Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/56e63cd2-fb3c-41b2-b96b-ab234420a211/0/3130332e38372e3139392e302f32342d3234203d3e20313336303837.roa
File:                     3130332e38372e3139392e302f32342d3234203d3e20313336303837.roa (raw, json)
Hash identifier:          da7FZv0wwu0NgAl+k4INGAA7MG+JDxJrpPp3i49uNg8=
Subject key identifier:   C3:5E:92:ED:F2:FA:AC:C9:58:9E:83:38:93:86:00:88:16:9B:64:30
Certificate issuer:       /CN=7D5AE085968DC7CB311023F7EBE0BF8E126706E4
Certificate serial:       685A73A0B82BDBF98E0AD6EEBCE8F157F1E9D40A
Authority key identifier: 7D:5A:E0:85:96:8D:C7:CB:31:10:23:F7:EB:E0:BF:8E:12:67:06:E4
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D5AE085968DC7CB311023F7EBE0BF8E126706E4.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/56e63cd2-fb3c-41b2-b96b-ab234420a211/0/3130332e38372e3139392e302f32342d3234203d3e20313336303837.roa
Signing time:             Mon 03 Nov 2025 15:00:02 +0000
ROA not before:           Mon 03 Nov 2025 14:55:02 +0000
ROA not after:            Mon 02 Nov 2026 15:00:02 +0000
asID:                     136087
IP address blocks:        103.87.199.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/56e63cd2-fb3c-41b2-b96b-ab234420a211/0/7D5AE085968DC7CB311023F7EBE0BF8E126706E4.crl
                          rsync://repo-rpki.idnic.net/repo/56e63cd2-fb3c-41b2-b96b-ab234420a211/0/7D5AE085968DC7CB311023F7EBE0BF8E126706E4.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D5AE085968DC7CB311023F7EBE0BF8E126706E4.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 06 Nov 2025 18:43:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:5a:73:a0:b8:2b:db:f9:8e:0a:d6:ee:bc:e8:f1:57:f1:e9:d4:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D5AE085968DC7CB311023F7EBE0BF8E126706E4
        Validity
            Not Before: Nov  3 14:55:02 2025 GMT
            Not After : Nov  2 15:00:02 2026 GMT
        Subject: CN=C35E92EDF2FAACC9589E833893860088169B6430
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:23:6f:02:59:70:23:88:c4:00:4f:ef:34:6f:
                    4e:71:92:65:f3:e6:06:dd:8f:fd:6c:54:d7:ef:2b:
                    fe:1e:af:3a:bb:d2:d9:20:55:34:74:67:0d:34:05:
                    6d:44:f0:9a:4d:17:5e:06:ee:e9:07:7e:17:9a:71:
                    2d:f8:ec:2c:7b:fd:a3:6e:ff:37:cc:eb:a3:bc:61:
                    82:bb:da:8a:1d:ec:e5:1c:bf:57:c2:fe:d4:6b:9b:
                    1b:be:13:f4:b4:fe:aa:16:96:5d:69:e4:f5:25:22:
                    52:91:d9:35:45:17:9c:85:1f:84:4c:32:a3:0b:dc:
                    1e:08:2d:fe:d1:4c:ca:b8:d6:67:4c:d3:77:65:40:
                    82:2a:77:3f:d0:6d:8c:2b:1b:b5:c0:79:93:09:69:
                    46:48:06:e5:cb:42:a3:4d:2c:9c:8e:28:e0:30:d7:
                    d9:b0:de:96:7d:f0:07:57:1f:51:07:20:54:30:d2:
                    fa:1c:81:e5:f4:95:7f:33:28:06:3e:1b:ed:b0:60:
                    23:ec:fb:b0:2a:af:d9:29:29:88:56:38:a1:40:d2:
                    e5:6a:51:5e:fd:52:2a:78:a6:ee:7f:ac:8e:a6:7a:
                    16:d9:4a:69:7b:70:24:bc:0d:88:c0:67:c0:ec:82:
                    37:35:28:0e:47:07:11:ac:07:ff:40:59:58:e1:b7:
                    bc:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:5E:92:ED:F2:FA:AC:C9:58:9E:83:38:93:86:00:88:16:9B:64:30
            X509v3 Authority Key Identifier:
