Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/7d266511-639e-4c2b-9634-9cc1e22fa708/0/3130332e3136322e3231392e302f32342d3234203d3e20313331373433.roa
File:                     3130332e3136322e3231392e302f32342d3234203d3e20313331373433.roa (raw, json)
Hash identifier:          +5fEWevOuyJb1CnTGLGl6p7WxrkXj1d5/mnwXJQ5EjI=
Subject key identifier:   F7:00:3A:0F:32:4D:46:03:E8:82:49:CE:46:4A:E5:27:7E:82:4D:BA
Certificate issuer:       /CN=6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A
Certificate serial:       3982648EA97919B342B27CEAE3342F00C55A4C31
Authority key identifier: 6C:DF:5C:D1:FD:DF:F2:C0:24:C1:3A:29:26:4D:70:FA:51:F9:58:7A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/7d266511-639e-4c2b-9634-9cc1e22fa708/0/3130332e3136322e3231392e302f32342d3234203d3e20313331373433.roa
Signing time:             Tue 28 Oct 2025 12:02:36 +0000
ROA not before:           Tue 28 Oct 2025 11:57:36 +0000
ROA not after:            Tue 27 Oct 2026 12:02:36 +0000
asID:                     131743
IP address blocks:        103.162.219.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/7d266511-639e-4c2b-9634-9cc1e22fa708/0/6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.crl
                          rsync://repo-rpki.idnic.net/repo/7d266511-639e-4c2b-9634-9cc1e22fa708/0/6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Nov 2025 17:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:82:64:8e:a9:79:19:b3:42:b2:7c:ea:e3:34:2f:00:c5:5a:4c:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A
        Validity
            Not Before: Oct 28 11:57:36 2025 GMT
            Not After : Oct 27 12:02:36 2026 GMT
        Subject: CN=F7003A0F324D4603E88249CE464AE5277E824DBA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:f6:d7:65:9d:21:40:a6:41:0c:7d:bf:09:e5:
                    4a:52:2c:7b:6c:43:c4:b1:4a:5a:34:1e:aa:5f:4c:
                    56:d5:b3:52:50:2d:ca:37:17:70:a4:1b:54:75:b4:
                    b0:18:c9:d5:95:a2:92:72:ce:69:98:fc:fa:db:94:
                    7e:49:d8:b6:7c:cf:b4:20:57:e0:a2:10:23:4a:a2:
                    53:f6:72:bc:63:eb:2b:cf:df:9d:95:bd:31:e6:8f:
                    49:bc:ca:b0:48:5c:f0:13:e7:70:c4:57:17:76:cc:
                    4b:9c:9e:a6:0d:3a:83:ea:f8:50:61:64:14:10:ce:
                    a4:b6:f4:8c:6d:88:9b:34:0f:eb:e5:78:ee:fc:f9:
                    a9:76:9c:0c:2c:3b:35:22:2e:27:24:b1:7b:ff:80:
                    1a:93:f0:2a:1c:37:29:48:06:7d:50:18:6f:82:d0:
                    25:93:f5:0f:2d:89:12:ce:56:04:b0:f5:2f:bb:a7:
                    d4:31:f4:2a:a1:82:d1:e6:7c:ae:f8:f3:5c:f0:be:
                    cc:19:9e:33:6c:71:94:4b:1d:12:96:be:13:78:9d:
                    f0:b3:b8:a0:a7:6c:fb:a2:77:f4:5d:e6:33:24:53:
                    b2:db:be:10:dc:5c:66:d8:1a:db:9a:f0:65:99:8b:
                    74:71:be:cf:ab:70:66:22:ae:01:61:f1:b0:33:d9:
                    55:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:00:3A:0F:32:4D:46:03:E8:82:49:CE:46:4A:E5:27:7E:82:4D:BA
            X509v3 Authority Key Identifier:
                keyid:6C:DF:5C:D1:FD:DF:F2:C0:24:C1:3A:29:26:4D:70:FA:51:F9:58:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/7d266511-639e-4c2b-9634-9cc1e22fa708/0/6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7d266511-639e-4c2b-9634-9cc1e22fa708/0/3130332e3136322e3231392e302f32342d3234203d3e20313331373433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.162.219.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:e9:3d:77:5d:84:34:87:c0:f2:f4:79:c4:4f:4f:4c:18:0a:
         bd:5f:9c:4e:84:8f:cf:72:c2:96:6b:7e:d3:58:09:0b:87:7d:
         d0:f3:f9:5d:ab:51:ef:8f:1c:af:88:6f:f7:97:a7:96:78:b5:
         27:7d:92:a7:01:3a:86:21:cc:32:54:e1:ab:7a:dc:68:ce:1a:
         f0:72:08:47:b4:c1:32:75:d7:29:18:4d:be:cd:01:7d:86:79:
         06:e3:55:71:6b:85:8e:b4:97:cc:23:2c:44:91:ab:bc:49:df:
         ea:95:28:84:d1:24:13:ba:46:f4:3c:3a:24:38:8d:b5:35:f1:
         2e:13:06:11:68:38:9e:43:50:b9:51:a7:e7:fc:29:c6:c8:23:
         63:48:3a:3d:5e:74:45:72:33:17:01:08:5c:83:ad:ac:78:69:
         29:ce:0c:57:7d:ed:f8:ba:c5:8b:1f:d1:20:50:66:97:16:e7:
         93:43:b1:ad:a1:96:b3:e4:e7:4a:bc:58:f3:ab:7e:a7:ce:a5:
         5f:56:0f:15:db:88:21:55:43:d3:b2:81:a3:b2:27:0e:01:bb:
         35:13:ba:c2:7a:16:19:43:b8:63:8a:bb:6e:fb:71:41:6b:42:
         28:ae:ec:7c:4e:63:47:99:21:b3:75:1f:8a:b7:4d:49:9c:dd:
         17:ce:d5:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:16:54 2025 by rpki-client