Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/f0dc1283-1ce2-41a5-afe6-f0be31e9b10d/0/3130332e3138332e39342e302f32342d3234203d3e20313439343132.roa
File:                     3130332e3138332e39342e302f32342d3234203d3e20313439343132.roa (raw, json)
Hash identifier:          /432ui2qmqLAqTG2YzJyGFJbPM4fOVIctbLjFQr3ZFs=
Subject key identifier:   6D:D3:C9:FD:F9:8E:BE:F6:1D:E7:9D:86:F0:0E:CA:B7:80:A8:94:C7
Certificate issuer:       /CN=A74966240B64274B90EBE06CE0EE222C3EE9C60E
Certificate serial:       722E68F5E32EE41D7DCCD30139217F3834DBFD7E
Authority key identifier: A7:49:66:24:0B:64:27:4B:90:EB:E0:6C:E0:EE:22:2C:3E:E9:C6:0E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A74966240B64274B90EBE06CE0EE222C3EE9C60E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f0dc1283-1ce2-41a5-afe6-f0be31e9b10d/0/3130332e3138332e39342e302f32342d3234203d3e20313439343132.roa
Signing time:             Fri 06 Jun 2025 10:03:11 +0000
ROA not before:           Fri 06 Jun 2025 09:58:11 +0000
ROA not after:            Fri 05 Jun 2026 10:03:11 +0000
asID:                     149412
IP address blocks:        103.183.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/f0dc1283-1ce2-41a5-afe6-f0be31e9b10d/0/A74966240B64274B90EBE06CE0EE222C3EE9C60E.crl
                          rsync://repo-rpki.idnic.net/repo/f0dc1283-1ce2-41a5-afe6-f0be31e9b10d/0/A74966240B64274B90EBE06CE0EE222C3EE9C60E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A74966240B64274B90EBE06CE0EE222C3EE9C60E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 02 Jul 2025 07:23:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:2e:68:f5:e3:2e:e4:1d:7d:cc:d3:01:39:21:7f:38:34:db:fd:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A74966240B64274B90EBE06CE0EE222C3EE9C60E
        Validity
            Not Before: Jun  6 09:58:11 2025 GMT
            Not After : Jun  5 10:03:11 2026 GMT
        Subject: CN=6DD3C9FDF98EBEF61DE79D86F00ECAB780A894C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:9a:de:e5:c6:a3:8d:d2:dd:42:f0:4e:ca:92:
                    33:f4:ff:64:c3:0a:a7:94:71:80:16:79:6b:a8:ee:
                    b0:4e:0f:90:72:1d:e4:cd:69:a9:41:f6:b6:ad:c3:
                    3b:ac:32:60:00:41:c4:cc:b4:1b:10:a6:c5:19:df:
                    51:6e:63:05:e1:ea:1b:ab:06:5b:70:9b:d8:32:4c:
                    4f:9c:f8:0d:b7:26:9c:80:04:4f:ab:11:84:b6:d1:
                    2b:a6:1d:41:45:60:f7:e9:72:da:6e:d4:6a:3c:89:
                    df:62:b6:af:a5:ce:d6:e8:5f:99:56:2b:8c:5d:7e:
                    a8:3c:59:78:81:80:35:84:a0:d7:3e:ee:41:31:37:
                    f8:8b:80:52:74:8e:e3:0f:0a:a1:e7:80:c9:bd:89:
                    d7:36:fa:ec:b5:23:da:78:4e:99:aa:c8:ba:43:7d:
                    c3:74:03:9a:d0:79:a6:6f:54:40:8f:98:05:59:1a:
                    c9:e8:76:53:88:fe:c8:40:54:ee:ed:83:80:9a:a2:
                    94:2e:5a:a3:d1:10:15:fa:10:94:84:c0:cc:b4:91:
                    ea:2c:b6:b5:70:db:60:68:15:7f:3a:32:d6:04:fe:
                    ce:cb:5c:3b:cf:26:e9:f9:5a:e0:b3:7c:f1:60:df:
                    69:72:b1:2b:71:1d:c3:87:bf:d8:b1:e8:91:ab:cc:
                    b3:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:D3:C9:FD:F9:8E:BE:F6:1D:E7:9D:86:F0:0E:CA:B7:80:A8:94:C7
            X509v3 Authority Key Identifier:
                keyid:A7:49:66:24:0B:64:27:4B:90:EB:E0:6C:E0:EE:22:2C:3E:E9:C6:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f0dc1283-1ce2-41a5-afe6-f0be31e9b10d/0/A74966240B64274B90EBE06CE0EE222C3EE9C60E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A74966240B64274B90EBE06CE0EE222C3EE9C60E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f0dc1283-1ce2-41a5-afe6-f0be31e9b10d/0/3130332e3138332e39342e302f32342d3234203d3e20313439343132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.183.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:d7:f0:b8:43:83:ad:7c:76:1d:89:d2:06:a5:60:b6:c5:5d:
         db:6f:4a:a3:e6:73:b9:5f:4c:48:75:71:32:da:80:98:71:37:
         b5:35:15:3d:2f:7b:b9:05:70:6a:fa:be:25:a8:40:86:2c:5f:
         d5:3f:06:1d:3b:6b:86:d9:81:09:c6:69:4f:20:a3:1a:f4:d0:
         17:70:b1:e9:9f:1e:27:31:23:1b:5d:20:cd:ef:9c:51:8c:b6:
         9f:4c:12:67:8a:24:17:d9:55:be:62:f1:01:b9:d5:cc:a1:ce:
         dd:28:71:c0:1e:b5:99:76:19:50:47:2c:70:3f:03:18:a5:9b:
         3b:3a:8c:cf:9f:8f:da:4d:ad:ac:72:06:61:ad:e8:b7:7e:88:
         db:f6:26:84:95:44:d1:b5:bd:aa:09:48:fd:3f:9e:9f:ae:f9:
         21:9b:ec:f7:72:9e:da:c6:14:51:51:8c:d2:17:5a:6f:7f:88:
         74:90:9a:41:d7:05:8d:fc:8d:d5:45:89:71:2c:12:47:42:73:
         71:86:73:d2:51:eb:a5:cb:e5:9d:af:c2:1d:1b:54:32:ee:6a:
         78:d6:f1:97:6d:58:21:38:90:ef:13:12:74:b7:c6:41:ab:a4:
         6c:84:13:84:c5:50:88:2a:21:43:86:83:75:a4:79:e4:15:a3:
         a9:94:34:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 00:47:30 2025 by rpki-client