Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/1dee126f-8192-4d28-b25e-deabdb79eb21/0/3130332e3139302e33302e302f32342d3234203d3e20313439383931.roa
File:                     3130332e3139302e33302e302f32342d3234203d3e20313439383931.roa (raw, json)
Hash identifier:          On7TkaewDfG3q672VhzDkhOW6Lq6Z1WuztT7xPC6+6E=
Subject key identifier:   18:75:09:F9:79:7E:D0:6E:5F:3C:3D:5C:24:4E:DA:11:18:1D:D8:AD
Certificate issuer:       /CN=146B42876A5C2AB0705F67F1A3918D76984989AF
Certificate serial:       0209BB7546D39840F7ED361EE44729FABFD6B081
Authority key identifier: 14:6B:42:87:6A:5C:2A:B0:70:5F:67:F1:A3:91:8D:76:98:49:89:AF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/146B42876A5C2AB0705F67F1A3918D76984989AF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/1dee126f-8192-4d28-b25e-deabdb79eb21/0/3130332e3139302e33302e302f32342d3234203d3e20313439383931.roa
Signing time:             Fri 30 May 2025 02:00:00 +0000
ROA not before:           Fri 30 May 2025 01:55:00 +0000
ROA not after:            Fri 29 May 2026 02:00:00 +0000
asID:                     149891
IP address blocks:        103.190.30.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/1dee126f-8192-4d28-b25e-deabdb79eb21/0/146B42876A5C2AB0705F67F1A3918D76984989AF.crl
                          rsync://repo-rpki.idnic.net/repo/1dee126f-8192-4d28-b25e-deabdb79eb21/0/146B42876A5C2AB0705F67F1A3918D76984989AF.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/146B42876A5C2AB0705F67F1A3918D76984989AF.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 11 Jun 2025 02:27:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:09:bb:75:46:d3:98:40:f7:ed:36:1e:e4:47:29:fa:bf:d6:b0:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=146B42876A5C2AB0705F67F1A3918D76984989AF
        Validity
            Not Before: May 30 01:55:00 2025 GMT
            Not After : May 29 02:00:00 2026 GMT
        Subject: CN=187509F9797ED06E5F3C3D5C244EDA11181DD8AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d2:fa:7b:1b:a0:53:99:14:46:b7:06:fb:09:
                    88:98:d8:aa:e2:8b:d5:dc:6f:50:70:bf:a6:7b:42:
                    a0:4d:67:02:3e:89:e7:21:97:d4:f7:4d:8a:4a:c5:
                    c6:cf:d1:a6:37:a5:15:1d:db:ea:9f:5e:ec:b6:c8:
                    21:29:62:54:43:a0:c6:f4:d8:06:1f:49:a3:55:52:
                    a0:2b:5e:9b:80:b8:68:ae:3a:0d:98:f4:b8:f7:5c:
                    80:9b:09:be:3e:6e:a9:9f:29:3d:c0:ba:87:97:d5:
                    aa:d6:ed:4a:a6:90:a2:bd:76:dc:fa:01:e2:7c:28:
                    78:c6:9d:ac:87:0d:de:0c:8a:39:10:60:5b:9f:5e:
                    9e:fe:fb:a1:11:3b:98:ce:0b:29:70:b9:0f:e0:89:
                    15:07:6f:25:e4:13:70:74:57:e1:6d:3b:af:1b:ab:
                    5c:d7:46:21:46:66:0b:bb:b3:2b:f8:82:18:c0:ce:
                    59:82:56:1d:5d:e6:30:cf:80:1e:6e:e2:d6:85:d5:
                    9e:2b:d7:3d:c1:9b:b3:52:a5:55:56:fc:92:0f:d4:
                    ab:be:11:fc:76:06:98:04:5a:42:11:30:57:0e:86:
                    c1:0d:b9:c2:e1:ba:3d:f9:6d:76:3a:a9:21:33:d6:
                    3c:79:08:4f:10:00:0d:51:71:35:61:12:4c:e4:8e:
                    93:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:75:09:F9:79:7E:D0:6E:5F:3C:3D:5C:24:4E:DA:11:18:1D:D8:AD
            X509v3 Authority Key Identifier:
                keyid:14:6B:42:87:6A:5C:2A:B0:70:5F:67:F1:A3:91:8D:76:98:49:89:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/1dee126f-8192-4d28-b25e-deabdb79eb21/0/146B42876A5C2AB0705F67F1A3918D76984989AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/146B42876A5C2AB0705F67F1A3918D76984989AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1dee126f-8192-4d28-b25e-deabdb79eb21/0/3130332e3139302e33302e302f32342d3234203d3e20313439383931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.190.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:4f:b5:24:33:3e:76:bd:8b:f5:5c:7d:70:71:6d:50:11:5e:
         d0:80:1e:8a:99:f9:ea:81:ab:63:cb:5b:6c:68:e3:3e:35:fe:
         77:e8:59:fb:f7:59:44:81:2a:c9:93:bb:80:37:6d:1f:84:08:
         32:cd:3a:40:fb:e2:ae:dd:f1:77:7c:7a:58:4a:d5:bf:8e:76:
         70:f0:4a:fa:97:1a:97:95:60:a1:37:a5:f5:f7:d2:ec:1d:35:
         e8:c1:e6:7e:e6:50:65:22:bf:5e:91:94:f1:63:73:fc:fa:61:
         ce:37:cd:57:fe:ac:69:c1:c8:33:bd:b9:71:f0:63:c0:66:e6:
         5c:a0:6d:0a:60:78:35:fb:fe:d4:2a:c8:69:3a:ab:da:8f:8b:
         b5:73:93:30:e7:2c:f5:ce:41:ca:9b:50:cf:24:09:35:66:22:
         6d:54:12:d1:ea:64:e4:c2:a1:99:9b:bb:cf:80:a2:eb:59:aa:
         d4:d1:2b:d4:bf:9e:8b:0b:95:4a:29:84:13:e7:be:4c:83:e5:
         e6:44:a5:c1:66:2c:7a:94:62:f0:bb:f5:56:8b:3d:5a:18:41:
         32:ed:8a:e4:c7:e1:e1:fb:6f:a2:52:87:e8:db:52:fc:a8:bc:
         8e:67:18:c1:d3:08:ed:29:12:d3:ee:80:27:18:8b:44:ba:a3:
         0d:75:98:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:25:08 2025 by rpki-client