Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/dfc6ad64-7543-48ad-b158-e82676a11c70/0/3130332e39362e35352e302f32342d3234203d3e20313530393637.roa
File:                     3130332e39362e35352e302f32342d3234203d3e20313530393637.roa (raw, json)
Hash identifier:          LEF8YB6t6OYZQZrhwG/4Qw0X6QqLKe1Bpj3LXFZ+/x0=
Subject key identifier:   7B:6F:D1:0C:75:15:3A:AB:95:25:45:5F:87:97:6F:CC:F6:9D:40:E1
Certificate issuer:       /CN=94F615F011BBB2C259625D478AF937086CA8D2EF
Certificate serial:       10E4ABE77BAC48FE10D994176A938948AA6305B8
Authority key identifier: 94:F6:15:F0:11:BB:B2:C2:59:62:5D:47:8A:F9:37:08:6C:A8:D2:EF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94F615F011BBB2C259625D478AF937086CA8D2EF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/dfc6ad64-7543-48ad-b158-e82676a11c70/0/3130332e39362e35352e302f32342d3234203d3e20313530393637.roa
Signing time:             Thu 18 Sep 2025 07:56:36 +0000
ROA not before:           Thu 18 Sep 2025 07:51:36 +0000
ROA not after:            Thu 17 Sep 2026 07:56:36 +0000
asID:                     150967
IP address blocks:        103.96.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/dfc6ad64-7543-48ad-b158-e82676a11c70/0/94F615F011BBB2C259625D478AF937086CA8D2EF.crl
                          rsync://repo-rpki.idnic.net/repo/dfc6ad64-7543-48ad-b158-e82676a11c70/0/94F615F011BBB2C259625D478AF937086CA8D2EF.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94F615F011BBB2C259625D478AF937086CA8D2EF.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Oct 2025 04:55:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:e4:ab:e7:7b:ac:48:fe:10:d9:94:17:6a:93:89:48:aa:63:05:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94F615F011BBB2C259625D478AF937086CA8D2EF
        Validity
            Not Before: Sep 18 07:51:36 2025 GMT
            Not After : Sep 17 07:56:36 2026 GMT
        Subject: CN=7B6FD10C75153AAB9525455F87976FCCF69D40E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:99:2d:f3:0e:b4:10:7e:60:76:35:d3:c1:ff:
                    6c:30:6a:5d:b1:6b:87:62:8a:35:5d:86:17:1f:76:
                    80:42:6b:75:68:09:00:bd:87:a7:8b:9e:92:44:45:
                    fc:02:6a:20:30:6e:f5:c7:58:f6:24:73:ff:5e:c2:
                    60:24:c5:13:e3:44:67:a4:b7:bd:eb:de:78:40:fb:
                    bd:a0:98:75:bb:4a:87:84:86:f4:bc:83:5e:83:22:
                    7e:8c:ce:c4:45:74:c1:71:3f:c6:15:3e:d7:da:2d:
                    b8:e3:63:0a:6d:e6:07:91:aa:cc:fe:58:2e:d9:da:
                    05:19:1b:34:5a:27:ef:6e:60:13:2d:8c:6a:df:85:
                    52:e3:37:12:d6:cf:ae:f1:dd:fc:55:f1:f8:76:bd:
                    8f:0b:d9:ac:be:a3:9a:a3:48:10:4e:9b:bc:d0:eb:
                    df:95:80:e7:15:c0:d1:af:e4:85:f0:02:4d:83:89:
                    5b:50:c1:fe:0d:59:65:9c:e2:73:6d:f8:35:5e:b9:
                    d6:ce:b4:d0:f7:d0:b1:7c:1d:f7:bf:c5:e9:a7:06:
                    a5:a3:2b:e5:e3:ea:b0:cf:75:12:b4:70:6e:b9:f3:
                    79:21:40:e4:b6:09:0a:49:0d:25:30:81:00:4b:ae:
                    3e:5b:b6:da:d4:f0:43:bf:b8:40:84:df:be:40:00:
                    50:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:6F:D1:0C:75:15:3A:AB:95:25:45:5F:87:97:6F:CC:F6:9D:40:E1
            X509v3 Authority Key Identifier:
