Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/ed70cc37-1fa6-4fa0-a88c-408aed28d9aa/0/3130332e3231352e31362e302f32342d3234203d3e203634303331.roa
File:                     3130332e3231352e31362e302f32342d3234203d3e203634303331.roa (raw, json)
Hash identifier:          iTXijEjQts+GxMwVGkPiv33W0uV/9tdMEiAqMwI4dno=
Subject key identifier:   9E:DE:C1:8E:15:32:96:09:9E:4D:B5:0D:64:C8:9A:64:E4:5C:9E:67
Certificate issuer:       /CN=A781200DA8EA5D34C742642B1E502D67A5B2279E
Certificate serial:       713F5027871A3875072A92096AD88395C1BC7C32
Authority key identifier: A7:81:20:0D:A8:EA:5D:34:C7:42:64:2B:1E:50:2D:67:A5:B2:27:9E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A781200DA8EA5D34C742642B1E502D67A5B2279E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ed70cc37-1fa6-4fa0-a88c-408aed28d9aa/0/3130332e3231352e31362e302f32342d3234203d3e203634303331.roa
Signing time:             Sat 16 Aug 2025 04:02:27 +0000
ROA not before:           Sat 16 Aug 2025 03:57:27 +0000
ROA not after:            Sat 15 Aug 2026 04:02:27 +0000
asID:                     64031
IP address blocks:        103.215.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ed70cc37-1fa6-4fa0-a88c-408aed28d9aa/0/A781200DA8EA5D34C742642B1E502D67A5B2279E.crl
                          rsync://repo-rpki.idnic.net/repo/ed70cc37-1fa6-4fa0-a88c-408aed28d9aa/0/A781200DA8EA5D34C742642B1E502D67A5B2279E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A781200DA8EA5D34C742642B1E502D67A5B2279E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Aug 2025 03:51:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:3f:50:27:87:1a:38:75:07:2a:92:09:6a:d8:83:95:c1:bc:7c:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A781200DA8EA5D34C742642B1E502D67A5B2279E
        Validity
            Not Before: Aug 16 03:57:27 2025 GMT
            Not After : Aug 15 04:02:27 2026 GMT
        Subject: CN=9EDEC18E153296099E4DB50D64C89A64E45C9E67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:18:b9:af:82:ad:d4:91:51:11:b1:06:54:9c:
                    4b:82:93:41:ab:c8:39:2e:cf:bc:37:37:e2:d9:91:
                    fe:8d:fc:fb:07:fd:9e:7a:77:75:0a:6f:03:22:34:
                    61:b4:34:db:70:2e:e7:4f:1f:31:b6:1f:55:d3:9a:
                    cd:4a:a3:f9:21:46:25:86:25:65:67:77:3c:35:18:
                    5f:70:16:33:3d:2f:ee:d9:09:a9:fd:68:ed:c7:13:
                    68:54:3a:dc:a0:fc:04:2e:58:6c:57:59:35:22:e8:
                    97:1d:be:ea:62:35:45:9d:6d:b9:17:9b:a4:9d:d5:
                    a2:7b:ca:29:cb:9e:c2:78:00:5a:ec:dd:48:be:23:
                    5c:1d:07:44:48:37:62:95:98:29:5a:22:f2:60:e2:
                    40:52:6d:63:b9:ec:fa:3d:0f:87:8b:45:aa:67:0d:
                    46:d1:76:74:82:58:04:13:a7:d5:8c:3d:47:fa:c6:
                    20:2d:9d:ef:de:1d:84:89:c9:d6:bf:72:ff:ff:c7:
                    38:e6:ec:a8:b1:51:8a:e5:62:06:75:fb:1f:82:45:
                    50:89:08:bf:0e:2c:a1:c5:13:70:5f:ec:90:82:e4:
                    65:5a:a2:7c:5b:21:70:b2:9a:0d:52:3e:6c:08:44:
                    2a:12:82:78:5f:bc:10:05:18:e4:b1:80:c0:d4:03:
                    a6:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:DE:C1:8E:15:32:96:09:9E:4D:B5:0D:64:C8:9A:64:E4:5C:9E:67
            X509v3 Authority Key Identifier:
                keyid:A7:81:20:0D:A8:EA:5D:34:C7:42:64:2B:1E:50:2D:67:A5:B2:27:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ed70cc37-1fa6-4fa0-a88c-408aed28d9aa/0/A781200DA8EA5D34C742642B1E502D67A5B2279E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A781200DA8EA5D34C742642B1E502D67A5B2279E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ed70cc37-1fa6-4fa0-a88c-408aed28d9aa/0/3130332e3231352e31362e302f32342d3234203d3e203634303331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.215.16.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:5b:84:41:96:5f:f1:fd:e9:64:ad:89:0c:2f:c4:d1:4c:04:
         42:1d:af:45:45:16:9d:d1:2d:9b:13:01:b2:f7:39:f1:ec:cd:
         6b:41:70:87:28:12:24:71:f7:51:2e:f2:b9:f7:bc:19:7c:ab:
         3b:fe:c0:d1:aa:56:43:e2:60:07:48:62:2c:77:30:6f:f1:07:
         98:02:7d:36:b6:30:9b:50:7a:85:a0:39:67:97:13:e4:7e:0b:
         b2:fd:f5:ee:ab:22:9d:33:29:9c:e0:bf:a4:ff:db:97:6a:2a:
         82:43:b3:7f:b5:71:97:29:0c:da:1f:0f:8d:1b:18:cf:a7:a8:
         fc:27:80:1a:c7:7c:33:5f:16:bd:b0:81:72:98:c4:62:d9:75:
         d8:59:ca:93:c3:e1:3f:21:98:f1:ab:e1:29:f6:a0:ad:0b:45:
         33:67:69:82:9b:93:72:df:28:4f:70:1b:1b:75:bc:72:12:5f:
         e1:51:0f:d9:7b:f2:32:6f:33:a2:c8:e9:82:8d:60:c3:50:01:
         1b:fe:9c:34:07:b6:af:37:02:1b:d9:1b:b7:49:58:40:0f:44:
         20:91:b7:1f:98:21:59:39:e6:93:33:12:5d:df:75:0f:86:a8:
         9e:78:cb:5b:b4:cf:ab:2a:c8:1b:03:9c:0a:b2:5e:c0:1c:40:
         fe:79:e9:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:51:04 2025 by rpki-client