Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/3130332e34392e33302e302f32342d3234203d3e203633383632.roa
File:                     3130332e34392e33302e302f32342d3234203d3e203633383632.roa (raw, json)
Hash identifier:          Zytgh6xk872eCWCODvRgqwCZiUirR+4sQkw++qo2eSI=
Subject key identifier:   37:AC:8B:65:D4:BA:18:91:85:B3:F0:99:FF:4E:DE:DF:B7:DA:82:A9
Certificate issuer:       /CN=764B23EB6C63FFCAA305F37DBE9B904AE01D60C9
Certificate serial:       7AF11BCF207ADD5906B637D3F7175EBE05398CC4
Authority key identifier: 76:4B:23:EB:6C:63:FF:CA:A3:05:F3:7D:BE:9B:90:4A:E0:1D:60:C9
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/764B23EB6C63FFCAA305F37DBE9B904AE01D60C9.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/3130332e34392e33302e302f32342d3234203d3e203633383632.roa
Signing time:             Mon 02 Jun 2025 02:05:04 +0000
ROA not before:           Mon 02 Jun 2025 02:00:04 +0000
ROA not after:            Mon 01 Jun 2026 02:05:04 +0000
asID:                     63862
IP address blocks:        103.49.30.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/764B23EB6C63FFCAA305F37DBE9B904AE01D60C9.crl
                          rsync://repo-rpki.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/764B23EB6C63FFCAA305F37DBE9B904AE01D60C9.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/764B23EB6C63FFCAA305F37DBE9B904AE01D60C9.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Jun 2025 01:20:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:f1:1b:cf:20:7a:dd:59:06:b6:37:d3:f7:17:5e:be:05:39:8c:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=764B23EB6C63FFCAA305F37DBE9B904AE01D60C9
        Validity
            Not Before: Jun  2 02:00:04 2025 GMT
            Not After : Jun  1 02:05:04 2026 GMT
        Subject: CN=37AC8B65D4BA189185B3F099FF4EDEDFB7DA82A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a0:ae:b5:7d:c6:4f:ed:bf:7a:43:2d:78:c2:
                    6e:fa:4e:ec:eb:cc:55:87:75:46:0f:75:9e:06:00:
                    ca:ff:f4:9d:ba:da:31:26:8a:4f:de:e0:f1:86:23:
                    04:de:13:22:56:e6:13:60:d4:56:11:e7:08:a6:d7:
                    bc:17:3b:0c:83:92:08:2c:46:a3:df:9a:66:84:36:
                    72:b8:e7:2e:0b:8a:2e:46:31:07:61:c7:4f:c6:c4:
                    39:51:c0:6e:e4:21:ee:df:6f:95:91:f2:bc:b9:5b:
                    d5:db:f2:2d:38:7e:5b:67:73:ba:4b:96:6d:9c:e0:
                    4c:41:48:e0:a2:d4:f8:7f:be:87:1d:68:54:e4:33:
                    5f:9a:a9:ab:c0:e4:0e:fc:1f:b1:88:82:fc:2d:9c:
                    03:84:98:86:24:9a:7c:46:2a:fe:f6:bf:bd:52:77:
                    e6:c1:12:84:ec:47:02:22:bf:e4:6e:e9:9c:4b:73:
                    b0:91:cf:b4:89:8d:8a:40:90:6a:e3:30:6c:60:62:
                    dc:23:1b:f8:6f:8d:a9:49:b9:fa:8b:7d:c4:01:bf:
                    be:60:ff:09:11:24:60:0d:4a:39:08:92:76:3a:8e:
                    f0:97:d2:ba:f8:bd:4f:df:c0:b4:8e:6e:18:b8:7d:
                    e6:e8:67:ac:be:62:1c:6b:77:f5:96:a4:a9:d1:1a:
                    46:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:AC:8B:65:D4:BA:18:91:85:B3:F0:99:FF:4E:DE:DF:B7:DA:82:A9
            X509v3 Authority Key Identifier:
                keyid:76:4B:23:EB:6C:63:FF:CA:A3:05:F3:7D:BE:9B:90:4A:E0:1D:60:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/764B23EB6C63FFCAA305F37DBE9B904AE01D60C9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/764B23EB6C63FFCAA305F37DBE9B904AE01D60C9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/3130332e34392e33302e302f32342d3234203d3e203633383632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.49.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:69:5e:96:2b:ca:ac:f7:22:fa:d3:9e:8e:97:0f:4e:84:7a:
         0a:5a:fd:0a:cd:a1:7f:57:db:8d:fe:81:9e:da:e4:0a:57:9a:
         11:a4:e5:8e:1f:48:14:f3:92:04:88:60:8f:cb:a5:05:69:ae:
         ad:d4:42:84:21:ea:65:98:f7:41:12:4a:7b:97:a0:49:67:aa:
         b0:5e:1e:55:3e:a7:77:86:e6:51:b1:e8:27:b5:40:74:ca:d6:
         89:6e:18:d9:c2:9b:af:1f:b5:31:49:b4:74:09:04:15:03:e6:
         08:6b:dd:19:2b:f7:d1:20:4c:e7:cd:20:c5:9d:ce:03:22:9d:
         1f:75:b6:33:08:d8:01:ff:87:cc:9d:48:be:0f:aa:79:22:21:
         3a:25:42:6e:92:d0:1d:ad:15:67:fb:5b:02:2c:84:31:b3:c6:
         87:30:aa:f7:d7:70:3a:93:9b:0c:a5:b2:58:64:3f:38:a5:51:
         02:3d:54:5c:06:20:eb:59:1d:f9:87:8f:2c:5c:09:d7:ee:cc:
         46:33:08:24:5d:f3:f3:2e:dc:25:19:20:2c:c5:fb:53:3f:12:
         62:fc:6e:79:65:62:10:c4:36:fc:01:15:a3:18:9a:4c:7f:47:
         32:22:5c:71:26:3a:cf:4c:8f:b8:fa:9a:38:b6:02:64:d4:8a:
         c2:6e:b0:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 15:52:51 2025 by rpki-client