Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/3130332e3130352e37372e302f32342d3234203d3e203535363736.roa
File:                     3130332e3130352e37372e302f32342d3234203d3e203535363736.roa (raw, json)
Hash identifier:          /T3q0aKMlccwCqwpvQMGCHEcfpAgRAD32J67j3q+a2M=
Subject key identifier:   64:F9:5E:ED:F7:79:D9:2A:28:CE:DB:58:64:AE:25:57:EF:9E:6C:1A
Certificate issuer:       /CN=2993EFF92300988A33773DD8C4B502F74B907112
Certificate serial:       32BAB080536205BEADD8E1FEB199431373DE9B2D
Authority key identifier: 29:93:EF:F9:23:00:98:8A:33:77:3D:D8:C4:B5:02:F7:4B:90:71:12
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2993EFF92300988A33773DD8C4B502F74B907112.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/3130332e3130352e37372e302f32342d3234203d3e203535363736.roa
Signing time:             Wed 03 Sep 2025 11:00:00 +0000
ROA not before:           Wed 03 Sep 2025 10:55:00 +0000
ROA not after:            Wed 02 Sep 2026 11:00:00 +0000
asID:                     55676
IP address blocks:        103.105.77.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/2993EFF92300988A33773DD8C4B502F74B907112.crl
                          rsync://repo-rpki.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/2993EFF92300988A33773DD8C4B502F74B907112.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2993EFF92300988A33773DD8C4B502F74B907112.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Sep 2025 06:43:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:ba:b0:80:53:62:05:be:ad:d8:e1:fe:b1:99:43:13:73:de:9b:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2993EFF92300988A33773DD8C4B502F74B907112
        Validity
            Not Before: Sep  3 10:55:00 2025 GMT
            Not After : Sep  2 11:00:00 2026 GMT
        Subject: CN=64F95EEDF779D92A28CEDB5864AE2557EF9E6C1A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:68:95:30:6b:ff:9c:24:92:f3:a6:fb:a5:79:
                    93:7f:f4:39:5a:7b:47:d8:45:81:97:d1:eb:cd:64:
                    76:5f:36:b2:c8:3b:ed:2a:0c:66:10:5a:ee:b2:ff:
                    84:da:88:1a:bf:ae:9e:ba:2f:45:b8:c6:d3:77:9a:
                    d3:44:7e:6f:11:d1:73:28:2c:be:42:33:c4:4c:ab:
                    95:09:d7:4f:65:cd:ea:58:e6:bf:72:4b:9a:ea:5b:
                    94:4b:53:65:ff:42:b4:26:9e:a8:2f:c7:37:04:22:
                    54:18:36:76:d2:65:3d:03:fa:2d:b5:33:31:d9:6d:
                    bd:e2:75:4e:0f:fc:ba:2e:0c:f6:9f:ab:d6:8d:e9:
                    3c:ff:5f:05:25:11:b5:1f:19:9c:fd:fb:4a:c1:ad:
                    32:5e:bb:0e:cb:be:44:ae:df:6c:9f:7c:95:c5:71:
                    b7:f9:ef:a0:71:46:ed:d4:da:1e:5a:76:38:fd:a6:
                    50:eb:75:40:ad:41:6d:a2:da:98:a9:15:7d:ef:68:
                    46:94:70:e3:3e:76:74:dd:52:01:eb:4d:8a:16:1b:
                    f1:c7:8a:2f:29:e1:aa:f5:72:a3:fd:bc:74:f6:3a:
                    a7:b3:b0:67:ec:6c:f8:23:cd:e1:0a:00:3f:1c:4d:
                    6d:81:90:87:fa:ff:6c:d0:4e:09:9d:51:27:d7:cd:
                    f8:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:F9:5E:ED:F7:79:D9:2A:28:CE:DB:58:64:AE:25:57:EF:9E:6C:1A
            X509v3 Authority Key Identifier:
                keyid:29:93:EF:F9:23:00:98:8A:33:77:3D:D8:C4:B5:02:F7:4B:90:71:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/2993EFF92300988A33773DD8C4B502F74B907112.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2993EFF92300988A33773DD8C4B502F74B907112.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/3130332e3130352e37372e302f32342d3234203d3e203535363736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.105.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:cc:e6:e8:4e:92:8a:cd:42:6c:35:a3:6e:53:78:93:7a:09:
         5a:4e:42:d4:68:ac:be:5d:9b:09:ea:22:4a:d5:b3:9e:ed:cb:
         5c:ce:fe:a0:27:96:cf:dc:ac:df:ec:a8:ab:b1:ef:c1:aa:87:
         ce:f5:7f:d3:72:13:9c:d4:15:a4:66:7c:4a:f6:07:2b:37:98:
         52:9d:55:c7:46:02:81:cd:7a:b2:cf:fd:54:38:f7:97:9b:79:
         85:3c:b3:79:2f:7d:bd:a6:87:22:70:39:62:ea:0c:d9:db:93:
         97:50:c5:1a:e7:87:1a:67:8a:e4:b1:c2:0b:14:3e:c1:53:7d:
         0f:42:2b:e7:59:e4:39:ec:95:fb:7b:00:37:67:9f:84:c4:35:
         25:b3:e3:3c:cb:5c:c0:71:95:76:93:54:99:4d:29:a2:72:54:
         93:34:53:14:80:7d:95:65:83:e9:0f:d3:94:02:d6:af:5e:18:
         a3:68:a1:70:22:86:7b:5d:14:6e:7e:ab:ef:ef:89:fc:d6:9b:
         84:20:ab:5b:83:30:3c:28:dc:9a:53:a3:13:ea:03:ab:35:17:
         70:5f:08:95:8d:1a:57:25:ca:ed:36:35:65:48:76:62:bf:73:
         14:ae:57:fd:94:83:97:13:52:1d:1f:b8:e1:93:d8:47:56:db:
         8b:91:ed:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 10:43:32 2025 by rpki-client