                keyid:94:F6:15:F0:11:BB:B2:C2:59:62:5D:47:8A:F9:37:08:6C:A8:D2:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/dfc6ad64-7543-48ad-b158-e82676a11c70/0/94F615F011BBB2C259625D478AF937086CA8D2EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94F615F011BBB2C259625D478AF937086CA8D2EF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dfc6ad64-7543-48ad-b158-e82676a11c70/0/3130332e39362e35352e302f32342d3234203d3e20313530393637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.96.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:48:3e:b6:3a:02:2b:ee:29:7a:3a:28:53:7c:ab:98:a5:88:
         83:dd:f8:32:70:35:95:ea:dd:06:c8:99:84:80:75:e6:fe:13:
         ad:4d:4a:f8:26:ef:a3:30:bb:a1:21:b1:69:d2:a9:d2:f0:34:
         6c:9b:59:fb:f9:54:64:b8:c9:a3:f8:84:e6:0d:3b:e2:53:62:
         d2:5e:2d:f9:f0:2b:53:82:93:6f:0e:77:f1:07:fd:b5:1a:d3:
         bc:3a:ef:bd:92:ef:32:60:fe:9f:89:ab:e7:9a:22:1b:b1:7b:
         aa:fb:31:96:30:f7:39:39:fa:dc:7e:c5:88:99:27:cf:18:e2:
         b2:58:4a:02:4f:91:2a:61:91:20:8e:63:13:63:15:53:a2:2e:
         92:08:66:c4:67:40:3c:3b:ad:78:51:2f:3c:1e:db:ba:3f:15:
         24:27:32:de:63:d7:0d:3d:0a:d6:61:a1:3f:25:9d:18:c5:46:
         34:00:f6:15:79:6b:c7:98:29:de:65:c8:ad:59:14:cc:14:35:
         e5:82:80:4e:84:89:d4:a2:7d:cc:7d:52:48:91:c3:17:34:49:
         be:58:fb:fa:0d:c9:69:0f:cd:d2:11:a8:5e:57:24:e2:34:57:
         be:96:e5:fa:36:7f:38:33:c2:16:0e:02:ea:72:bd:1a:90:b6:
         d3:ec:8a:20
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUEOSr53usSP4Q2ZQXapOJSKpjBbgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTRGNjE1RjAxMUJCQjJDMjU5NjI1RDQ3OEFGOTM3MDg2
Q0E4RDJFRjAeFw0yNTA5MTgwNzUxMzZaFw0yNjA5MTcwNzU2MzZaMDMxMTAvBgNV
BAMTKDdCNkZEMTBDNzUxNTNBQUI5NTI1NDU1Rjg3OTc2RkNDRjY5RDQwRTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOmS3zDrQQfmB2NdPB/2wwal2x
a4diijVdhhcfdoBCa3VoCQC9h6eLnpJERfwCaiAwbvXHWPYkc/9ewmAkxRPjRGek
t73r3nhA+72gmHW7SoeEhvS8g16DIn6MzsRFdMFxP8YVPtfaLbjjYwpt5geRqsz+
WC7Z2gUZGzRaJ+9uYBMtjGrfhVLjNxLWz67x3fxV8fh2vY8L2ay+o5qjSBBOm7zQ
69+VgOcVwNGv5IXwAk2DiVtQwf4NWWWc4nNt+DVeudbOtND30LF8Hfe/xemnBqWj
K+Xj6rDPdRK0cG6583khQOS2CQpJDSUwgQBLrj5bttrU8EO/uECE375AAFDXAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUe2/RDHUVOquVJUVfh5dvzPadQOEwHwYDVR0j
BBgwFoAUlPYV8BG7ssJZYl1Hivk3CGyo0u8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k
ZmM2YWQ2NC03NTQzLTQ4YWQtYjE1OC1lODI2NzZhMTFjNzAvMC85NEY2MTVGMDEx
QkJCMkMyNTk2MjVENDc4QUY5MzcwODZDQThEMkVGLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvOTRGNjE1RjAxMUJCQjJDMjU5NjI1RDQ3OEFGOTM3MDg2Q0E4
RDJFRi5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2RmYzZhZDY0LTc1NDMtNDhhZC1i
MTU4LWU4MjY3NmExMWM3MC8wLzMxMzAzMzJlMzkzNjJlMzUzNTJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDMxMzUzMDM5MzYzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGdgNzANBgkqhkiG
9w0BAQsFAAOCAQEAK0g+tjoCK+4pejooU3yrmKWIg934MnA1lerdBsiZhIB15v4T
rU1K+CbvozC7oSGxadKp0vA0bJtZ+/lUZLjJo/iE5g074lNi0l4t+fArU4KTbw53
8Qf9tRrTvDrvvZLvMmD+n4mr55oiG7F7qvsxljD3OTn63H7FiJknzxjislhKAk+R
KmGRII5jE2MVU6IukghmxGdAPDuteFEvPB7buj8VJCcy3mPXDT0K1mGhPyWdGMVG
NAD2FXlrx5gp3mXIrVkUzBQ15YKAToSJ1KJ9zH1SSJHDFzRJvlj7+g3JaQ/N0hGo
Xlck4jRXvpbl+jZ/ODPCFg4C6nK9GpC20+yKIA==
-----END CERTIFICATE-----
Generated at Mon Oct 20 16:59:02 2025 by rpki-client