Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/3130332e34392e32392e302f32342d3234203d3e203633383632.roa
File:                     3130332e34392e32392e302f32342d3234203d3e203633383632.roa (raw, json)
Hash identifier:          30F4ZCW17S7UiR04g4PJbkgorb4jv9z7nexloi8E1NQ=
Subject key identifier:   B1:83:F3:FA:F6:00:A6:2C:96:F4:E1:22:6B:CC:E6:22:FE:FE:46:58
Certificate issuer:       /CN=764B23EB6C63FFCAA305F37DBE9B904AE01D60C9
Certificate serial:       04EA10580150A8096F38B0220F4D75851026A6BE
Authority key identifier: 76:4B:23:EB:6C:63:FF:CA:A3:05:F3:7D:BE:9B:90:4A:E0:1D:60:C9
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/764B23EB6C63FFCAA305F37DBE9B904AE01D60C9.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/3130332e34392e32392e302f32342d3234203d3e203633383632.roa
Signing time:             Mon 02 Jun 2025 02:05:04 +0000
ROA not before:           Mon 02 Jun 2025 02:00:04 +0000
ROA not after:            Mon 01 Jun 2026 02:05:04 +0000
asID:                     63862
IP address blocks:        103.49.29.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/764B23EB6C63FFCAA305F37DBE9B904AE01D60C9.crl
                          rsync://repo-rpki.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/764B23EB6C63FFCAA305F37DBE9B904AE01D60C9.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/764B23EB6C63FFCAA305F37DBE9B904AE01D60C9.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Jun 2025 01:20:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:ea:10:58:01:50:a8:09:6f:38:b0:22:0f:4d:75:85:10:26:a6:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=764B23EB6C63FFCAA305F37DBE9B904AE01D60C9
        Validity
            Not Before: Jun  2 02:00:04 2025 GMT
            Not After : Jun  1 02:05:04 2026 GMT
        Subject: CN=B183F3FAF600A62C96F4E1226BCCE622FEFE4658
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:b0:ec:f1:39:24:6c:5f:a3:04:c3:b2:2e:cf:
                    c4:f7:f5:04:ed:de:dc:5a:bb:bf:d0:1c:2b:1d:de:
                    72:ba:a5:1a:6d:a3:db:11:0d:87:cb:ac:6a:d0:27:
                    e4:2a:42:4d:26:17:de:8e:c4:aa:9d:d8:a7:6a:c0:
                    f0:9d:ea:c5:66:8e:6f:e9:6d:c9:90:8e:3e:b4:12:
                    00:5e:2a:fd:ef:1d:1f:8f:bf:66:cc:30:3e:f9:4d:
                    17:09:05:45:00:c4:76:24:c1:3e:f9:1e:08:31:bf:
                    00:4d:57:c8:6d:6a:17:fb:95:16:73:e5:60:01:ec:
                    a2:92:20:fa:b8:36:d7:9c:bd:9d:8e:50:83:15:30:
                    ca:83:bb:60:b4:5d:7e:3f:13:36:ef:7f:91:97:20:
                    db:d3:af:d8:6c:f4:81:04:7d:57:9c:b9:76:ff:33:
                    87:20:af:bb:38:d1:8c:28:31:0f:7e:4a:33:1c:0e:
                    6a:76:cf:dd:6a:78:98:e7:45:32:69:ce:c0:06:bf:
                    e7:f7:aa:a5:b2:40:1e:18:af:ef:6f:8f:21:ab:b1:
                    a4:ef:99:85:a6:d1:34:c7:06:cc:f0:6a:55:df:91:
                    e1:17:a5:a7:a7:04:89:30:75:23:3b:41:f2:9b:75:
                    2c:fa:cd:48:85:75:ae:2b:14:77:3c:b0:ab:0a:4b:
                    ef:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:83:F3:FA:F6:00:A6:2C:96:F4:E1:22:6B:CC:E6:22:FE:FE:46:58
            X509v3 Authority Key Identifier:
                keyid:76:4B:23:EB:6C:63:FF:CA:A3:05:F3:7D:BE:9B:90:4A:E0:1D:60:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/764B23EB6C63FFCAA305F37DBE9B904AE01D60C9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/764B23EB6C63FFCAA305F37DBE9B904AE01D60C9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/3130332e34392e32392e302f32342d3234203d3e203633383632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.49.29.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:8f:e2:a8:a4:34:74:85:ab:01:b6:60:79:37:ed:f7:50:96:
         03:1e:2b:f5:f7:36:50:71:4e:36:93:e8:d7:36:80:5e:9b:ee:
         62:d7:e0:95:6c:77:5a:8a:ae:90:d6:8d:66:87:0f:e9:3b:bd:
         c5:17:4e:41:8c:9c:52:95:fd:cf:07:5d:e5:12:3c:6d:e2:bc:
         94:c1:41:9a:c4:57:f4:dd:e3:3c:40:3f:78:a6:c4:e4:b6:fc:
         70:c9:b4:ff:18:13:02:af:ad:93:97:94:50:6a:0a:e1:cf:93:
         f3:be:94:ce:7d:53:39:2a:97:bd:f8:e9:9e:a4:c5:ed:44:59:
         4d:2d:c9:bc:38:78:1f:21:7c:1f:38:b8:c8:1b:cf:f3:79:c9:
         a1:a5:ef:68:6a:09:18:87:df:e4:1c:75:4b:9b:9f:7e:aa:e6:
         d4:4a:8f:15:b1:67:f7:02:86:06:f6:3d:a6:c2:b3:e0:83:78:
         0a:4f:50:8c:dc:10:6d:87:a6:90:79:aa:f7:1f:c3:56:31:d4:
         2f:f0:5a:b0:89:ff:09:95:49:e8:5d:79:ef:1e:e7:f9:e2:dd:
         5a:74:21:31:37:a3:75:94:5e:72:36:98:62:84:05:86:33:1a:
         dc:d2:72:3c:6c:72:24:64:72:11:9a:a0:a2:f0:cd:8a:05:ea:
         1d:5a:f4:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:28:07 2025 by rpki-client