Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/3130332e33312e34362e302f32342d3234203d3e203233363739.roa
File:                     3130332e33312e34362e302f32342d3234203d3e203233363739.roa (raw, json)
Hash identifier:          ZStcbXwXQl+hORZWxLQSONQo9BN2veMzv1oowSkOhfA=
Subject key identifier:   28:33:78:44:20:12:FF:9A:7C:D8:38:32:77:02:FF:43:A1:AD:14:58
Certificate issuer:       /CN=552B31A26E92A9DD6A585B92375B7FCA4FA66984
Certificate serial:       013C68800844A71E89B0B11F27F20079F37E4EC6
Authority key identifier: 55:2B:31:A2:6E:92:A9:DD:6A:58:5B:92:37:5B:7F:CA:4F:A6:69:84
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/3130332e33312e34362e302f32342d3234203d3e203233363739.roa
Signing time:             Fri 25 Jul 2025 06:01:31 +0000
ROA not before:           Fri 25 Jul 2025 05:56:31 +0000
ROA not after:            Fri 24 Jul 2026 06:01:31 +0000
asID:                     23679
IP address blocks:        103.31.46.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.crl
                          rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 08 Aug 2025 22:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:3c:68:80:08:44:a7:1e:89:b0:b1:1f:27:f2:00:79:f3:7e:4e:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=552B31A26E92A9DD6A585B92375B7FCA4FA66984
        Validity
            Not Before: Jul 25 05:56:31 2025 GMT
            Not After : Jul 24 06:01:31 2026 GMT
        Subject: CN=283378442012FF9A7CD838327702FF43A1AD1458
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:62:2b:26:e8:22:3f:44:7c:cf:ac:dc:fb:ba:
                    8d:14:de:ab:13:05:06:51:92:e0:e5:a4:f3:0d:1a:
                    91:b4:7b:7a:ad:15:8e:fa:e5:b7:2b:59:7c:7c:1a:
                    ba:72:40:53:d2:6b:02:e8:9a:ea:65:37:43:24:67:
                    fd:eb:d3:81:57:54:c1:de:11:4a:fd:f6:8e:fd:01:
                    25:52:ee:06:4a:c5:22:bf:b3:40:79:94:c8:85:d4:
                    c8:f5:51:b6:96:dc:04:92:9e:58:23:70:f3:45:99:
                    f3:a7:16:4d:ca:50:54:24:60:7a:c9:94:1a:bd:46:
                    42:e6:c8:fb:a1:05:be:ac:c6:8e:c1:a7:a7:47:dd:
                    2a:e1:c3:6a:04:8f:0b:09:f5:4a:0e:a5:53:ae:aa:
                    1e:30:18:bc:e6:23:60:07:2d:0b:00:17:d8:a6:ee:
                    0e:fb:79:3b:51:6e:37:c4:8e:9a:a8:ab:3f:16:3e:
                    76:0c:d8:b8:dd:7b:7d:95:e3:84:51:98:a9:b0:3e:
                    55:2d:a9:ac:f6:c6:e1:ac:a6:2f:c6:14:51:40:b1:
                    f6:0d:b1:ab:66:8e:b0:74:23:12:4e:7c:d0:d3:79:
                    84:dd:e7:e4:9f:e8:bb:8e:95:bf:4a:bf:5b:02:73:
                    5e:52:d6:a9:31:dd:e9:fe:cf:15:76:16:88:25:93:
                    c0:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:33:78:44:20:12:FF:9A:7C:D8:38:32:77:02:FF:43:A1:AD:14:58
            X509v3 Authority Key Identifier:
                keyid:55:2B:31:A2:6E:92:A9:DD:6A:58:5B:92:37:5B:7F:CA:4F:A6:69:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/3130332e33312e34362e302f32342d3234203d3e203233363739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.31.46.0/24

    Signature Algorithm: sha256WithRSAEncryption
         aa:ff:e1:15:6e:72:00:79:5b:31:26:4c:ad:8d:d8:21:9a:40:
         e7:d5:70:ea:e9:9c:ab:ca:5f:b7:6d:6b:7d:1d:56:2a:8f:a8:
         01:38:30:5e:d1:2e:1a:72:36:f7:f3:e0:5e:4c:dd:b8:23:da:
         74:9d:d4:e5:d2:7a:3d:c2:f4:ac:dc:4e:cb:d7:e3:af:3d:d7:
         08:82:88:b7:62:07:ec:46:43:d2:83:b2:ab:c9:52:44:f1:8a:
         cf:62:01:82:78:e7:bc:a3:a8:1a:f9:e3:6d:a9:87:d4:d1:15:
         8d:12:00:4a:45:8d:1c:f4:b8:64:be:51:26:24:33:37:ef:32:
         8b:cd:cc:64:08:f1:67:fa:5f:8f:29:47:f9:66:22:96:c5:b5:
         25:36:11:57:bb:bc:c3:26:25:b3:57:20:da:8c:28:7c:95:10:
         f6:31:c4:b4:a3:93:36:85:96:1e:5a:97:4f:bc:27:9e:d5:4a:
         71:26:07:69:94:31:68:ac:28:c5:e0:85:09:ff:5d:80:09:79:
         39:61:40:ab:c8:2c:e2:6e:a5:4b:0e:e6:a9:0f:64:9d:7c:46:
         98:db:d4:0c:b4:46:aa:58:9a:4f:29:50:70:86:f4:e0:fc:7a:
         a2:e0:b3:6a:88:d9:ae:5f:18:a0:a6:5f:aa:1f:47:d9:77:9a:
         aa:76:bd:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 13:08:08 2025 by rpki-client