Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/7620b423-dd5d-448f-bbd3-04530ec1715d/0/3130332e3139302e36322e302f32342d3234203d3e20313439383938.roa
File:                     3130332e3139302e36322e302f32342d3234203d3e20313439383938.roa (raw, json)
Hash identifier:          cp5AZz8jsj7lkSzSuyAiGgYK8cjqibH/qG2rGgK+9is=
Subject key identifier:   B3:0F:4C:16:D3:8A:B6:5E:D9:F5:F2:9B:08:09:07:EC:1E:DE:5F:23
Certificate issuer:       /CN=A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A
Certificate serial:       08915088CF796171DD03FCD237A1984E8927EAFE
Authority key identifier: A7:D5:3E:B5:45:1E:AF:8A:CA:B6:38:48:7F:BD:EB:40:17:7A:0F:8A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/7620b423-dd5d-448f-bbd3-04530ec1715d/0/3130332e3139302e36322e302f32342d3234203d3e20313439383938.roa
Signing time:             Sun 05 Oct 2025 08:02:24 +0000
ROA not before:           Sun 05 Oct 2025 07:57:24 +0000
ROA not after:            Sun 04 Oct 2026 08:02:24 +0000
asID:                     149898
IP address blocks:        103.190.62.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/7620b423-dd5d-448f-bbd3-04530ec1715d/0/A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A.crl
                          rsync://repo-rpki.idnic.net/repo/7620b423-dd5d-448f-bbd3-04530ec1715d/0/A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Oct 2025 02:22:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:91:50:88:cf:79:61:71:dd:03:fc:d2:37:a1:98:4e:89:27:ea:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A
        Validity
            Not Before: Oct  5 07:57:24 2025 GMT
            Not After : Oct  4 08:02:24 2026 GMT
        Subject: CN=B30F4C16D38AB65ED9F5F29B080907EC1EDE5F23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:f8:87:fa:67:e8:54:73:7a:32:4e:ae:9e:7e:
                    de:97:31:56:f5:03:36:17:0c:fe:04:b0:48:59:0d:
                    58:6f:d4:5b:63:07:6c:c0:e3:f6:b7:42:8f:dc:da:
                    94:89:e5:63:96:9a:da:29:70:27:c7:07:af:2b:71:
                    f6:3c:3b:ff:85:7e:7f:0a:fd:f9:50:fe:2e:b8:5f:
                    66:e7:60:42:93:f4:45:52:df:56:9e:42:32:1c:0a:
                    27:35:1c:35:3c:aa:6c:37:1c:a5:1b:c9:42:28:4e:
                    26:6a:74:41:ad:8c:8a:37:8f:02:f9:8d:61:fa:2c:
                    8a:e9:a8:a9:7f:8a:ce:32:f0:8f:8f:6a:2c:fc:22:
                    74:7b:9c:be:02:2a:2e:f3:34:32:2d:4b:07:a8:76:
                    3c:74:b4:0f:a4:15:87:26:7a:2e:55:ad:92:62:d5:
                    2f:fb:75:11:01:66:f0:bc:2f:d5:ba:75:b8:b4:b3:
                    40:d2:8e:14:42:3f:a2:f8:02:40:b5:7c:86:0b:a3:
                    ee:f2:dd:c4:eb:cb:62:31:e9:7d:8f:7d:94:39:81:
                    a8:5e:a8:8e:8b:6c:d1:33:e3:c7:d3:c6:52:fb:17:
                    1d:f7:fc:fb:25:b1:0b:8e:2a:c5:61:eb:f6:67:1b:
                    93:44:3b:b0:68:80:b9:4c:9e:42:91:d9:05:30:b8:
                    36:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:0F:4C:16:D3:8A:B6:5E:D9:F5:F2:9B:08:09:07:EC:1E:DE:5F:23
            X509v3 Authority Key Identifier:
                keyid:A7:D5:3E:B5:45:1E:AF:8A:CA:B6:38:48:7F:BD:EB:40:17:7A:0F:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/7620b423-dd5d-448f-bbd3-04530ec1715d/0/A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7620b423-dd5d-448f-bbd3-04530ec1715d/0/3130332e3139302e36322e302f32342d3234203d3e20313439383938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.190.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:bd:ab:9e:83:29:f3:7f:32:d7:05:94:43:0b:4b:8f:04:73:
         b8:95:a0:e3:92:59:c2:44:58:d7:a8:98:56:0e:39:22:34:3e:
         21:98:c5:23:75:90:a4:de:57:aa:df:2c:91:43:8a:07:81:e8:
         d1:40:92:f5:00:5d:88:d0:6c:3a:50:80:74:65:4b:34:29:27:
         21:1f:4c:2d:91:8a:59:c6:48:46:e1:5c:ca:dd:ff:f5:a1:33:
         e0:ba:f4:85:0f:70:23:64:6f:0d:7e:66:a2:4b:1e:af:d4:76:
         62:25:56:ec:5f:3e:4a:69:e5:03:71:74:53:25:55:81:47:90:
         62:a7:73:6a:76:09:ab:05:79:2b:0c:23:b0:da:6f:b5:27:97:
         06:1b:8f:62:b0:d9:eb:ad:d8:78:77:b9:12:e2:9f:b5:1a:9f:
         54:a7:0c:4a:f9:7b:3d:6e:19:6c:11:dd:a6:03:15:1f:58:95:
         b7:29:82:5e:71:66:53:68:e3:1f:2f:e9:d8:82:de:19:5a:06:
         68:fa:bd:c5:ff:62:29:79:73:06:61:14:f6:75:ce:3b:ac:c4:
         80:ed:ab:3b:16:33:f3:73:2a:20:fe:f3:c2:25:b8:69:d6:94:
         b5:93:e8:52:e0:c3:09:ce:ab:39:f9:58:6b:bb:43:e2:a9:c5:
         44:de:28:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 00:13:45 2025 by rpki-client