Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/7e91809e-dd49-4c52-b11f-2a518c3aa856/0/3130332e38382e39312e302f32342d3234203d3e20313530323232.roa
File:                     3130332e38382e39312e302f32342d3234203d3e20313530323232.roa (raw, json)
Hash identifier:          16WvPyi38t5aKz8ZyY3F0kSDSMJ8HK1h7g9RnFd2LL0=
Subject key identifier:   12:63:B9:50:B5:0F:F8:CB:17:A2:EA:05:1F:7A:9C:0C:9E:FA:DF:F2
Certificate issuer:       /CN=04EE3BC3691732E069DF0D9D29DE360611CCF0DB
Certificate serial:       2A555C78399E530FBEFB1F952FA8AE5964348973
Authority key identifier: 04:EE:3B:C3:69:17:32:E0:69:DF:0D:9D:29:DE:36:06:11:CC:F0:DB
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/04EE3BC3691732E069DF0D9D29DE360611CCF0DB.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/7e91809e-dd49-4c52-b11f-2a518c3aa856/0/3130332e38382e39312e302f32342d3234203d3e20313530323232.roa
Signing time:             Mon 14 Jul 2025 15:00:01 +0000
ROA not before:           Mon 14 Jul 2025 14:55:01 +0000
ROA not after:            Mon 13 Jul 2026 15:00:01 +0000
asID:                     150222
IP address blocks:        103.88.91.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/7e91809e-dd49-4c52-b11f-2a518c3aa856/0/04EE3BC3691732E069DF0D9D29DE360611CCF0DB.crl
                          rsync://repo-rpki.idnic.net/repo/7e91809e-dd49-4c52-b11f-2a518c3aa856/0/04EE3BC3691732E069DF0D9D29DE360611CCF0DB.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/04EE3BC3691732E069DF0D9D29DE360611CCF0DB.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 08 Aug 2025 18:37:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:55:5c:78:39:9e:53:0f:be:fb:1f:95:2f:a8:ae:59:64:34:89:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04EE3BC3691732E069DF0D9D29DE360611CCF0DB
        Validity
            Not Before: Jul 14 14:55:01 2025 GMT
            Not After : Jul 13 15:00:01 2026 GMT
        Subject: CN=1263B950B50FF8CB17A2EA051F7A9C0C9EFADFF2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:1e:8c:98:be:eb:91:22:c8:db:d3:53:e0:b0:
                    20:7a:75:1e:6d:9e:a0:0c:e4:8d:c5:21:ed:52:92:
                    3a:77:a9:dd:c8:39:aa:bd:bd:a0:ab:f8:1f:00:5a:
                    e6:01:07:94:99:59:93:e4:53:b3:cb:95:a2:2f:e9:
                    46:7e:e6:2d:b3:88:f5:ab:19:22:6d:89:bc:ee:40:
                    fc:e0:a6:c2:82:d5:9c:f6:8c:0d:21:2f:1d:5c:93:
                    6e:f2:fc:4d:b7:e5:da:3a:ef:1c:22:c4:52:cc:92:
                    ed:32:fd:9a:07:e4:d6:d5:3e:ce:8f:c2:93:b0:f9:
                    7e:65:20:1f:9c:72:f8:5d:88:1f:1c:fe:e3:1f:19:
                    96:06:95:c5:36:8b:f8:32:67:ba:df:da:90:74:d9:
                    8f:1b:a3:0d:05:fe:ac:36:4a:71:26:87:17:54:7f:
                    16:d5:27:88:d6:a7:c0:24:60:ec:77:ef:ad:48:db:
                    8a:99:21:5d:f4:44:1f:8a:86:86:32:e6:4c:e3:cb:
                    b4:86:44:02:bf:3c:1d:fe:89:31:71:29:8c:bf:c9:
                    6f:a1:17:4f:54:21:d7:7e:31:e5:9e:ac:1d:df:ff:
                    7e:43:4e:26:2e:66:1d:25:ff:dc:29:2e:94:82:4e:
                    1b:c5:fe:eb:47:11:ac:5e:7f:cc:1d:b6:17:af:d2:
                    1d:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:63:B9:50:B5:0F:F8:CB:17:A2:EA:05:1F:7A:9C:0C:9E:FA:DF:F2
            X509v3 Authority Key Identifier:
                keyid:04:EE:3B:C3:69:17:32:E0:69:DF:0D:9D:29:DE:36:06:11:CC:F0:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/7e91809e-dd49-4c52-b11f-2a518c3aa856/0/04EE3BC3691732E069DF0D9D29DE360611CCF0DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/04EE3BC3691732E069DF0D9D29DE360611CCF0DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e91809e-dd49-4c52-b11f-2a518c3aa856/0/3130332e38382e39312e302f32342d3234203d3e20313530323232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.88.91.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a4:d8:1c:e3:63:fe:21:9e:e5:be:21:5a:07:1e:b7:2a:18:51:
         5e:41:cd:2d:f0:0f:2c:81:cb:eb:04:4f:aa:10:06:21:07:fa:
         ad:0a:1f:73:0b:c7:77:0e:68:3c:81:f2:c1:c0:65:95:4b:27:
         42:8c:47:99:a8:77:42:a1:bd:6c:07:e9:48:4e:59:f3:4b:77:
         46:b7:ba:bd:52:cf:2b:c1:d6:f5:6a:1b:bd:05:2f:73:f8:47:
         5d:aa:c3:38:bb:df:d7:31:7f:92:e6:85:32:8e:7c:a0:b6:bd:
         25:56:72:07:10:5a:a8:42:6c:d0:fb:2a:10:c0:b4:e6:e6:67:
         4c:19:d1:f1:2d:fc:77:7f:b4:af:b9:02:50:af:1f:09:be:05:
         15:c1:a3:21:68:ae:00:7e:a7:b3:45:00:42:30:69:b8:c5:b4:
         7a:b9:64:de:c8:6f:1e:46:de:d0:b0:2e:25:61:fd:50:9f:e7:
         96:5b:b3:37:63:70:b9:38:bf:b1:62:4e:d6:45:d0:83:39:1c:
         c3:71:e8:20:0e:13:bc:17:88:31:3b:4b:e6:a1:0b:eb:ad:c4:
         0d:5b:d2:f8:e0:89:31:92:cc:ec:62:15:bd:7c:65:c2:df:0f:
         20:6b:c5:a6:40:9b:87:53:68:97:73:9f:37:e8:53:37:08:1b:
         7c:80:b3:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 17:30:46 2025 by rpki-client