Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0/3130332e3139302e32392e302f32342d3234203d3e20313439393438.roa
File:                     3130332e3139302e32392e302f32342d3234203d3e20313439393438.roa (raw, json)
Hash identifier:          bL4A3iMML3JwhDE2yFeN6uDiSzuObZzoT/f0gxHop3A=
Subject key identifier:   BA:FE:0B:E0:30:84:1E:B6:2F:CE:9B:5B:83:3A:A2:7D:55:91:7F:F7
Certificate issuer:       /CN=F23ACCA147720B423A9576F3E408691505B293A3
Certificate serial:       4B6CB6095E04FC2AB48AEBB9013763A3F89B2BC0
Authority key identifier: F2:3A:CC:A1:47:72:0B:42:3A:95:76:F3:E4:08:69:15:05:B2:93:A3
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F23ACCA147720B423A9576F3E408691505B293A3.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0/3130332e3139302e32392e302f32342d3234203d3e20313439393438.roa
Signing time:             Thu 14 Aug 2025 08:03:04 +0000
ROA not before:           Thu 14 Aug 2025 07:58:04 +0000
ROA not after:            Thu 13 Aug 2026 08:03:04 +0000
asID:                     149948
IP address blocks:        103.190.29.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0/F23ACCA147720B423A9576F3E408691505B293A3.crl
                          rsync://repo-rpki.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0/F23ACCA147720B423A9576F3E408691505B293A3.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F23ACCA147720B423A9576F3E408691505B293A3.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Aug 2025 18:06:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:6c:b6:09:5e:04:fc:2a:b4:8a:eb:b9:01:37:63:a3:f8:9b:2b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F23ACCA147720B423A9576F3E408691505B293A3
        Validity
            Not Before: Aug 14 07:58:04 2025 GMT
            Not After : Aug 13 08:03:04 2026 GMT
        Subject: CN=BAFE0BE030841EB62FCE9B5B833AA27D55917FF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:36:3b:13:c6:44:56:7b:36:dc:28:c1:88:54:
                    30:e2:b7:43:e5:b9:be:e7:9c:18:46:3c:a8:a7:6d:
                    e1:dd:0d:a1:11:7b:7d:d5:ec:fa:81:b9:3f:81:72:
                    09:54:3a:84:2e:03:71:27:f8:ff:c8:66:ec:c1:6c:
                    e9:1a:62:7b:ac:36:c6:aa:3b:0f:3f:ad:2f:cd:5d:
                    a3:0e:20:f8:a3:85:d0:8f:6a:e4:18:95:da:bd:01:
                    47:40:06:27:0b:00:ac:45:14:f1:df:f0:0f:7f:7e:
                    90:f1:8d:52:93:67:df:fc:37:7b:e4:7b:db:c2:74:
                    48:22:2d:ff:f5:b8:c9:92:e4:d2:ae:d8:14:38:83:
                    b3:c7:d0:04:f9:fa:27:2f:26:80:b7:71:a3:d7:a7:
                    b6:e9:4e:f4:32:7e:f6:6f:42:c3:5c:6e:7e:2e:8e:
                    68:e2:da:00:38:00:44:ec:18:a2:96:15:1f:aa:8d:
                    a1:ad:e0:52:20:31:13:2b:1c:50:c5:9e:25:9b:a1:
                    2b:c5:b2:62:00:bf:28:24:95:15:b3:dd:ab:62:1b:
                    af:6e:ce:1f:aa:8f:6f:2d:5e:5a:e1:f2:de:a4:d8:
                    fb:58:71:28:fa:f7:b0:1e:4e:c8:31:ab:6a:e3:ba:
                    24:7d:b2:5f:49:e4:74:b3:bb:5e:75:b1:ea:61:79:
                    bf:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:FE:0B:E0:30:84:1E:B6:2F:CE:9B:5B:83:3A:A2:7D:55:91:7F:F7
            X509v3 Authority Key Identifier:
                keyid:F2:3A:CC:A1:47:72:0B:42:3A:95:76:F3:E4:08:69:15:05:B2:93:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0/F23ACCA147720B423A9576F3E408691505B293A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F23ACCA147720B423A9576F3E408691505B293A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0/3130332e3139302e32392e302f32342d3234203d3e20313439393438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.190.29.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:5e:11:3c:e1:07:1e:96:96:72:b3:c6:84:5c:1d:19:58:76:
         3d:80:b6:54:49:a8:6a:8c:2b:87:42:19:3c:5b:9b:68:ae:a3:
         cc:bb:6c:58:30:13:19:9d:fa:ba:33:2f:78:3d:25:e9:9d:e1:
         25:6e:1f:a9:2a:8e:24:e9:e6:80:49:47:1d:16:5e:02:d9:5c:
         21:d3:98:e1:aa:4c:f5:45:29:d3:f1:49:6c:24:0e:48:b2:f8:
         25:23:78:04:0e:53:7e:aa:58:b6:e8:23:14:4f:4b:a3:ac:f8:
         90:84:aa:9e:64:1e:42:cd:b7:6a:db:ee:46:7b:dc:39:13:09:
         48:80:64:1e:60:e7:92:74:85:50:12:2a:38:19:a2:df:d6:d6:
         43:35:4b:eb:64:ec:b8:aa:b7:4b:2b:8b:95:a7:59:b4:cd:f9:
         4f:84:25:87:4f:df:0a:c5:f9:7b:d0:cb:e8:a7:c4:bf:cb:46:
         cc:35:71:17:20:b1:fd:d3:8f:fb:9a:00:28:7a:d9:54:1a:55:
         d0:c7:d9:28:55:d0:aa:b5:55:90:ed:de:87:1a:00:66:f8:c1:
         30:6d:4a:1d:9c:14:7d:79:c2:f0:8f:df:15:9e:a3:ea:3c:24:
         9c:bc:ec:33:6b:f2:6c:66:19:3c:b3:93:7f:1f:37:08:c5:ca:
         45:9e:1f:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 01:20:44 2025 by rpki-client