Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/d14a2a41-2838-4369-997b-4299f17eee90/0/3130332e3233302e38312e302f32342d3234203d3e20313530393631.roa
File:                     3130332e3233302e38312e302f32342d3234203d3e20313530393631.roa (raw, json)
Hash identifier:          BRyZcy7P9c9jO1spuL0mDoDN9aAC7pRi+y0OjtQk3Qc=
Subject key identifier:   42:F4:9C:8E:DB:72:17:41:77:B2:0E:AE:09:29:1F:C8:C3:D0:47:C6
Certificate issuer:       /CN=E025EB5354ADB573B451D02820EA68FD4CAE920A
Certificate serial:       77BBA375964A343C873CF20F6D2D4DFB49BECC50
Authority key identifier: E0:25:EB:53:54:AD:B5:73:B4:51:D0:28:20:EA:68:FD:4C:AE:92:0A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E025EB5354ADB573B451D02820EA68FD4CAE920A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d14a2a41-2838-4369-997b-4299f17eee90/0/3130332e3233302e38312e302f32342d3234203d3e20313530393631.roa
Signing time:             Wed 30 Apr 2025 02:00:01 +0000
ROA not before:           Wed 30 Apr 2025 01:55:01 +0000
ROA not after:            Wed 29 Apr 2026 02:00:01 +0000
asID:                     150961
IP address blocks:        103.230.81.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d14a2a41-2838-4369-997b-4299f17eee90/0/E025EB5354ADB573B451D02820EA68FD4CAE920A.crl
                          rsync://repo-rpki.idnic.net/repo/d14a2a41-2838-4369-997b-4299f17eee90/0/E025EB5354ADB573B451D02820EA68FD4CAE920A.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E025EB5354ADB573B451D02820EA68FD4CAE920A.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Jun 2025 09:16:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:bb:a3:75:96:4a:34:3c:87:3c:f2:0f:6d:2d:4d:fb:49:be:cc:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E025EB5354ADB573B451D02820EA68FD4CAE920A
        Validity
            Not Before: Apr 30 01:55:01 2025 GMT
            Not After : Apr 29 02:00:01 2026 GMT
        Subject: CN=42F49C8EDB72174177B20EAE09291FC8C3D047C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:6d:2e:fd:84:aa:53:cd:ee:31:bb:c9:41:0a:
                    ae:95:a2:6b:1c:50:a0:52:1c:d2:78:6c:79:01:a6:
                    1e:67:d5:e1:e2:87:d5:11:c1:c4:ff:ca:93:94:03:
                    b2:a9:a5:77:e9:55:a8:80:dd:ec:a1:16:1f:bc:90:
                    70:f2:21:b9:11:2c:0a:f7:0c:3f:8f:6d:64:d8:d7:
                    ba:d9:ca:1f:4d:4a:ac:1d:5a:e1:e3:76:55:50:05:
                    ab:a7:6e:ac:ce:0b:ea:a3:08:d8:3c:44:c3:db:f0:
                    70:38:82:e0:05:01:0b:3f:10:b3:0d:28:72:56:d7:
                    24:d5:f0:8a:3e:b4:f5:da:17:51:ee:50:d3:c1:2f:
                    6f:6c:cb:de:10:73:cb:50:12:1b:fc:26:76:83:cc:
                    e9:14:cd:74:d8:19:53:96:99:90:83:39:b0:39:54:
                    1f:3b:1c:2a:d3:9f:9f:60:3a:99:5e:14:7d:56:5c:
                    e9:a7:b1:00:1a:1d:84:42:16:13:a8:b6:67:71:d1:
                    02:b8:f7:0c:17:0a:e8:ec:f0:14:65:f8:7c:62:cf:
                    c2:9f:46:a1:4e:e5:4f:3d:28:d4:fe:b2:20:a8:e4:
                    5f:6c:48:cd:69:40:f2:93:e4:20:56:58:f4:a0:cc:
                    0a:69:50:e1:78:ad:1c:37:25:b2:b6:51:5c:37:f0:
                    24:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:F4:9C:8E:DB:72:17:41:77:B2:0E:AE:09:29:1F:C8:C3:D0:47:C6
            X509v3 Authority Key Identifier:
                keyid:E0:25:EB:53:54:AD:B5:73:B4:51:D0:28:20:EA:68:FD:4C:AE:92:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d14a2a41-2838-4369-997b-4299f17eee90/0/E025EB5354ADB573B451D02820EA68FD4CAE920A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E025EB5354ADB573B451D02820EA68FD4CAE920A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d14a2a41-2838-4369-997b-4299f17eee90/0/3130332e3233302e38312e302f32342d3234203d3e20313530393631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.230.81.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:c7:c8:de:4d:7e:65:6c:41:8a:78:ce:d7:46:77:56:f6:2c:
         ac:3a:cf:18:db:f9:5e:00:fa:28:a0:1c:b6:08:82:32:df:40:
         84:9c:d9:0e:b8:a6:07:0e:12:67:ff:55:64:6c:41:c6:b7:ee:
         4b:b9:c8:91:16:ca:4b:72:ba:38:17:9c:d6:33:2f:02:ee:dc:
         93:6b:20:7f:6e:32:e8:ff:c1:6f:1d:67:03:30:68:be:08:61:
         c6:39:37:a6:83:a3:d6:db:a9:af:ed:51:8d:be:3c:5f:24:ab:
         80:5f:9d:5a:51:0e:74:b1:36:47:dc:91:4e:58:5b:ca:0a:4f:
         d2:9a:4e:3e:4b:d8:bb:71:4a:92:db:51:5c:80:18:93:c7:2a:
         22:a3:3e:57:c0:95:aa:f7:f6:1f:9e:c5:f7:84:5a:eb:05:d9:
         80:da:1e:11:50:f7:8d:8b:df:69:82:8c:09:29:14:69:e0:37:
         1f:b7:ac:43:83:56:aa:7b:7d:68:95:c3:77:6f:66:d5:79:f0:
         0c:3b:be:11:e5:54:c5:39:ce:ff:80:ed:e6:d1:27:b9:20:1d:
         97:73:a1:51:56:8c:7f:70:ea:c8:93:09:41:72:da:f5:ee:21:
         78:ed:1d:43:9a:63:df:64:be:db:b4:10:4b:f4:e2:a2:dc:08:
         51:af:97:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 08:19:23 2025 by rpki-client