Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/038d580b-452e-42d7-b041-901dc33d6857/0/3130332e3136382e3235302e302f32342d3234203d3e20313432333237.roa
File:                     3130332e3136382e3235302e302f32342d3234203d3e20313432333237.roa (raw, json)
Hash identifier:          vUWQBZ0/r7vI2v8KbhMfVsf4gR9LmNP6bUrY9mudCfU=
Subject key identifier:   61:48:64:AF:A5:D5:53:5F:56:B8:6D:98:82:EB:D1:EC:BC:B7:D2:72
Certificate issuer:       /CN=4EE959798755CD4BA407AEB6EBDD3100261EAA55
Certificate serial:       437CE2AC4AE00B6C0E3BF66468B92AC0B6C98C1E
Authority key identifier: 4E:E9:59:79:87:55:CD:4B:A4:07:AE:B6:EB:DD:31:00:26:1E:AA:55
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4EE959798755CD4BA407AEB6EBDD3100261EAA55.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/038d580b-452e-42d7-b041-901dc33d6857/0/3130332e3136382e3235302e302f32342d3234203d3e20313432333237.roa
Signing time:             Sat 05 Jul 2025 13:00:00 +0000
ROA not before:           Sat 05 Jul 2025 12:55:00 +0000
ROA not after:            Sat 04 Jul 2026 13:00:00 +0000
asID:                     142327
IP address blocks:        103.168.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/038d580b-452e-42d7-b041-901dc33d6857/0/4EE959798755CD4BA407AEB6EBDD3100261EAA55.crl
                          rsync://repo-rpki.idnic.net/repo/038d580b-452e-42d7-b041-901dc33d6857/0/4EE959798755CD4BA407AEB6EBDD3100261EAA55.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4EE959798755CD4BA407AEB6EBDD3100261EAA55.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 10 Aug 2025 04:31:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:7c:e2:ac:4a:e0:0b:6c:0e:3b:f6:64:68:b9:2a:c0:b6:c9:8c:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4EE959798755CD4BA407AEB6EBDD3100261EAA55
        Validity
            Not Before: Jul  5 12:55:00 2025 GMT
            Not After : Jul  4 13:00:00 2026 GMT
        Subject: CN=614864AFA5D5535F56B86D9882EBD1ECBCB7D272
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:85:30:b2:74:06:1e:b8:65:fa:bc:48:d4:44:
                    0d:db:8c:5a:0c:2b:79:4a:3f:7e:32:6b:89:7c:34:
                    ba:ce:a6:62:35:fd:12:08:77:45:c2:eb:56:9e:12:
                    1e:85:2d:a0:40:c1:ad:08:1a:29:f9:31:e2:d0:d2:
                    d1:0b:80:46:76:7e:22:32:11:4a:14:72:40:e4:ea:
                    5e:f5:3d:c4:f1:0b:c9:3f:5f:16:41:3f:e7:37:99:
                    ce:51:7a:0c:53:ce:9e:2d:f1:05:d8:e6:7b:e0:7d:
                    fb:5c:90:e3:20:e3:12:45:92:d5:f9:34:df:2e:e1:
                    53:52:2a:0f:2e:60:00:6e:28:6e:f1:1a:21:1d:65:
                    8e:7e:db:2c:ab:33:58:9b:a9:4a:78:72:5a:6a:c5:
                    fb:c0:43:e5:80:22:96:17:bc:fe:6b:5f:ce:89:21:
                    d2:97:30:1e:ff:e9:66:d9:a1:e2:a7:7c:38:78:a7:
                    60:0a:e3:80:3c:44:53:10:46:1c:0e:65:18:0c:c6:
                    09:70:bb:81:f1:fb:01:c6:ec:36:9b:05:b9:aa:77:
                    14:99:b8:73:1d:60:be:3a:05:a5:44:b0:a8:16:5e:
                    0c:b3:a5:93:8b:d8:67:86:bf:42:49:78:30:76:2e:
                    87:8c:7a:91:35:0c:30:c9:4b:4d:2c:04:d3:a6:1c:
                    b5:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:48:64:AF:A5:D5:53:5F:56:B8:6D:98:82:EB:D1:EC:BC:B7:D2:72
            X509v3 Authority Key Identifier:
                keyid:4E:E9:59:79:87:55:CD:4B:A4:07:AE:B6:EB:DD:31:00:26:1E:AA:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/038d580b-452e-42d7-b041-901dc33d6857/0/4EE959798755CD4BA407AEB6EBDD3100261EAA55.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4EE959798755CD4BA407AEB6EBDD3100261EAA55.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/038d580b-452e-42d7-b041-901dc33d6857/0/3130332e3136382e3235302e302f32342d3234203d3e20313432333237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.168.250.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:c7:7c:06:f6:da:32:93:e9:2f:b9:18:b8:92:eb:3d:73:66:
         ca:81:81:2d:0b:1e:a4:e0:d6:23:e0:87:38:ba:0c:1d:29:ef:
         3c:a6:73:18:19:46:0a:54:df:ed:5d:e7:e2:a8:5e:f6:27:06:
         c4:be:2e:88:e3:75:8d:cb:fa:7a:81:c9:e6:8c:bc:18:99:ed:
         69:a1:e5:58:62:1c:42:84:95:5a:1f:e0:01:bf:af:86:de:f1:
         2d:47:be:1b:df:c1:d7:6d:29:1b:76:84:1e:45:ff:79:e8:ba:
         49:bc:8a:10:55:94:8b:bf:41:ba:e5:d5:ae:53:21:3f:bd:41:
         18:97:2e:c9:5a:e7:3c:7e:3a:fd:d2:10:73:5b:d4:e8:84:97:
         39:5d:c9:6d:be:9b:8d:f6:d9:b1:37:e9:a8:85:5a:54:82:ea:
         49:b1:e9:67:9c:47:97:a3:2d:1e:f4:b2:32:4a:48:ec:e4:7a:
         28:57:0d:fd:b0:27:22:5d:ac:aa:2d:8e:cb:68:10:da:fd:8c:
         25:b2:c4:8f:d0:d3:f0:a6:da:a8:de:0b:79:15:82:cd:76:c5:
         b7:b8:d3:fd:1b:61:fc:5c:18:25:43:d6:82:89:9e:27:b2:07:
         b9:77:81:52:f0:b1:3b:f5:6b:61:a1:78:9b:fe:8f:f3:68:d7:
         a2:91:ae:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 00:10:52 2025 by rpki-client