Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a6358dda-0ff1-4f6a-bb66-60f4ca04c490/0/3130332e372e3232362e302f32342d3234203d3e203539313335.roa
File:                     3130332e372e3232362e302f32342d3234203d3e203539313335.roa (raw, json)
Hash identifier:          d1VqPlCHSAGRA/UEI5pUZ6WXcTK62ba2i6gugZCVB1Y=
Subject key identifier:   75:0C:16:16:09:70:D9:94:0A:90:CC:07:42:D5:4B:DE:8A:47:2F:25
Certificate issuer:       /CN=754AE571E3432B20E78045BE7B2C99E39E0F1873
Certificate serial:       5341921CDB3DAC0F586492C57480ED103ED59C0C
Authority key identifier: 75:4A:E5:71:E3:43:2B:20:E7:80:45:BE:7B:2C:99:E3:9E:0F:18:73
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/754AE571E3432B20E78045BE7B2C99E39E0F1873.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a6358dda-0ff1-4f6a-bb66-60f4ca04c490/0/3130332e372e3232362e302f32342d3234203d3e203539313335.roa
Signing time:             Fri 25 Jul 2025 09:00:00 +0000
ROA not before:           Fri 25 Jul 2025 08:55:00 +0000
ROA not after:            Fri 24 Jul 2026 09:00:00 +0000
asID:                     59135
IP address blocks:        103.7.226.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a6358dda-0ff1-4f6a-bb66-60f4ca04c490/0/754AE571E3432B20E78045BE7B2C99E39E0F1873.crl
                          rsync://repo-rpki.idnic.net/repo/a6358dda-0ff1-4f6a-bb66-60f4ca04c490/0/754AE571E3432B20E78045BE7B2C99E39E0F1873.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/754AE571E3432B20E78045BE7B2C99E39E0F1873.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 15 Aug 2025 10:40:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:41:92:1c:db:3d:ac:0f:58:64:92:c5:74:80:ed:10:3e:d5:9c:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=754AE571E3432B20E78045BE7B2C99E39E0F1873
        Validity
            Not Before: Jul 25 08:55:00 2025 GMT
            Not After : Jul 24 09:00:00 2026 GMT
        Subject: CN=750C16160970D9940A90CC0742D54BDE8A472F25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:10:54:35:77:5f:e9:44:99:5e:ee:5c:80:bf:
                    b9:33:9c:74:5d:ee:26:dc:4b:5a:9c:8e:cc:f6:78:
                    4a:e6:98:f5:ed:c4:d7:91:83:63:e6:4d:51:d1:5b:
                    8b:ce:bd:4d:56:c2:1c:bb:a3:c3:d3:5a:4d:af:0d:
                    c3:4d:a5:51:d3:c6:85:ba:37:86:60:78:c9:57:bd:
                    bd:68:c9:27:4c:c2:0f:56:55:f7:d4:ad:ff:e9:4c:
                    a8:91:32:06:1e:e2:b1:9c:da:3f:a6:36:fc:6b:c3:
                    8b:45:5a:b5:e8:2b:df:0a:c6:64:0f:42:44:b6:dc:
                    c4:89:d8:1b:1d:50:f7:51:7e:2c:de:de:c7:b9:b1:
                    c5:7d:52:78:0a:20:3b:70:65:2d:2d:9e:da:fd:9b:
                    14:25:8f:71:26:a3:4d:bd:d3:0d:e4:be:e3:d7:dc:
                    1e:4f:28:16:b6:b9:b5:93:4f:00:64:5a:e8:cc:5a:
                    1b:89:48:3d:02:f5:fa:6e:86:7c:ca:ad:2b:d1:9e:
                    bb:09:fe:c2:78:e3:74:de:7c:17:72:eb:43:37:fc:
                    b6:82:38:84:b0:e7:4c:06:da:24:69:b8:c0:91:d5:
                    82:f6:4d:ef:64:bf:12:c3:a5:35:56:fc:9c:0c:ab:
                    22:21:67:33:28:7d:a8:b9:97:09:cc:25:14:73:1f:
                    f6:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:0C:16:16:09:70:D9:94:0A:90:CC:07:42:D5:4B:DE:8A:47:2F:25
            X509v3 Authority Key Identifier:
