Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/56e63cd2-fb3c-41b2-b96b-ab234420a211/0/3130332e38372e3139372e302f32342d3234203d3e20313336303837.roa
File:                     3130332e38372e3139372e302f32342d3234203d3e20313336303837.roa (raw, json)
Hash identifier:          0rqaY28k1qKmtYy4sqNJeu6TR3NmCct3st2uKHz4Kkw=
Subject key identifier:   A9:3E:30:EE:0A:1D:D5:88:F4:5A:89:E0:28:30:72:3C:60:16:8F:5A
Certificate issuer:       /CN=7D5AE085968DC7CB311023F7EBE0BF8E126706E4
Certificate serial:       71F7E3DA3F85EC6B5427015A4806EE386DE23695
Authority key identifier: 7D:5A:E0:85:96:8D:C7:CB:31:10:23:F7:EB:E0:BF:8E:12:67:06:E4
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D5AE085968DC7CB311023F7EBE0BF8E126706E4.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/56e63cd2-fb3c-41b2-b96b-ab234420a211/0/3130332e38372e3139372e302f32342d3234203d3e20313336303837.roa
Signing time:             Mon 03 Nov 2025 15:00:02 +0000
ROA not before:           Mon 03 Nov 2025 14:55:02 +0000
ROA not after:            Mon 02 Nov 2026 15:00:02 +0000
asID:                     136087
IP address blocks:        103.87.197.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/56e63cd2-fb3c-41b2-b96b-ab234420a211/0/7D5AE085968DC7CB311023F7EBE0BF8E126706E4.crl
                          rsync://repo-rpki.idnic.net/repo/56e63cd2-fb3c-41b2-b96b-ab234420a211/0/7D5AE085968DC7CB311023F7EBE0BF8E126706E4.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D5AE085968DC7CB311023F7EBE0BF8E126706E4.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 06 Nov 2025 18:43:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:f7:e3:da:3f:85:ec:6b:54:27:01:5a:48:06:ee:38:6d:e2:36:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D5AE085968DC7CB311023F7EBE0BF8E126706E4
        Validity
            Not Before: Nov  3 14:55:02 2025 GMT
            Not After : Nov  2 15:00:02 2026 GMT
        Subject: CN=A93E30EE0A1DD588F45A89E02830723C60168F5A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:f3:ee:13:a4:8a:97:96:df:3d:f4:93:93:eb:
                    db:16:b9:ae:36:f6:df:68:9b:84:31:9b:87:ce:32:
                    18:c9:c0:38:6b:44:5c:8d:c0:f4:94:39:e4:f5:4b:
                    c1:ea:d7:1d:08:97:0a:7c:05:45:5c:9a:1f:24:dc:
                    e1:73:f7:4b:7d:61:cb:07:45:7d:e7:2c:7a:dc:2b:
                    08:5d:ae:e4:61:23:f4:64:29:04:ea:2f:f5:5b:dc:
                    75:45:23:09:e1:59:57:01:0e:83:b0:62:b4:73:ac:
                    2f:28:23:66:5f:bd:23:5b:1b:2c:35:c7:95:d9:42:
                    44:68:e1:db:37:10:d5:15:f6:6f:43:5b:f6:91:83:
                    54:f8:82:84:33:77:25:99:64:da:07:98:cf:ed:50:
                    eb:3e:b9:ad:6b:c5:6a:4d:89:a5:cd:28:80:60:86:
                    74:e4:96:a9:32:59:4c:d5:69:09:2f:15:a8:1d:1a:
                    47:71:c0:99:20:f9:2d:49:13:1d:a8:0c:72:06:0d:
                    4f:d4:d9:ba:1a:b3:e1:0e:4c:ce:b0:af:c4:4b:21:
                    5c:ed:7c:0f:01:c4:f3:e5:9c:d6:dd:b2:6c:de:76:
                    05:b8:6f:c9:92:6b:51:43:41:b9:65:23:3f:ae:81:
                    cd:db:87:c0:5b:73:a9:4b:ab:30:f4:c7:fc:94:a5:
                    f1:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:3E:30:EE:0A:1D:D5:88:F4:5A:89:E0:28:30:72:3C:60:16:8F:5A
            X509v3 Authority Key Identifier:
                keyid:7D:5A:E0:85:96:8D:C7:CB:31:10:23:F7:EB:E0:BF:8E:12:67:06:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/56e63cd2-fb3c-41b2-b96b-ab234420a211/0/7D5AE085968DC7CB311023F7EBE0BF8E126706E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D5AE085968DC7CB311023F7EBE0BF8E126706E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/56e63cd2-fb3c-41b2-b96b-ab234420a211/0/3130332e38372e3139372e302f32342d3234203d3e20313336303837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.87.197.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:bc:76:38:67:1a:57:c3:c1:fa:24:32:ab:8e:4f:e1:2d:7b:
         ff:82:34:0b:81:9f:cf:27:06:ad:1e:8d:22:ba:93:d7:8d:52:
         6d:9a:e3:34:a8:bf:7b:1a:59:b6:7b:24:fd:cc:96:5d:c1:15:
         2b:18:b3:69:67:a7:53:ba:4f:7e:eb:b6:9d:4f:cc:60:c9:56:
         01:4b:c0:39:d6:20:73:80:6c:f2:8b:0d:cf:a1:76:e5:90:92:
         e1:86:5b:30:05:e8:11:01:0d:1b:85:51:08:b8:97:b0:2e:d7:
         ea:92:9f:dc:02:9f:5b:4a:4c:26:2c:75:67:f9:d4:53:51:c9:
         05:75:2d:d2:b9:1a:a5:d1:73:45:8e:e9:d8:67:de:90:37:15:
         9c:bd:a9:4e:cf:bf:c5:ed:ef:38:69:9b:a3:c4:22:17:e7:ba:
         1e:08:9c:cb:9a:c2:ec:63:5c:9c:34:6c:b1:4b:a3:6c:f8:c6:
         ce:89:8d:be:42:6d:0e:90:13:f8:14:e9:94:59:ec:b3:d5:8c:
         20:34:93:8d:cf:8d:f3:d7:15:ff:15:c0:6f:c4:08:db:1b:56:
         89:23:16:ab:c9:b5:81:27:e6:fb:99:2c:c5:d3:bc:38:6b:30:
         f7:fd:06:c7:76:6e:05:11:36:62:1a:08:2d:84:c3:2b:55:e8:
         e4:51:a7:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:17:25 2025 by rpki-client