Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/10c73af5-a2c0-424d-862e-112c58b7270e/0/3130332e33392e37332e302f32342d3234203d3e20313530343838.roa
File:                     3130332e33392e37332e302f32342d3234203d3e20313530343838.roa (raw, json)
Hash identifier:          qhQA0cj7kuBqIGVwCLG9U/r/eXfYDiDRD7UKEazkyf0=
Subject key identifier:   79:31:3F:94:AC:22:DF:BF:6E:43:1A:40:16:A5:34:C0:7F:87:38:6D
Certificate issuer:       /CN=D6E54AF6C437868899B99F4312CD3DBB493B5D29
Certificate serial:       2A758B824D621DBBCA24FA7B303A6083A204064D
Authority key identifier: D6:E5:4A:F6:C4:37:86:88:99:B9:9F:43:12:CD:3D:BB:49:3B:5D:29
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D6E54AF6C437868899B99F4312CD3DBB493B5D29.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/10c73af5-a2c0-424d-862e-112c58b7270e/0/3130332e33392e37332e302f32342d3234203d3e20313530343838.roa
Signing time:             Mon 06 Oct 2025 05:01:38 +0000
ROA not before:           Mon 06 Oct 2025 04:56:38 +0000
ROA not after:            Mon 05 Oct 2026 05:01:38 +0000
asID:                     150488
IP address blocks:        103.39.73.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/10c73af5-a2c0-424d-862e-112c58b7270e/0/D6E54AF6C437868899B99F4312CD3DBB493B5D29.crl
                          rsync://repo-rpki.idnic.net/repo/10c73af5-a2c0-424d-862e-112c58b7270e/0/D6E54AF6C437868899B99F4312CD3DBB493B5D29.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D6E54AF6C437868899B99F4312CD3DBB493B5D29.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Oct 2025 11:48:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:75:8b:82:4d:62:1d:bb:ca:24:fa:7b:30:3a:60:83:a2:04:06:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6E54AF6C437868899B99F4312CD3DBB493B5D29
        Validity
            Not Before: Oct  6 04:56:38 2025 GMT
            Not After : Oct  5 05:01:38 2026 GMT
        Subject: CN=79313F94AC22DFBF6E431A4016A534C07F87386D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:00:41:7c:9f:d0:bd:5f:f1:80:2b:42:90:4d:
                    43:e7:ae:50:ac:b0:22:18:80:08:1e:60:f1:85:4b:
                    79:a1:92:fd:a8:07:ab:66:f7:cb:b6:ca:6c:5e:38:
                    a2:00:2b:56:ff:86:d2:98:90:38:15:98:5b:76:23:
                    3c:04:ec:a7:46:35:93:25:95:6f:ab:b5:06:25:8a:
                    fd:c1:c6:d8:5b:dd:18:0d:b8:69:a9:33:19:d3:3e:
                    05:51:69:21:f6:f2:a3:b0:be:14:1a:ee:57:97:17:
                    be:f2:6a:60:e5:83:d5:0e:6f:2a:d8:de:2f:45:2e:
                    07:5c:aa:da:9a:30:ab:2a:1c:1b:75:1e:32:fa:a7:
                    0d:f0:88:ec:6b:37:33:29:0b:49:67:1d:9b:5a:2c:
                    15:2b:d4:1f:03:67:74:a2:78:99:2a:24:c9:8b:24:
                    a6:d1:90:ee:ff:bc:3c:48:78:17:cc:46:07:10:7e:
                    c5:88:d6:5c:d0:61:84:f3:db:ab:c7:54:7b:98:e2:
                    68:08:26:fb:f3:b8:c1:33:01:04:98:e2:31:74:0a:
                    13:98:8f:5e:06:50:c7:d5:72:43:4e:f9:70:29:5d:
                    09:6b:f2:47:2a:0c:88:b9:2f:50:f7:0a:27:c9:ab:
                    06:8b:b5:13:c5:f8:30:b1:f6:79:c8:e3:ff:17:19:
                    d0:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:31:3F:94:AC:22:DF:BF:6E:43:1A:40:16:A5:34:C0:7F:87:38:6D
            X509v3 Authority Key Identifier:
                keyid:D6:E5:4A:F6:C4:37:86:88:99:B9:9F:43:12:CD:3D:BB:49:3B:5D:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/10c73af5-a2c0-424d-862e-112c58b7270e/0/D6E54AF6C437868899B99F4312CD3DBB493B5D29.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D6E54AF6C437868899B99F4312CD3DBB493B5D29.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/10c73af5-a2c0-424d-862e-112c58b7270e/0/3130332e33392e37332e302f32342d3234203d3e20313530343838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.39.73.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:cd:cc:51:89:cf:9d:fc:95:5b:19:a3:2e:b7:19:20:76:ba:
         bb:49:db:77:9a:4f:41:08:45:cf:64:44:ce:0d:a1:c4:86:9e:
         55:ea:34:48:60:14:9d:21:4c:e2:26:81:cf:55:e9:1b:a3:2c:
         7d:2d:e3:65:fd:f7:4b:36:0b:ea:85:27:ca:75:fe:20:99:01:
         83:45:2c:ed:d8:ae:0a:86:76:6f:f1:56:47:cf:8c:1e:8b:d8:
         ca:04:50:2b:3b:be:96:bb:be:cd:14:ba:be:00:e0:d1:3e:bb:
         a1:4e:9f:4c:9c:cb:47:d1:0a:7d:ea:f7:5c:d7:0a:ff:c7:f1:
         28:2e:80:c4:0e:9f:ff:9e:f3:62:1f:61:ef:1c:61:e8:18:6b:
         2c:bb:b3:f3:75:ea:da:14:ff:cb:8e:0c:c9:0c:0f:93:a4:8f:
         cf:23:57:81:5b:e0:09:16:fe:ed:6e:9b:7b:aa:4d:d4:09:e9:
         77:70:f9:a5:e6:3e:05:2b:42:ed:9a:31:30:7b:2a:e1:df:ab:
         8b:c7:3a:3c:91:0f:5d:2e:dd:4e:f6:5e:21:9e:8e:d5:ab:07:
         09:2a:59:53:85:ac:35:50:6c:b7:e9:8f:21:e6:84:b5:d7:a1:
         83:e1:80:03:55:f8:13:41:b5:c2:13:31:68:c0:cc:d3:4b:6b:
         dc:bd:8f:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:49:43 2025 by rpki-client