Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/95ec6cf8-9655-4379-bf36-37271438d03a/0/3130332e36312e31362e302f32342d3234203d3e20313530353039.roa
File:                     3130332e36312e31362e302f32342d3234203d3e20313530353039.roa (raw, json)
Hash identifier:          0YLohf/ggkakqxRaRFVJUp8vfmU0YPLjnkvCoTzlI1g=
Subject key identifier:   A3:04:93:E9:F4:30:9A:02:D4:E5:52:48:D7:86:3D:05:8B:00:2B:D0
Certificate issuer:       /CN=7CA2524C6D82550B5D21C13182BD9CC0214433F4
Certificate serial:       4148829CD4F233B12F2C191593AA5A59102AF890
Authority key identifier: 7C:A2:52:4C:6D:82:55:0B:5D:21:C1:31:82:BD:9C:C0:21:44:33:F4
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CA2524C6D82550B5D21C13182BD9CC0214433F4.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/95ec6cf8-9655-4379-bf36-37271438d03a/0/3130332e36312e31362e302f32342d3234203d3e20313530353039.roa
Signing time:             Thu 05 Jun 2025 11:34:47 +0000
ROA not before:           Thu 05 Jun 2025 11:29:47 +0000
ROA not after:            Thu 04 Jun 2026 11:34:47 +0000
asID:                     150509
IP address blocks:        103.61.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/95ec6cf8-9655-4379-bf36-37271438d03a/0/7CA2524C6D82550B5D21C13182BD9CC0214433F4.crl
                          rsync://repo-rpki.idnic.net/repo/95ec6cf8-9655-4379-bf36-37271438d03a/0/7CA2524C6D82550B5D21C13182BD9CC0214433F4.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CA2524C6D82550B5D21C13182BD9CC0214433F4.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Jun 2025 15:32:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:48:82:9c:d4:f2:33:b1:2f:2c:19:15:93:aa:5a:59:10:2a:f8:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CA2524C6D82550B5D21C13182BD9CC0214433F4
        Validity
            Not Before: Jun  5 11:29:47 2025 GMT
            Not After : Jun  4 11:34:47 2026 GMT
        Subject: CN=A30493E9F4309A02D4E55248D7863D058B002BD0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:e9:79:73:e6:bc:4f:19:ab:0e:43:ee:48:3a:
                    ec:ec:cf:73:a0:24:23:27:de:37:95:b8:e6:55:a8:
                    f7:13:e0:2f:db:7b:5d:42:b0:ce:d0:bb:77:81:9c:
                    93:f2:14:54:03:1f:62:00:6a:c5:7f:2c:f6:78:7d:
                    3d:50:e0:f8:cd:e6:aa:13:57:ef:0e:1c:c8:ee:66:
                    ce:73:44:40:a3:53:dc:76:17:7d:21:d2:6c:e7:8e:
                    95:24:fc:8f:c4:a1:87:a6:c7:8d:5d:1d:cc:4f:cc:
                    1c:30:95:96:cd:55:3d:08:c2:3f:f8:b1:97:fb:f9:
                    fd:b9:de:e0:27:b4:0f:9c:a7:03:10:35:1c:9b:be:
                    b2:79:1b:c8:6c:e0:b4:62:f4:02:5c:d7:5a:ba:51:
                    7c:1c:a8:28:32:f5:9e:ea:80:16:81:55:37:c3:b4:
                    67:9f:c7:12:30:31:43:fd:1b:36:82:01:fb:14:c1:
                    57:21:e8:ae:65:7e:46:f1:1e:e8:35:04:9c:16:05:
                    91:55:eb:92:6d:af:b4:9c:8c:06:ab:8b:6c:f7:2f:
                    7e:d4:ec:8e:7a:68:77:14:85:f0:e8:e5:2c:af:60:
                    bb:79:ee:9e:e5:6e:aa:54:b0:b7:9a:09:b7:53:80:
                    45:4d:22:08:47:90:7d:b5:18:46:ff:8e:43:f4:9c:
                    39:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:04:93:E9:F4:30:9A:02:D4:E5:52:48:D7:86:3D:05:8B:00:2B:D0
            X509v3 Authority Key Identifier:
                keyid:7C:A2:52:4C:6D:82:55:0B:5D:21:C1:31:82:BD:9C:C0:21:44:33:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/95ec6cf8-9655-4379-bf36-37271438d03a/0/7CA2524C6D82550B5D21C13182BD9CC0214433F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CA2524C6D82550B5D21C13182BD9CC0214433F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/95ec6cf8-9655-4379-bf36-37271438d03a/0/3130332e36312e31362e302f32342d3234203d3e20313530353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.61.16.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:8c:e0:06:d4:e8:3f:ae:d3:09:d0:f3:0b:24:a8:d2:d2:01:
         e9:c1:ae:4a:4b:2f:99:81:cd:94:22:b7:fd:df:bf:02:7b:f1:
         e3:16:1e:03:dd:d1:a9:21:35:0a:50:f1:ef:4e:09:92:68:58:
         1a:27:aa:6b:eb:38:41:8d:74:53:69:77:0f:31:ee:ea:35:84:
         51:25:c2:a6:24:7d:cd:84:ab:0d:84:58:f4:e2:07:6f:9f:6c:
         40:ca:fa:52:97:44:b1:93:95:07:10:e4:17:5b:b6:5b:59:12:
         a4:ef:81:0e:db:31:86:3c:e0:d9:5b:02:c1:ac:c5:32:23:3d:
         bd:72:a6:db:b1:f8:55:4f:98:6c:b7:e1:00:a9:93:9d:c1:ff:
         b1:c7:4a:2a:94:c9:10:a2:86:6b:74:73:d2:04:c2:0e:ac:b9:
         aa:29:09:2a:ee:70:f2:bf:ac:81:f2:d9:71:04:34:ff:49:ce:
         8a:4b:01:8a:24:dd:c7:13:c1:03:0a:f0:fc:9c:1a:46:59:0f:
         cc:33:9f:b5:4d:95:d8:fc:d9:24:b1:59:c4:0d:0a:e5:15:3b:
         8c:d0:a0:5c:64:7c:e3:fa:56:3e:11:84:e3:f3:de:c0:eb:5c:
         40:54:ce:71:91:79:03:f6:72:c9:44:72:d7:67:2c:64:c7:98:
         37:83:fc:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 06:07:58 2025 by rpki-client