Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/63c8f4d7-e4b3-4b41-a685-514940fec819/0/3130332e37332e37392e302f32342d3234203d3e20313335343734.roa
File:                     3130332e37332e37392e302f32342d3234203d3e20313335343734.roa (raw, json)
Hash identifier:          92vwgErRdgoZkW+X9kpw27QJGoI5j0NzvIHXl5PFvNM=
Subject key identifier:   CE:D9:43:7B:A4:E5:B5:85:4B:68:8B:A7:50:FD:BE:36:1D:FE:DD:AD
Certificate issuer:       /CN=E01F80F5B6C41210CA0370AEEFC9794EF0F0644A
Certificate serial:       237240A948E8DC8CFB7E66D29178D4487E8FA7BA
Authority key identifier: E0:1F:80:F5:B6:C4:12:10:CA:03:70:AE:EF:C9:79:4E:F0:F0:64:4A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E01F80F5B6C41210CA0370AEEFC9794EF0F0644A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/63c8f4d7-e4b3-4b41-a685-514940fec819/0/3130332e37332e37392e302f32342d3234203d3e20313335343734.roa
Signing time:             Sun 06 Jul 2025 09:00:01 +0000
ROA not before:           Sun 06 Jul 2025 08:55:01 +0000
ROA not after:            Sun 05 Jul 2026 09:00:01 +0000
asID:                     135474
IP address blocks:        103.73.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/63c8f4d7-e4b3-4b41-a685-514940fec819/0/E01F80F5B6C41210CA0370AEEFC9794EF0F0644A.crl
                          rsync://repo-rpki.idnic.net/repo/63c8f4d7-e4b3-4b41-a685-514940fec819/0/E01F80F5B6C41210CA0370AEEFC9794EF0F0644A.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E01F80F5B6C41210CA0370AEEFC9794EF0F0644A.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 12 Aug 2025 05:48:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:72:40:a9:48:e8:dc:8c:fb:7e:66:d2:91:78:d4:48:7e:8f:a7:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E01F80F5B6C41210CA0370AEEFC9794EF0F0644A
        Validity
            Not Before: Jul  6 08:55:01 2025 GMT
            Not After : Jul  5 09:00:01 2026 GMT
        Subject: CN=CED9437BA4E5B5854B688BA750FDBE361DFEDDAD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:77:d0:6f:60:2c:0d:1e:cf:b3:48:08:bc:53:
                    b6:4e:cb:82:b0:48:ec:89:8b:f5:58:9f:5d:f6:2c:
                    fa:06:36:4a:ea:0c:bd:b8:aa:97:fc:a2:b4:62:0f:
                    49:aa:0f:1d:ee:45:56:59:ba:1e:d0:f3:d4:a9:d4:
                    d6:c9:59:e4:01:14:5a:f6:f2:89:c5:2b:f9:7e:6f:
                    7f:67:3c:28:57:ee:ea:16:b5:07:71:8e:59:f6:21:
                    c4:9f:71:e1:ad:e7:36:7b:68:85:d3:d9:a1:eb:00:
                    68:9c:a2:5c:17:97:4b:f6:ac:ac:c9:93:5d:0e:19:
                    64:77:4e:eb:81:19:4a:89:c7:64:85:65:93:f2:4a:
                    64:b3:03:17:16:82:e4:72:96:c4:5e:ee:01:6c:b0:
                    51:42:44:0a:76:3a:a8:c2:05:71:8f:77:74:73:41:
                    77:72:31:9c:62:c0:f6:3c:e9:15:8a:89:86:97:b7:
                    68:3b:31:1f:1f:30:ff:9f:09:64:3d:66:35:62:6c:
                    88:14:36:14:54:5d:97:b3:39:42:6e:b0:5b:fb:52:
                    d3:2c:08:df:37:d8:a2:cb:fb:e0:91:01:23:20:10:
                    26:f1:46:be:36:bc:42:b6:47:36:e5:14:3b:8c:fd:
                    c4:23:ac:5e:be:c2:15:c4:9f:13:33:05:0f:06:de:
                    bb:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:D9:43:7B:A4:E5:B5:85:4B:68:8B:A7:50:FD:BE:36:1D:FE:DD:AD
            X509v3 Authority Key Identifier:
                keyid:E0:1F:80:F5:B6:C4:12:10:CA:03:70:AE:EF:C9:79:4E:F0:F0:64:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/63c8f4d7-e4b3-4b41-a685-514940fec819/0/E01F80F5B6C41210CA0370AEEFC9794EF0F0644A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E01F80F5B6C41210CA0370AEEFC9794EF0F0644A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/63c8f4d7-e4b3-4b41-a685-514940fec819/0/3130332e37332e37392e302f32342d3234203d3e20313335343734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.73.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:8d:cd:31:c4:6b:da:44:57:2e:11:91:fb:2b:c0:fa:1b:29:
         ad:6f:17:e3:c4:9e:48:cb:06:1b:17:7f:4f:55:7b:65:ca:85:
         5c:9f:bc:1b:00:13:20:de:18:4b:5d:db:5a:da:a5:37:14:88:
         89:5f:1f:21:32:a1:a5:ee:6c:dd:5e:36:1e:67:b9:88:71:8d:
         90:a6:14:7d:ef:0f:96:79:47:6c:64:20:fe:60:a5:2e:a8:84:
         29:f3:84:4c:a7:b2:8d:81:35:a5:ec:5c:29:13:af:15:a9:3b:
         2f:aa:1e:02:6a:1c:3c:d0:10:0f:b0:d1:2e:74:88:e6:f9:78:
         49:d3:b9:be:9a:9d:dc:74:96:dc:42:97:c4:8f:27:49:6e:af:
         cb:8b:cc:68:62:70:89:74:42:26:28:f5:4a:40:03:f1:80:5d:
         8d:de:df:e1:5b:b9:ec:df:b2:73:2d:43:09:45:6e:49:97:0e:
         fd:7d:fe:7c:75:2b:7b:b7:30:5a:0e:96:92:3c:f9:ca:a8:ee:
         43:c1:64:79:f8:da:7f:46:fe:f2:aa:29:a7:30:cd:3f:5b:e7:
         79:7c:ca:af:4b:83:17:c5:df:57:38:60:0c:fc:04:36:bc:b6:
         4c:62:c4:41:45:bb:96:da:d4:07:eb:e1:d4:87:44:bc:b1:3a:
         96:fb:81:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 01:45:54 2025 by rpki-client