Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e86e46ec-df5c-4b4d-a30e-10b2c688c2fc/0/3130332e3132302e36372e302f32342d3234203d3e20313337333733.roa
File:                     3130332e3132302e36372e302f32342d3234203d3e20313337333733.roa (raw, json)
Hash identifier:          IzbXTMVKVDEB9rg5msnU2DpFCw8NlvM8m/tSeauJb7M=
Subject key identifier:   6B:D2:FC:BE:84:03:05:F6:8C:41:C5:BE:14:F0:F7:DC:5E:D4:16:4E
Certificate issuer:       /CN=6B647F696A9BB5C718605E8922BEF1BEE566F94E
Certificate serial:       575AB4F3031AB5C120E4C8AC98AD2D306B725A8C
Authority key identifier: 6B:64:7F:69:6A:9B:B5:C7:18:60:5E:89:22:BE:F1:BE:E5:66:F9:4E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B647F696A9BB5C718605E8922BEF1BEE566F94E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e86e46ec-df5c-4b4d-a30e-10b2c688c2fc/0/3130332e3132302e36372e302f32342d3234203d3e20313337333733.roa
Signing time:             Wed 10 Sep 2025 12:14:08 +0000
ROA not before:           Wed 10 Sep 2025 12:09:08 +0000
ROA not after:            Wed 09 Sep 2026 12:14:08 +0000
asID:                     137373
IP address blocks:        103.120.67.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e86e46ec-df5c-4b4d-a30e-10b2c688c2fc/0/6B647F696A9BB5C718605E8922BEF1BEE566F94E.crl
                          rsync://repo-rpki.idnic.net/repo/e86e46ec-df5c-4b4d-a30e-10b2c688c2fc/0/6B647F696A9BB5C718605E8922BEF1BEE566F94E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B647F696A9BB5C718605E8922BEF1BEE566F94E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 22 Sep 2025 05:06:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:5a:b4:f3:03:1a:b5:c1:20:e4:c8:ac:98:ad:2d:30:6b:72:5a:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B647F696A9BB5C718605E8922BEF1BEE566F94E
        Validity
            Not Before: Sep 10 12:09:08 2025 GMT
            Not After : Sep  9 12:14:08 2026 GMT
        Subject: CN=6BD2FCBE840305F68C41C5BE14F0F7DC5ED4164E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:16:20:44:5e:74:d3:a7:41:03:03:f0:ef:1d:
                    8f:c8:a8:27:f7:21:d7:3c:c4:7e:30:0f:e1:01:ae:
                    b1:80:20:32:5b:21:9c:5f:4e:3c:ad:9b:11:19:4f:
                    c1:7a:57:55:b7:93:f6:30:0f:32:c3:08:0a:02:a3:
                    df:9a:65:71:e7:6f:84:1c:36:44:54:38:a0:f4:66:
                    91:82:db:9d:fc:d8:bd:ba:26:e6:0b:06:b3:90:89:
                    10:94:d0:75:2b:25:5f:87:d7:ee:ac:e9:50:c2:0f:
                    9f:21:ed:27:de:f1:8b:e5:ab:80:4e:1e:b6:46:02:
                    12:eb:84:36:09:64:b6:48:75:74:b1:ee:79:44:29:
                    ed:b2:8e:02:80:c7:f1:53:ef:af:5d:88:8c:c2:76:
                    fd:b4:67:4c:2f:6e:c2:36:06:cb:7a:47:64:d5:bf:
                    9e:4e:71:22:fa:db:9e:2a:01:be:9a:85:38:9f:6e:
                    df:86:e8:de:71:9c:d2:ef:c9:36:b6:b4:b3:78:fe:
                    dd:95:07:e0:2a:2b:68:b1:5e:8c:bc:6f:c9:1c:64:
                    87:a0:ba:ce:3d:2e:fb:bc:b5:d6:2a:80:36:94:32:
                    85:f9:93:27:7f:d0:13:c4:aa:9b:99:6a:df:0e:62:
                    cf:c4:7c:4f:68:70:30:b9:89:4c:da:dd:63:97:10:
                    7c:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:D2:FC:BE:84:03:05:F6:8C:41:C5:BE:14:F0:F7:DC:5E:D4:16:4E
            X509v3 Authority Key Identifier:
