Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/9c80467c-aeb2-4095-8f54-85b9090d3908/0/3130332e3139372e3138382e302f32322d3234203d3e20313333383030.roa
File:                     3130332e3139372e3138382e302f32322d3234203d3e20313333383030.roa (raw, json)
Hash identifier:          4aA8UHvWdn6b+e9rvE0qvRNLuWwKk2SM0xhNOkJ4w/s=
Subject key identifier:   F9:39:60:F5:24:31:59:6E:BD:0F:33:22:27:6B:C7:D2:43:37:A4:81
Certificate issuer:       /CN=8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B
Certificate serial:       2B22C46714A65311FBAA15B974D049E633CDB795
Authority key identifier: 8E:E9:EE:E4:6E:A0:F8:60:38:5C:88:0C:00:E2:EE:5A:59:D6:EA:9B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/9c80467c-aeb2-4095-8f54-85b9090d3908/0/3130332e3139372e3138382e302f32322d3234203d3e20313333383030.roa
Signing time:             Sat 25 Oct 2025 01:59:44 +0000
ROA not before:           Sat 25 Oct 2025 01:54:44 +0000
ROA not after:            Sat 24 Oct 2026 01:59:44 +0000
asID:                     133800
IP address blocks:        103.197.188.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/9c80467c-aeb2-4095-8f54-85b9090d3908/0/8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B.crl
                          rsync://repo-rpki.idnic.net/repo/9c80467c-aeb2-4095-8f54-85b9090d3908/0/8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 06 Nov 2025 12:21:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:22:c4:67:14:a6:53:11:fb:aa:15:b9:74:d0:49:e6:33:cd:b7:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B
        Validity
            Not Before: Oct 25 01:54:44 2025 GMT
            Not After : Oct 24 01:59:44 2026 GMT
        Subject: CN=F93960F52431596EBD0F3322276BC7D24337A481
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:0f:ab:63:76:e3:fc:68:62:ff:28:cc:86:4c:
                    40:6e:6d:f9:fe:2d:45:8e:2d:19:52:88:cc:f7:2e:
                    b3:d6:28:46:f7:52:40:f7:cb:e6:3e:e1:e2:2e:99:
                    67:84:40:db:56:1c:04:76:35:ba:c5:18:0f:5b:6d:
                    c9:3f:0f:33:c3:b0:55:98:9b:60:e6:17:e7:b0:80:
                    07:47:91:df:78:c0:c8:cd:d5:1e:12:8e:0b:54:2a:
                    63:7c:46:74:e2:e4:bb:bc:77:32:6b:db:3a:64:42:
                    09:3f:e4:6c:a5:63:19:96:92:34:30:0a:a3:37:9c:
                    9d:cf:67:9d:0a:28:51:7d:c8:ed:a1:69:0e:69:ac:
                    e4:69:61:62:d1:2a:5b:09:7a:19:8f:15:a4:13:49:
                    3d:ab:83:bd:69:6e:69:f3:64:17:21:21:b8:bb:b4:
                    96:6a:b1:87:b0:0e:a3:a0:0f:a5:f4:1f:8e:ac:48:
                    b9:e3:1d:b7:46:e2:06:ed:31:4a:50:e1:a5:d9:74:
                    1a:29:1a:6d:2e:64:8f:e9:39:44:48:de:b9:7c:80:
                    ac:13:39:20:e0:cf:b5:9c:ba:19:b2:9b:45:7f:ea:
                    59:8f:b0:ae:fb:d0:7e:a3:e0:ba:94:da:14:87:de:
                    ff:f5:22:82:f2:a5:67:71:cc:69:bd:ab:a2:5b:a8:
                    78:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:39:60:F5:24:31:59:6E:BD:0F:33:22:27:6B:C7:D2:43:37:A4:81
            X509v3 Authority Key Identifier:
