Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/8774856f-7453-4d02-bc35-3482eb5646a2/0/3130332e3232372e3134332e302f32342d3234203d3e20313331373433.roa
File:                     3130332e3232372e3134332e302f32342d3234203d3e20313331373433.roa (raw, json)
Hash identifier:          KHtiEx3W38SvszbKHvX80D8vQUAYBT6FDdynUOoUkpY=
Subject key identifier:   97:6A:32:6C:2D:76:7A:69:01:C5:52:F5:41:46:C6:4E:EC:30:61:EB
Certificate issuer:       /CN=C62A541C7323F6CD238F549B1F8736ED958DEFF7
Certificate serial:       6A58186C4EA920D428B0449A0C76B01FC4C41773
Authority key identifier: C6:2A:54:1C:73:23:F6:CD:23:8F:54:9B:1F:87:36:ED:95:8D:EF:F7
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C62A541C7323F6CD238F549B1F8736ED958DEFF7.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8774856f-7453-4d02-bc35-3482eb5646a2/0/3130332e3232372e3134332e302f32342d3234203d3e20313331373433.roa
Signing time:             Thu 23 Oct 2025 05:00:02 +0000
ROA not before:           Thu 23 Oct 2025 04:55:02 +0000
ROA not after:            Thu 22 Oct 2026 05:00:02 +0000
asID:                     131743
IP address blocks:        103.227.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8774856f-7453-4d02-bc35-3482eb5646a2/0/C62A541C7323F6CD238F549B1F8736ED958DEFF7.crl
                          rsync://repo-rpki.idnic.net/repo/8774856f-7453-4d02-bc35-3482eb5646a2/0/C62A541C7323F6CD238F549B1F8736ED958DEFF7.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C62A541C7323F6CD238F549B1F8736ED958DEFF7.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 06 Nov 2025 17:44:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:58:18:6c:4e:a9:20:d4:28:b0:44:9a:0c:76:b0:1f:c4:c4:17:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C62A541C7323F6CD238F549B1F8736ED958DEFF7
        Validity
            Not Before: Oct 23 04:55:02 2025 GMT
            Not After : Oct 22 05:00:02 2026 GMT
        Subject: CN=976A326C2D767A6901C552F54146C64EEC3061EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:7e:61:be:6e:48:49:66:6d:17:97:5a:fe:5e:
                    28:c2:d2:0a:c9:6c:4d:e5:33:c4:6e:d1:41:60:a1:
                    7b:df:c4:04:52:20:29:52:1f:dc:30:f6:64:4e:3c:
                    a8:07:30:02:c1:bd:96:4a:72:40:78:0d:16:6d:99:
                    98:6f:e6:a3:62:1f:da:4e:06:6a:56:6b:e8:fc:1a:
                    91:ad:4d:1b:9e:97:b3:db:20:54:27:f6:75:e1:ee:
                    ab:d9:df:a6:90:d2:7f:99:ae:5b:f5:02:47:32:f5:
                    52:92:63:31:af:aa:07:c8:90:7a:b1:df:af:ec:38:
                    50:d4:f3:69:c2:0f:63:9a:01:a3:2c:de:2e:81:0d:
                    de:5b:e9:92:0d:a4:7f:60:25:df:5f:d0:9e:7a:76:
                    6e:2c:e5:9d:be:f0:aa:e9:d6:92:5d:a0:0a:b0:63:
                    45:bf:18:cc:28:32:9d:e4:58:ad:75:36:f8:dd:1b:
                    ae:f2:90:05:c9:e4:f3:c1:dc:7b:85:ec:dc:8b:35:
                    78:34:61:20:18:f0:70:34:25:0f:b8:9a:8d:c8:b5:
                    78:a3:25:69:92:8b:f3:ed:3f:ab:21:ca:ef:c3:0d:
                    54:b5:6f:65:30:86:9d:ac:2d:00:06:d6:37:39:93:
                    2a:59:6d:79:60:7c:fd:d1:ac:cb:81:48:72:29:c9:
                    65:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:6A:32:6C:2D:76:7A:69:01:C5:52:F5:41:46:C6:4E:EC:30:61:EB
            X509v3 Authority Key Identifier:
                keyid:C6:2A:54:1C:73:23:F6:CD:23:8F:54:9B:1F:87:36:ED:95:8D:EF:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8774856f-7453-4d02-bc35-3482eb5646a2/0/C62A541C7323F6CD238F549B1F8736ED958DEFF7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C62A541C7323F6CD238F549B1F8736ED958DEFF7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8774856f-7453-4d02-bc35-3482eb5646a2/0/3130332e3232372e3134332e302f32342d3234203d3e20313331373433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.227.143.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:8a:ce:d9:63:e9:26:98:52:5e:a7:6f:9c:58:15:76:c4:67:
         95:85:a2:9f:ad:61:78:65:62:1f:d3:05:1f:86:74:54:2d:46:
         ba:dc:24:39:15:a4:45:a2:4e:5c:ce:66:55:d0:6b:40:3e:a6:
         4a:a3:15:75:df:69:fa:78:50:fb:c2:88:4d:aa:0b:47:a6:3e:
         8a:ce:d2:84:1d:d9:fb:6e:33:3a:ac:19:0c:76:5d:aa:20:38:
         96:97:87:b5:ee:40:4b:d8:eb:d5:53:45:7f:fa:66:1f:85:cf:
         93:a9:e2:03:51:0b:d6:ae:9b:7c:3b:89:ff:bf:8c:d4:d9:83:
         fa:61:f6:dc:d5:e4:d4:44:3a:61:85:f5:44:57:88:0e:76:91:
         17:c6:9b:dd:02:58:e6:82:08:c8:24:9b:b3:bb:36:d1:1b:85:
         74:4f:ac:2c:01:c1:a7:ef:3e:5d:f6:2e:23:ec:67:08:f6:57:
         2b:cc:50:d5:d1:6f:1e:f0:08:c8:08:34:16:3f:32:01:d2:b9:
         0f:cf:97:63:44:40:c8:f9:b2:6d:a0:92:86:9a:62:27:73:01:
         16:f9:d1:15:00:ef:11:8d:29:af:86:9d:f6:44:78:d3:a0:cc:
         21:c0:7e:e5:a5:42:4f:a8:2e:96:55:37:59:cd:04:4a:c5:a6:
         fa:6e:34:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 06:32:30 2025 by rpki-client