Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/fc7547fc-48d4-4169-ae33-cb454d6d8b92/0/3130332e39302e36332e302f32342d3234203d3e203633353038.roa
File:                     3130332e39302e36332e302f32342d3234203d3e203633353038.roa (raw, json)
Hash identifier:          MULEUEHSyZpY9qn3SDe7sQnJLs4h5Mi7a94B5iOdQb8=
Subject key identifier:   F5:3F:23:94:13:D5:27:41:92:7E:CD:AF:68:AD:4A:1E:23:BB:18:5D
Certificate issuer:       /CN=C0CDF72A73FE200131853E0EE6A9B33708242F09
Certificate serial:       7C8FACFFD1FF4C334712E25D08D4366D87C507A7
Authority key identifier: C0:CD:F7:2A:73:FE:20:01:31:85:3E:0E:E6:A9:B3:37:08:24:2F:09
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C0CDF72A73FE200131853E0EE6A9B33708242F09.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/fc7547fc-48d4-4169-ae33-cb454d6d8b92/0/3130332e39302e36332e302f32342d3234203d3e203633353038.roa
Signing time:             Wed 12 Feb 2025 08:45:31 +0000
ROA not before:           Wed 12 Feb 2025 08:40:31 +0000
ROA not after:            Wed 11 Feb 2026 08:45:31 +0000
asID:                     63508
IP address blocks:        103.90.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/fc7547fc-48d4-4169-ae33-cb454d6d8b92/0/C0CDF72A73FE200131853E0EE6A9B33708242F09.crl
                          rsync://repo-rpki.idnic.net/repo/fc7547fc-48d4-4169-ae33-cb454d6d8b92/0/C0CDF72A73FE200131853E0EE6A9B33708242F09.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C0CDF72A73FE200131853E0EE6A9B33708242F09.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Apr 2025 22:29:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:8f:ac:ff:d1:ff:4c:33:47:12:e2:5d:08:d4:36:6d:87:c5:07:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C0CDF72A73FE200131853E0EE6A9B33708242F09
        Validity
            Not Before: Feb 12 08:40:31 2025 GMT
            Not After : Feb 11 08:45:31 2026 GMT
        Subject: CN=F53F239413D52741927ECDAF68AD4A1E23BB185D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:d4:88:9f:bf:3f:37:f9:d8:7e:2d:02:e7:9e:
                    fc:c5:62:f6:34:cd:a6:2a:e9:57:4d:61:59:92:11:
                    5a:44:08:32:15:5b:71:5c:a4:3f:62:7d:2b:36:a9:
                    25:6f:f0:88:f3:a6:5b:69:95:87:8d:11:a7:41:d9:
                    78:db:c0:ff:d0:0c:34:92:fb:11:89:6f:4e:82:8e:
                    41:35:08:88:ec:74:6c:c0:ef:d8:ad:c4:3f:12:a7:
                    c1:4d:7f:9c:0d:53:31:8c:d5:23:09:6d:13:c3:d6:
                    95:d5:66:f0:24:96:81:67:4f:e7:fe:3e:81:7e:ac:
                    00:cd:04:e2:31:a3:9f:8f:74:75:94:c3:dc:b4:4d:
                    4e:e5:00:15:be:16:c2:89:fd:19:1f:7b:05:07:43:
                    03:29:9a:83:4d:fa:c9:47:80:1d:15:08:b0:65:67:
                    c0:63:60:c1:db:d6:2a:a7:22:91:46:a3:df:bc:9e:
                    b2:dd:c0:5c:2a:f4:fd:ce:33:80:56:e5:83:2d:97:
                    0d:c7:d2:56:92:0c:86:86:1c:90:34:b0:45:72:e4:
                    92:50:74:fc:ad:0b:61:be:92:a4:b7:24:75:a2:52:
                    83:fb:8d:74:4c:73:fa:d0:c6:33:ce:b5:b4:5b:d2:
                    ff:9f:dd:99:d9:39:67:db:a4:b5:2d:cf:8f:14:04:
                    5e:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:3F:23:94:13:D5:27:41:92:7E:CD:AF:68:AD:4A:1E:23:BB:18:5D
            X509v3 Authority Key Identifier:
                keyid:C0:CD:F7:2A:73:FE:20:01:31:85:3E:0E:E6:A9:B3:37:08:24:2F:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/fc7547fc-48d4-4169-ae33-cb454d6d8b92/0/C0CDF72A73FE200131853E0EE6A9B33708242F09.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C0CDF72A73FE200131853E0EE6A9B33708242F09.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fc7547fc-48d4-4169-ae33-cb454d6d8b92/0/3130332e39302e36332e302f32342d3234203d3e203633353038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.90.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:30:31:85:cf:b5:33:b2:12:3f:74:59:54:0d:3e:65:4f:da:
         8b:ad:98:dc:e3:12:3b:03:84:dc:1b:9b:66:74:2b:bd:b8:db:
         b9:b1:2b:b5:05:56:63:01:a3:86:00:b8:0d:0b:59:56:96:1c:
         23:a9:88:0a:2d:85:c8:ed:57:75:91:8c:10:a8:29:8a:0a:5f:
         19:af:d4:6b:f4:6e:25:0b:1c:50:f6:aa:df:59:0b:f5:9d:34:
         05:07:17:16:23:95:b0:6d:fd:a0:8d:9b:6c:76:da:4d:6e:fb:
         c1:2f:24:7e:e2:9b:1f:64:a4:3a:4a:22:c5:31:af:80:2c:d9:
         81:03:be:40:1f:b7:7c:6a:ac:a4:75:0d:a1:50:08:e2:f3:16:
         db:be:e5:8a:c6:68:64:9d:07:30:d4:ed:2c:af:d1:02:1a:5b:
         55:dc:fc:5a:10:56:80:c4:8e:84:39:49:45:a1:90:6f:4c:db:
         4d:3a:5a:d5:6e:ae:66:c2:9e:33:9d:c5:62:42:78:e2:26:6b:
         b6:eb:8c:67:53:23:5e:05:4d:75:99:f4:4f:29:a4:8a:4d:88:
         ca:0f:04:56:eb:b7:99:e4:d7:ad:d3:cb:5b:cc:0f:6f:25:61:
         e4:0c:ca:26:19:76:8a:72:3c:a6:85:b4:bb:64:83:93:ca:e3:
         98:5e:6f:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 12:08:49 2025 by rpki-client