                keyid:75:4A:E5:71:E3:43:2B:20:E7:80:45:BE:7B:2C:99:E3:9E:0F:18:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a6358dda-0ff1-4f6a-bb66-60f4ca04c490/0/754AE571E3432B20E78045BE7B2C99E39E0F1873.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/754AE571E3432B20E78045BE7B2C99E39E0F1873.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a6358dda-0ff1-4f6a-bb66-60f4ca04c490/0/3130332e372e3232362e302f32342d3234203d3e203539313335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.7.226.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:8f:dd:98:2c:d2:64:00:a6:66:94:3b:11:66:6a:82:b0:6d:
         ce:a1:a5:b9:dd:02:ac:4d:47:fe:08:fd:3c:31:b4:eb:cc:f4:
         54:88:7e:98:f8:77:eb:e1:5c:b6:85:b9:20:05:a4:4d:85:73:
         be:d4:0e:6c:a5:5e:30:e0:e9:2a:13:37:69:39:18:00:89:72:
         36:78:44:96:2b:ca:66:64:f8:46:f4:64:7b:cb:78:94:ca:73:
         b7:d6:42:85:06:d2:6e:62:48:0b:da:d9:ba:39:37:7e:cf:d9:
         a4:ae:af:e9:a6:fa:39:6f:f4:8c:47:cd:54:81:eb:c5:a6:7c:
         a7:8c:a1:c9:9b:45:2a:91:97:5d:cc:31:cc:1a:6d:0f:8a:4a:
         d9:3b:c9:33:b5:c3:40:99:11:01:ae:ee:ac:dd:57:da:85:0c:
         77:ed:ec:31:bd:60:68:b3:41:89:af:82:2f:0d:50:6d:1a:36:
         01:05:b3:9f:04:2a:15:cc:bd:47:08:48:43:32:28:72:7e:bb:
         22:2b:3d:83:f8:5d:84:45:29:44:b8:a6:ed:31:2d:3d:4d:e6:
         97:ba:9b:d4:79:d3:07:db:9d:45:60:60:b6:cd:e6:ba:69:64:
         d6:fc:d2:e3:67:d4:87:71:18:50:21:50:83:5e:60:3f:29:4c:
         d7:f2:0c:a9
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUU0GSHNs9rA9YZJLFdIDtED7VnAwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzU0QUU1NzFFMzQzMkIyMEU3ODA0NUJFN0IyQzk5RTM5
RTBGMTg3MzAeFw0yNTA3MjUwODU1MDBaFw0yNjA3MjQwOTAwMDBaMDMxMTAvBgNV
BAMTKDc1MEMxNjE2MDk3MEQ5OTQwQTkwQ0MwNzQyRDU0QkRFOEE0NzJGMjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPEFQ1d1/pRJle7lyAv7kznHRd
7ibcS1qcjsz2eErmmPXtxNeRg2PmTVHRW4vOvU1Wwhy7o8PTWk2vDcNNpVHTxoW6
N4ZgeMlXvb1oySdMwg9WVffUrf/pTKiRMgYe4rGc2j+mNvxrw4tFWrXoK98KxmQP
QkS23MSJ2BsdUPdRfize3se5scV9UngKIDtwZS0tntr9mxQlj3Emo0290w3kvuPX
3B5PKBa2ubWTTwBkWujMWhuJSD0C9fpuhnzKrSvRnrsJ/sJ443TefBdy60M3/LaC
OISw50wG2iRpuMCR1YL2Te9kvxLDpTVW/JwMqyIhZzMofai5lwnMJRRzH/bPAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQUdQwWFglw2ZQKkMwHQtVL3opHLyUwHwYDVR0j
BBgwFoAUdUrlceNDKyDngEW+eyyZ454PGHMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
NjM1OGRkYS0wZmYxLTRmNmEtYmI2Ni02MGY0Y2EwNGM0OTAvMC83NTRBRTU3MUUz
NDMyQjIwRTc4MDQ1QkU3QjJDOTlFMzlFMEYxODczLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNzU0QUU1NzFFMzQzMkIyMEU3ODA0NUJFN0IyQzk5RTM5RTBG
MTg3My5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E2MzU4ZGRhLTBmZjEtNGY2YS1i
YjY2LTYwZjRjYTA0YzQ5MC8wLzMxMzAzMzJlMzcyZTMyMzIzNjJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDM1MzkzMTMzMzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnB+IwDQYJKoZIhvcN
AQELBQADggEBADWP3Zgs0mQApmaUOxFmaoKwbc6hpbndAqxNR/4I/TwxtOvM9FSI
fpj4d+vhXLaFuSAFpE2Fc77UDmylXjDg6SoTN2k5GACJcjZ4RJYrymZk+Eb0ZHvL
eJTKc7fWQoUG0m5iSAva2bo5N37P2aSur+mm+jlv9IxHzVSB68WmfKeMocmbRSqR
l13MMcwabQ+KStk7yTO1w0CZEQGu7qzdV9qFDHft7DG9YGizQYmvgi8NUG0aNgEF
s58EKhXMvUcISEMyKHJ+uyIrPYP4XYRFKUS4pu0xLT1N5pe6m9R50wfbnUVgYLbN
5rppZNb80uNn1IdxGFAhUINeYD8pTNfyDKk=
-----END CERTIFICATE-----
Generated at Wed Aug 13 20:16:38 2025 by rpki-client