Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/addf181f-1e89-4022-82f8-e0dba859ee2e/0/3130332e3130372e37312e302f32342d3234203d3e20313336383739.roa
File:                     3130332e3130372e37312e302f32342d3234203d3e20313336383739.roa (raw, json)
Hash identifier:          kS4p5t1GMvH/jM8YbFoB1ZVwKWJDCBblcchgAgj/oBk=
Subject key identifier:   6C:F3:8C:21:6E:61:57:AC:B3:16:36:E6:11:BA:DB:BD:E8:B7:AC:0B
Certificate issuer:       /CN=2247520F1208C8D9AC33B3035016DC4EC62CDEB1
Certificate serial:       5DE455410BC033EEB8E23EB3259958EFD60B67A2
Authority key identifier: 22:47:52:0F:12:08:C8:D9:AC:33:B3:03:50:16:DC:4E:C6:2C:DE:B1
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2247520F1208C8D9AC33B3035016DC4EC62CDEB1.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/addf181f-1e89-4022-82f8-e0dba859ee2e/0/3130332e3130372e37312e302f32342d3234203d3e20313336383739.roa
Signing time:             Mon 02 Jun 2025 02:04:07 +0000
ROA not before:           Mon 02 Jun 2025 01:59:07 +0000
ROA not after:            Mon 01 Jun 2026 02:04:07 +0000
asID:                     136879
IP address blocks:        103.107.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/addf181f-1e89-4022-82f8-e0dba859ee2e/0/2247520F1208C8D9AC33B3035016DC4EC62CDEB1.crl
                          rsync://repo-rpki.idnic.net/repo/addf181f-1e89-4022-82f8-e0dba859ee2e/0/2247520F1208C8D9AC33B3035016DC4EC62CDEB1.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2247520F1208C8D9AC33B3035016DC4EC62CDEB1.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 03 Jul 2025 04:12:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:e4:55:41:0b:c0:33:ee:b8:e2:3e:b3:25:99:58:ef:d6:0b:67:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2247520F1208C8D9AC33B3035016DC4EC62CDEB1
        Validity
            Not Before: Jun  2 01:59:07 2025 GMT
            Not After : Jun  1 02:04:07 2026 GMT
        Subject: CN=6CF38C216E6157ACB31636E611BADBBDE8B7AC0B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:4e:db:6e:93:0a:41:a6:30:2b:51:1a:c1:95:
                    f8:8a:0e:17:12:60:ac:02:7f:f5:de:f0:eb:b6:88:
                    95:61:d6:73:93:b4:b3:6f:cc:4e:7f:d0:88:8c:1f:
                    aa:fa:2b:09:96:f9:29:9e:10:9d:46:a5:be:8b:75:
                    d7:7b:34:98:24:52:95:9e:08:43:ee:c7:f0:ba:29:
                    14:77:37:35:02:d2:cf:b4:18:65:0a:2a:34:41:30:
                    15:8c:f2:a9:b9:38:49:62:3f:f5:d6:d6:a7:07:b8:
                    f5:c4:75:36:ee:81:1a:f5:58:76:8d:05:03:68:f2:
                    f7:ad:e0:0f:42:4c:f9:42:8f:a1:ef:67:3a:1e:36:
                    c4:7a:9c:18:42:8c:16:56:d2:62:df:14:c8:89:79:
                    cc:14:ec:c3:2f:a2:a3:3e:f8:aa:53:eb:db:63:42:
                    71:38:24:00:f3:c5:72:97:49:72:b3:ff:3f:8c:4e:
                    be:fa:34:dd:7d:2f:10:f5:20:ae:11:83:8e:aa:a4:
                    52:3a:ca:3d:de:be:db:bf:cf:fd:82:ad:db:ab:70:
                    df:67:80:0b:e1:97:6d:34:29:23:8d:1a:69:50:8b:
                    e2:57:04:9f:16:ae:22:b0:aa:98:95:b0:a5:81:1d:
                    ee:ff:14:20:fd:40:9d:c7:62:9b:ee:79:9d:c8:06:
                    67:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:F3:8C:21:6E:61:57:AC:B3:16:36:E6:11:BA:DB:BD:E8:B7:AC:0B
            X509v3 Authority Key Identifier:
                keyid:22:47:52:0F:12:08:C8:D9:AC:33:B3:03:50:16:DC:4E:C6:2C:DE:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/addf181f-1e89-4022-82f8-e0dba859ee2e/0/2247520F1208C8D9AC33B3035016DC4EC62CDEB1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2247520F1208C8D9AC33B3035016DC4EC62CDEB1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/addf181f-1e89-4022-82f8-e0dba859ee2e/0/3130332e3130372e37312e302f32342d3234203d3e20313336383739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.107.71.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:05:84:10:f9:23:49:e5:ad:c0:a9:59:91:cd:56:d4:d7:e5:
         1e:8e:95:3a:c2:ab:53:41:6d:ae:fc:b5:a8:93:58:48:27:d9:
         bf:5d:b4:d0:26:1f:9a:46:25:50:55:22:34:43:b8:4e:8c:ee:
         2c:58:d7:b1:95:d3:94:93:39:2d:83:d8:db:ca:9d:77:ac:c6:
         ca:91:98:ba:34:8e:d9:85:4a:0a:09:b2:9a:b6:0b:d0:30:d1:
         8f:cc:2b:ca:6c:a1:57:fc:08:4e:4c:38:fa:d3:32:11:89:8c:
         f6:fb:ed:8f:b1:03:3a:26:18:b4:15:73:d8:60:ad:e2:b2:f7:
         33:95:a0:a6:8f:d1:33:a2:7a:4a:ee:12:0c:75:62:84:fa:2d:
         b3:bc:48:71:ad:2d:14:79:2e:f2:1f:e1:4a:af:86:5d:35:31:
         ce:ce:2d:02:a4:7b:76:d9:5e:18:51:7a:67:a3:31:84:32:80:
         a2:2a:8f:e0:cb:12:7f:df:ce:16:a7:c0:db:de:c0:33:35:bc:
         c6:bc:27:b7:b1:31:f3:44:91:8f:ec:58:7e:d5:b9:ce:79:9b:
         0d:89:7f:f2:d2:e8:8f:ff:f0:3e:e7:42:9c:15:2a:2d:a7:70:
         51:69:fa:02:82:13:2d:0e:25:71:10:a5:8c:72:52:11:57:a8:
         09:4f:28:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 07:46:38 2025 by rpki-client