Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/4a8d54ae-870d-4348-ab58-30090a760a36/0/3130332e3232342e36352e302f32342d3234203d3e203539313538.roa
File:                     3130332e3232342e36352e302f32342d3234203d3e203539313538.roa (raw, json)
Hash identifier:          KdcszIzsjtlFTy1TnrOq7FG5XAfFe/aLCqLEjewq8yE=
Subject key identifier:   1C:97:4F:78:C3:61:6C:CF:57:7F:AB:8C:76:84:C7:A3:CE:65:5B:8F
Certificate issuer:       /CN=B6F29F770F5B30B5F7B738F4524506F1A235DABC
Certificate serial:       1E67BC2C6624EDE2DF9DFB8815FDE01F236DEE98
Authority key identifier: B6:F2:9F:77:0F:5B:30:B5:F7:B7:38:F4:52:45:06:F1:A2:35:DA:BC
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F29F770F5B30B5F7B738F4524506F1A235DABC.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/4a8d54ae-870d-4348-ab58-30090a760a36/0/3130332e3232342e36352e302f32342d3234203d3e203539313538.roa
Signing time:             Tue 12 Aug 2025 18:02:23 +0000
ROA not before:           Tue 12 Aug 2025 17:57:23 +0000
ROA not after:            Tue 11 Aug 2026 18:02:23 +0000
asID:                     59158
IP address blocks:        103.224.65.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/4a8d54ae-870d-4348-ab58-30090a760a36/0/B6F29F770F5B30B5F7B738F4524506F1A235DABC.crl
                          rsync://repo-rpki.idnic.net/repo/4a8d54ae-870d-4348-ab58-30090a760a36/0/B6F29F770F5B30B5F7B738F4524506F1A235DABC.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F29F770F5B30B5F7B738F4524506F1A235DABC.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Aug 2025 22:05:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:67:bc:2c:66:24:ed:e2:df:9d:fb:88:15:fd:e0:1f:23:6d:ee:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6F29F770F5B30B5F7B738F4524506F1A235DABC
        Validity
            Not Before: Aug 12 17:57:23 2025 GMT
            Not After : Aug 11 18:02:23 2026 GMT
        Subject: CN=1C974F78C3616CCF577FAB8C7684C7A3CE655B8F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:55:b3:e9:8a:27:01:c5:58:69:8a:12:82:22:
                    a0:57:2a:52:8f:49:01:e3:4f:5f:95:4e:cf:f4:97:
                    cf:8c:d5:47:61:f9:40:3a:89:d7:db:b6:dc:29:31:
                    82:76:02:cc:50:38:fb:65:4f:96:60:21:c9:19:78:
                    43:20:b9:3e:76:38:0a:a5:23:be:0a:66:fc:eb:a3:
                    a9:ac:a0:5a:bd:ae:34:85:0d:48:93:11:b2:90:e7:
                    21:1d:27:e6:c6:cb:a8:ed:8a:1d:ad:47:d2:84:40:
                    e6:bf:a6:3e:e4:8b:02:56:59:c2:d0:2a:53:a7:08:
                    1c:90:f6:7d:cc:36:5d:97:7a:55:93:e2:bb:9a:54:
                    f3:1e:3b:f7:bb:f5:74:2e:9f:61:04:59:ea:c1:a0:
                    c4:be:cc:f0:a1:4e:09:d0:52:82:e4:4f:f9:82:d3:
                    ce:c4:6b:24:c4:32:6f:0b:53:74:a0:1c:23:ef:76:
                    c3:24:7d:d0:6b:66:1a:c2:22:c1:3a:2d:2b:e1:f8:
                    94:41:d7:10:7a:7c:00:8f:16:c3:c0:9d:02:f6:7c:
                    9c:b9:97:c2:f9:b0:79:2e:d2:2e:95:eb:bf:80:30:
                    84:00:db:91:a6:a2:c9:23:7e:f8:4c:b5:e7:c0:bf:
                    20:8a:ee:4a:c5:27:dd:82:10:84:3d:24:19:0b:f0:
                    cd:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:97:4F:78:C3:61:6C:CF:57:7F:AB:8C:76:84:C7:A3:CE:65:5B:8F
            X509v3 Authority Key Identifier:
                keyid:B6:F2:9F:77:0F:5B:30:B5:F7:B7:38:F4:52:45:06:F1:A2:35:DA:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/4a8d54ae-870d-4348-ab58-30090a760a36/0/B6F29F770F5B30B5F7B738F4524506F1A235DABC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F29F770F5B30B5F7B738F4524506F1A235DABC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4a8d54ae-870d-4348-ab58-30090a760a36/0/3130332e3232342e36352e302f32342d3234203d3e203539313538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.224.65.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:05:79:29:28:a4:6d:c3:39:b4:b2:e0:cb:43:88:45:26:bf:
         b0:28:20:22:ed:ac:55:13:a0:08:24:1b:fa:7a:dc:5c:32:66:
         18:ea:1e:a0:c1:bc:d8:6f:fc:7a:0e:e2:48:52:fb:6e:a1:44:
         e3:f7:b4:45:fc:96:09:a5:cf:7b:0f:88:62:06:f8:9e:76:be:
         b6:53:23:e1:38:48:3e:59:db:30:68:44:80:2b:54:17:32:11:
         b7:ed:01:a5:86:ed:6b:33:9c:7c:d8:15:25:3e:c0:0f:37:a7:
         a0:a6:05:ac:2b:c7:d2:15:78:1c:3a:18:4c:d6:ed:cc:56:46:
         b4:47:d2:af:ca:06:5a:8b:a6:81:13:b1:ab:f9:cf:3a:5f:76:
         35:93:f5:67:57:34:9b:17:58:b7:81:77:06:f7:88:7c:81:10:
         87:96:5e:34:37:a1:fd:b0:b8:40:0b:80:f3:53:51:89:f8:67:
         13:9f:12:2b:62:c3:10:9d:f8:8a:c6:50:b2:b4:b0:66:98:a2:
         b5:c8:9a:84:de:dd:64:94:7b:a9:12:14:e8:6e:5c:92:0c:69:
         94:54:2e:60:43:ac:85:2d:89:57:a5:d4:b7:f4:a6:20:aa:58:
         fc:52:ce:0d:bf:75:7e:41:69:fd:08:2f:68:41:e7:e2:15:59:
         20:db:4c:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 06:44:29 2025 by rpki-client