Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/3130332e31392e3137392e302f32342d3234203d3e20313332363437.roa
File:                     3130332e31392e3137392e302f32342d3234203d3e20313332363437.roa (raw, json)
Hash identifier:          MtiwOPRjzKh8TAh6x51imM/Vbo/YwNmBGuNUEh5cML4=
Subject key identifier:   2F:F4:63:16:F9:D3:80:70:29:73:D1:1D:D2:96:1F:BE:C5:1F:7E:48
Certificate issuer:       /CN=EC9D9872A710FE713DC62241D587703BDF7DC1D6
Certificate serial:       6D0F62B91ACD3B7A6A7EDFF3D47C76EFA50E1FB6
Authority key identifier: EC:9D:98:72:A7:10:FE:71:3D:C6:22:41:D5:87:70:3B:DF:7D:C1:D6
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC9D9872A710FE713DC62241D587703BDF7DC1D6.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/3130332e31392e3137392e302f32342d3234203d3e20313332363437.roa
Signing time:             Mon 22 Sep 2025 02:45:59 +0000
ROA not before:           Mon 22 Sep 2025 02:40:59 +0000
ROA not after:            Mon 21 Sep 2026 02:45:59 +0000
asID:                     132647
IP address blocks:        103.19.179.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/EC9D9872A710FE713DC62241D587703BDF7DC1D6.crl
                          rsync://repo-rpki.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/EC9D9872A710FE713DC62241D587703BDF7DC1D6.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC9D9872A710FE713DC62241D587703BDF7DC1D6.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Oct 2025 06:40:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:0f:62:b9:1a:cd:3b:7a:6a:7e:df:f3:d4:7c:76:ef:a5:0e:1f:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC9D9872A710FE713DC62241D587703BDF7DC1D6
        Validity
            Not Before: Sep 22 02:40:59 2025 GMT
            Not After : Sep 21 02:45:59 2026 GMT
        Subject: CN=2FF46316F9D380702973D11DD2961FBEC51F7E48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:7a:6d:04:bd:04:06:a1:49:17:67:9c:f1:6c:
                    53:d9:54:39:5c:63:69:e9:eb:73:63:22:89:d8:13:
                    6a:4f:5f:93:87:5f:c6:d1:03:12:45:d7:95:95:85:
                    48:a4:8f:97:19:3d:28:bf:3e:9b:a6:33:f1:e1:b7:
                    08:8c:25:d7:19:8b:b0:0e:4c:35:e8:29:2b:e4:67:
                    ca:f6:db:fd:b9:ef:45:77:61:5c:9f:fd:41:ac:01:
                    c4:8f:89:bd:03:0e:6a:6f:fd:11:fd:63:2d:52:f5:
                    4c:1a:35:8b:be:d9:d5:3d:12:3e:87:c6:c0:a5:e0:
                    36:73:b7:51:db:af:16:24:e8:62:6b:c7:9c:08:1a:
                    4c:5e:bf:35:c8:af:fd:46:65:ef:db:7b:79:64:fa:
                    90:dd:39:df:62:73:03:d9:da:04:da:8d:16:26:8d:
                    3a:a9:32:97:1e:a5:57:00:8d:31:a2:9c:94:1f:ad:
                    ef:21:47:66:be:cd:66:ae:6a:0e:e7:e1:43:12:10:
                    fa:72:eb:f7:ac:ec:99:bd:d5:c1:66:ff:ba:7c:d3:
                    67:cb:4b:29:70:ce:9c:a0:d4:c5:e1:23:f4:0c:c1:
                    81:d1:90:39:db:38:7e:38:2b:0d:85:54:25:d9:2f:
                    a2:49:61:c5:92:6c:34:8f:ab:e2:e4:35:07:3c:24:
                    9c:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:F4:63:16:F9:D3:80:70:29:73:D1:1D:D2:96:1F:BE:C5:1F:7E:48
            X509v3 Authority Key Identifier:
                keyid:EC:9D:98:72:A7:10:FE:71:3D:C6:22:41:D5:87:70:3B:DF:7D:C1:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/EC9D9872A710FE713DC62241D587703BDF7DC1D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC9D9872A710FE713DC62241D587703BDF7DC1D6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/3130332e31392e3137392e302f32342d3234203d3e20313332363437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.19.179.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:9e:13:a8:03:a7:ec:de:ba:b9:50:14:18:c5:94:99:53:22:
         88:c3:e8:71:1a:b9:c1:84:58:ba:87:0a:44:da:45:5f:51:5d:
         4d:2e:74:0f:89:fa:c6:f7:43:df:32:a8:e6:ba:15:fe:5f:39:
         d0:44:1d:65:d8:99:ed:02:46:a6:43:32:09:8d:e3:f8:5e:a8:
         f2:35:05:16:88:55:70:f4:af:b4:b8:99:d4:bf:85:28:8a:16:
         eb:a4:26:35:3e:3a:00:b9:d0:b0:82:42:c2:ca:10:22:74:cc:
         77:e9:9b:5b:e6:b0:b3:d7:d9:4c:e1:91:5b:66:63:b2:4b:ee:
         c2:ab:7b:70:5e:31:14:4d:68:fa:88:b0:89:95:ae:ba:fd:e9:
         8a:db:92:88:9a:16:28:3f:79:d2:8e:87:e4:0f:fe:59:2c:8f:
         cc:35:c5:65:62:b0:da:74:22:0d:36:8d:09:4c:a3:fb:ca:52:
         b1:da:58:94:47:cf:6c:c2:cf:28:bd:e6:d5:08:b1:d8:38:76:
         f8:79:95:f3:a9:a1:82:9d:9e:77:a1:fa:ac:a4:c4:74:f1:f0:
         76:5f:1c:32:67:d6:16:eb:90:13:76:32:c6:f4:2e:61:50:0a:
         89:4b:df:c1:56:d8:e5:ef:61:84:77:d0:14:4d:80:42:49:96:
         23:6a:89:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 19:51:19 2025 by rpki-client