Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/3130332e35342e39332e302f32342d3234203d3e20313333383233.roa
File:                     3130332e35342e39332e302f32342d3234203d3e20313333383233.roa (raw, json)
Hash identifier:          iU0rA2I2pdwjPlY87B+mW81OhT+cYHrzR6Mi5MNimIA=
Subject key identifier:   F2:D1:2D:23:44:DA:C9:74:C1:DB:3E:82:07:55:81:8C:77:09:ED:C7
Certificate issuer:       /CN=229F9618AE3F0667EC17C977F266B2BE74C81AB7
Certificate serial:       56F4FC5B497FC375113449A330AE8FC9A406BA02
Authority key identifier: 22:9F:96:18:AE:3F:06:67:EC:17:C9:77:F2:66:B2:BE:74:C8:1A:B7
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229F9618AE3F0667EC17C977F266B2BE74C81AB7.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/3130332e35342e39332e302f32342d3234203d3e20313333383233.roa
Signing time:             Fri 11 Jul 2025 09:00:48 +0000
ROA not before:           Fri 11 Jul 2025 08:55:48 +0000
ROA not after:            Fri 10 Jul 2026 09:00:48 +0000
asID:                     133823
IP address blocks:        103.54.93.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/229F9618AE3F0667EC17C977F266B2BE74C81AB7.crl
                          rsync://repo-rpki.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/229F9618AE3F0667EC17C977F266B2BE74C81AB7.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229F9618AE3F0667EC17C977F266B2BE74C81AB7.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 23 Jul 2025 21:35:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:f4:fc:5b:49:7f:c3:75:11:34:49:a3:30:ae:8f:c9:a4:06:ba:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=229F9618AE3F0667EC17C977F266B2BE74C81AB7
        Validity
            Not Before: Jul 11 08:55:48 2025 GMT
            Not After : Jul 10 09:00:48 2026 GMT
        Subject: CN=F2D12D2344DAC974C1DB3E820755818C7709EDC7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:96:71:3a:ed:69:1b:91:03:0d:23:be:24:e5:
                    e0:c0:8f:ca:61:b4:bd:22:17:96:81:c9:94:49:23:
                    44:2a:bd:bc:e9:76:41:01:d1:f5:03:c6:05:3e:cd:
                    5a:96:39:ec:0c:41:a1:d1:dd:e6:f5:8e:36:1b:13:
                    24:5b:e7:45:f1:3b:ed:c2:b4:b7:b8:65:6c:6f:61:
                    83:ff:9a:2b:11:64:79:df:b6:20:3e:33:22:f1:58:
                    83:81:94:f8:9d:64:b9:50:3a:b0:61:35:0d:f1:2c:
                    19:51:0d:1e:df:25:c2:94:5e:66:ed:60:0a:ed:c9:
                    2d:d1:24:fc:ea:f2:ea:8a:23:7e:93:87:d2:5c:d1:
                    a8:bd:ef:0d:d3:d4:a2:cc:3a:43:5a:bd:6e:3e:cb:
                    b4:f8:db:3e:24:19:e6:25:3c:e7:7c:e5:0e:a0:2c:
                    22:05:d4:07:ea:54:4b:7d:eb:7f:95:17:89:b8:1c:
                    49:ce:61:9c:f8:73:9f:00:5d:45:3f:75:39:91:1f:
                    c1:d1:ca:d5:5f:f2:62:de:86:1a:d5:6b:6f:c4:69:
                    2e:6c:9f:5d:6b:5d:d2:d1:25:a1:f9:f3:87:7b:d2:
                    30:d7:cc:17:cf:63:6c:d0:18:02:ed:ec:f8:e4:5a:
                    87:43:f3:35:ce:38:65:9b:74:0e:8f:50:fa:84:56:
                    f4:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:D1:2D:23:44:DA:C9:74:C1:DB:3E:82:07:55:81:8C:77:09:ED:C7
            X509v3 Authority Key Identifier:
                keyid:22:9F:96:18:AE:3F:06:67:EC:17:C9:77:F2:66:B2:BE:74:C8:1A:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/229F9618AE3F0667EC17C977F266B2BE74C81AB7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229F9618AE3F0667EC17C977F266B2BE74C81AB7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/3130332e35342e39332e302f32342d3234203d3e20313333383233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.54.93.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d2:61:42:a2:ea:40:e2:c9:a1:6d:2a:67:5d:5f:42:2b:be:c0:
         f3:ca:66:44:ba:8b:c8:66:b8:e9:9d:8e:37:4f:25:03:46:70:
         40:5a:f0:83:3a:19:8f:6d:8b:14:9e:d1:78:1f:5f:ca:33:8b:
         3a:82:42:16:3b:04:e3:a2:00:c5:be:b4:a5:7c:25:23:a2:74:
         a3:59:ec:c5:58:3f:cb:24:62:b0:8e:3b:f4:52:9f:53:72:c6:
         4b:38:d4:f7:77:9d:29:16:ef:46:b3:4d:06:88:70:84:13:49:
         7a:97:1d:ed:0e:95:1e:12:45:7c:e1:20:0a:ef:c7:b0:5f:d9:
         00:3d:15:7c:8d:c1:ed:c5:cc:e6:83:33:b0:4a:1b:e0:93:f4:
         7e:06:c0:bc:29:35:b4:d0:5c:d1:46:9c:0b:0a:81:75:a2:47:
         44:d3:da:73:50:ef:8a:bd:0e:2b:28:d0:7e:81:63:8c:2a:94:
         53:4f:7b:91:ed:c6:5f:e3:e3:a0:72:32:cf:cf:cf:fb:8c:2f:
         98:85:eb:cb:6f:54:89:79:87:75:11:a5:4b:6d:4e:b8:04:6e:
         84:45:25:b1:b4:fc:d3:73:15:9e:98:a2:5c:32:b5:04:d6:de:
         fd:f8:be:28:dc:41:c4:ca:d8:b2:6c:56:c7:95:48:67:c0:96:
         0c:9d:06:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 14:29:13 2025 by rpki-client