Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/80ce4796-49de-43b1-a152-b18d11ada529/0/3130332e3139352e36352e302f32342d3234203d3e20323131343037.roa
File:                     3130332e3139352e36352e302f32342d3234203d3e20323131343037.roa (raw, json)
Hash identifier:          GgMpV6awuEKacj2HVVRDN4z4Htq937tLhpXSx5OCQQw=
Subject key identifier:   15:44:56:ED:E8:52:37:EE:0F:7A:3A:1B:90:02:17:81:6B:F4:22:93
Certificate issuer:       /CN=F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA
Certificate serial:       16C38C425BC76AF33B1CB22E61B2119A72C7C892
Authority key identifier: F8:E1:2F:0A:43:3C:8B:73:3B:E3:1D:B5:E0:CD:1E:F2:02:FC:21:EA
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/80ce4796-49de-43b1-a152-b18d11ada529/0/3130332e3139352e36352e302f32342d3234203d3e20323131343037.roa
Signing time:             Thu 30 Oct 2025 13:00:00 +0000
ROA not before:           Thu 30 Oct 2025 12:55:00 +0000
ROA not after:            Thu 29 Oct 2026 13:00:00 +0000
asID:                     211407
IP address blocks:        103.195.65.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/80ce4796-49de-43b1-a152-b18d11ada529/0/F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA.crl
                          rsync://repo-rpki.idnic.net/repo/80ce4796-49de-43b1-a152-b18d11ada529/0/F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Nov 2025 03:36:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:c3:8c:42:5b:c7:6a:f3:3b:1c:b2:2e:61:b2:11:9a:72:c7:c8:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA
        Validity
            Not Before: Oct 30 12:55:00 2025 GMT
            Not After : Oct 29 13:00:00 2026 GMT
        Subject: CN=154456EDE85237EE0F7A3A1B900217816BF42293
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:38:cd:0c:c0:e7:93:a5:30:28:71:ec:0e:40:
                    5a:45:64:eb:08:a5:4d:09:b0:4b:f1:95:4f:86:81:
                    73:ea:38:9f:6f:81:b1:a4:30:0d:79:c0:a9:9c:64:
                    c5:a2:e9:8d:6c:56:7e:e4:00:90:5d:46:08:37:5f:
                    70:bc:43:b8:dc:3d:19:da:5c:6c:3b:98:ea:58:f2:
                    27:26:ea:f6:f4:16:fb:ed:f5:a1:68:cd:39:db:f0:
                    86:26:77:90:bf:9a:4f:e3:78:e2:48:61:da:16:8c:
                    03:d5:a9:72:17:7c:f6:e8:87:27:6b:61:67:f2:72:
                    96:ab:ec:ba:98:74:c6:4b:47:42:53:b1:01:5d:be:
                    8a:91:c6:b4:5a:60:5e:15:9b:5e:4e:bd:2e:cd:77:
                    1d:b6:a8:cf:a7:46:6e:dc:0d:93:bd:3a:1e:08:45:
                    cd:b1:87:b4:f3:8a:8f:08:f9:e6:db:c3:46:50:a4:
                    50:5d:0c:13:92:43:05:1d:f0:be:a8:52:ae:ad:ce:
                    4e:eb:83:d5:08:33:17:4d:6e:29:7d:91:f4:18:70:
                    e8:71:ba:d9:d8:6f:44:06:fe:88:32:d9:65:75:fe:
                    ce:35:2b:a4:98:ef:51:45:0b:e2:65:7f:d3:75:7a:
                    ff:88:88:a0:be:9d:4e:ea:64:0f:a5:1f:2b:6a:3f:
                    b0:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:44:56:ED:E8:52:37:EE:0F:7A:3A:1B:90:02:17:81:6B:F4:22:93
            X509v3 Authority Key Identifier:
                keyid:F8:E1:2F:0A:43:3C:8B:73:3B:E3:1D:B5:E0:CD:1E:F2:02:FC:21:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/80ce4796-49de-43b1-a152-b18d11ada529/0/F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/80ce4796-49de-43b1-a152-b18d11ada529/0/3130332e3139352e36352e302f32342d3234203d3e20323131343037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.195.65.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a2:40:30:73:9e:61:23:25:bd:51:07:22:a8:01:39:e3:7f:47:
         16:91:8f:bd:06:80:ad:07:65:eb:65:b9:54:bb:50:a5:41:51:
         1d:8b:30:b6:cb:db:06:6f:ae:33:96:f8:7d:40:06:d5:f3:20:
         30:18:bb:e1:a8:27:30:55:62:fc:89:44:7b:78:0e:1c:30:1d:
         ac:e1:54:69:ee:54:ba:78:72:e4:62:3b:64:c0:fa:05:b7:3a:
         86:71:fa:51:d1:7f:b3:d7:18:83:be:56:71:de:1c:56:3e:9e:
         de:ea:e7:07:d6:39:13:28:2b:12:ae:06:1c:58:03:8a:fd:5e:
         ce:3d:74:43:2f:70:ac:d5:69:a8:23:7a:3c:71:bb:ea:79:07:
         31:55:a3:46:dc:3a:39:92:35:8f:1f:82:ad:42:d2:1e:a7:57:
         eb:d4:1c:2b:ef:8a:8c:08:fe:b3:2a:fc:0d:a9:0a:17:61:2f:
         a9:e0:29:6e:49:1c:86:97:4f:54:3f:dd:3b:e6:79:a4:b6:d6:
         da:05:3f:ec:b2:73:31:5e:2c:9e:9f:3a:99:56:e6:d6:c2:19:
         8b:57:b6:50:d7:c9:ec:02:a1:35:5b:7a:f2:ce:64:81:d3:9b:
         9a:e9:11:95:96:09:ce:d2:d0:ef:ad:a5:ad:42:2c:76:ec:ae:
         3f:92:8e:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 16:13:28 2025 by rpki-client