Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/95ec6cf8-9655-4379-bf36-37271438d03a/0/3130332e36312e31372e302f32342d3234203d3e20313530353039.roa
File:                     3130332e36312e31372e302f32342d3234203d3e20313530353039.roa (raw, json)
Hash identifier:          bUHS7zCDhqnhQezsrNXcG47gU9JfG5NQcO4U+4/bwQc=
Subject key identifier:   22:86:63:2F:08:49:D2:38:35:7B:02:03:4B:73:8C:31:C8:82:7D:67
Certificate issuer:       /CN=7CA2524C6D82550B5D21C13182BD9CC0214433F4
Certificate serial:       4C3D1FDDE552B047E49502C5ED3936474C3D7568
Authority key identifier: 7C:A2:52:4C:6D:82:55:0B:5D:21:C1:31:82:BD:9C:C0:21:44:33:F4
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CA2524C6D82550B5D21C13182BD9CC0214433F4.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/95ec6cf8-9655-4379-bf36-37271438d03a/0/3130332e36312e31372e302f32342d3234203d3e20313530353039.roa
Signing time:             Thu 05 Jun 2025 11:35:14 +0000
ROA not before:           Thu 05 Jun 2025 11:30:14 +0000
ROA not after:            Thu 04 Jun 2026 11:35:14 +0000
asID:                     150509
IP address blocks:        103.61.17.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/95ec6cf8-9655-4379-bf36-37271438d03a/0/7CA2524C6D82550B5D21C13182BD9CC0214433F4.crl
                          rsync://repo-rpki.idnic.net/repo/95ec6cf8-9655-4379-bf36-37271438d03a/0/7CA2524C6D82550B5D21C13182BD9CC0214433F4.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CA2524C6D82550B5D21C13182BD9CC0214433F4.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Jun 2025 15:32:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:3d:1f:dd:e5:52:b0:47:e4:95:02:c5:ed:39:36:47:4c:3d:75:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CA2524C6D82550B5D21C13182BD9CC0214433F4
        Validity
            Not Before: Jun  5 11:30:14 2025 GMT
            Not After : Jun  4 11:35:14 2026 GMT
        Subject: CN=2286632F0849D238357B02034B738C31C8827D67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:9a:07:57:af:c7:2e:76:4d:be:b1:93:a1:cb:
                    7a:33:6c:b4:5e:fe:16:ea:b4:2a:cf:01:ad:32:f7:
                    32:6d:87:4d:38:e4:b8:64:3b:08:30:e0:3b:80:00:
                    c6:36:7f:13:23:cf:b3:b3:55:2f:3e:7f:7b:9b:7c:
                    74:ee:a7:f1:18:52:78:d9:a7:d2:d9:32:6f:4d:c2:
                    2a:04:ef:49:f6:2e:3e:06:de:67:8c:60:8b:a3:ce:
                    ef:b9:93:bf:3e:27:a0:0c:45:6d:39:bd:9b:31:14:
                    74:71:9e:26:aa:b0:d2:83:83:a3:b6:3c:91:17:92:
                    c7:2a:8d:55:5d:f2:14:49:a1:b3:51:a3:13:04:7a:
                    c9:fc:97:9f:d2:1f:d9:ab:ba:bb:ec:2a:7c:a9:af:
                    c1:14:5a:16:83:7b:fd:bb:e4:b3:2d:9d:b2:d5:c8:
                    0b:45:46:04:b0:b7:81:46:dc:2b:a8:ba:1a:8b:7d:
                    f5:87:10:3d:99:15:1c:05:4c:15:ab:6b:75:ae:c0:
                    8e:d4:3a:ef:ad:56:8b:39:b5:a0:4d:76:72:81:02:
                    7b:a6:60:3c:9e:99:d3:73:77:08:9d:d5:a2:11:cc:
                    e1:ec:ee:35:63:e5:b4:cf:02:31:db:0c:dd:ce:32:
                    83:dd:5b:f7:0c:d8:78:82:98:85:3e:0c:88:c8:6f:
                    35:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:86:63:2F:08:49:D2:38:35:7B:02:03:4B:73:8C:31:C8:82:7D:67
            X509v3 Authority Key Identifier:
                keyid:7C:A2:52:4C:6D:82:55:0B:5D:21:C1:31:82:BD:9C:C0:21:44:33:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/95ec6cf8-9655-4379-bf36-37271438d03a/0/7CA2524C6D82550B5D21C13182BD9CC0214433F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CA2524C6D82550B5D21C13182BD9CC0214433F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/95ec6cf8-9655-4379-bf36-37271438d03a/0/3130332e36312e31372e302f32342d3234203d3e20313530353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.61.17.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:a8:8c:fc:14:88:08:35:c8:7e:6b:ac:e0:08:d0:c7:40:c6:
         8b:3f:35:aa:af:80:c4:34:b6:bf:55:8f:95:1e:38:9a:b0:fc:
         ff:54:5d:d9:e8:c2:50:72:de:73:39:13:63:89:90:d7:d4:cf:
         5d:7b:47:f5:ad:70:b2:c3:6a:e5:39:f3:26:3c:d7:23:b6:46:
         96:86:6e:54:9f:3a:1f:3e:80:f9:9b:37:3b:a6:7e:fc:44:9e:
         cf:54:ed:43:fa:bb:b6:f0:60:92:8c:19:6e:61:65:f5:8b:c0:
         46:1c:61:90:74:a0:cd:5a:74:1d:c7:81:73:57:1e:2a:cf:0d:
         9c:1d:b8:65:d1:b6:71:00:b4:c6:95:dd:c1:0f:6d:89:cb:eb:
         84:b1:82:c8:0e:e7:01:54:40:66:64:66:49:d8:c0:3c:42:bc:
         a5:5c:cd:82:6c:4f:0d:eb:54:b5:a1:60:a7:be:f6:fd:1a:2f:
         d6:46:58:e9:dd:6a:df:5a:fe:65:12:5d:39:7a:2a:91:ba:b4:
         0a:50:72:5b:31:18:a4:df:3a:33:67:a7:3f:cc:4b:31:e6:21:
         e0:c4:db:e5:0b:2b:d6:3a:3b:a0:09:8f:dd:e4:97:52:65:e9:
         e8:a6:72:93:fe:ba:4c:f5:a9:14:5d:25:97:f6:27:19:ae:7f:
         aa:a1:19:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 06:04:50 2025 by rpki-client