Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/3130332e34392e33312e302f32342d3234203d3e203633383632.roa
File:                     3130332e34392e33312e302f32342d3234203d3e203633383632.roa (raw, json)
Hash identifier:          qwHFJlzE75soHgkgF3RpDwO4DScSGg2bNwgpJLGwqV8=
Subject key identifier:   49:0D:60:B1:57:D8:96:4E:F9:34:6B:A5:FF:F4:3E:C3:1A:80:89:82
Certificate issuer:       /CN=764B23EB6C63FFCAA305F37DBE9B904AE01D60C9
Certificate serial:       7BBF71AEDEB7F9959B10578F543A97FBD8F89553
Authority key identifier: 76:4B:23:EB:6C:63:FF:CA:A3:05:F3:7D:BE:9B:90:4A:E0:1D:60:C9
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/764B23EB6C63FFCAA305F37DBE9B904AE01D60C9.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/3130332e34392e33312e302f32342d3234203d3e203633383632.roa
Signing time:             Mon 02 Jun 2025 02:05:05 +0000
ROA not before:           Mon 02 Jun 2025 02:00:05 +0000
ROA not after:            Mon 01 Jun 2026 02:05:05 +0000
asID:                     63862
IP address blocks:        103.49.31.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/764B23EB6C63FFCAA305F37DBE9B904AE01D60C9.crl
                          rsync://repo-rpki.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/764B23EB6C63FFCAA305F37DBE9B904AE01D60C9.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/764B23EB6C63FFCAA305F37DBE9B904AE01D60C9.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Jun 2025 03:57:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:bf:71:ae:de:b7:f9:95:9b:10:57:8f:54:3a:97:fb:d8:f8:95:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=764B23EB6C63FFCAA305F37DBE9B904AE01D60C9
        Validity
            Not Before: Jun  2 02:00:05 2025 GMT
            Not After : Jun  1 02:05:05 2026 GMT
        Subject: CN=490D60B157D8964EF9346BA5FFF43EC31A808982
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:7e:56:85:12:03:34:81:b8:5b:0c:9e:e7:45:
                    b3:4a:54:48:27:ae:4d:e0:f8:c3:9a:43:e0:af:e3:
                    af:ba:9d:25:5a:28:c1:ec:02:ea:e3:12:b7:b8:9c:
                    b1:b0:79:83:0a:05:7a:9b:cc:ab:3f:13:09:33:ea:
                    c3:32:6f:47:fe:d7:47:74:01:89:29:84:cf:3a:15:
                    da:98:c0:27:24:24:70:e7:bc:5e:22:36:04:d5:58:
                    be:d7:f6:b4:d6:4a:78:7c:30:08:e0:b0:51:ba:a3:
                    59:b2:c4:6c:6f:31:06:8f:b7:a0:f1:75:03:02:f1:
                    f5:70:ef:da:26:3b:97:cb:d3:81:db:b2:85:d6:d9:
                    e1:8e:58:50:de:65:c9:51:0b:87:16:08:c8:8c:bb:
                    19:0c:f1:cb:5f:e0:b5:42:8f:6c:02:40:5f:5b:78:
                    2f:7d:2c:81:98:d8:4b:b0:c5:dd:76:02:d3:40:41:
                    a7:ad:d4:0f:5e:59:94:a5:b8:5f:4e:52:f8:d7:9b:
                    9b:4f:cf:b1:46:89:e4:3e:a3:4a:3d:b7:71:58:e5:
                    1f:76:0c:9b:c5:c1:39:ce:db:38:9a:ab:c7:f4:70:
                    66:e5:d1:e8:d9:85:94:4f:9b:03:98:70:6f:3c:eb:
                    0f:1e:b1:4a:18:b1:cf:d6:1c:8e:c9:3d:a8:53:ea:
                    1d:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:0D:60:B1:57:D8:96:4E:F9:34:6B:A5:FF:F4:3E:C3:1A:80:89:82
            X509v3 Authority Key Identifier:
                keyid:76:4B:23:EB:6C:63:FF:CA:A3:05:F3:7D:BE:9B:90:4A:E0:1D:60:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/764B23EB6C63FFCAA305F37DBE9B904AE01D60C9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/764B23EB6C63FFCAA305F37DBE9B904AE01D60C9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/3130332e34392e33312e302f32342d3234203d3e203633383632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.49.31.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:11:0b:ac:33:5b:53:e6:0d:e9:35:f9:89:7c:92:a0:47:eb:
         91:91:ea:a4:2b:c5:f2:23:59:1c:6b:99:f0:92:5c:bd:ab:a6:
         46:10:b1:4f:c2:5d:c4:9b:53:54:96:af:c4:aa:95:58:90:21:
         86:20:f0:be:59:d1:d3:bd:27:3b:de:cf:84:8f:ba:d5:c7:f2:
         c0:a0:37:7a:4d:35:f3:f4:bd:3d:57:4a:e2:0c:5c:e7:0b:ba:
         aa:ed:59:56:0e:42:93:84:17:82:32:c2:d4:55:88:35:7c:4c:
         da:78:d7:91:07:4c:c2:3e:0e:87:98:bc:a0:e9:b9:68:62:97:
         39:84:27:90:53:99:ab:f6:a9:ac:9e:33:d1:86:55:b5:93:50:
         e9:2d:b3:70:b5:bd:d7:1f:84:b3:f6:f7:82:48:05:7a:79:3a:
         32:37:a2:f2:f8:b5:bb:4e:eb:0e:e2:61:ce:88:b6:c6:87:d2:
         5c:97:8c:15:90:c3:77:f2:ce:93:59:34:21:f5:63:23:82:9c:
         d5:eb:89:0f:da:d0:58:d8:bc:33:07:b0:e8:5d:0f:c4:89:54:
         3d:e8:4f:af:a2:2e:7a:0f:0a:eb:dd:95:93:a4:c7:88:d7:30:
         a7:62:84:d0:7f:aa:75:4c:2f:33:89:38:e1:7d:f1:a7:b7:80:
         b0:9e:33:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 06:13:14 2025 by rpki-client