                keyid:8E:E9:EE:E4:6E:A0:F8:60:38:5C:88:0C:00:E2:EE:5A:59:D6:EA:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/9c80467c-aeb2-4095-8f54-85b9090d3908/0/8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9c80467c-aeb2-4095-8f54-85b9090d3908/0/3130332e3139372e3138382e302f32322d3234203d3e20313333383030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.197.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         55:91:9d:5a:bb:47:93:ae:07:83:eb:77:fe:1c:3d:24:30:81:
         3f:6c:3c:73:df:d8:59:b4:5f:66:a5:21:ab:76:c5:e7:8c:8c:
         72:44:85:db:7f:b5:c1:5e:52:32:7e:81:31:b9:f1:57:2b:f0:
         96:90:a8:c6:37:c0:cf:b5:76:8a:0d:0d:a5:dd:2f:83:e3:d2:
         5a:cb:8f:9e:28:3d:2a:34:8d:f2:24:0f:f2:67:79:ef:d3:32:
         a6:15:d4:8d:dd:69:37:f8:f2:f6:26:59:3c:16:8e:5a:f1:f1:
         1f:90:c3:c6:80:0a:db:c3:f3:78:98:c4:ed:de:3f:9b:b2:05:
         29:ab:01:93:29:6d:d7:5a:88:6f:ec:bb:5e:84:d8:b7:73:35:
         a4:d4:a5:75:2f:a2:6b:23:6a:23:3a:58:61:47:f2:24:82:0c:
         55:16:0e:3c:58:04:9b:2e:60:63:85:69:d4:a6:f8:eb:60:ca:
         a2:df:6a:e7:f6:49:1a:05:62:ed:5c:50:f4:20:e4:6b:56:2b:
         0a:2d:fb:e4:be:e2:e6:34:c6:e7:98:b3:08:db:6c:3e:b1:8c:
         00:e6:a9:1b:e9:df:ba:3a:4a:96:ae:23:c6:e2:48:26:91:94:
         ec:b6:17:15:c5:ac:34:da:d9:eb:3e:4e:09:37:e3:06:ff:09:
         48:75:19:27
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUKyLEZxSmUxH7qhW5dNBJ5jPNt5UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEVFOUVFRTQ2RUEwRjg2MDM4NUM4ODBDMDBFMkVFNUE1
OUQ2RUE5QjAeFw0yNTEwMjUwMTU0NDRaFw0yNjEwMjQwMTU5NDRaMDMxMTAvBgNV
BAMTKEY5Mzk2MEY1MjQzMTU5NkVCRDBGMzMyMjI3NkJDN0QyNDMzN0E0ODEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGD6tjduP8aGL/KMyGTEBubfn+
LUWOLRlSiMz3LrPWKEb3UkD3y+Y+4eIumWeEQNtWHAR2NbrFGA9bbck/DzPDsFWY
m2DmF+ewgAdHkd94wMjN1R4SjgtUKmN8RnTi5Lu8dzJr2zpkQgk/5GylYxmWkjQw
CqM3nJ3PZ50KKFF9yO2haQ5prORpYWLRKlsJehmPFaQTST2rg71pbmnzZBchIbi7
tJZqsYewDqOgD6X0H46sSLnjHbdG4gbtMUpQ4aXZdBopGm0uZI/pOURI3rl8gKwT
OSDgz7Wcuhmym0V/6lmPsK770H6j4LqU2hSH3v/1IoLypWdxzGm9q6JbqHhfAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQU+Tlg9SQxWW69DzMiJ2vH0kM3pIEwHwYDVR0j
BBgwFoAUjunu5G6g+GA4XIgMAOLuWlnW6pswDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85
YzgwNDY3Yy1hZWIyLTQwOTUtOGY1NC04NWI5MDkwZDM5MDgvMC84RUU5RUVFNDZF
QTBGODYwMzg1Qzg4MEMwMEUyRUU1QTU5RDZFQTlCLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvOEVFOUVFRTQ2RUEwRjg2MDM4NUM4ODBDMDBFMkVFNUE1OUQ2
RUE5Qi5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzljODA0NjdjLWFlYjItNDA5NS04
ZjU0LTg1YjkwOTBkMzkwOC8wLzMxMzAzMzJlMzEzOTM3MmUzMTM4MzgyZTMwMmYz
MjMyMmQzMjM0MjAzZDNlMjAzMTMzMzMzODMwMzAucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJnxbwwDQYJ
KoZIhvcNAQELBQADggEBAFWRnVq7R5OuB4Prd/4cPSQwgT9sPHPf2Fm0X2alIat2
xeeMjHJEhdt/tcFeUjJ+gTG58Vcr8JaQqMY3wM+1dooNDaXdL4Pj0lrLj54oPSo0
jfIkD/Jnee/TMqYV1I3daTf48vYmWTwWjlrx8R+Qw8aACtvD83iYxO3eP5uyBSmr
AZMpbddaiG/su16E2LdzNaTUpXUvomsjaiM6WGFH8iSCDFUWDjxYBJsuYGOFadSm
+OtgyqLfauf2SRoFYu1cUPQg5GtWKwot++S+4uY0xueYswjbbD6xjADmqRvp37o6
SpauI8biSCaRlOy2FxXFrDTa2es+Tgk34wb/CUh1GSc=
-----END CERTIFICATE-----
Generated at Wed Nov 5 01:03:35 2025 by rpki-client