Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/3130332e33392e31352e302f32342d3234203d3e203633383237.roa
File:                     3130332e33392e31352e302f32342d3234203d3e203633383237.roa (raw, json)
Hash identifier:          /BVYixhjCRvqFjUFmXC//F/0kY3GQUw+CgUs6eD3lKE=
Subject key identifier:   5F:00:85:E5:54:5E:65:6E:E3:3F:0B:34:B7:86:3F:53:29:D2:69:3C
Certificate issuer:       /CN=F69B637EA94DE4CC9150BDFD5327BE03A033784B
Certificate serial:       723522B09C017C43F3A49EFD5790650770993C8F
Authority key identifier: F6:9B:63:7E:A9:4D:E4:CC:91:50:BD:FD:53:27:BE:03:A0:33:78:4B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F69B637EA94DE4CC9150BDFD5327BE03A033784B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/3130332e33392e31352e302f32342d3234203d3e203633383237.roa
Signing time:             Wed 22 Oct 2025 09:02:25 +0000
ROA not before:           Wed 22 Oct 2025 08:57:25 +0000
ROA not after:            Wed 21 Oct 2026 09:02:25 +0000
asID:                     63827
IP address blocks:        103.39.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/F69B637EA94DE4CC9150BDFD5327BE03A033784B.crl
                          rsync://repo-rpki.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/F69B637EA94DE4CC9150BDFD5327BE03A033784B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F69B637EA94DE4CC9150BDFD5327BE03A033784B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 08 Nov 2025 10:23:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:35:22:b0:9c:01:7c:43:f3:a4:9e:fd:57:90:65:07:70:99:3c:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F69B637EA94DE4CC9150BDFD5327BE03A033784B
        Validity
            Not Before: Oct 22 08:57:25 2025 GMT
            Not After : Oct 21 09:02:25 2026 GMT
        Subject: CN=5F0085E5545E656EE33F0B34B7863F5329D2693C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f4:e2:4f:05:07:c2:91:2b:82:63:65:97:ff:
                    83:54:83:92:1b:83:10:f7:21:8a:0b:5a:52:3a:19:
                    e7:ae:43:92:29:7f:81:3e:d4:88:26:f6:8e:80:f3:
                    0c:ce:e5:80:8f:e4:1f:14:3c:ef:b6:b2:d3:62:18:
                    50:e2:26:74:95:a1:cc:72:95:0a:45:3b:10:9e:a9:
                    ff:3d:40:77:af:40:f0:72:7b:49:93:97:42:b5:ad:
                    43:d1:06:30:fa:4e:ae:47:cb:6c:74:88:8e:3b:50:
                    81:0e:3f:46:f8:3d:0c:a5:89:1a:19:90:71:8b:37:
                    f0:84:25:aa:6e:20:f3:ed:a6:7a:b2:65:30:46:10:
                    05:61:b1:5b:bc:60:9a:8f:d4:14:59:cd:f7:0c:2d:
                    f1:fa:c0:17:d9:44:9c:42:1b:81:8d:31:92:fb:44:
                    fb:2f:2e:71:08:b1:3a:cf:d4:8e:49:88:68:dc:94:
                    ee:74:5d:8f:65:e3:2d:f5:fa:28:49:d0:32:7c:ca:
                    75:58:0b:44:2d:e6:fc:3c:94:26:06:20:7e:0d:a9:
                    31:d0:84:13:d3:47:a8:1c:aa:e6:53:48:35:9c:3a:
                    29:4c:17:78:29:20:1d:a8:76:42:a2:68:c1:d0:25:
                    21:d2:44:6d:ab:e7:3c:a3:cb:23:94:b4:a6:5f:08:
                    15:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:00:85:E5:54:5E:65:6E:E3:3F:0B:34:B7:86:3F:53:29:D2:69:3C
            X509v3 Authority Key Identifier:
                keyid:F6:9B:63:7E:A9:4D:E4:CC:91:50:BD:FD:53:27:BE:03:A0:33:78:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/F69B637EA94DE4CC9150BDFD5327BE03A033784B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F69B637EA94DE4CC9150BDFD5327BE03A033784B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/3130332e33392e31352e302f32342d3234203d3e203633383237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.39.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cf:8c:f7:72:f0:11:e9:65:06:b9:ef:eb:68:f7:c5:f7:61:1e:
         50:17:b7:72:b2:3a:34:39:e1:3a:fe:89:47:f9:fc:d4:65:b6:
         94:28:10:6f:6b:b9:6b:2c:4b:38:f6:59:19:89:e4:78:10:aa:
         3c:04:29:e8:83:4c:ea:ab:85:91:44:bb:ea:73:06:b9:1d:09:
         5a:ef:c1:49:24:5e:ee:ae:90:a9:c0:5e:11:7f:f6:f6:da:f7:
         86:24:f7:e4:bf:54:d8:e9:9f:cc:8a:3f:51:e1:a3:84:fc:8a:
         f1:16:89:3f:62:d2:44:e9:6b:95:96:3c:41:bd:dd:10:4e:ae:
         59:ed:84:a5:c5:db:d7:c1:e2:29:f3:99:39:93:9b:24:7d:9a:
         ef:e5:d3:a1:b4:8c:d3:8a:d0:35:3f:86:0c:82:42:57:d5:d5:
         25:0a:c9:46:27:f2:97:d2:fe:64:59:02:e1:5f:d9:05:ab:c2:
         f0:72:ea:8a:e1:da:11:fd:80:3a:22:f8:cf:10:89:ea:d6:04:
         8b:fc:78:78:ff:d6:3d:c4:b8:94:cf:1d:a5:fd:78:15:2e:25:
         5b:cf:cb:25:03:bd:96:91:af:ed:c7:5a:05:3e:09:0d:0f:11:
         64:0f:e4:14:14:8d:4f:ea:3e:47:eb:81:e4:0c:d4:3f:92:8d:
         67:c3:90:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:43:18 2025 by rpki-client