Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3130332e32352e3131302e302f32332d3234203d3e2039333431.roa
File:                     3130332e32352e3131302e302f32332d3234203d3e2039333431.roa (raw, json)
Hash identifier:          sunW7sxKttVbOojkn6Bbx38HnvAw4D+N23Pq2U3VEkc=
Subject key identifier:   C2:4F:5E:A5:7B:6F:4B:30:02:37:C8:07:5B:67:6A:92:57:17:4A:DE
Certificate issuer:       /CN=61566F205F7037962069571320603B274357CC6D
Certificate serial:       7A106A6116958AE95EDBA4ABFE1F0C21756B72A0
Authority key identifier: 61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3130332e32352e3131302e302f32332d3234203d3e2039333431.roa
Signing time:             Fri 27 Jun 2025 15:00:02 +0000
ROA not before:           Fri 27 Jun 2025 14:55:02 +0000
ROA not after:            Fri 26 Jun 2026 15:00:02 +0000
asID:                     9341
IP address blocks:        103.25.110.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.crl
                          rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 03 Jul 2025 00:13:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:10:6a:61:16:95:8a:e9:5e:db:a4:ab:fe:1f:0c:21:75:6b:72:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61566F205F7037962069571320603B274357CC6D
        Validity
            Not Before: Jun 27 14:55:02 2025 GMT
            Not After : Jun 26 15:00:02 2026 GMT
        Subject: CN=C24F5EA57B6F4B300237C8075B676A9257174ADE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:9d:b7:dc:e0:fe:57:8e:39:bb:21:2a:fb:85:
                    70:79:2a:d4:5e:9d:e9:c1:a3:aa:a1:8b:33:a2:59:
                    9f:48:3a:07:0b:20:a9:42:00:5a:58:16:23:98:e8:
                    10:4d:bf:ba:37:70:7e:cc:a6:d1:2c:ce:f8:32:3f:
                    cd:91:17:47:b7:36:df:01:1d:54:c8:5e:0c:19:69:
                    47:44:2a:14:d8:bb:8b:3c:7f:5e:0c:f4:6e:dd:aa:
                    f8:8d:c9:99:c2:61:5a:1e:52:0d:78:63:6f:d4:90:
                    5e:92:0a:22:ba:4f:52:46:3a:08:9b:52:c3:c2:a6:
                    aa:3a:75:92:ac:79:66:41:09:87:20:2d:d8:85:a1:
                    25:17:16:85:76:11:93:3e:79:ae:65:91:d6:9f:2a:
                    22:d9:81:77:f3:74:28:e8:ea:ba:3b:e0:9f:4c:04:
                    5d:bd:0f:b5:29:2e:7f:88:e4:65:50:f3:4b:7f:c6:
                    78:b0:95:c5:69:ea:30:7e:e8:4c:61:b1:c2:f4:d0:
                    86:69:83:2d:08:d8:38:a1:f5:d7:9d:a5:73:da:e9:
                    32:34:3d:d3:65:49:c6:b9:5f:9a:31:ce:44:7a:1d:
                    f4:c7:ab:31:09:65:70:23:6d:45:ad:be:46:f7:a1:
                    b6:1d:78:a2:be:1a:bd:00:08:32:e5:9b:c3:ba:c6:
                    c5:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:4F:5E:A5:7B:6F:4B:30:02:37:C8:07:5B:67:6A:92:57:17:4A:DE
            X509v3 Authority Key Identifier:
                keyid:61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3130332e32352e3131302e302f32332d3234203d3e2039333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.25.110.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0b:e7:da:2f:87:9a:0f:31:c4:04:9e:31:0c:7b:26:6a:19:0f:
         f0:ef:a1:49:64:eb:36:78:c9:99:77:18:fc:9b:41:ac:22:e9:
         95:4c:18:ed:a3:09:fa:6f:c6:82:b7:b7:8d:34:74:55:5e:ab:
         61:66:bd:01:23:29:2e:37:60:e5:1c:5f:5a:bf:4e:b0:10:5c:
         e4:56:24:51:57:3f:fb:b4:9d:82:f6:47:64:cf:92:09:d9:40:
         64:89:3a:ab:58:fd:dc:9e:72:3b:ed:f8:6d:8f:8d:2f:33:0f:
         f1:d8:fd:b0:a2:fe:68:9e:af:c7:94:b8:0e:78:c1:7b:24:ee:
         fb:b0:e6:d9:9c:e5:e6:ce:e7:fa:b6:8e:36:14:a5:56:2e:0a:
         a9:aa:3a:5d:24:93:ec:c4:dd:68:ff:5a:90:0f:90:a4:35:d9:
         8c:f8:43:6b:ff:aa:c9:97:e4:fd:00:97:61:b6:f4:fc:d8:e4:
         09:c9:8f:33:d9:28:fd:58:14:db:60:ff:35:0c:09:34:0d:98:
         c8:0e:72:6f:30:43:53:eb:23:8e:76:90:85:97:1a:e7:64:91:
         7f:cb:04:dd:28:85:2b:a4:f8:ff:d4:b4:93:a9:73:de:c8:06:
         3d:e6:85:6c:9a:c6:fc:86:c3:76:96:a6:b0:68:4a:3f:e9:ba:
         2e:4f:be:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 14:58:40 2025 by rpki-client