                keyid:7D:5A:E0:85:96:8D:C7:CB:31:10:23:F7:EB:E0:BF:8E:12:67:06:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/56e63cd2-fb3c-41b2-b96b-ab234420a211/0/7D5AE085968DC7CB311023F7EBE0BF8E126706E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D5AE085968DC7CB311023F7EBE0BF8E126706E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/56e63cd2-fb3c-41b2-b96b-ab234420a211/0/3130332e38372e3139392e302f32342d3234203d3e20313336303837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.87.199.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:36:d8:1e:40:40:04:83:bc:9b:f9:34:87:4a:07:ee:11:6f:
         79:d3:ca:aa:bd:6d:be:d7:c3:47:b1:d5:5c:bc:09:51:c6:87:
         e7:65:b4:d2:f2:a7:30:bf:6e:4a:fc:ac:83:dd:a7:de:2a:aa:
         21:63:6a:46:3e:de:c5:c1:83:cb:43:fd:21:2c:20:e8:61:3c:
         7e:3d:79:49:55:9a:ed:e9:a8:17:04:1c:18:c8:fb:40:bc:68:
         f6:ca:83:ec:13:63:f1:49:3e:91:27:78:3a:26:8f:7e:00:80:
         24:5d:5f:4d:a5:9b:af:f2:d5:ef:a7:b2:63:38:b0:e6:18:b0:
         31:6b:32:2e:59:11:06:26:c4:42:40:64:6b:d5:e4:9b:03:b1:
         6e:dc:d4:1a:6b:48:97:9b:da:97:d5:a4:9a:98:48:61:31:b1:
         63:fb:2d:54:bc:61:bc:93:38:12:a2:70:b3:38:37:04:b5:b8:
         42:62:dd:cd:ea:56:f9:ea:93:14:c8:58:31:6e:22:db:ca:f1:
         a9:dc:2d:93:77:9a:56:7d:3b:13:92:53:7d:25:e7:1b:71:e9:
         cb:9e:25:31:96:8f:a9:76:5b:03:4b:7d:c5:94:1f:c1:c6:6a:
         8c:41:19:5a:37:46:5e:86:b1:86:cc:e7:e9:db:bd:4f:be:dc:
         f2:81:11:8c
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUaFpzoLgr2/mOCtbuvOjxV/Hp1AowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0Q1QUUwODU5NjhEQzdDQjMxMTAyM0Y3RUJFMEJGOEUx
MjY3MDZFNDAeFw0yNTExMDMxNDU1MDJaFw0yNjExMDIxNTAwMDJaMDMxMTAvBgNV
BAMTKEMzNUU5MkVERjJGQUFDQzk1ODlFODMzODkzODYwMDg4MTY5QjY0MzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYI28CWXAjiMQAT+80b05xkmXz
5gbdj/1sVNfvK/4erzq70tkgVTR0Zw00BW1E8JpNF14G7ukHfheacS347Cx7/aNu
/zfM66O8YYK72ood7OUcv1fC/tRrmxu+E/S0/qoWll1p5PUlIlKR2TVFF5yFH4RM
MqML3B4ILf7RTMq41mdM03dlQIIqdz/QbYwrG7XAeZMJaUZIBuXLQqNNLJyOKOAw
19mw3pZ98AdXH1EHIFQw0vocgeX0lX8zKAY+G+2wYCPs+7Aqr9kpKYhWOKFA0uVq
UV79Uip4pu5/rI6mehbZSml7cCS8DYjAZ8Dsgjc1KA5HBxGsB/9AWVjht7yJAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUw16S7fL6rMlYnoM4k4YAiBabZDAwHwYDVR0j
BBgwFoAUfVrghZaNx8sxECP36+C/jhJnBuQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81
NmU2M2NkMi1mYjNjLTQxYjItYjk2Yi1hYjIzNDQyMGEyMTEvMC83RDVBRTA4NTk2
OERDN0NCMzExMDIzRjdFQkUwQkY4RTEyNjcwNkU0LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvN0Q1QUUwODU5NjhEQzdDQjMxMTAyM0Y3RUJFMEJGOEUxMjY3
MDZFNC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzU2ZTYzY2QyLWZiM2MtNDFiMi1i
OTZiLWFiMjM0NDIwYTIxMS8wLzMxMzAzMzJlMzgzNzJlMzEzOTM5MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzMzM2MzAzODM3LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ1fHMA0GCSqG
SIb3DQEBCwUAA4IBAQCBNtgeQEAEg7yb+TSHSgfuEW9508qqvW2+18NHsdVcvAlR
xofnZbTS8qcwv25K/KyD3afeKqohY2pGPt7FwYPLQ/0hLCDoYTx+PXlJVZrt6agX
BBwYyPtAvGj2yoPsE2PxST6RJ3g6Jo9+AIAkXV9NpZuv8tXvp7JjOLDmGLAxazIu
WREGJsRCQGRr1eSbA7Fu3NQaa0iXm9qX1aSamEhhMbFj+y1UvGG8kzgSonCzODcE
tbhCYt3N6lb56pMUyFgxbiLbyvGp3C2Td5pWfTsTklN9JecbcenLniUxlo+pdlsD
S33FlB/BxmqMQRlaN0ZehrGGzOfp271PvtzygRGM
-----END CERTIFICATE-----
Generated at Wed Nov 5 14:40:57 2025 by rpki-client