Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/b883e3be-57e2-4125-a0c5-9a9ea501bf05/0/3130332e3131392e3233302e302f32342d3234203d3e203634333135.roa
File:                     3130332e3131392e3233302e302f32342d3234203d3e203634333135.roa (raw, json)
Hash identifier:          NUlokuFe9GARtT8KTw9qoKUuu+MeiOKu86jOn++3TJ0=
Subject key identifier:   10:C7:3A:16:67:0F:FF:E8:FD:91:20:50:BE:1B:8A:08:BC:C3:BE:F0
Certificate issuer:       /CN=90508FF980097E19CEF65ED72A856616A6F690AB
Certificate serial:       1264023B762D42F7A0701C1AD90EEB0E9748FA55
Authority key identifier: 90:50:8F:F9:80:09:7E:19:CE:F6:5E:D7:2A:85:66:16:A6:F6:90:AB
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90508FF980097E19CEF65ED72A856616A6F690AB.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/b883e3be-57e2-4125-a0c5-9a9ea501bf05/0/3130332e3131392e3233302e302f32342d3234203d3e203634333135.roa
Signing time:             Mon 02 Jun 2025 02:05:10 +0000
ROA not before:           Mon 02 Jun 2025 02:00:10 +0000
ROA not after:            Mon 01 Jun 2026 02:05:10 +0000
asID:                     64315
IP address blocks:        103.119.230.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/b883e3be-57e2-4125-a0c5-9a9ea501bf05/0/90508FF980097E19CEF65ED72A856616A6F690AB.crl
                          rsync://repo-rpki.idnic.net/repo/b883e3be-57e2-4125-a0c5-9a9ea501bf05/0/90508FF980097E19CEF65ED72A856616A6F690AB.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90508FF980097E19CEF65ED72A856616A6F690AB.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Jun 2025 23:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:64:02:3b:76:2d:42:f7:a0:70:1c:1a:d9:0e:eb:0e:97:48:fa:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90508FF980097E19CEF65ED72A856616A6F690AB
        Validity
            Not Before: Jun  2 02:00:10 2025 GMT
            Not After : Jun  1 02:05:10 2026 GMT
        Subject: CN=10C73A16670FFFE8FD912050BE1B8A08BCC3BEF0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:87:d8:ba:27:f0:a4:d8:58:a6:a7:d3:a5:de:
                    5b:2a:a8:b6:fb:cf:bd:e5:ef:1a:22:2b:b1:ac:0a:
                    bb:69:93:cb:50:e3:7f:18:d0:68:85:7b:d3:14:fa:
                    77:2b:ba:ea:f3:6e:92:f2:ea:20:2a:a2:10:c0:24:
                    b7:a9:20:60:b3:2c:61:c5:44:5e:60:69:14:ca:64:
                    af:17:f7:01:62:f1:de:e4:3b:8b:34:9f:53:45:d5:
                    e5:b1:1f:25:3b:9c:12:6b:60:44:e6:12:fb:f1:49:
                    74:9c:48:82:91:67:56:ce:26:d8:7c:5b:2f:ce:d7:
                    24:ab:49:13:eb:f4:c7:fd:eb:1b:da:53:2c:6d:9b:
                    a6:db:c3:a5:31:ec:5d:71:4e:41:c6:fe:bd:1f:34:
                    98:59:a8:0f:75:87:66:4e:84:3d:75:d1:5f:95:d8:
                    bb:58:b3:23:d2:81:ee:b3:b1:11:b3:ef:7b:d5:1e:
                    86:72:6c:fe:4f:2b:86:26:21:bd:17:7c:38:d8:93:
                    eb:4b:c2:00:b0:c3:8c:24:bf:24:2f:ff:47:2d:ec:
                    ff:1c:02:0b:68:4e:16:ee:63:84:1c:c1:a9:33:f1:
                    64:9c:42:21:0d:f6:9d:54:dd:28:50:90:8c:b8:39:
                    7a:e3:22:5d:57:1f:90:64:b6:7c:64:dc:1a:01:bf:
                    69:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:C7:3A:16:67:0F:FF:E8:FD:91:20:50:BE:1B:8A:08:BC:C3:BE:F0
            X509v3 Authority Key Identifier:
                keyid:90:50:8F:F9:80:09:7E:19:CE:F6:5E:D7:2A:85:66:16:A6:F6:90:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/b883e3be-57e2-4125-a0c5-9a9ea501bf05/0/90508FF980097E19CEF65ED72A856616A6F690AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90508FF980097E19CEF65ED72A856616A6F690AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b883e3be-57e2-4125-a0c5-9a9ea501bf05/0/3130332e3131392e3233302e302f32342d3234203d3e203634333135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.119.230.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:ef:2e:68:5c:5d:25:73:08:c3:94:7b:00:d0:5a:c5:c9:dc:
         ba:07:8d:95:ed:99:64:5a:de:6c:a1:12:cf:17:41:f9:4c:07:
         bc:a5:c5:aa:f2:89:95:7b:cd:b3:37:54:00:7e:d9:5b:d1:ac:
         66:9a:89:9d:c2:1b:8a:fd:c8:8e:c0:86:1d:67:f1:d9:74:80:
         08:15:c5:56:ab:f4:c0:90:b3:40:b9:ef:93:14:63:7d:eb:b6:
         89:85:2d:3e:d6:e2:36:e6:95:f4:0c:d2:1f:2f:4f:a4:9e:a4:
         e8:06:02:68:da:74:d9:40:6b:6b:b9:b8:32:f4:99:35:d6:fd:
         40:a8:f9:0e:9e:97:b1:8a:89:84:7d:09:f2:33:c9:aa:23:6e:
         ef:4b:8f:1c:67:13:2b:5f:aa:da:c1:3b:b3:8a:d8:55:2a:70:
         4a:01:dc:bd:40:f1:8c:c2:ef:9e:45:22:51:31:50:c3:f4:46:
         8c:94:49:21:c4:49:71:81:15:9b:9f:77:c2:4a:76:62:a5:82:
         bf:0a:84:86:d4:a2:bc:32:86:84:5e:1f:0d:14:39:a9:83:bf:
         94:7c:81:97:22:2b:26:75:6b:48:f6:4d:80:82:6d:68:a5:c1:
         c2:45:ff:7d:a6:c3:dd:cb:22:87:6a:6f:c0:02:f8:bb:45:0a:
         f8:14:5b:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:52:15 2025 by rpki-client