Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/52cd9cea-3bf4-4a9c-aee6-00339c06550b/0/3130332e3136392e322e302f32332d3234203d3e203137393935.roa
File:                     3130332e3136392e322e302f32332d3234203d3e203137393935.roa (raw, json)
Hash identifier:          IRRwlFxdlw58Hq9FIW3eCT24cVIv6qhlkYjQet5GmTc=
Subject key identifier:   09:85:2B:18:CB:B8:D5:70:FE:54:17:52:B3:ED:0B:BA:DD:D9:30:62
Certificate issuer:       /CN=2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E
Certificate serial:       54122C566794CD24088BFB0E54E70038C45D5775
Authority key identifier: 2B:DF:AF:A7:0A:11:BF:BF:6C:98:2B:BF:2C:2C:08:4D:E8:0E:03:4E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/52cd9cea-3bf4-4a9c-aee6-00339c06550b/0/3130332e3136392e322e302f32332d3234203d3e203137393935.roa
Signing time:             Fri 04 Jul 2025 11:02:24 +0000
ROA not before:           Fri 04 Jul 2025 10:57:24 +0000
ROA not after:            Fri 03 Jul 2026 11:02:24 +0000
asID:                     17995
IP address blocks:        103.169.2.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/52cd9cea-3bf4-4a9c-aee6-00339c06550b/0/2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.crl
                          rsync://repo-rpki.idnic.net/repo/52cd9cea-3bf4-4a9c-aee6-00339c06550b/0/2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 10 Aug 2025 08:25:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:12:2c:56:67:94:cd:24:08:8b:fb:0e:54:e7:00:38:c4:5d:57:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E
        Validity
            Not Before: Jul  4 10:57:24 2025 GMT
            Not After : Jul  3 11:02:24 2026 GMT
        Subject: CN=09852B18CBB8D570FE541752B3ED0BBADDD93062
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:86:e3:21:3f:49:18:9b:86:1b:16:84:6b:a1:
                    1f:f0:bd:c5:4c:d3:6c:b3:3b:4a:64:72:29:1e:e0:
                    de:3c:bf:43:58:7e:3c:ee:39:f4:38:d4:e8:ee:a3:
                    bb:9f:88:f7:1f:c5:24:08:16:e4:03:be:61:79:af:
                    56:be:b6:af:15:e3:4f:bd:3d:7e:e6:aa:65:ab:6f:
                    5a:4d:c9:fb:71:56:ce:bf:59:c3:80:0c:45:51:79:
                    7b:dc:5a:9c:0a:12:c9:07:ab:1a:68:c8:ee:37:f8:
                    b3:db:4a:fa:7d:1c:0f:34:6a:5b:ce:c3:7d:27:65:
                    25:c1:93:36:51:3c:e3:58:81:f2:30:42:77:73:b7:
                    cf:d6:16:ea:cc:c6:d1:f7:75:72:c7:d4:40:2b:9c:
                    5a:e1:e6:bb:d4:ea:79:e3:1b:0c:51:87:d6:27:dc:
                    f3:d0:0b:2e:e9:8b:a9:56:65:7e:5f:c1:d8:a6:db:
                    13:6b:93:16:55:ff:49:85:28:31:80:82:ac:0d:af:
                    da:5d:e5:f0:a2:24:c4:bf:f3:ae:be:27:21:b1:6c:
                    43:11:1c:db:6d:77:23:19:6a:20:38:b3:20:5f:2b:
                    40:6e:64:8e:3f:7e:d4:e7:b2:74:a2:f4:26:9d:44:
                    59:70:8e:d2:93:b8:1e:09:25:bc:b8:b3:5f:67:19:
                    a8:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:85:2B:18:CB:B8:D5:70:FE:54:17:52:B3:ED:0B:BA:DD:D9:30:62
            X509v3 Authority Key Identifier:
                keyid:2B:DF:AF:A7:0A:11:BF:BF:6C:98:2B:BF:2C:2C:08:4D:E8:0E:03:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/52cd9cea-3bf4-4a9c-aee6-00339c06550b/0/2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/52cd9cea-3bf4-4a9c-aee6-00339c06550b/0/3130332e3136392e322e302f32332d3234203d3e203137393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.169.2.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7c:90:75:7c:d5:5e:42:60:d6:28:90:ec:47:70:d0:86:5d:8e:
         02:e4:6e:08:5f:7c:e0:60:d4:c0:04:f0:e0:8b:1b:e9:3c:be:
         7d:a2:82:bb:95:37:60:2d:36:1c:cb:5a:26:1f:fd:1d:e3:98:
         9f:61:15:67:ce:47:f5:a7:c9:f6:b9:5d:44:ed:9e:a8:8d:00:
         30:b5:af:68:1e:5c:31:1d:37:0f:ec:34:24:2a:bc:68:7b:0b:
         b7:82:57:8f:78:b1:bb:cf:9f:5e:c7:91:39:20:39:e1:b7:84:
         c4:7f:7f:35:24:3b:fa:97:01:dc:9c:95:10:db:0d:5c:aa:03:
         60:f4:7f:f8:9f:d7:4b:66:c6:4e:74:1b:39:b7:ff:f9:df:15:
         72:ea:3b:c1:78:71:d5:34:d8:0d:dd:d7:29:e3:02:27:e3:ff:
         6a:d3:40:1c:10:15:ae:bb:19:ed:54:5a:5a:8f:ea:2a:47:c0:
         d7:23:98:ef:11:44:d6:16:46:19:b3:d9:5b:68:0c:30:b4:5f:
         b2:9f:d3:e3:9f:ec:a5:91:03:bd:35:ef:04:df:ad:b9:05:30:
         36:cc:f4:84:3c:0f:05:9b:cc:19:67:72:70:c1:d8:6a:91:43:
         b6:b6:e9:02:0a:df:c9:6e:38:6e:f6:8b:ce:5e:e3:bf:f4:25:
         84:00:31:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 20:24:42 2025 by rpki-client