Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/2c3624c4-bfdc-4e48-8ea0-eb05605c6213/0/3130332e3137342e3131332e302f32342d3234203d3e20313339393532.roa
File:                     3130332e3137342e3131332e302f32342d3234203d3e20313339393532.roa (raw, json)
Hash identifier:          5C7cr7m1rH+Q3Oz5yPBlPFFAgwjpw6p/9sq9jkATwag=
Subject key identifier:   46:89:25:F6:4E:36:16:86:86:EC:9A:57:9B:74:41:53:EF:8B:11:2A
Certificate issuer:       /CN=061065EDF2843A4462114BCE0A173E21A84A019E
Certificate serial:       4D02106A46700EF0B1B4C4547E6E267E5BFADA44
Authority key identifier: 06:10:65:ED:F2:84:3A:44:62:11:4B:CE:0A:17:3E:21:A8:4A:01:9E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/061065EDF2843A4462114BCE0A173E21A84A019E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2c3624c4-bfdc-4e48-8ea0-eb05605c6213/0/3130332e3137342e3131332e302f32342d3234203d3e20313339393532.roa
Signing time:             Thu 07 Aug 2025 04:00:00 +0000
ROA not before:           Thu 07 Aug 2025 03:55:00 +0000
ROA not after:            Thu 06 Aug 2026 04:00:00 +0000
asID:                     139952
IP address blocks:        103.174.113.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/2c3624c4-bfdc-4e48-8ea0-eb05605c6213/0/061065EDF2843A4462114BCE0A173E21A84A019E.crl
                          rsync://repo-rpki.idnic.net/repo/2c3624c4-bfdc-4e48-8ea0-eb05605c6213/0/061065EDF2843A4462114BCE0A173E21A84A019E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/061065EDF2843A4462114BCE0A173E21A84A019E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Aug 2025 02:58:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:02:10:6a:46:70:0e:f0:b1:b4:c4:54:7e:6e:26:7e:5b:fa:da:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=061065EDF2843A4462114BCE0A173E21A84A019E
        Validity
            Not Before: Aug  7 03:55:00 2025 GMT
            Not After : Aug  6 04:00:00 2026 GMT
        Subject: CN=468925F64E36168686EC9A579B744153EF8B112A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:40:89:80:a8:ec:8d:76:01:30:85:c8:d8:0f:
                    8f:b9:22:08:72:5d:06:fb:a8:e6:ff:cf:92:4f:ba:
                    18:59:b7:5c:da:d2:eb:14:b4:0b:a5:da:1d:41:85:
                    dd:d6:58:f8:2f:29:d3:a5:b4:d3:83:8a:43:05:d4:
                    2b:da:11:a6:a7:28:65:36:1b:d6:dd:a8:2f:89:18:
                    1f:ec:65:ce:07:34:e5:73:0b:7f:78:bb:e4:1a:52:
                    48:d6:32:e2:31:2b:4e:a4:39:af:33:19:01:4c:39:
                    1f:16:53:7e:2e:79:a7:f2:88:d2:dd:29:c5:83:ae:
                    00:45:14:15:53:5d:95:ef:50:24:c2:65:53:c8:06:
                    3c:23:14:62:91:05:55:e4:0e:7d:9c:22:0b:66:83:
                    d6:1b:bd:8d:8d:d5:37:f2:51:a5:13:25:65:b6:eb:
                    07:e6:2d:5e:ff:04:93:eb:27:ee:52:25:25:18:4f:
                    63:42:42:8c:36:44:b5:d0:49:9f:19:ea:85:60:37:
                    9e:91:e3:fd:08:99:e7:8f:c6:13:4a:1b:75:21:a8:
                    bf:8e:69:af:f2:66:fd:94:ce:68:3a:a3:78:7c:4b:
                    1c:a8:40:44:a8:aa:b9:e7:48:e8:2c:7d:2d:1d:81:
                    7c:f5:44:a6:89:f8:25:56:9e:f3:4a:29:90:86:f0:
                    ff:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:89:25:F6:4E:36:16:86:86:EC:9A:57:9B:74:41:53:EF:8B:11:2A
            X509v3 Authority Key Identifier:
                keyid:06:10:65:ED:F2:84:3A:44:62:11:4B:CE:0A:17:3E:21:A8:4A:01:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2c3624c4-bfdc-4e48-8ea0-eb05605c6213/0/061065EDF2843A4462114BCE0A173E21A84A019E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/061065EDF2843A4462114BCE0A173E21A84A019E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2c3624c4-bfdc-4e48-8ea0-eb05605c6213/0/3130332e3137342e3131332e302f32342d3234203d3e20313339393532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.174.113.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:7c:0a:af:8e:00:96:d0:04:df:65:8a:77:15:9c:27:a9:57:
         a1:5d:ec:a7:c8:09:57:65:34:25:0f:66:a0:43:8b:4d:51:bf:
         07:ba:34:11:6d:59:96:79:b4:89:8c:70:8e:51:0f:5b:a6:f3:
         f1:f3:b2:0f:0c:6e:99:27:1a:ed:80:a7:c6:e1:ed:ed:5e:50:
         ae:d6:c0:ed:f7:b5:41:ed:7a:23:fb:43:c3:4a:70:94:31:c1:
         82:d5:9e:02:ab:b7:e1:48:8a:1b:84:11:ef:66:fd:c0:35:b8:
         00:30:d4:e8:14:45:1a:d1:54:8a:39:82:fd:8a:39:49:fb:2f:
         f1:87:87:62:1f:72:c4:1c:68:08:c2:61:eb:a0:91:7e:f0:e1:
         dc:87:0c:0b:09:27:42:3e:57:27:f0:79:aa:06:49:ed:ff:59:
         43:4f:64:82:c2:00:5d:03:dd:00:a3:e3:e8:00:03:79:e1:b9:
         84:84:5b:fc:d6:28:b9:ef:66:cd:51:93:f2:07:d9:0a:fc:58:
         d0:10:8d:b3:65:37:5b:93:03:e1:9d:7b:f8:3b:62:b5:a2:46:
         b2:70:ce:6c:46:5e:66:80:f2:8b:0c:9a:45:fa:c0:eb:2f:0a:
         72:00:24:02:e7:73:30:66:0e:47:db:2a:39:8f:a4:f8:1a:77:
         ea:cc:89:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:36:33 2025 by rpki-client