Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/3130332e32392e352e302f32342d3234203d3e203338373533.roa
File:                     3130332e32392e352e302f32342d3234203d3e203338373533.roa (raw, json)
Hash identifier:          Gzil5h/RWqBAFpXoAA8mS6nklC4iLaAtX8kVa/PhqPs=
Subject key identifier:   E7:13:FC:75:5A:23:1B:E0:9E:8C:C6:11:C1:83:D7:93:C9:39:7F:B8
Certificate issuer:       /CN=11C9BA28534BA44999B4BA5D6B0F28E568DF6E14
Certificate serial:       0E4E30A3385EE6FD8B952F8FB01F01DF3B6C5F8F
Authority key identifier: 11:C9:BA:28:53:4B:A4:49:99:B4:BA:5D:6B:0F:28:E5:68:DF:6E:14
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/3130332e32392e352e302f32342d3234203d3e203338373533.roa
Signing time:             Fri 05 Sep 2025 06:00:01 +0000
ROA not before:           Fri 05 Sep 2025 05:55:01 +0000
ROA not after:            Fri 04 Sep 2026 06:00:01 +0000
asID:                     38753
IP address blocks:        103.29.5.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.crl
                          rsync://repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 10 Sep 2025 09:50:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:4e:30:a3:38:5e:e6:fd:8b:95:2f:8f:b0:1f:01:df:3b:6c:5f:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11C9BA28534BA44999B4BA5D6B0F28E568DF6E14
        Validity
            Not Before: Sep  5 05:55:01 2025 GMT
            Not After : Sep  4 06:00:01 2026 GMT
        Subject: CN=E713FC755A231BE09E8CC611C183D793C9397FB8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:2e:5c:c6:cc:15:64:55:e5:e7:01:3f:ac:f1:
                    ed:9e:70:da:5b:d3:f9:64:9b:45:1c:45:63:02:dc:
                    a6:28:38:db:2a:01:53:53:44:2c:21:6a:32:07:56:
                    56:70:e0:00:a1:40:9d:d8:a9:23:c0:3e:58:aa:e0:
                    22:4d:e4:e4:eb:de:56:9d:d4:f6:13:27:37:03:cd:
                    c6:b2:f2:11:a4:c5:a7:ad:0f:11:dd:0b:e4:a1:b2:
                    39:7e:4f:bf:f9:f4:79:44:49:63:b6:57:89:54:c1:
                    7a:b9:f4:f1:e8:3e:77:68:c6:44:57:18:c9:f8:0e:
                    cc:9c:93:46:1a:b0:5e:fa:39:ac:f3:81:09:f8:41:
                    d0:67:2b:bc:a2:d5:14:e5:da:d4:3b:86:2e:15:83:
                    9d:ad:5b:fc:84:a1:4c:83:f1:ac:8c:fc:2f:9c:10:
                    f3:09:37:81:ed:62:d1:f7:f9:ff:8b:43:38:46:d2:
                    80:af:b3:cd:bb:81:34:2f:5e:f9:83:18:2c:c2:a8:
                    34:07:1b:31:3f:57:19:0f:4f:3f:ec:46:d3:22:2c:
                    b9:df:2c:69:0e:8c:00:b0:7a:6d:01:42:35:b8:4f:
                    a7:ee:ba:82:8c:c9:5a:24:c7:74:15:83:f5:bc:d7:
                    76:d9:15:1f:36:61:b6:97:fa:be:7b:63:bd:ea:e5:
                    d5:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:13:FC:75:5A:23:1B:E0:9E:8C:C6:11:C1:83:D7:93:C9:39:7F:B8
            X509v3 Authority Key Identifier:
                keyid:11:C9:BA:28:53:4B:A4:49:99:B4:BA:5D:6B:0F:28:E5:68:DF:6E:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/3130332e32392e352e302f32342d3234203d3e203338373533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.29.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bd:92:74:f4:1d:fa:87:0d:f7:d8:15:46:4c:e8:c4:f5:d6:21:
         7f:d8:d8:3b:b5:39:12:6a:88:80:80:31:cb:0d:3e:fb:84:58:
         8f:b1:1f:00:92:f6:6c:86:e8:b3:79:e8:a2:f8:d1:48:e7:70:
         5a:2e:07:1b:23:6b:ba:a3:d3:ed:48:86:ec:4e:69:a8:d6:72:
         a4:8d:3e:0f:86:5e:df:99:c6:0f:fa:6e:0c:e8:96:e6:7c:84:
         7c:1c:32:d9:0f:58:87:2b:ed:10:d3:fa:4e:5c:0c:7d:bf:f7:
         8c:2d:29:42:19:a7:38:b6:25:77:84:94:d5:b6:8b:a9:17:5f:
         07:27:e4:cb:81:19:d5:3e:9b:38:40:67:9c:a0:b3:bb:37:da:
         71:6e:cf:16:5a:1e:1b:d1:d5:f1:ce:e3:74:25:9f:05:04:ae:
         08:83:cb:49:62:e2:48:00:c6:4f:2f:1f:10:50:fb:51:b0:5e:
         2c:e7:37:45:1a:77:3f:60:be:e5:26:ae:ce:c5:a1:c0:12:80:
         d1:ab:dd:7d:45:71:92:b5:b3:e8:59:29:cd:11:90:93:ed:40:
         e0:18:db:e9:91:11:ab:5f:68:a8:0d:30:02:36:70:8d:d8:8c:
         62:a2:94:18:a1:17:29:23:3c:11:7b:be:2c:85:a4:db:3d:1c:
         ec:e5:b4:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 09:35:54 2025 by rpki-client