Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/726cd26f-fbda-4cd8-a01c-b0155513015f/0/3130332e35362e39332e302f32342d3234203d3e203538343737.roa
File:                     3130332e35362e39332e302f32342d3234203d3e203538343737.roa (raw, json)
Hash identifier:          BBYheiBkB3dBiiEhGQeh9Khilzpm4R8TSiKBpkInNLE=
Subject key identifier:   4F:3A:84:F4:A3:72:A1:B9:AC:19:01:B2:5A:F9:79:27:78:D7:1B:2C
Certificate issuer:       /CN=17502B1B8651CDBBCD43315B12E26B9625112CEB
Certificate serial:       0D6B8081890032C67FFFC9231206B0F3A3D6BBD8
Authority key identifier: 17:50:2B:1B:86:51:CD:BB:CD:43:31:5B:12:E2:6B:96:25:11:2C:EB
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17502B1B8651CDBBCD43315B12E26B9625112CEB.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/726cd26f-fbda-4cd8-a01c-b0155513015f/0/3130332e35362e39332e302f32342d3234203d3e203538343737.roa
Signing time:             Wed 22 Oct 2025 11:02:26 +0000
ROA not before:           Wed 22 Oct 2025 10:57:26 +0000
ROA not after:            Wed 21 Oct 2026 11:02:26 +0000
asID:                     58477
IP address blocks:        103.56.93.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/726cd26f-fbda-4cd8-a01c-b0155513015f/0/17502B1B8651CDBBCD43315B12E26B9625112CEB.crl
                          rsync://repo-rpki.idnic.net/repo/726cd26f-fbda-4cd8-a01c-b0155513015f/0/17502B1B8651CDBBCD43315B12E26B9625112CEB.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17502B1B8651CDBBCD43315B12E26B9625112CEB.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 06 Nov 2025 07:18:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:6b:80:81:89:00:32:c6:7f:ff:c9:23:12:06:b0:f3:a3:d6:bb:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17502B1B8651CDBBCD43315B12E26B9625112CEB
        Validity
            Not Before: Oct 22 10:57:26 2025 GMT
            Not After : Oct 21 11:02:26 2026 GMT
        Subject: CN=4F3A84F4A372A1B9AC1901B25AF9792778D71B2C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:bb:3f:03:9a:16:7b:fa:79:e5:c6:47:ca:ef:
                    3f:d2:91:23:34:4a:4b:83:5f:af:99:b3:02:e4:d0:
                    7e:8a:eb:b6:79:6d:78:bc:e5:d8:e5:f0:79:56:6c:
                    19:5d:87:30:c1:09:af:fc:82:8a:0b:5d:fc:ba:3f:
                    00:83:a3:95:44:81:94:e5:cc:85:ad:fc:62:4a:e2:
                    83:29:88:ae:eb:a1:06:e4:6c:bd:c5:70:aa:5b:96:
                    03:2b:61:34:dc:9c:de:1c:ce:c7:e1:2c:cd:7d:b4:
                    b7:03:48:a4:ca:d5:67:87:8e:1e:ba:3d:32:2d:ee:
                    51:b9:a5:e9:04:82:5d:8a:98:e1:d1:d8:9a:c3:3f:
                    5e:df:f4:d3:c6:cc:0d:a9:47:39:16:5c:1d:66:9d:
                    1b:31:6b:8e:a1:1d:7d:be:9c:b0:f1:40:2b:16:25:
                    53:57:13:22:98:fb:2c:8d:1b:dc:be:6d:a7:25:06:
                    93:62:8e:b5:c1:f2:74:eb:e1:b9:1a:43:3d:69:eb:
                    44:25:d7:05:29:eb:96:1e:f7:5f:a8:14:b4:7c:ff:
                    9c:59:c5:19:30:45:73:e6:0d:f4:78:fd:68:34:d2:
                    f5:85:a4:3d:52:6d:b9:60:fa:ac:1e:0c:d0:d4:d9:
                    02:2b:bb:96:2a:17:01:44:52:56:ad:9e:b7:f6:48:
                    ed:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:3A:84:F4:A3:72:A1:B9:AC:19:01:B2:5A:F9:79:27:78:D7:1B:2C
            X509v3 Authority Key Identifier:
                keyid:17:50:2B:1B:86:51:CD:BB:CD:43:31:5B:12:E2:6B:96:25:11:2C:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/726cd26f-fbda-4cd8-a01c-b0155513015f/0/17502B1B8651CDBBCD43315B12E26B9625112CEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17502B1B8651CDBBCD43315B12E26B9625112CEB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/726cd26f-fbda-4cd8-a01c-b0155513015f/0/3130332e35362e39332e302f32342d3234203d3e203538343737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.56.93.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:8f:3c:ed:4b:87:9f:63:8e:c9:d3:a5:c7:b4:0b:e4:01:9d:
         15:ee:4f:3a:54:8c:12:7e:a7:d5:87:72:fa:b3:a2:9d:1c:de:
         fd:33:bf:0d:8f:3c:f2:bd:9e:27:f4:45:38:a6:a3:71:74:12:
         85:27:f3:de:17:49:e4:8e:54:59:f9:db:a5:cb:85:6f:40:79:
         41:1e:b9:8f:c9:81:f9:f0:bf:1a:49:b7:8f:00:63:83:e0:3e:
         46:19:65:76:3b:df:f1:cb:90:56:0f:c1:19:7f:b1:ca:ac:f7:
         9f:0f:80:ed:7b:f9:27:be:42:6e:88:09:ec:37:db:09:41:44:
         c7:1d:c8:f0:61:aa:82:24:e8:a3:a0:22:c7:b8:e9:41:0c:e0:
         5f:b4:fd:6b:c1:49:c6:ad:38:3b:7e:35:a0:44:59:76:58:69:
         a8:34:f0:da:f1:e8:55:5d:04:63:0c:41:bd:fd:46:fb:a2:48:
         5a:c2:85:2f:d9:53:c1:f5:9b:85:e2:32:e1:1d:c6:43:88:19:
         02:92:24:6d:9b:c1:a5:c7:52:6f:be:52:fa:b2:5a:21:83:7f:
         91:18:66:f0:17:c5:7e:77:b3:0b:da:cc:85:62:fc:56:15:4e:
         69:b8:1c:a5:ba:77:e4:bd:a8:f8:4d:09:13:60:ff:94:b9:9f:
         5c:00:45:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:40:37 2025 by rpki-client