Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/370c4759-43b8-4e80-be8c-83cbe9f8231b/0/3130332e3234352e3137392e302f32342d3234203d3e2039333431.roa
File:                     3130332e3234352e3137392e302f32342d3234203d3e2039333431.roa (raw, json)
Hash identifier:          e1O7IFU9uCaYA+jMLBiE2GdFukypRRniAf+RRVQm+So=
Subject key identifier:   AC:EC:06:41:A9:1B:1B:63:5A:F8:18:71:B9:80:05:9A:93:CD:96:7F
Certificate issuer:       /CN=A61585874729C58BB62740692BA8FA6ED286FDC9
Certificate serial:       4394332E14AE0C6C3F46CDFD91187BB60C02C6CB
Authority key identifier: A6:15:85:87:47:29:C5:8B:B6:27:40:69:2B:A8:FA:6E:D2:86:FD:C9
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A61585874729C58BB62740692BA8FA6ED286FDC9.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/370c4759-43b8-4e80-be8c-83cbe9f8231b/0/3130332e3234352e3137392e302f32342d3234203d3e2039333431.roa
Signing time:             Mon 23 Jun 2025 05:02:52 +0000
ROA not before:           Mon 23 Jun 2025 04:57:52 +0000
ROA not after:            Mon 22 Jun 2026 05:02:52 +0000
asID:                     9341
IP address blocks:        103.245.179.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/370c4759-43b8-4e80-be8c-83cbe9f8231b/0/A61585874729C58BB62740692BA8FA6ED286FDC9.crl
                          rsync://repo-rpki.idnic.net/repo/370c4759-43b8-4e80-be8c-83cbe9f8231b/0/A61585874729C58BB62740692BA8FA6ED286FDC9.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A61585874729C58BB62740692BA8FA6ED286FDC9.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 01 Jul 2025 05:58:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:94:33:2e:14:ae:0c:6c:3f:46:cd:fd:91:18:7b:b6:0c:02:c6:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A61585874729C58BB62740692BA8FA6ED286FDC9
        Validity
            Not Before: Jun 23 04:57:52 2025 GMT
            Not After : Jun 22 05:02:52 2026 GMT
        Subject: CN=ACEC0641A91B1B635AF81871B980059A93CD967F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:6b:2e:23:83:48:a5:d9:27:98:f9:14:b8:0c:
                    01:3a:e9:d6:dd:8c:e4:e6:be:b5:ca:40:cf:00:1b:
                    9b:45:01:72:28:d4:0d:55:4d:b7:fc:a8:d4:b8:88:
                    2b:03:4e:fc:aa:f9:e1:1f:4b:10:46:05:1b:85:b7:
                    6b:3a:a2:1e:92:62:76:76:b6:79:35:8e:d5:55:98:
                    6b:a4:ac:f2:db:fd:68:9a:ab:7a:1e:e4:9b:cb:ec:
                    96:8e:1f:ea:bb:46:51:e3:64:53:04:79:ba:82:72:
                    f5:f7:98:51:ed:e2:af:43:f6:a9:b4:3a:9d:eb:a6:
                    80:cc:f3:09:27:ed:4f:1d:b8:2b:4e:a1:d4:41:d0:
                    98:80:12:61:0d:f0:4a:be:9d:37:cf:dc:4b:f4:44:
                    75:b9:e0:ec:a9:9a:37:01:0d:ea:6e:2d:94:36:50:
                    eb:76:6a:e7:46:02:04:08:2e:56:dc:87:25:bf:51:
                    6d:13:d3:6b:83:a6:5a:76:e0:ef:d0:8b:f1:26:50:
                    54:f7:62:d0:ae:f0:f5:bd:8a:8c:e2:e2:71:6f:18:
                    57:75:78:ce:56:fb:f8:ad:e1:54:4e:cb:e1:5b:d7:
                    53:1f:d3:24:b7:7b:4c:c9:c8:2f:a8:e3:f5:75:60:
                    a7:76:3f:e3:4f:39:c6:3d:42:74:60:cd:6a:dd:2b:
                    41:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:EC:06:41:A9:1B:1B:63:5A:F8:18:71:B9:80:05:9A:93:CD:96:7F
            X509v3 Authority Key Identifier:
                keyid:A6:15:85:87:47:29:C5:8B:B6:27:40:69:2B:A8:FA:6E:D2:86:FD:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/370c4759-43b8-4e80-be8c-83cbe9f8231b/0/A61585874729C58BB62740692BA8FA6ED286FDC9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A61585874729C58BB62740692BA8FA6ED286FDC9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/370c4759-43b8-4e80-be8c-83cbe9f8231b/0/3130332e3234352e3137392e302f32342d3234203d3e2039333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.245.179.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:fe:ea:2d:23:e3:27:4f:ab:a7:29:15:28:75:1d:81:a6:96:
         fd:ee:55:71:ff:46:46:3c:78:c3:ef:cb:1a:ed:f5:bb:45:69:
         d5:04:d5:2f:fe:3b:92:60:2b:3f:31:40:25:9e:39:66:51:7b:
         45:4b:64:7c:f1:12:97:d1:52:df:c6:46:55:6b:d7:2e:c1:83:
         10:bb:62:f9:56:a1:5d:8b:5c:9a:a8:e2:95:1d:76:3d:6d:71:
         29:e9:a4:cb:d8:40:40:a3:0d:5c:50:03:c0:49:3a:65:fc:8b:
         ea:a4:f9:5b:d3:18:0a:78:ff:c7:f8:f4:90:6e:81:b6:bf:7b:
         34:8e:c1:f2:d2:c2:0a:63:7f:8c:fa:26:76:f9:96:3b:ae:1f:
         e3:77:d0:a9:d7:1f:ad:bc:b3:8e:6f:58:39:4b:37:8c:17:06:
         af:a6:01:9c:aa:10:44:32:9a:8a:3a:5c:ac:aa:14:1f:c7:0e:
         0d:db:84:56:0f:6e:74:29:43:09:69:6a:a3:db:bf:a5:0b:33:
         6d:dd:e0:69:c4:82:64:fe:3d:f3:29:23:d4:19:82:a4:50:f9:
         c2:f5:be:e6:a1:b6:fc:27:b9:b4:3d:2c:52:fe:11:05:6c:d2:
         8e:74:e7:d9:45:c6:7f:9d:a4:2d:47:17:87:58:3f:41:7b:2a:
         64:fa:b8:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 04:03:11 2025 by rpki-client