Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/34079bef-7f7d-43cd-927f-d5cf59a0b0fb/0/3130332e3230352e36322e302f32332d3234203d3e20313530393932.roa
File:                     3130332e3230352e36322e302f32332d3234203d3e20313530393932.roa (raw, json)
Hash identifier:          x0rdzW+Z+6mUhvRC+qwoD+PtRMhNjhgY1WA5KetHwXU=
Subject key identifier:   A9:DB:8E:EE:C4:90:F0:9E:AA:BE:59:57:D1:01:E4:E3:26:69:D4:D7
Certificate issuer:       /CN=053084D88D32CFF591DBCBF3109B9137C3E74648
Certificate serial:       61E904F318123E8C87C49F66762308D4205A2038
Authority key identifier: 05:30:84:D8:8D:32:CF:F5:91:DB:CB:F3:10:9B:91:37:C3:E7:46:48
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/053084D88D32CFF591DBCBF3109B9137C3E74648.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/34079bef-7f7d-43cd-927f-d5cf59a0b0fb/0/3130332e3230352e36322e302f32332d3234203d3e20313530393932.roa
Signing time:             Wed 25 Jun 2025 18:00:02 +0000
ROA not before:           Wed 25 Jun 2025 17:55:02 +0000
ROA not after:            Wed 24 Jun 2026 18:00:02 +0000
asID:                     150992
IP address blocks:        103.205.62.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/34079bef-7f7d-43cd-927f-d5cf59a0b0fb/0/053084D88D32CFF591DBCBF3109B9137C3E74648.crl
                          rsync://repo-rpki.idnic.net/repo/34079bef-7f7d-43cd-927f-d5cf59a0b0fb/0/053084D88D32CFF591DBCBF3109B9137C3E74648.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/053084D88D32CFF591DBCBF3109B9137C3E74648.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 03 Jul 2025 22:26:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:e9:04:f3:18:12:3e:8c:87:c4:9f:66:76:23:08:d4:20:5a:20:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=053084D88D32CFF591DBCBF3109B9137C3E74648
        Validity
            Not Before: Jun 25 17:55:02 2025 GMT
            Not After : Jun 24 18:00:02 2026 GMT
        Subject: CN=A9DB8EEEC490F09EAABE5957D101E4E32669D4D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:eb:6e:a3:5f:6d:c0:32:f8:fc:70:cf:4e:77:
                    cc:22:30:2c:41:3c:85:dd:a1:93:7c:f9:b4:90:a1:
                    82:58:86:d0:92:73:dd:9b:61:a4:45:31:fd:c4:17:
                    7c:b4:ac:85:3c:c6:fd:2c:56:63:95:58:e0:ff:ab:
                    68:1d:1f:e1:c2:8f:c7:81:1b:1b:8c:21:99:1c:0c:
                    1d:49:c7:bd:53:6c:17:14:8c:0b:e4:16:81:68:64:
                    61:c7:9f:29:6d:b9:14:61:39:b2:71:ea:0d:29:cb:
                    d1:6d:b7:08:e4:b3:55:c3:ee:63:f4:ee:6e:a5:5b:
                    35:0f:9c:23:e0:17:be:60:7d:8b:4c:7b:d5:42:31:
                    8c:70:9a:0b:15:ab:9d:8d:47:e0:24:3a:61:d5:7c:
                    cc:80:6c:70:24:39:c9:a2:ff:c9:3a:12:08:84:0b:
                    8f:2c:6e:54:b5:4d:3b:37:06:ec:b5:c6:f9:7e:62:
                    21:30:0f:84:3b:e2:b6:ac:e8:e9:91:a4:12:9d:e4:
                    1a:24:f1:f5:7b:cb:00:18:30:1b:96:a0:40:b4:b4:
                    7b:bc:53:6f:c7:39:2c:21:4f:80:43:39:97:82:e9:
                    26:da:cd:fc:e1:20:e0:58:fb:30:8b:59:a5:47:1d:
                    5c:e3:e9:cd:b2:7e:12:fa:d8:2e:95:d1:0e:6a:51:
                    93:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:DB:8E:EE:C4:90:F0:9E:AA:BE:59:57:D1:01:E4:E3:26:69:D4:D7
            X509v3 Authority Key Identifier:
                keyid:05:30:84:D8:8D:32:CF:F5:91:DB:CB:F3:10:9B:91:37:C3:E7:46:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/34079bef-7f7d-43cd-927f-d5cf59a0b0fb/0/053084D88D32CFF591DBCBF3109B9137C3E74648.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/053084D88D32CFF591DBCBF3109B9137C3E74648.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/34079bef-7f7d-43cd-927f-d5cf59a0b0fb/0/3130332e3230352e36322e302f32332d3234203d3e20313530393932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.205.62.0/23

    Signature Algorithm: sha256WithRSAEncryption
         48:cf:e8:5a:1f:d2:fe:a0:3e:27:33:eb:85:f6:76:6b:47:c6:
         34:d8:cf:e1:81:63:f0:1c:ff:28:1e:d9:42:84:71:57:42:30:
         43:53:41:78:7a:f1:29:cc:87:b9:64:dd:ff:11:d6:e4:16:6c:
         04:9a:b4:21:8b:53:44:b1:d3:03:13:2b:ec:08:9d:7c:fa:1a:
         b0:f4:a9:3a:a2:7e:4c:8d:77:98:d9:65:91:65:49:0c:dc:5d:
         d2:df:59:be:0e:c9:ed:86:c3:21:a4:06:e9:d6:8b:2a:c2:95:
         93:a6:0c:27:9f:4b:28:7e:3e:73:e2:86:3a:9e:dd:35:21:49:
         8e:c1:6e:32:c1:a5:80:73:15:57:33:10:5a:19:2f:52:d5:91:
         60:11:1b:9e:fe:f2:cc:93:84:10:2f:d0:70:47:bf:4a:f1:18:
         a8:12:78:da:8d:31:96:35:56:68:a4:10:f5:97:81:7a:c7:c5:
         44:12:d1:99:e5:34:07:16:79:be:f0:7c:ce:74:44:2e:de:42:
         30:4e:eb:fc:98:b0:5b:58:47:be:6e:11:1e:0b:d6:b3:69:f4:
         2b:e5:bc:d5:31:57:60:fe:ec:5b:bd:8e:26:af:e5:87:85:c8:
         10:bb:0e:ee:be:f8:df:b1:9e:da:74:d2:9c:5e:cd:dc:b9:17:
         18:00:4c:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 23:13:52 2025 by rpki-client