Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e71bf980-24da-4865-a989-2d4489e3a505/0/3130332e3134322e36312e302f32342d3234203d3e20313339333639.roa
File:                     3130332e3134322e36312e302f32342d3234203d3e20313339333639.roa (raw, json)
Hash identifier:          gQUi+SSlZWbgtxREEtY9XyZ6mEDQwkMmGKLNXyWWZlc=
Subject key identifier:   C6:47:FE:29:8D:DA:15:95:A4:52:44:00:70:AA:90:78:A1:E1:12:60
Certificate issuer:       /CN=7A1D192D65B7EEADC46AB445208CC224DCE974B6
Certificate serial:       01877EC8136C318C17C0964D128AA52D29433EA1
Authority key identifier: 7A:1D:19:2D:65:B7:EE:AD:C4:6A:B4:45:20:8C:C2:24:DC:E9:74:B6
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7A1D192D65B7EEADC46AB445208CC224DCE974B6.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e71bf980-24da-4865-a989-2d4489e3a505/0/3130332e3134322e36312e302f32342d3234203d3e20313339333639.roa
Signing time:             Tue 30 Sep 2025 06:00:00 +0000
ROA not before:           Tue 30 Sep 2025 05:55:00 +0000
ROA not after:            Tue 29 Sep 2026 06:00:00 +0000
asID:                     139369
IP address blocks:        103.142.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e71bf980-24da-4865-a989-2d4489e3a505/0/7A1D192D65B7EEADC46AB445208CC224DCE974B6.crl
                          rsync://repo-rpki.idnic.net/repo/e71bf980-24da-4865-a989-2d4489e3a505/0/7A1D192D65B7EEADC46AB445208CC224DCE974B6.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7A1D192D65B7EEADC46AB445208CC224DCE974B6.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Oct 2025 04:41:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:7e:c8:13:6c:31:8c:17:c0:96:4d:12:8a:a5:2d:29:43:3e:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7A1D192D65B7EEADC46AB445208CC224DCE974B6
        Validity
            Not Before: Sep 30 05:55:00 2025 GMT
            Not After : Sep 29 06:00:00 2026 GMT
        Subject: CN=C647FE298DDA1595A452440070AA9078A1E11260
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:19:4c:e8:90:19:26:17:f1:d5:40:bf:85:ea:
                    31:6d:df:a0:fd:fb:1f:02:7a:05:3d:df:0f:a6:40:
                    3e:55:e1:e6:52:ce:57:5f:62:0b:d7:33:69:99:f6:
                    18:72:a7:f7:78:04:31:93:44:71:2f:16:19:a1:d2:
                    ba:bf:72:c3:20:5a:69:9d:66:e0:cb:c5:60:60:5b:
                    85:c3:d3:a3:d3:bd:ac:76:34:55:c2:bb:0b:17:2d:
                    71:c6:4f:12:4f:85:33:f4:6d:97:dc:8c:f3:05:5f:
                    f9:e7:9f:bd:eb:eb:58:8b:a7:f4:bb:e6:a9:e9:6c:
                    76:cf:86:7a:ce:54:3e:33:51:71:cf:35:51:3f:e3:
                    93:74:c1:33:0c:79:0a:75:82:f6:a6:0d:88:7a:ec:
                    db:12:b2:72:84:78:82:11:10:4e:2e:f6:30:b0:ef:
                    01:8e:c2:9e:8c:39:51:ad:ad:3f:69:86:dc:ec:3a:
                    93:9e:46:78:1b:2f:6c:da:5e:93:a4:4e:29:de:c6:
                    32:c1:7a:23:04:a1:3a:30:eb:d4:ca:78:9a:54:65:
                    d2:47:31:7b:16:73:5b:80:f9:a5:e1:76:0b:3f:7c:
                    97:ca:23:e8:5c:8b:cf:bb:84:29:e0:78:3e:8a:6d:
                    b1:92:d6:88:1f:be:53:c4:a8:bd:0d:86:30:3d:fb:
                    7a:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:47:FE:29:8D:DA:15:95:A4:52:44:00:70:AA:90:78:A1:E1:12:60
            X509v3 Authority Key Identifier:
                keyid:7A:1D:19:2D:65:B7:EE:AD:C4:6A:B4:45:20:8C:C2:24:DC:E9:74:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e71bf980-24da-4865-a989-2d4489e3a505/0/7A1D192D65B7EEADC46AB445208CC224DCE974B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7A1D192D65B7EEADC46AB445208CC224DCE974B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e71bf980-24da-4865-a989-2d4489e3a505/0/3130332e3134322e36312e302f32342d3234203d3e20313339333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.142.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:1c:ed:61:91:b0:9d:c7:66:72:6a:32:cf:76:c7:31:9d:1e:
         fd:d5:c1:f7:cc:a9:24:47:b8:b2:a2:6e:ae:cf:f4:f0:aa:3a:
         d3:71:e8:82:9a:88:bb:70:f4:52:ee:ac:0b:a6:1a:32:dd:4b:
         1a:dc:94:d5:ee:fd:a3:10:d2:f2:2e:b1:91:4f:34:48:73:42:
         27:02:6c:9a:4c:a7:ce:30:bf:41:fc:05:ff:b7:f6:58:a7:dd:
         7c:d5:a4:2b:94:d1:6b:7c:3a:48:b8:24:ec:65:72:82:81:ef:
         1c:55:52:50:56:6e:fa:b0:5c:f0:af:e6:07:25:84:e7:a4:3c:
         2e:52:7d:12:92:34:70:ec:09:87:d4:38:a3:80:6d:50:97:e9:
         81:e3:f9:1a:4e:e0:be:db:89:b8:d3:7e:ed:bc:9b:2a:a1:ad:
         86:f0:e2:08:97:66:03:02:6a:ed:3f:2f:2c:11:1d:92:e1:30:
         bf:a9:8f:a3:3d:c7:3f:1d:3b:11:8a:85:5d:c0:51:4d:98:5e:
         e7:83:99:ed:80:b5:83:65:e0:f0:35:4b:5a:9c:a7:67:66:3e:
         94:ae:94:b4:fa:1e:50:23:50:de:61:3f:78:54:f1:e8:2f:1e:
         24:15:36:21:01:47:b3:a8:c7:d7:0b:37:ee:c8:ea:5a:b5:4a:
         77:84:e4:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:23:12 2025 by rpki-client