Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/b0516a7a-4195-44b3-a24e-cf8ed578d791/0/3130332e3139302e3131322e302f32342d3234203d3e20313439393037.roa
File:                     3130332e3139302e3131322e302f32342d3234203d3e20313439393037.roa (raw, json)
Hash identifier:          RiJQOn+iteWsGaHDQ7CJgxTOw5x3cmMgsW4Cbj99H/E=
Subject key identifier:   4A:A2:BE:E3:6B:83:E1:00:3A:FC:81:DF:01:06:E7:A8:0C:F9:BA:59
Certificate issuer:       /CN=0CE1E11146E251D0CD52BD837A1A0ACDB7E0BA0C
Certificate serial:       32781EC6E9B13B44E5F874266A673D2E6EC05B1A
Authority key identifier: 0C:E1:E1:11:46:E2:51:D0:CD:52:BD:83:7A:1A:0A:CD:B7:E0:BA:0C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CE1E11146E251D0CD52BD837A1A0ACDB7E0BA0C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/b0516a7a-4195-44b3-a24e-cf8ed578d791/0/3130332e3139302e3131322e302f32342d3234203d3e20313439393037.roa
Signing time:             Fri 15 Aug 2025 02:02:29 +0000
ROA not before:           Fri 15 Aug 2025 01:57:29 +0000
ROA not after:            Fri 14 Aug 2026 02:02:29 +0000
asID:                     149907
IP address blocks:        103.190.112.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/b0516a7a-4195-44b3-a24e-cf8ed578d791/0/0CE1E11146E251D0CD52BD837A1A0ACDB7E0BA0C.crl
                          rsync://repo-rpki.idnic.net/repo/b0516a7a-4195-44b3-a24e-cf8ed578d791/0/0CE1E11146E251D0CD52BD837A1A0ACDB7E0BA0C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CE1E11146E251D0CD52BD837A1A0ACDB7E0BA0C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Aug 2025 16:21:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:78:1e:c6:e9:b1:3b:44:e5:f8:74:26:6a:67:3d:2e:6e:c0:5b:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0CE1E11146E251D0CD52BD837A1A0ACDB7E0BA0C
        Validity
            Not Before: Aug 15 01:57:29 2025 GMT
            Not After : Aug 14 02:02:29 2026 GMT
        Subject: CN=4AA2BEE36B83E1003AFC81DF0106E7A80CF9BA59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:57:6f:b7:b5:d8:7f:8b:ac:bd:fb:c9:9b:44:
                    7f:4a:03:ae:dd:90:da:14:20:78:b6:5a:ea:d7:fd:
                    b8:3e:67:7b:fc:d9:8d:8b:b6:61:0c:6f:66:a3:81:
                    78:26:f7:0a:b7:a8:07:45:4e:a7:31:3e:e8:d8:5f:
                    e0:70:24:0d:75:ea:da:d0:c8:ba:c2:6f:54:86:84:
                    3a:89:c0:16:4b:81:01:4e:a4:39:1c:fa:b2:07:73:
                    48:eb:86:88:4d:ba:68:78:f9:49:4b:67:a2:68:da:
                    a4:bf:c3:14:00:8b:98:be:47:0b:f4:13:60:29:4a:
                    41:70:76:20:fa:b1:75:bd:e7:66:29:d3:75:ad:a3:
                    0b:6f:5b:12:cd:d5:08:1a:15:26:5e:c8:a3:d4:d2:
                    56:53:cb:14:4d:c4:7e:64:5c:e2:af:7c:16:18:e9:
                    43:42:78:51:3b:52:df:3a:f9:77:15:8f:c6:b6:f0:
                    98:40:f6:e8:02:ad:24:eb:1d:32:b5:25:5b:4e:f2:
                    88:6b:44:1c:d4:b9:d8:c8:03:7c:d0:11:a2:f2:5b:
                    30:1a:69:5a:a8:47:50:e9:b6:27:f2:e5:c2:01:f3:
                    9a:ba:30:67:54:0e:b8:8b:c8:1a:d6:8c:7c:3d:5d:
                    93:15:30:89:a4:8f:db:0f:49:77:6f:bd:4d:99:57:
                    c2:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:A2:BE:E3:6B:83:E1:00:3A:FC:81:DF:01:06:E7:A8:0C:F9:BA:59
            X509v3 Authority Key Identifier:
                keyid:0C:E1:E1:11:46:E2:51:D0:CD:52:BD:83:7A:1A:0A:CD:B7:E0:BA:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/b0516a7a-4195-44b3-a24e-cf8ed578d791/0/0CE1E11146E251D0CD52BD837A1A0ACDB7E0BA0C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CE1E11146E251D0CD52BD837A1A0ACDB7E0BA0C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b0516a7a-4195-44b3-a24e-cf8ed578d791/0/3130332e3139302e3131322e302f32342d3234203d3e20313439393037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.190.112.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:d1:9a:21:01:40:11:b8:bb:08:02:96:30:8b:ff:0b:4a:17:
         56:e9:34:be:2f:4d:0b:de:fd:d8:32:c5:1d:5e:8d:55:1a:59:
         7e:8b:03:de:a5:e2:52:d5:5c:fa:1b:70:b6:53:35:af:7b:b2:
         38:78:2e:15:f7:5e:a5:16:80:0f:9a:bd:74:16:3c:3f:44:00:
         71:bc:db:07:84:b2:ac:98:9c:ac:74:ff:e0:97:de:88:64:d3:
         61:3f:56:57:a3:c2:c5:72:30:39:aa:73:31:8d:6b:85:ca:bb:
         3e:0a:cf:07:cc:f8:35:66:4e:e9:f6:67:8a:ed:3f:c8:e5:f7:
         c3:0b:66:cd:b6:ef:33:4a:22:08:87:5e:3f:60:a0:a3:48:76:
         fd:fa:aa:9d:36:b8:92:90:71:ed:52:cc:7e:a0:3d:09:f4:4e:
         a5:41:f7:fd:4d:7e:e9:09:e5:a9:b1:ad:8f:fc:3b:5f:5f:25:
         a1:59:58:67:91:5b:3f:2b:f7:13:2c:53:66:96:2f:cc:fa:8a:
         4c:c5:52:60:48:08:e7:6b:f6:17:0c:2a:ab:c7:21:f0:cf:85:
         8e:35:1e:37:c5:f7:73:33:ce:84:c2:0e:1c:da:2e:d9:29:92:
         95:93:17:70:2e:b0:ca:20:ae:98:cd:2e:20:50:2e:62:9a:0a:
         78:a9:78:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:41:38 2025 by rpki-client