Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/3130332e3131322e3133382e302f32342d3234203d3e20313337333330.roa
File:                     3130332e3131322e3133382e302f32342d3234203d3e20313337333330.roa (raw, json)
Hash identifier:          qD+tdFcsBae2pBPyr+Tro6gACvBJoa3YOj9Qz84vK3I=
Subject key identifier:   64:0B:05:52:77:7F:BE:07:EE:91:6F:8B:DE:C5:07:2F:4D:09:91:D9
Certificate issuer:       /CN=923D4A10E1DBBF6927183BF3419F512FE4C1D003
Certificate serial:       06CE36EC23FE55E8DEEF015A065B3DBB3068DC48
Authority key identifier: 92:3D:4A:10:E1:DB:BF:69:27:18:3B:F3:41:9F:51:2F:E4:C1:D0:03
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923D4A10E1DBBF6927183BF3419F512FE4C1D003.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/3130332e3131322e3133382e302f32342d3234203d3e20313337333330.roa
Signing time:             Mon 06 Oct 2025 06:49:02 +0000
ROA not before:           Mon 06 Oct 2025 06:44:02 +0000
ROA not after:            Mon 05 Oct 2026 06:49:02 +0000
asID:                     137330
IP address blocks:        103.112.138.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.crl
                          rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923D4A10E1DBBF6927183BF3419F512FE4C1D003.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Oct 2025 23:47:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:ce:36:ec:23:fe:55:e8:de:ef:01:5a:06:5b:3d:bb:30:68:dc:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=923D4A10E1DBBF6927183BF3419F512FE4C1D003
        Validity
            Not Before: Oct  6 06:44:02 2025 GMT
            Not After : Oct  5 06:49:02 2026 GMT
        Subject: CN=640B0552777FBE07EE916F8BDEC5072F4D0991D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:74:93:fb:a9:8b:61:d8:ab:4a:fb:6f:48:ab:
                    19:e5:7d:8e:0a:4f:15:3c:06:c4:4d:76:4b:48:5f:
                    97:02:c0:9b:17:18:ab:94:7d:4a:e2:8d:91:d1:c1:
                    dd:01:7c:74:08:29:2a:90:f5:c4:4f:e9:93:74:42:
                    ae:83:aa:5a:94:c3:06:e3:8b:9e:d9:a3:00:4e:cf:
                    97:47:0f:be:63:68:44:f0:b9:15:1c:c3:1d:44:35:
                    76:73:6c:e5:75:e0:82:8c:6d:8d:fa:5b:79:92:42:
                    8b:9e:7a:42:9d:d1:4b:c6:62:48:ae:5d:7b:3c:76:
                    b2:45:24:e0:92:d9:5a:17:32:6b:29:a0:fc:2b:ec:
                    20:81:d7:88:fa:a2:56:4c:1d:60:22:9c:90:fe:d9:
                    e7:a9:39:b5:ae:8c:00:3c:73:7a:99:f5:09:9a:6b:
                    4f:59:97:a5:61:89:e2:c6:c1:c3:2a:38:3d:41:5b:
                    db:26:f8:c3:f8:a5:ba:54:24:a4:c2:c0:c9:b3:51:
                    8f:57:a4:5a:a1:af:3d:2e:27:67:84:6f:07:26:35:
                    7d:e8:db:1e:88:fa:6a:ec:99:4d:32:dd:13:c0:86:
                    c4:bb:11:14:b2:01:8e:50:14:66:19:65:74:4b:57:
                    4c:41:0b:45:71:4f:93:e8:a9:a9:e1:03:ac:67:d5:
                    13:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:0B:05:52:77:7F:BE:07:EE:91:6F:8B:DE:C5:07:2F:4D:09:91:D9
            X509v3 Authority Key Identifier:
                keyid:92:3D:4A:10:E1:DB:BF:69:27:18:3B:F3:41:9F:51:2F:E4:C1:D0:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923D4A10E1DBBF6927183BF3419F512FE4C1D003.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/3130332e3131322e3133382e302f32342d3234203d3e20313337333330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.112.138.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:fd:b1:a1:8d:b4:e8:ac:0a:f0:86:f5:65:2a:3e:93:5f:b4:
         fe:51:dd:f9:da:55:8a:46:7d:7b:4c:2b:05:2e:ec:99:91:2a:
         77:ab:07:a5:4d:05:16:c3:a1:19:26:84:3a:9a:77:46:99:76:
         8d:97:03:56:e1:90:30:a9:50:81:27:4f:70:97:74:2d:09:5a:
         74:34:b8:d8:c1:d8:cb:d1:cd:93:0a:33:d6:66:da:7d:1d:0e:
         81:7b:0f:f3:2a:6b:da:16:74:63:e1:91:ef:eb:5b:f2:99:15:
         e2:3d:97:fc:3a:ba:cd:d8:74:26:79:21:f8:27:d4:d8:7d:25:
         d7:1c:eb:8f:da:6d:60:de:74:51:50:b7:2f:03:d4:e5:5b:d2:
         ca:44:ea:6d:ed:83:b5:66:b1:93:11:21:c2:ae:b6:17:06:e4:
         01:dc:4c:3c:7a:53:f9:50:e8:a9:48:dd:15:de:71:56:a1:4a:
         16:ad:b8:cd:5a:c7:c2:f2:42:b8:33:f0:00:62:56:7d:3a:75:
         1f:9b:2a:5f:8f:5c:0e:78:bd:23:d0:36:8f:d3:35:0c:c3:a2:
         4a:dd:fe:a8:9c:aa:a7:36:da:ee:a9:3f:fb:f0:a1:36:aa:3a:
         88:9c:bc:03:9b:f8:0a:81:e6:dc:88:5d:39:ff:63:1f:7e:b0:
         ea:17:00:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 20:50:02 2025 by rpki-client