Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/3130332e3133352e332e302f32342d3234203d3e20313338383237.roa
File:                     3130332e3133352e332e302f32342d3234203d3e20313338383237.roa (raw, json)
Hash identifier:          85V6qA8RHEszjBxF6yv2LBrZ9dlUnY8/+0ZLxd1aOzQ=
Subject key identifier:   4A:6B:03:9C:37:FE:A5:02:39:0E:9F:6C:42:C5:87:4F:3E:51:C9:4C
Certificate issuer:       /CN=3C3C868A5674B425FAE567426BCB238E23AE20AC
Certificate serial:       55C99FC1771737146170660AFA95301D36D72B25
Authority key identifier: 3C:3C:86:8A:56:74:B4:25:FA:E5:67:42:6B:CB:23:8E:23:AE:20:AC
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C3C868A5674B425FAE567426BCB238E23AE20AC.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/3130332e3133352e332e302f32342d3234203d3e20313338383237.roa
Signing time:             Mon 07 Jul 2025 04:02:25 +0000
ROA not before:           Mon 07 Jul 2025 03:57:25 +0000
ROA not after:            Mon 06 Jul 2026 04:02:25 +0000
asID:                     138827
IP address blocks:        103.135.3.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/3C3C868A5674B425FAE567426BCB238E23AE20AC.crl
                          rsync://repo-rpki.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/3C3C868A5674B425FAE567426BCB238E23AE20AC.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C3C868A5674B425FAE567426BCB238E23AE20AC.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Jul 2025 02:43:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:c9:9f:c1:77:17:37:14:61:70:66:0a:fa:95:30:1d:36:d7:2b:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C3C868A5674B425FAE567426BCB238E23AE20AC
        Validity
            Not Before: Jul  7 03:57:25 2025 GMT
            Not After : Jul  6 04:02:25 2026 GMT
        Subject: CN=4A6B039C37FEA502390E9F6C42C5874F3E51C94C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:46:42:95:38:5b:2c:b0:a4:ae:ca:68:e7:87:
                    34:6e:39:e6:c0:10:0b:28:b1:2e:a8:77:de:f5:3e:
                    ba:df:d5:ba:80:6f:bf:10:56:3d:04:e6:6e:92:8e:
                    f9:7e:d6:51:24:07:70:e1:a7:b9:f4:74:c0:40:fd:
                    9a:c0:17:f9:af:20:9e:50:c8:bd:2d:5b:66:70:9f:
                    2b:3a:e5:36:84:ef:da:c8:9f:ed:3a:22:b0:ef:d4:
                    84:3d:9e:04:db:33:72:d6:5d:d7:9c:2b:20:20:e7:
                    06:79:a2:de:62:94:50:0a:03:f4:47:06:b1:29:b4:
                    9a:6c:6f:d4:f5:13:63:59:7f:5c:3f:23:c0:5c:bd:
                    b2:0f:4c:86:6a:dc:74:60:39:e4:5d:db:32:3a:5c:
                    7a:b8:24:c8:a2:9e:b1:37:4b:ee:a5:9e:19:78:bb:
                    e6:46:99:47:25:37:28:09:c9:fa:89:3a:fe:92:b4:
                    2d:2f:0a:03:7f:d5:70:8e:83:99:d5:1c:2f:b7:db:
                    3c:d9:2a:39:1d:ac:ae:a3:a4:b0:7c:7f:75:7a:79:
                    46:57:15:a6:fb:18:3f:3f:85:aa:17:64:d4:ee:f6:
                    d5:d3:cb:64:38:e0:25:58:5b:d2:75:21:a3:44:0b:
                    72:82:0e:05:e2:ff:d9:0b:11:d1:2f:46:9e:9f:9e:
                    2a:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:6B:03:9C:37:FE:A5:02:39:0E:9F:6C:42:C5:87:4F:3E:51:C9:4C
            X509v3 Authority Key Identifier:
                keyid:3C:3C:86:8A:56:74:B4:25:FA:E5:67:42:6B:CB:23:8E:23:AE:20:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/3C3C868A5674B425FAE567426BCB238E23AE20AC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C3C868A5674B425FAE567426BCB238E23AE20AC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/3130332e3133352e332e302f32342d3234203d3e20313338383237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.135.3.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:22:a5:26:ef:38:18:21:e0:8a:81:4c:e0:e0:8c:40:e6:95:
         a8:88:c6:e1:ae:d5:f6:82:65:3b:e1:9a:43:5e:ee:0f:cf:58:
         4e:08:85:cc:cb:f7:32:97:30:69:29:08:c6:43:40:69:d1:b1:
         df:eb:d8:2e:62:f3:ab:76:25:8f:e7:17:ac:90:54:1f:7d:93:
         03:21:4d:c7:af:88:52:64:3b:7f:49:98:75:87:2f:45:6b:69:
         ce:56:34:ea:d8:f5:94:58:4e:53:7d:d0:5b:45:34:ab:ac:9d:
         cd:5e:47:86:fe:fc:df:df:1d:13:b1:c7:c7:61:f8:f2:eb:95:
         7b:2a:ca:bb:82:c3:03:34:93:92:bf:ab:e7:cf:55:37:99:3c:
         89:6f:44:7b:28:45:11:5d:6b:e5:a6:fc:e9:03:f5:67:49:2e:
         2e:81:30:2a:97:09:a2:d4:87:05:67:de:a5:23:ac:25:d0:5f:
         46:44:db:e2:bf:31:c1:63:18:80:cd:03:80:d4:af:2d:14:ad:
         aa:d8:eb:b6:88:57:21:c6:ab:0d:10:b9:c6:99:ba:64:f8:6c:
         96:4f:cd:0a:bd:aa:4b:b8:b3:0b:4a:bd:77:1e:47:e9:40:54:
         e3:d6:44:5d:ca:4e:39:1d:a6:38:4c:4a:3b:67:59:38:86:b5:
         ee:82:8e:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 18:05:00 2025 by rpki-client