Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/ca75b741-846a-4330-9659-05ffe82698ee/0/3130332e3134372e33302e302f32342d3234203d3e20313333383033.roa
File:                     3130332e3134372e33302e302f32342d3234203d3e20313333383033.roa (raw, json)
Hash identifier:          inn5/pTXe326JcI/eQLFFh0GJuSiHNACA3LyQlZzv0k=
Subject key identifier:   BB:FA:D6:22:FF:72:42:7F:FA:B8:F6:E7:7E:01:67:5B:57:5B:A2:87
Certificate issuer:       /CN=7FAD2077691F807236683910594F23BA68280CD9
Certificate serial:       596FD4CFCFA9B36B591803E4DD49D2F873E7DF64
Authority key identifier: 7F:AD:20:77:69:1F:80:72:36:68:39:10:59:4F:23:BA:68:28:0C:D9
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7FAD2077691F807236683910594F23BA68280CD9.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ca75b741-846a-4330-9659-05ffe82698ee/0/3130332e3134372e33302e302f32342d3234203d3e20313333383033.roa
Signing time:             Mon 02 Jun 2025 02:04:36 +0000
ROA not before:           Mon 02 Jun 2025 01:59:36 +0000
ROA not after:            Mon 01 Jun 2026 02:04:36 +0000
asID:                     133803
IP address blocks:        103.147.30.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ca75b741-846a-4330-9659-05ffe82698ee/0/7FAD2077691F807236683910594F23BA68280CD9.crl
                          rsync://repo-rpki.idnic.net/repo/ca75b741-846a-4330-9659-05ffe82698ee/0/7FAD2077691F807236683910594F23BA68280CD9.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7FAD2077691F807236683910594F23BA68280CD9.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Jun 2025 07:58:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:6f:d4:cf:cf:a9:b3:6b:59:18:03:e4:dd:49:d2:f8:73:e7:df:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7FAD2077691F807236683910594F23BA68280CD9
        Validity
            Not Before: Jun  2 01:59:36 2025 GMT
            Not After : Jun  1 02:04:36 2026 GMT
        Subject: CN=BBFAD622FF72427FFAB8F6E77E01675B575BA287
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:51:be:50:88:eb:50:db:11:00:4c:88:09:d1:
                    1d:c5:88:61:93:2c:ed:09:b3:10:3a:e1:f3:25:f4:
                    eb:80:30:96:36:21:2a:e3:37:bd:e3:79:1a:18:5f:
                    6f:0b:a7:1c:d1:0c:dd:60:ab:01:60:9b:7a:b8:61:
                    5a:9e:e4:56:1e:7b:3c:8e:96:7a:cd:5c:57:9c:78:
                    06:eb:f5:a7:a1:1b:89:83:d9:0d:8b:7c:75:21:6f:
                    7e:1f:c6:7f:e8:55:b6:b8:20:52:4a:4a:34:62:d5:
                    ce:36:1d:ee:b4:62:58:ce:ee:78:dc:d9:87:f6:e3:
                    f7:6c:9b:44:21:ee:2f:db:7c:a8:16:66:89:61:3d:
                    bd:78:20:72:f5:2b:29:88:93:3e:cd:49:b6:92:57:
                    48:c6:c6:b8:25:dc:d9:e1:e9:3c:e3:56:55:03:6b:
                    69:92:e1:46:d1:6d:7a:30:d0:73:83:30:ba:c1:0f:
                    02:a8:28:6a:ef:5d:80:12:fc:98:31:2a:1d:95:aa:
                    15:21:86:7c:ad:a8:2a:eb:be:a2:e7:ef:fe:7e:ac:
                    bf:44:ba:aa:f2:0d:7a:38:c4:7c:80:cc:6d:fe:d5:
                    21:08:a4:7c:c9:c8:72:fd:30:69:2d:52:aa:e3:40:
                    87:27:c4:be:b9:12:13:5f:c7:27:e1:d7:1d:2e:a4:
                    ce:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:FA:D6:22:FF:72:42:7F:FA:B8:F6:E7:7E:01:67:5B:57:5B:A2:87
            X509v3 Authority Key Identifier:
                keyid:7F:AD:20:77:69:1F:80:72:36:68:39:10:59:4F:23:BA:68:28:0C:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ca75b741-846a-4330-9659-05ffe82698ee/0/7FAD2077691F807236683910594F23BA68280CD9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7FAD2077691F807236683910594F23BA68280CD9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ca75b741-846a-4330-9659-05ffe82698ee/0/3130332e3134372e33302e302f32342d3234203d3e20313333383033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.147.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b9:cd:c6:2f:aa:cb:9b:98:3e:b0:f5:68:72:c0:99:0d:d1:49:
         a0:2b:a1:3e:0b:20:a8:77:8c:3c:4d:7c:b2:c1:98:ab:8f:39:
         2c:19:91:ae:70:55:2b:64:19:5f:f0:33:d9:35:db:f3:33:b1:
         61:64:03:68:ec:91:26:5a:4f:9f:7e:5c:c9:e1:1a:08:93:ce:
         07:a3:95:f4:7e:dc:23:47:12:1f:c1:53:bc:b2:4a:ee:8f:95:
         f9:42:0d:c3:98:c2:71:78:69:a9:bb:e0:1c:2d:eb:85:2f:dc:
         d6:f0:9e:c6:91:85:b5:9c:67:21:bd:a3:5b:ef:a7:31:a4:f1:
         49:ba:87:fa:e8:ab:a9:84:a9:5d:1b:a5:7f:ea:9e:8e:bc:7b:
         93:89:c9:bd:87:f5:e2:7d:6f:8d:6d:b8:0a:2d:a5:55:e9:92:
         09:e9:30:7f:2e:28:19:e9:e2:e9:99:d9:60:33:fa:7b:d7:cd:
         9e:85:54:ab:ba:9c:76:d8:5c:2e:d9:54:e8:da:7b:22:a8:7c:
         09:86:20:a6:9d:22:44:27:be:22:ff:48:38:6d:a1:91:fe:dc:
         4b:dc:90:be:8a:ae:bb:f0:0b:ee:14:4d:72:c9:2f:4a:af:8a:
         91:2d:df:ff:05:8e:4a:75:7a:bc:dd:92:22:e7:dd:01:f8:bb:
         59:8f:6e:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 19:17:51 2025 by rpki-client