:51:C7:F3:3B:13:D7:9C:CF:96:24:ED:25:3F:01:2A:59
Certificate issuer:       /CN=A9181FC40000/serialNumber=E13D7744B2156E4150A1AF5D732E2A10994D8729
Certificate serial:       54EDF0C3C91AB03ED1423768BF354C68A65C3F93
Authority key identifier: E1:3D:77:44:B2:15:6E:41:50:A1:AF:5D:73:2E:2A:10:99:4D:87:29
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4T13RLIVbkFQoa9dcy4qEJlNhyk.cer
Subject info access:      rsync://rpki.roa.net/rrdp/xTom/56/3130332e3139332e3133312e302f32342d3234203d3e2039333132.roa
Signing time:             Sat 16 Aug 2025 01:48:26 +0000
ROA not before:           Sat 16 Aug 2025 01:43:26 +0000
ROA not after:            Sat 15 Aug 2026 01:48:26 +0000
asID:                     9312
IP address blocks:        103.193.131.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.crl
                          rsync://rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4T13RLIVbkFQoa9dcy4qEJlNhyk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Aug 2025 22:02:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:ed:f0:c3:c9:1a:b0:3e:d1:42:37:68:bf:35:4c:68:a6:5c:3f:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9181FC40000, serialNumber=E13D7744B2156E4150A1AF5D732E2A10994D8729
        Validity
            Not Before: Aug 16 01:43:26 2025 GMT
            Not After : Aug 15 01:48:26 2026 GMT
        Subject: CN=0FCECE0951C7F33B13D79CCF9624ED253F012A59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:96:f5:d3:25:e5:de:af:54:07:9a:bd:ce:b0:
                    c3:41:8b:25:7a:b3:12:1c:78:39:a4:e6:45:c7:3a:
                    20:fd:b9:51:79:6b:d2:ce:0d:85:75:a3:a2:b1:0e:
                    92:7f:c9:5d:02:64:e1:91:7d:9a:dc:fb:b1:81:e4:
                    e3:3a:e1:02:ca:6c:c8:c3:50:22:a8:17:f2:de:85:
                    6c:f2:97:c4:81:3e:d7:0f:f8:b6:c3:4b:df:3a:d8:
                    01:8b:a7:b0:a0:ce:e2:b2:56:6c:56:58:ab:d5:eb:
                    4d:66:d3:ec:8c:43:a2:94:dc:fc:ae:a1:73:89:48:
                    99:64:29:5b:1d:9d:97:c3:35:28:56:ff:ec:f5:df:
                    a5:97:1b:40:8e:30:d3:1e:04:74:4d:7f:93:ae:22:
                    a2:8e:bb:b0:cd:97:30:75:49:30:c4:2e:53:fd:b8:
                    ca:ec:44:1d:35:09:f6:86:dc:1b:18:96:a0:09:a4:
                    e5:6f:57:12:95:91:1f:37:bb:44:ed:66:9f:b7:14:
                    52:36:9a:21:e9:f8:7f:33:c2:26:b6:6e:3d:05:7c:
                    3c:f3:a9:f8:d7:4a:6e:c5:10:01:e0:23:68:ce:02:
                    4d:cc:82:19:73:4e:a8:7e:90:4d:f7:5b:d8:1b:57:
                    b8:a6:1c:da:a6:93:16:08:47:1a:97:d6:55:52:70:
                    ab:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:CE:CE:09:51:C7:F3:3B:13:D7:9C:CF:96:24:ED:25:3F:01:2A:59
            X509v3 Authority Key Identifier:
                keyid:E1:3D:77:44:B2:15:6E:41:50:A1:AF:5D:73:2E:2A:10:99:4D:87:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4T13RLIVbkFQoa9dcy4qEJlNhyk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/56/3130332e3139332e3133312e302f32342d3234203d3e2039333132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.193.131.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:b6:12:98:67:9e:1c:db:0e:ad:c3:89:04:63:be:cd:2a:20:
         b9:20:39:0c:d0:4e:8c:ff:b4:2a:f4:d3:d8:bf:26:ad:d3:57:
         f6:81:e3:d2:8d:08:79:d5:d1:0f:f1:95:f4:2e:ce:e4:90:ca:
         95:1c:e1:2e:49:8f:c0:c8:87:0f:f7:c1:cc:58:a7:4e:8e:f2:
         6a:48:0e:03:0a:94:51:b0:64:cb:ba:57:c3:c1:da:b3:4b:06:
         cb:06:4e:65:29:8f:d4:2b:48:ee:01:19:b9:8a:b6:df:e2:ab:
         d1:f7:46:36:01:b0:df:38:84:01:1b:8f:df:e2:10:bb:ce:37:
         ea:1a:53:c7:7f:b8:c1:c9:18:71:31:68:3c:4d:ba:5b:fb:fd:
         80:74:f5:77:65:41:5e:26:19:2f:d9:ff:4e:95:d0:10:3e:ca:
         1a:20:17:16:4c:6e:16:8d:c7:5f:c4:d6:34:42:61:6b:46:6f:
         6e:ae:95:72:1c:03:e8:d2:d2:ce:0c:7b:ab:8e:83:e1:9e:ce:
         8a:b0:90:3d:da:32:33:40:fc:d6:45:12:8e:7c:72:02:12:5a:
         67:fd:3b:62:7e:e2:48:e9:07:55:2e:7f:1a:ff:ff:5d:f6:07:
         ce:75:c3:22:bc:8b:c3:53:f2:0e:bc:81:0a:bd:23:7a:91:f7:
         76:f9:18:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 03:32:26 2025 by rpki-client