Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/3130332e32342e37352e302f32342d3234203d3e203436303631.roa
File:                     3130332e32342e37352e302f32342d3234203d3e203436303631.roa (raw, json)
Hash identifier:          Ix+R/yfCu9YeIQiklNVMKU4ccTsIM4M8qCqs+sb4ZL0=
Subject key identifier:   2B:C9:27:C9:24:78:4F:DD:55:05:00:31:06:3A:F4:17:E9:C0:73:4B
Certificate issuer:       /CN=667078BDA093F84040F3016D179CABA67F68A647
Certificate serial:       61DF4AADE6C9A9FC9055C15207DF78D95FB163F7
Authority key identifier: 66:70:78:BD:A0:93:F8:40:40:F3:01:6D:17:9C:AB:A6:7F:68:A6:47
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/667078BDA093F84040F3016D179CABA67F68A647.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/3130332e32342e37352e302f32342d3234203d3e203436303631.roa
Signing time:             Wed 03 Sep 2025 15:00:02 +0000
ROA not before:           Wed 03 Sep 2025 14:55:02 +0000
ROA not after:            Wed 02 Sep 2026 15:00:02 +0000
asID:                     46061
IP address blocks:        103.24.75.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/667078BDA093F84040F3016D179CABA67F68A647.crl
                          rsync://repo-rpki.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/667078BDA093F84040F3016D179CABA67F68A647.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/667078BDA093F84040F3016D179CABA67F68A647.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Sep 2025 03:34:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:df:4a:ad:e6:c9:a9:fc:90:55:c1:52:07:df:78:d9:5f:b1:63:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=667078BDA093F84040F3016D179CABA67F68A647
        Validity
            Not Before: Sep  3 14:55:02 2025 GMT
            Not After : Sep  2 15:00:02 2026 GMT
        Subject: CN=2BC927C924784FDD55050031063AF417E9C0734B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b9:42:04:32:ba:67:69:5e:a3:36:e6:33:ce:
                    c5:3f:78:bc:2d:c0:86:0d:a4:8f:4b:bd:c9:a3:f8:
                    78:06:f5:db:f1:b1:8a:a6:72:1a:1e:b3:bd:e4:cd:
                    74:23:38:7d:d3:fb:18:f7:24:be:e8:e3:89:14:27:
                    ca:ba:51:06:67:a8:58:97:ea:4e:a4:6e:85:5f:40:
                    fe:db:2e:cb:f1:d0:10:c0:4d:23:4f:a2:b8:c7:a3:
                    f3:81:a1:3e:f1:b8:a6:a1:59:1c:ea:da:33:42:a7:
                    95:f9:7f:fc:10:d8:18:54:30:f4:13:87:c2:81:85:
                    d0:c5:22:ae:cd:ae:b2:7c:45:21:1a:13:25:04:96:
                    f0:92:7e:79:c4:41:58:64:90:ca:0d:6d:22:92:9d:
                    6a:bf:a7:fa:61:45:31:f4:3d:b2:03:33:32:7e:5f:
                    40:d2:c3:ce:b8:cc:0b:a2:87:d3:94:8f:20:e4:9d:
                    64:cb:09:45:8d:6f:1a:fd:76:96:54:65:ad:b9:18:
                    15:c8:8d:f3:6d:ca:61:28:18:f8:88:8b:d0:72:cd:
                    28:e7:7a:08:7e:09:a6:6c:f1:bd:5f:78:23:a0:de:
                    e4:3d:de:89:94:9e:8b:16:d7:24:2e:c4:1a:1e:51:
                    88:25:92:96:7c:04:49:f0:f0:12:6d:d3:68:73:48:
                    63:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:C9:27:C9:24:78:4F:DD:55:05:00:31:06:3A:F4:17:E9:C0:73:4B
            X509v3 Authority Key Identifier:
                keyid:66:70:78:BD:A0:93:F8:40:40:F3:01:6D:17:9C:AB:A6:7F:68:A6:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/667078BDA093F84040F3016D179CABA67F68A647.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/667078BDA093F84040F3016D179CABA67F68A647.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/3130332e32342e37352e302f32342d3234203d3e203436303631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.24.75.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:d3:4a:0e:93:31:e6:de:51:00:f7:5f:1b:fe:34:9f:55:0a:
         c1:8e:69:e3:00:3b:79:ed:db:58:66:fe:b6:47:ce:ac:16:1f:
         5e:e8:4b:05:61:ed:02:ca:1d:a3:17:b4:2e:a0:4f:14:5c:20:
         08:9a:3c:23:03:6e:5c:da:bb:8d:66:0a:6b:b7:30:ac:f2:d1:
         12:42:7e:59:46:30:8d:9a:45:6e:57:be:7d:91:66:18:95:d5:
         95:20:6b:a4:6e:7c:c0:d9:63:74:33:95:87:68:49:5a:14:c5:
         62:67:f8:9a:93:ed:df:16:90:0b:2a:d8:89:08:ba:42:93:f0:
         f9:b7:75:ee:c3:3f:b2:22:8a:4d:aa:30:8a:0c:6c:9a:a2:e0:
         04:d7:65:4f:96:17:f8:20:ff:b5:06:40:70:af:ff:0b:06:57:
         45:b3:17:35:fc:36:ce:c3:a8:9e:d4:53:24:28:7e:b8:99:0c:
         f1:54:31:55:37:01:1e:6d:58:51:04:fa:51:b6:00:e6:8e:b2:
         ae:04:b2:9f:8a:49:1b:03:49:1a:0e:e6:e8:26:e4:41:a2:c3:
         3e:0b:07:2a:54:06:b3:ea:05:b0:e8:a8:67:41:36:38:1a:44:
         de:64:5d:e2:66:d7:82:fb:f8:2e:7b:2e:0f:53:ed:b3:90:5d:
         43:e8:9a:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 12:14:47 2025 by rpki-client