Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/b652bf9c-634b-40b9-ac0c-a87b47d59f91/0/3130332e312e35302e302f32342d3234203d3e20313432333532.roa
File:                     3130332e312e35302e302f32342d3234203d3e20313432333532.roa (raw, json)
Hash identifier:          0HtGEFB5lVL9KGTJaAeG0cG7Yc1XqVsEKqDCZP63hmI=
Subject key identifier:   FD:02:F3:F3:0C:1A:12:8B:53:22:9A:1B:4F:08:67:E5:69:A7:C2:7C
Certificate issuer:       /CN=B48345F7F9FB4F14FFFE8BC5B74685D2A0993094
Certificate serial:       2B6D99BE875843745B6B0D0B59118AFDD426E9AB
Authority key identifier: B4:83:45:F7:F9:FB:4F:14:FF:FE:8B:C5:B7:46:85:D2:A0:99:30:94
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B48345F7F9FB4F14FFFE8BC5B74685D2A0993094.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/b652bf9c-634b-40b9-ac0c-a87b47d59f91/0/3130332e312e35302e302f32342d3234203d3e20313432333532.roa
Signing time:             Tue 30 Sep 2025 09:00:59 +0000
ROA not before:           Tue 30 Sep 2025 08:55:59 +0000
ROA not after:            Tue 29 Sep 2026 09:00:59 +0000
asID:                     142352
IP address blocks:        103.1.50.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/b652bf9c-634b-40b9-ac0c-a87b47d59f91/0/B48345F7F9FB4F14FFFE8BC5B74685D2A0993094.crl
                          rsync://repo-rpki.idnic.net/repo/b652bf9c-634b-40b9-ac0c-a87b47d59f91/0/B48345F7F9FB4F14FFFE8BC5B74685D2A0993094.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B48345F7F9FB4F14FFFE8BC5B74685D2A0993094.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 21 Oct 2025 23:49:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:6d:99:be:87:58:43:74:5b:6b:0d:0b:59:11:8a:fd:d4:26:e9:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B48345F7F9FB4F14FFFE8BC5B74685D2A0993094
        Validity
            Not Before: Sep 30 08:55:59 2025 GMT
            Not After : Sep 29 09:00:59 2026 GMT
        Subject: CN=FD02F3F30C1A128B53229A1B4F0867E569A7C27C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:01:97:7d:38:1d:a7:f2:a0:01:a1:c6:9e:55:
                    91:3a:0c:95:e3:9d:8b:49:86:e1:33:fd:b8:c8:df:
                    0a:67:21:66:25:b9:88:e8:ac:ff:d2:04:c0:77:b4:
                    d2:7a:d9:fe:9e:99:1e:32:4b:d9:78:b8:93:26:73:
                    a5:85:2d:be:3c:41:60:d2:27:54:f4:b6:40:a8:63:
                    5e:f9:99:ce:74:93:2a:00:cb:3d:e6:0d:94:05:87:
                    69:5c:68:ec:cb:88:76:27:d9:4a:67:83:39:fb:39:
                    6c:6d:47:8e:3d:0b:ed:63:d8:43:e4:6d:a8:99:d9:
                    55:fc:43:7f:73:74:13:fb:8c:f2:a8:d1:45:d7:24:
                    7f:f1:51:44:9e:e4:ce:09:7b:5d:01:f1:fa:c5:cf:
                    2f:a8:74:e4:4c:5f:7d:0c:65:77:c5:6e:73:d4:87:
                    a0:97:81:c8:46:aa:ce:0f:3d:51:68:f2:71:85:57:
                    84:ce:c3:9e:37:3d:e4:01:cc:12:5d:2a:11:71:f4:
                    b2:2c:22:9c:e0:8f:28:12:8e:cf:28:b4:f6:7e:ad:
                    bd:8c:74:f5:bd:76:a8:68:ac:e2:a4:97:29:1f:a0:
                    5d:e4:5f:e3:e7:ce:4d:81:73:37:85:f1:1f:b9:ff:
                    e3:08:e8:f5:4b:28:7d:10:38:d1:ed:77:b1:4e:f1:
                    00:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:02:F3:F3:0C:1A:12:8B:53:22:9A:1B:4F:08:67:E5:69:A7:C2:7C
            X509v3 Authority Key Identifier:
                keyid:B4:83:45:F7:F9:FB:4F:14:FF:FE:8B:C5:B7:46:85:D2:A0:99:30:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/b652bf9c-634b-40b9-ac0c-a87b47d59f91/0/B48345F7F9FB4F14FFFE8BC5B74685D2A0993094.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B48345F7F9FB4F14FFFE8BC5B74685D2A0993094.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b652bf9c-634b-40b9-ac0c-a87b47d59f91/0/3130332e312e35302e302f32342d3234203d3e20313432333532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.1.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:28:8f:fe:fe:8b:45:06:8a:c3:1f:37:c1:b0:d0:98:3a:ab:
         aa:8b:4e:6b:2a:7c:64:9b:17:fb:7b:66:8c:d3:8a:7e:82:3b:
         76:9a:30:74:ac:5e:63:5f:92:16:1c:a6:9f:25:1d:b9:e3:19:
         02:96:e6:ca:e5:13:51:22:a0:24:01:00:59:2a:23:69:5b:53:
         ad:4f:e2:bd:69:7d:df:d5:fd:58:05:07:7e:b0:a7:a0:01:f8:
         4c:eb:71:3b:06:52:5e:76:4c:11:a7:0f:07:d9:a5:05:f5:61:
         e0:43:49:50:2f:64:c0:5a:b9:8f:c5:a8:4c:41:1e:dd:a6:07:
         5a:0c:32:82:1a:76:ce:5d:4a:db:18:26:7a:88:4a:ce:2b:b7:
         b4:6f:7d:df:d0:73:fa:51:e1:28:a1:7c:db:4b:c9:94:1d:23:
         ea:90:04:ec:79:39:7f:6e:fe:6b:5e:87:e3:a5:6d:3e:2b:d1:
         f9:7a:26:7f:46:ee:be:f0:38:7a:b7:c6:a3:80:3c:d0:ca:e0:
         a0:14:22:3b:9e:00:3c:97:99:d0:65:a8:f5:6e:db:2d:de:7a:
         fb:dd:97:3a:8d:35:02:5d:65:3a:65:1b:b5:14:97:00:5e:ce:
         b9:f8:c0:ff:f1:f6:0d:9f:12:e6:e7:63:1c:e0:49:ff:34:30:
         d5:af:e8:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:01:26 2025 by rpki-client