Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/2226be7b-2e28-4950-aa4c-2185e647db3f/0/3130332e33392e36382e302f32342d3234203d3e20313530323730.roa
File:                     3130332e33392e36382e302f32342d3234203d3e20313530323730.roa (raw, json)
Hash identifier:          g6PqLS5mE+1W2ojOPy8XOSM+C1KCNHjLUWlTp/BiYKA=
Subject key identifier:   E9:87:D9:61:80:B7:AB:29:BE:CD:6A:02:27:AC:D7:DC:86:D5:BA:3D
Certificate issuer:       /CN=75890247E178C40DD3F9A5968202F684AEB89D9A
Certificate serial:       6AC652FB143D3349C0224CB3C740C853847EFE45
Authority key identifier: 75:89:02:47:E1:78:C4:0D:D3:F9:A5:96:82:02:F6:84:AE:B8:9D:9A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/75890247E178C40DD3F9A5968202F684AEB89D9A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2226be7b-2e28-4950-aa4c-2185e647db3f/0/3130332e33392e36382e302f32342d3234203d3e20313530323730.roa
Signing time:             Fri 22 Aug 2025 05:00:55 +0000
ROA not before:           Fri 22 Aug 2025 04:55:55 +0000
ROA not after:            Fri 21 Aug 2026 05:00:55 +0000
asID:                     150270
IP address blocks:        103.39.68.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/2226be7b-2e28-4950-aa4c-2185e647db3f/0/75890247E178C40DD3F9A5968202F684AEB89D9A.crl
                          rsync://repo-rpki.idnic.net/repo/2226be7b-2e28-4950-aa4c-2185e647db3f/0/75890247E178C40DD3F9A5968202F684AEB89D9A.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/75890247E178C40DD3F9A5968202F684AEB89D9A.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Aug 2025 14:53:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:c6:52:fb:14:3d:33:49:c0:22:4c:b3:c7:40:c8:53:84:7e:fe:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75890247E178C40DD3F9A5968202F684AEB89D9A
        Validity
            Not Before: Aug 22 04:55:55 2025 GMT
            Not After : Aug 21 05:00:55 2026 GMT
        Subject: CN=E987D96180B7AB29BECD6A0227ACD7DC86D5BA3D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:84:11:de:d9:d3:ee:f3:e8:27:42:e7:de:f4:
                    8d:7f:45:0d:cc:e0:18:c4:30:66:0c:44:04:a3:f4:
                    4f:52:41:66:ca:14:42:48:d0:81:50:26:f0:e0:55:
                    64:9c:dc:bb:e1:b8:fc:97:4d:94:c0:bf:d8:b5:02:
                    18:aa:36:d2:d8:9d:11:72:17:21:81:2b:53:52:93:
                    27:ed:40:8b:41:12:c3:d4:a5:c3:34:99:95:8c:be:
                    b5:64:e7:37:ac:de:0c:f6:7c:17:3a:4d:6e:c4:f8:
                    ad:bd:80:7b:bf:df:31:82:9a:e7:61:dc:fb:71:9d:
                    74:9c:b7:05:e5:56:7b:cb:1f:fc:01:28:9c:be:fc:
                    0b:39:46:f8:74:fb:23:99:de:d2:72:d5:35:8d:68:
                    cc:5e:15:99:69:dd:fb:b1:24:e1:02:99:30:55:34:
                    8f:1d:5c:93:79:6a:77:a5:f3:b8:92:86:60:94:65:
                    6a:56:5e:48:89:97:71:a9:72:0d:1b:4f:3d:f5:5b:
                    a6:47:be:cf:ef:eb:89:e3:f1:3c:25:74:5e:67:6c:
                    ab:e3:7b:a1:d5:f8:d4:49:7c:5b:45:aa:cd:61:e8:
                    88:d4:13:d0:b5:70:aa:a3:dc:7a:fe:ba:12:1e:f8:
                    81:3f:bd:59:da:c6:ba:4a:c6:32:39:2e:c9:6b:05:
                    83:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:87:D9:61:80:B7:AB:29:BE:CD:6A:02:27:AC:D7:DC:86:D5:BA:3D
            X509v3 Authority Key Identifier:
                keyid:75:89:02:47:E1:78:C4:0D:D3:F9:A5:96:82:02:F6:84:AE:B8:9D:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2226be7b-2e28-4950-aa4c-2185e647db3f/0/75890247E178C40DD3F9A5968202F684AEB89D9A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/75890247E178C40DD3F9A5968202F684AEB89D9A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2226be7b-2e28-4950-aa4c-2185e647db3f/0/3130332e33392e36382e302f32342d3234203d3e20313530323730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.39.68.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:d2:c0:e2:33:d0:9e:4e:77:e3:07:80:38:6f:ce:44:92:32:
         2d:67:ad:12:01:01:bf:0e:62:bf:30:95:e4:c9:fd:83:4d:27:
         a0:72:b2:9f:5a:73:17:f8:05:37:72:3a:f5:2f:24:b6:7a:e7:
         68:32:b0:b0:ad:a9:33:43:1b:64:16:e3:81:4b:3e:a8:e7:86:
         47:bf:ef:5a:9f:eb:b9:81:d8:93:ec:ef:43:50:0b:ee:17:46:
         cc:70:f9:0c:c6:1c:3a:f6:db:c8:3a:96:32:56:ad:e3:f5:c8:
         36:94:f4:37:3c:0e:c7:03:16:3b:00:5b:24:af:16:75:a6:73:
         fb:42:66:61:29:43:8b:4c:72:c3:31:67:05:b2:08:76:2c:09:
         a2:61:a4:ea:0b:e1:ee:e6:7b:11:85:69:d7:de:c7:9d:71:0b:
         24:e2:4a:4b:32:7b:aa:e6:87:e7:17:9a:da:60:cb:50:ee:ac:
         c1:07:5e:92:ef:d9:33:02:00:38:f5:e6:a9:c0:12:91:df:91:
         d9:0b:bf:e0:02:5f:5f:17:43:c5:ec:34:ea:ed:66:54:e3:38:
         de:da:1a:df:83:d2:47:27:8f:eb:a7:b6:9d:f4:4f:02:5e:44:
         c4:55:0d:84:45:6e:44:36:a8:8d:c7:2c:ee:98:7f:27:c6:cf:
         d4:dc:9b:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:51:59 2025 by rpki-client