Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/5e314858-b33a-4b65-9a55-dce41e223873/0/3130332e3139302e36302e302f32332d3233203d3e20313439393031.roa
File:                     3130332e3139302e36302e302f32332d3233203d3e20313439393031.roa (raw, json)
Hash identifier:          51ekgtNLYDLFINvFYDj/N8stn5dpVipAbdc9vPbRQ7I=
Subject key identifier:   32:84:1B:13:E2:DE:D5:18:37:BE:D5:00:0A:86:AF:2A:AE:6C:DD:02
Certificate issuer:       /CN=3BA5C10190ADC96EE34EB4A6D054457022CBDEE9
Certificate serial:       2F04750F2BC5278B447331934E41A7D51FC24203
Authority key identifier: 3B:A5:C1:01:90:AD:C9:6E:E3:4E:B4:A6:D0:54:45:70:22:CB:DE:E9
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3BA5C10190ADC96EE34EB4A6D054457022CBDEE9.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5e314858-b33a-4b65-9a55-dce41e223873/0/3130332e3139302e36302e302f32332d3233203d3e20313439393031.roa
Signing time:             Wed 25 Jun 2025 15:00:05 +0000
ROA not before:           Wed 25 Jun 2025 14:55:05 +0000
ROA not after:            Wed 24 Jun 2026 15:00:05 +0000
asID:                     149901
IP address blocks:        103.190.60.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/5e314858-b33a-4b65-9a55-dce41e223873/0/3BA5C10190ADC96EE34EB4A6D054457022CBDEE9.crl
                          rsync://repo-rpki.idnic.net/repo/5e314858-b33a-4b65-9a55-dce41e223873/0/3BA5C10190ADC96EE34EB4A6D054457022CBDEE9.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3BA5C10190ADC96EE34EB4A6D054457022CBDEE9.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 02 Jul 2025 21:32:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:04:75:0f:2b:c5:27:8b:44:73:31:93:4e:41:a7:d5:1f:c2:42:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3BA5C10190ADC96EE34EB4A6D054457022CBDEE9
        Validity
            Not Before: Jun 25 14:55:05 2025 GMT
            Not After : Jun 24 15:00:05 2026 GMT
        Subject: CN=32841B13E2DED51837BED5000A86AF2AAE6CDD02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:b3:72:ca:6b:78:b7:a1:d1:55:33:18:76:64:
                    94:15:19:32:e1:d9:b8:0d:1b:ea:6b:e4:e8:b5:3f:
                    5d:20:29:9e:97:4a:3c:53:40:b7:ad:49:9f:ec:28:
                    7f:56:16:53:72:02:54:55:03:e0:b5:b8:0b:2c:44:
                    cb:a8:3a:73:a4:fe:fe:58:fb:9d:d6:8f:28:22:15:
                    30:f7:e3:57:ac:28:65:60:d1:04:fa:fb:f4:7b:af:
                    f7:d5:23:71:5a:6c:63:5d:4f:89:6c:93:57:eb:86:
                    ed:2d:10:79:cf:a6:6d:8f:b2:9b:fb:bf:67:da:5d:
                    a3:94:86:08:70:dd:ae:96:13:43:34:98:ec:dc:c3:
                    17:53:38:11:4e:ed:a1:31:12:d0:c4:6b:82:5f:12:
                    36:8b:aa:53:d6:2c:98:5b:1a:7a:f6:21:90:b5:36:
                    55:6d:7e:fc:ca:c2:78:4f:12:90:c9:02:48:e8:10:
                    96:f2:0c:8b:14:df:b1:e8:ae:4f:4b:d4:6b:bd:ea:
                    0f:b3:11:2b:dd:ba:0a:9a:88:27:b4:13:ad:79:f8:
                    82:c4:94:86:53:84:e6:7c:c0:c6:6b:c0:b1:30:69:
                    ef:61:ce:02:32:f3:3d:6f:a1:63:c2:f5:5a:0c:d8:
                    7c:0a:1c:97:41:f2:37:ea:b8:8e:a2:dd:5e:79:6f:
                    d9:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:84:1B:13:E2:DE:D5:18:37:BE:D5:00:0A:86:AF:2A:AE:6C:DD:02
            X509v3 Authority Key Identifier:
                keyid:3B:A5:C1:01:90:AD:C9:6E:E3:4E:B4:A6:D0:54:45:70:22:CB:DE:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5e314858-b33a-4b65-9a55-dce41e223873/0/3BA5C10190ADC96EE34EB4A6D054457022CBDEE9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3BA5C10190ADC96EE34EB4A6D054457022CBDEE9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5e314858-b33a-4b65-9a55-dce41e223873/0/3130332e3139302e36302e302f32332d3233203d3e20313439393031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.190.60.0/23

    Signature Algorithm: sha256WithRSAEncryption
         85:e1:59:8d:28:06:2e:65:74:cb:34:ac:50:61:ed:cd:db:65:
         74:04:89:67:3d:30:df:79:a7:ca:23:38:87:0f:43:66:3f:18:
         c2:c6:79:60:68:c7:37:93:b8:2b:a0:b5:21:f3:9a:e2:e7:a1:
         1e:ee:32:33:85:b2:17:53:18:63:b8:27:be:a7:50:cf:7e:ac:
         e8:d8:02:f3:fc:27:e8:dd:4d:ed:89:96:a2:19:80:a7:37:1a:
         8a:55:1f:c3:d5:ec:f2:1b:fb:7f:89:1b:d5:59:c4:00:1a:5b:
         2d:42:57:e6:ed:e2:6b:c3:79:04:d7:95:4b:86:6b:fc:b5:de:
         08:5e:8f:61:38:06:e0:37:15:93:7e:e9:bf:f7:6a:6d:cd:7c:
         47:a6:05:09:55:34:7f:22:ea:4a:2c:83:3f:03:cd:d6:00:82:
         43:94:a6:17:59:de:9b:6e:f7:6e:2e:eb:12:cd:eb:4e:62:97:
         36:43:a0:e8:ca:72:6f:ae:e5:3f:0b:03:ae:29:69:9a:e6:3d:
         b5:5c:80:c3:9d:df:ef:8e:70:51:f3:7d:69:65:b6:13:54:43:
         d3:fd:64:f0:9b:d6:e3:63:b8:5b:9b:f1:36:cc:52:1b:41:d5:
         c0:55:3d:75:25:a2:54:a9:f1:83:98:ff:82:27:fe:1e:3b:6f:
         f3:39:c9:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 08:55:09 2025 by rpki-client