                keyid:6B:64:7F:69:6A:9B:B5:C7:18:60:5E:89:22:BE:F1:BE:E5:66:F9:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e86e46ec-df5c-4b4d-a30e-10b2c688c2fc/0/6B647F696A9BB5C718605E8922BEF1BEE566F94E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B647F696A9BB5C718605E8922BEF1BEE566F94E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e86e46ec-df5c-4b4d-a30e-10b2c688c2fc/0/3130332e3132302e36372e302f32342d3234203d3e20313337333733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.120.67.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:3e:2d:e9:a5:7e:38:52:a7:47:b6:df:54:5c:49:38:6d:90:
         5a:56:8e:44:63:f7:fe:91:61:36:65:40:b2:1b:4e:94:ea:32:
         7f:97:4c:3a:74:f9:00:24:16:ac:61:b2:92:20:79:f3:c9:03:
         09:e3:12:ee:77:79:ee:3e:ce:89:25:54:93:74:c6:46:35:7a:
         97:26:01:c2:9f:af:82:54:04:20:b9:65:2a:3e:6c:53:e7:e8:
         31:c1:c8:ce:d5:b2:7f:f2:60:f9:71:ef:9a:bc:85:2d:95:5e:
         ef:af:60:6d:fc:ac:85:25:f0:49:c4:64:e7:9f:a8:47:6e:c2:
         f8:7d:d3:32:4c:82:2a:51:5e:6a:b3:b6:c6:f1:f9:fd:8c:c8:
         8a:47:d3:6b:b2:2a:ee:00:64:61:c8:02:3a:77:9b:d5:2c:f3:
         1e:69:15:7e:6c:4b:58:7b:f6:86:10:77:d4:15:5c:20:e8:7b:
         c3:8e:11:40:32:af:0b:0c:a8:07:1f:c2:bc:b5:f0:26:f6:32:
         29:91:34:e5:2f:b0:55:d7:75:a9:58:6d:22:99:3a:55:90:b0:
         8d:a4:20:3e:40:55:cd:b9:c8:63:39:d6:a6:ba:31:34:a5:88:
         17:3a:45:19:5f:ab:98:6f:51:b3:b6:ff:38:1b:fe:3f:9e:76:
         ec:e7:e2:b6
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUV1q08wMatcEg5MismK0tMGtyWowwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkI2NDdGNjk2QTlCQjVDNzE4NjA1RTg5MjJCRUYxQkVF
NTY2Rjk0RTAeFw0yNTA5MTAxMjA5MDhaFw0yNjA5MDkxMjE0MDhaMDMxMTAvBgNV
BAMTKDZCRDJGQ0JFODQwMzA1RjY4QzQxQzVCRTE0RjBGN0RDNUVENDE2NEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUFiBEXnTTp0EDA/DvHY/IqCf3
Idc8xH4wD+EBrrGAIDJbIZxfTjytmxEZT8F6V1W3k/YwDzLDCAoCo9+aZXHnb4Qc
NkRUOKD0ZpGC25382L26JuYLBrOQiRCU0HUrJV+H1+6s6VDCD58h7Sfe8Yvlq4BO
HrZGAhLrhDYJZLZIdXSx7nlEKe2yjgKAx/FT769diIzCdv20Z0wvbsI2Bst6R2TV
v55OcSL6254qAb6ahTifbt+G6N5xnNLvyTa2tLN4/t2VB+AqK2ixXoy8b8kcZIeg
us49Lvu8tdYqgDaUMoX5kyd/0BPEqpuZat8OYs/EfE9ocDC5iUza3WOXEHwNAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUa9L8voQDBfaMQcW+FPD33F7UFk4wHwYDVR0j
BBgwFoAUa2R/aWqbtccYYF6JIr7xvuVm+U4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l
ODZlNDZlYy1kZjVjLTRiNGQtYTMwZS0xMGIyYzY4OGMyZmMvMC82QjY0N0Y2OTZB
OUJCNUM3MTg2MDVFODkyMkJFRjFCRUU1NjZGOTRFLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNkI2NDdGNjk2QTlCQjVDNzE4NjA1RTg5MjJCRUYxQkVFNTY2
Rjk0RS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2U4NmU0NmVjLWRmNWMtNGI0ZC1h
MzBlLTEwYjJjNjg4YzJmYy8wLzMxMzAzMzJlMzEzMjMwMmUzNjM3MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzMzM3MzMzNzMzLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ3hDMA0GCSqG
SIb3DQEBCwUAA4IBAQA8Pi3ppX44UqdHtt9UXEk4bZBaVo5EY/f+kWE2ZUCyG06U
6jJ/l0w6dPkAJBasYbKSIHnzyQMJ4xLud3nuPs6JJVSTdMZGNXqXJgHCn6+CVAQg
uWUqPmxT5+gxwcjO1bJ/8mD5ce+avIUtlV7vr2Bt/KyFJfBJxGTnn6hHbsL4fdMy
TIIqUV5qs7bG8fn9jMiKR9NrsiruAGRhyAI6d5vVLPMeaRV+bEtYe/aGEHfUFVwg
6HvDjhFAMq8LDKgHH8K8tfAm9jIpkTTlL7BV13WpWG0imTpVkLCNpCA+QFXNuchj
OdamujE0pYgXOkUZX6uYb1Gztv84G/4/nnbs5+K2
-----END CERTIFICATE-----
Generated at Fri Sep 19 14:28:27 2025 by rpki-client