Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3130332e3234382e3231392e302f32342d3234203d3e2039333431.roa
File:                     3130332e3234382e3231392e302f32342d3234203d3e2039333431.roa (raw, json)
Hash identifier:          70aLjYXQyFVUM+mNSNT1+Abxr/RJIsKlQn9j2UsMx54=
Subject key identifier:   05:5F:F1:6D:A8:E5:B0:41:EB:D1:DA:F9:94:4B:5B:8A:68:1D:D0:17
Certificate issuer:       /CN=61566F205F7037962069571320603B274357CC6D
Certificate serial:       162B4F395B13F41EB5093811C7B20E8EDCA0598A
Authority key identifier: 61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3130332e3234382e3231392e302f32342d3234203d3e2039333431.roa
Signing time:             Tue 10 Jun 2025 06:02:50 +0000
ROA not before:           Tue 10 Jun 2025 05:57:50 +0000
ROA not after:            Tue 09 Jun 2026 06:02:50 +0000
asID:                     9341
IP address blocks:        103.248.219.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.crl
                          rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 03 Jul 2025 00:13:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:2b:4f:39:5b:13:f4:1e:b5:09:38:11:c7:b2:0e:8e:dc:a0:59:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61566F205F7037962069571320603B274357CC6D
        Validity
            Not Before: Jun 10 05:57:50 2025 GMT
            Not After : Jun  9 06:02:50 2026 GMT
        Subject: CN=055FF16DA8E5B041EBD1DAF9944B5B8A681DD017
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:8a:0e:1d:af:00:d7:20:ac:9f:f6:42:f6:9a:
                    97:05:c0:08:47:42:7c:e0:c5:a0:ac:2a:45:b7:55:
                    b6:0c:35:6f:b1:38:db:0c:25:05:49:3e:1e:cd:21:
                    f0:34:59:dd:bf:12:d3:14:b1:a7:1b:ec:36:c2:15:
                    39:a2:c9:13:fa:64:22:e1:f1:ff:98:0d:09:1d:08:
                    58:35:00:bc:cf:22:85:58:f4:a0:63:4b:47:f5:d4:
                    4b:0e:7d:39:c1:80:1c:03:82:57:f2:45:a9:4f:5c:
                    42:62:bb:93:82:25:d7:da:b5:62:a4:a4:7e:90:c7:
                    ba:32:30:22:c2:31:65:45:0d:57:eb:7d:27:57:e0:
                    d7:a9:f1:fa:4e:e0:58:b7:ab:41:d8:a1:1c:58:82:
                    22:45:e8:67:26:03:56:50:e3:24:f3:19:66:b5:bb:
                    bd:58:36:a3:ac:5d:ce:49:20:30:6a:4e:98:2d:df:
                    5e:49:dc:c1:cc:46:f8:f4:7a:2c:ce:c3:51:7b:76:
                    a4:3f:8e:78:e7:67:d3:76:ff:d6:a0:ac:9d:a4:50:
                    7f:09:23:1c:97:3d:cf:0a:67:bb:db:ee:37:c3:47:
                    90:dc:d5:e4:3d:27:1e:a6:dc:f4:66:0b:39:3e:a7:
                    6b:2a:dc:85:f7:9a:39:a9:57:6b:b0:7f:76:a3:aa:
                    7b:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:5F:F1:6D:A8:E5:B0:41:EB:D1:DA:F9:94:4B:5B:8A:68:1D:D0:17
            X509v3 Authority Key Identifier:
                keyid:61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3130332e3234382e3231392e302f32342d3234203d3e2039333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.248.219.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:4a:a1:de:4d:87:81:c4:d0:32:68:f4:a6:dd:d1:9b:23:f0:
         fd:58:b7:f1:00:a6:66:c2:24:36:a8:ac:88:a3:4f:8e:95:53:
         b4:0f:01:46:77:18:af:17:ae:c7:3a:31:da:4e:92:3a:fe:3b:
         ad:66:b9:d5:fb:8b:03:62:7a:1e:73:b8:8e:d8:d2:7b:13:3f:
         0b:95:42:41:cc:00:cb:ba:64:de:dd:73:73:c9:eb:f5:03:7d:
         b5:cb:98:af:a9:de:ee:e2:5c:ef:eb:62:17:b3:3c:14:a2:bf:
         2a:d6:d9:97:dc:5c:8d:32:4f:a7:ef:44:82:83:51:f3:21:80:
         97:e3:f3:1d:a4:54:be:4e:bf:73:e0:70:00:58:f9:71:33:78:
         80:0d:ce:c9:5f:25:2a:12:0c:6c:1a:a7:ff:0b:fa:d2:27:cf:
         6d:91:64:50:a2:78:25:5b:3d:68:e9:3b:fa:b8:41:e9:82:1a:
         d3:39:64:1f:a2:84:be:47:62:e0:c2:12:7e:d9:38:15:c8:eb:
         97:43:90:49:c0:51:85:a2:9b:82:6f:24:b6:e5:38:75:29:17:
         84:59:c0:59:c9:92:8f:8d:0d:67:39:55:da:f2:a1:85:e0:d1:
         72:2e:df:1f:06:6a:46:cd:98:44:3a:88:21:b2:99:d7:39:b1:
         ca:7b:33:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 18:43:32 2025 by rpki-client