Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/7b5ecd74-4424-4d40-96a1-7fd763011944/0/3130332e3135302e3137352e302f32342d3234203d3e20313430333936.roa
File:                     3130332e3135302e3137352e302f32342d3234203d3e20313430333936.roa (raw, json)
Hash identifier:          hHkoG39qzjYq+PqBdjh7WAFfm8g8AD1zROK0CoXxjRw=
Subject key identifier:   30:C1:C6:60:E5:D7:D7:94:17:FC:92:AB:EE:02:8A:4F:14:37:F8:DF
Certificate issuer:       /CN=658CE677CBFABF819AD1DE1FB865B1A2FD17C487
Certificate serial:       783D65E85DAE18DDCBB5824576E5843BAE78C08E
Authority key identifier: 65:8C:E6:77:CB:FA:BF:81:9A:D1:DE:1F:B8:65:B1:A2:FD:17:C4:87
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/658CE677CBFABF819AD1DE1FB865B1A2FD17C487.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/7b5ecd74-4424-4d40-96a1-7fd763011944/0/3130332e3135302e3137352e302f32342d3234203d3e20313430333936.roa
Signing time:             Fri 03 Oct 2025 04:02:27 +0000
ROA not before:           Fri 03 Oct 2025 03:57:27 +0000
ROA not after:            Fri 02 Oct 2026 04:02:27 +0000
asID:                     140396
IP address blocks:        103.150.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/7b5ecd74-4424-4d40-96a1-7fd763011944/0/658CE677CBFABF819AD1DE1FB865B1A2FD17C487.crl
                          rsync://repo-rpki.idnic.net/repo/7b5ecd74-4424-4d40-96a1-7fd763011944/0/658CE677CBFABF819AD1DE1FB865B1A2FD17C487.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/658CE677CBFABF819AD1DE1FB865B1A2FD17C487.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Oct 2025 11:48:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:3d:65:e8:5d:ae:18:dd:cb:b5:82:45:76:e5:84:3b:ae:78:c0:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=658CE677CBFABF819AD1DE1FB865B1A2FD17C487
        Validity
            Not Before: Oct  3 03:57:27 2025 GMT
            Not After : Oct  2 04:02:27 2026 GMT
        Subject: CN=30C1C660E5D7D79417FC92ABEE028A4F1437F8DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:54:03:fe:d5:02:42:c6:78:d5:84:29:07:3f:
                    30:3f:c1:2a:6a:c1:6b:e3:61:a1:b5:9e:86:5b:84:
                    1b:d8:d6:7e:0e:ed:b7:0a:0b:3f:cf:47:01:8b:67:
                    a5:e9:54:67:cd:f3:69:a4:9e:26:cb:64:24:7e:b0:
                    0d:3b:fe:8b:5a:da:57:91:96:a7:d5:a4:b9:85:3f:
                    c0:02:72:0f:36:df:cc:5a:19:49:08:20:5d:09:f4:
                    e6:55:f9:a7:5c:8b:aa:39:51:7b:03:d0:3b:d3:44:
                    ee:f2:ff:3c:de:44:49:da:59:0b:d6:56:6f:98:55:
                    fa:8f:8e:fa:36:8e:ca:7b:5f:49:95:35:96:1d:2b:
                    8d:52:8f:58:b6:87:be:6d:31:0b:13:16:90:12:f4:
                    77:73:56:0d:39:b1:42:2c:db:a2:80:cd:70:ea:1b:
                    6a:0d:1a:b7:9e:29:e5:ed:9b:81:38:0b:ab:f8:f4:
                    bb:ca:43:6e:52:4c:af:2b:f8:9c:f0:c6:e0:e5:a6:
                    6f:1b:6e:e5:37:a2:f9:59:d9:c5:f3:7f:b7:12:fc:
                    a3:70:3f:56:82:ff:44:85:2e:dd:8d:a4:fb:1d:1d:
                    2e:5c:2f:7b:18:52:a6:9a:d3:5a:ac:09:f1:a6:b9:
                    1d:94:35:7b:7b:fc:6c:fb:78:e6:15:c7:1c:82:d6:
                    35:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:C1:C6:60:E5:D7:D7:94:17:FC:92:AB:EE:02:8A:4F:14:37:F8:DF
            X509v3 Authority Key Identifier:
                keyid:65:8C:E6:77:CB:FA:BF:81:9A:D1:DE:1F:B8:65:B1:A2:FD:17:C4:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/7b5ecd74-4424-4d40-96a1-7fd763011944/0/658CE677CBFABF819AD1DE1FB865B1A2FD17C487.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/658CE677CBFABF819AD1DE1FB865B1A2FD17C487.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7b5ecd74-4424-4d40-96a1-7fd763011944/0/3130332e3135302e3137352e302f32342d3234203d3e20313430333936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.150.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         e0:d6:98:fb:0f:95:73:cf:8a:3b:de:aa:33:ea:f6:db:79:b1:
         6b:67:81:45:75:7a:50:e2:10:4e:e5:61:22:7d:8a:2f:5e:91:
         45:c7:52:cf:8a:0c:ff:3a:fb:8f:fd:ba:5a:32:06:4c:aa:fd:
         a4:15:d7:c0:70:67:db:fa:08:c1:b5:72:da:d3:42:ee:f0:09:
         48:f7:b0:cd:fa:91:c4:fe:45:e2:3a:63:a9:3f:81:a2:2b:07:
         a9:1c:a1:4f:d5:45:97:bf:7b:ee:f8:d4:2a:ca:aa:18:5f:b6:
         c7:05:b3:54:bc:af:10:c7:84:75:13:10:a6:ec:2e:9a:a4:11:
         4e:c3:e8:f2:e1:55:cf:92:3a:7d:5c:58:d3:57:fb:6c:28:62:
         79:53:56:f7:d4:af:b1:f9:da:7f:af:0d:70:65:3a:64:b9:12:
         c6:38:c1:8f:1c:be:7a:3c:37:a0:7f:0b:53:65:1d:c2:12:98:
         e9:46:77:2a:dd:73:82:65:6d:ff:03:48:53:45:d9:13:f9:49:
         a6:49:5c:34:39:f1:e7:92:7e:8c:fb:d5:8c:4b:67:4d:74:a7:
         7a:c6:65:6a:b9:de:e0:fe:19:4d:76:4c:93:92:71:71:a0:f5:
         0b:d6:ac:2c:00:f1:00:6a:f8:6f:13:95:e4:2c:1c:83:cc:9a:
         6a:78:e2:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:27:50 2025 by rpki-client