Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/46c06455-15c0-4f3d-813b-c07bef78f025/0/3130332e38332e3130302e302f32332d3234203d3e20313336303633.roa
File:                     3130332e38332e3130302e302f32332d3234203d3e20313336303633.roa (raw, json)
Hash identifier:          tP6gwHOQztpWiI7KNt68kDqlO1nwIWP+n+KVb4rQ1p0=
Subject key identifier:   DA:7B:50:CD:9A:0F:D9:59:CF:5A:DF:AD:0A:B0:6A:16:9D:4C:C5:05
Certificate issuer:       /CN=7CE8AFBA81B9A4E0B167449B4A9CA69B8873C32C
Certificate serial:       72A46B385CE7EDDE9D3012C28AEE51FB043CE31A
Authority key identifier: 7C:E8:AF:BA:81:B9:A4:E0:B1:67:44:9B:4A:9C:A6:9B:88:73:C3:2C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CE8AFBA81B9A4E0B167449B4A9CA69B8873C32C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/46c06455-15c0-4f3d-813b-c07bef78f025/0/3130332e38332e3130302e302f32332d3234203d3e20313336303633.roa
Signing time:             Thu 15 May 2025 06:41:39 +0000
ROA not before:           Thu 15 May 2025 06:36:39 +0000
ROA not after:            Thu 14 May 2026 06:41:39 +0000
asID:                     136063
IP address blocks:        103.83.100.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/46c06455-15c0-4f3d-813b-c07bef78f025/0/7CE8AFBA81B9A4E0B167449B4A9CA69B8873C32C.crl
                          rsync://repo-rpki.idnic.net/repo/46c06455-15c0-4f3d-813b-c07bef78f025/0/7CE8AFBA81B9A4E0B167449B4A9CA69B8873C32C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CE8AFBA81B9A4E0B167449B4A9CA69B8873C32C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Jul 2025 16:33:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:a4:6b:38:5c:e7:ed:de:9d:30:12:c2:8a:ee:51:fb:04:3c:e3:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CE8AFBA81B9A4E0B167449B4A9CA69B8873C32C
        Validity
            Not Before: May 15 06:36:39 2025 GMT
            Not After : May 14 06:41:39 2026 GMT
        Subject: CN=DA7B50CD9A0FD959CF5ADFAD0AB06A169D4CC505
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:ef:9b:95:e2:d5:19:6e:76:c9:a2:b5:f8:7f:
                    67:0e:46:24:75:70:c0:a9:56:21:70:2d:b5:e3:38:
                    5b:e9:78:e1:1b:b6:91:38:84:cb:02:87:f0:39:e2:
                    c9:d2:70:8b:54:0a:fd:a7:c5:7d:7e:f5:c2:d9:27:
                    a5:23:a9:e1:10:a2:96:3e:8f:a3:bc:1f:9d:af:e6:
                    7f:6a:00:5e:94:d8:b9:aa:1d:87:ca:24:56:43:4d:
                    2c:ee:24:93:12:91:8a:29:e8:bd:1e:a7:62:03:2d:
                    fa:15:f3:4e:8f:65:bf:93:75:87:0e:d1:50:3c:ff:
                    75:9d:17:1f:ba:99:8d:08:98:a6:59:50:0a:df:18:
                    70:56:9e:6b:8b:18:6c:94:66:16:7b:19:d6:8b:c9:
                    21:ce:c4:aa:3b:3b:ed:b9:3f:99:f3:75:27:3d:3a:
                    5d:a0:9f:e3:a8:dc:db:c0:35:60:00:19:7b:70:89:
                    9e:fe:fd:ff:b4:49:c9:61:ff:98:6d:5b:83:20:21:
                    b8:ef:7b:d4:5b:37:50:cf:c1:02:39:f5:4c:cf:43:
                    7f:e0:89:91:24:f7:8e:0f:78:ea:9c:72:99:2e:e7:
                    6a:8d:37:4d:85:c1:3d:c6:41:96:3f:74:32:cc:d8:
                    56:48:b6:ab:59:4e:44:c5:37:04:24:c9:9b:02:91:
                    71:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:7B:50:CD:9A:0F:D9:59:CF:5A:DF:AD:0A:B0:6A:16:9D:4C:C5:05
            X509v3 Authority Key Identifier:
                keyid:7C:E8:AF:BA:81:B9:A4:E0:B1:67:44:9B:4A:9C:A6:9B:88:73:C3:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/46c06455-15c0-4f3d-813b-c07bef78f025/0/7CE8AFBA81B9A4E0B167449B4A9CA69B8873C32C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CE8AFBA81B9A4E0B167449B4A9CA69B8873C32C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/46c06455-15c0-4f3d-813b-c07bef78f025/0/3130332e38332e3130302e302f32332d3234203d3e20313336303633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.83.100.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8b:f5:f7:c9:c9:12:5a:e3:1b:3c:68:eb:81:a5:e1:5e:67:30:
         84:eb:1e:28:d6:45:2c:70:37:a6:d2:ef:78:b4:29:df:b1:4d:
         7a:31:08:97:70:d7:e8:cd:e6:98:14:31:31:e9:b7:6d:0c:95:
         b0:b9:fd:17:be:11:97:23:78:22:1e:08:17:b5:41:7f:4c:e5:
         75:33:33:b6:14:8f:ba:bb:ff:0c:1a:21:aa:45:09:59:8e:4a:
         98:76:1e:cd:cc:25:82:ee:96:a2:31:4c:11:08:59:87:74:1b:
         42:72:27:af:2f:1b:47:bf:f1:b3:07:e8:cb:ae:f3:76:a8:ca:
         73:4e:e6:a7:3f:f1:59:35:5c:fc:2a:0c:91:2d:87:6c:95:2c:
         df:98:96:f8:39:bb:ed:14:09:08:98:54:3f:b0:76:c4:73:ef:
         9f:6a:47:68:e0:46:44:76:53:bf:3a:d1:e2:3e:8b:9f:61:5e:
         1d:f3:1e:f8:0e:b5:2e:6c:c5:2a:cb:1e:ad:f4:3f:e5:6f:d6:
         56:c8:e8:18:e1:42:e9:48:34:22:33:94:82:f4:a9:3e:07:5d:
         a9:52:4e:04:bc:01:27:2a:8a:15:3a:48:0b:d3:e4:dd:92:a8:
         46:5e:74:f8:af:0b:31:5a:0a:bc:c0:d9:5b:a0:92:e7:38:f3:
         f9:01:5d:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 12:04:17 2025 by rpki-client