Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/3130332e32342e37322e302f32342d3234203d3e203436303631.roa
File:                     3130332e32342e37322e302f32342d3234203d3e203436303631.roa (raw, json)
Hash identifier:          HbKwsuQgYC8kyv50M23w4h1WaGyYUtMgukyV/PzUlcs=
Subject key identifier:   2F:F2:5B:8E:36:59:98:E7:25:05:E5:7A:CE:B0:47:BE:D2:5B:1B:3D
Certificate issuer:       /CN=667078BDA093F84040F3016D179CABA67F68A647
Certificate serial:       599A7EE9D000E574209F9B4245A9BB5FD712FE56
Authority key identifier: 66:70:78:BD:A0:93:F8:40:40:F3:01:6D:17:9C:AB:A6:7F:68:A6:47
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/667078BDA093F84040F3016D179CABA67F68A647.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/3130332e32342e37322e302f32342d3234203d3e203436303631.roa
Signing time:             Wed 03 Sep 2025 16:00:03 +0000
ROA not before:           Wed 03 Sep 2025 15:55:03 +0000
ROA not after:            Wed 02 Sep 2026 16:00:03 +0000
asID:                     46061
IP address blocks:        103.24.72.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/667078BDA093F84040F3016D179CABA67F68A647.crl
                          rsync://repo-rpki.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/667078BDA093F84040F3016D179CABA67F68A647.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/667078BDA093F84040F3016D179CABA67F68A647.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Sep 2025 03:34:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:9a:7e:e9:d0:00:e5:74:20:9f:9b:42:45:a9:bb:5f:d7:12:fe:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=667078BDA093F84040F3016D179CABA67F68A647
        Validity
            Not Before: Sep  3 15:55:03 2025 GMT
            Not After : Sep  2 16:00:03 2026 GMT
        Subject: CN=2FF25B8E365998E72505E57ACEB047BED25B1B3D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:28:e5:54:47:31:6b:08:a5:89:1c:b8:c2:27:
                    aa:b1:2c:91:35:33:c4:94:d6:3f:83:a3:39:92:b8:
                    b3:5d:e6:b7:4d:79:b7:dd:02:53:da:85:9b:ae:87:
                    11:5c:75:1a:7c:45:83:cb:76:cb:6d:2f:5d:b0:52:
                    e7:05:ab:32:ae:4c:a0:34:be:b2:20:47:ee:69:29:
                    86:3f:63:32:9d:4d:df:eb:26:a6:ae:50:8d:d2:30:
                    55:71:d1:05:19:e6:37:b6:b3:5f:4f:60:8e:ce:15:
                    c1:18:b9:2a:57:c4:48:23:34:78:60:df:70:11:df:
                    57:3d:e5:4f:0f:6f:88:e9:6e:a7:e7:7e:c7:9e:a4:
                    b3:6f:fc:6a:99:b1:76:76:74:f1:27:87:b9:ea:77:
                    99:d0:a8:06:1c:80:51:1f:fd:0a:e0:ab:c5:5b:b7:
                    5e:2b:95:d4:57:b4:ea:75:7b:13:0a:3f:b3:c8:86:
                    94:27:e3:7c:f9:c5:73:94:9a:a1:43:9e:f9:8b:e2:
                    63:5b:2a:db:9e:b1:0f:1b:04:d2:fe:09:88:6c:14:
                    56:4f:3a:60:01:a5:59:a9:cb:ac:37:06:a1:29:e9:
                    e4:0a:5a:3c:d1:76:8e:83:f6:ab:9e:20:a6:c6:e0:
                    6b:f9:78:d0:aa:88:b4:02:1e:8f:30:58:c5:21:e5:
                    1c:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:F2:5B:8E:36:59:98:E7:25:05:E5:7A:CE:B0:47:BE:D2:5B:1B:3D
            X509v3 Authority Key Identifier:
                keyid:66:70:78:BD:A0:93:F8:40:40:F3:01:6D:17:9C:AB:A6:7F:68:A6:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/667078BDA093F84040F3016D179CABA67F68A647.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/667078BDA093F84040F3016D179CABA67F68A647.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/3130332e32342e37322e302f32342d3234203d3e203436303631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.24.72.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:5f:ce:cd:22:df:06:f4:f9:1f:89:d3:27:a8:55:51:45:1e:
         1f:1a:ff:5f:a5:47:43:7b:9f:1c:70:65:54:22:8d:3e:ef:af:
         e6:1b:2a:a7:85:7e:18:cf:0d:0f:1c:50:ff:4e:4b:22:e8:f3:
         bd:67:cf:e4:2a:2d:27:a6:bf:2b:57:4a:ef:4c:ea:ba:fd:e5:
         d4:c2:83:37:bf:4c:da:4e:c2:82:6e:ee:ef:e6:5b:af:5e:27:
         7d:82:eb:62:05:e4:6d:a5:7f:d8:f6:0e:df:ac:47:d9:46:13:
         c1:9c:23:40:0c:e0:dc:b3:3c:01:ff:22:ed:16:57:36:40:dd:
         43:dd:2d:8d:54:52:9a:58:26:59:c4:45:75:24:ec:ac:e1:e3:
         ab:7f:52:f6:95:0a:c4:f4:85:42:90:2b:be:1b:f7:d2:9b:b7:
         28:c6:8b:c9:b3:82:42:42:6e:1e:23:ae:f7:2d:c9:16:1d:2d:
         e7:bd:30:79:0c:1c:dc:bf:9e:70:99:81:8d:ed:7c:e5:46:cf:
         9a:94:b8:e5:e9:54:35:28:83:75:1d:3f:b0:25:9a:c9:b1:70:
         9d:ab:47:d1:d3:eb:ea:39:aa:3f:d5:cd:87:57:c6:86:4f:03:
         c7:9b:b5:3a:dc:e5:92:45:7a:28:d6:72:d9:15:a9:23:41:7a:
         1a:da:3d:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 09:30:31 2025 by rpki-client