Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/6e97dbc6-9374-42e2-a3d0-879ed6a19196/0/3130332e36382e302e302f32342d3234203d3e20313335343539.roa
File:                     3130332e36382e302e302f32342d3234203d3e20313335343539.roa (raw, json)
Hash identifier:          eVMNZeAJ7cLVIjMPZBDtZxBLsAOFJHtMe9ME5u9mIlo=
Subject key identifier:   40:4C:0B:72:66:9D:37:A3:68:F8:D8:20:A4:81:18:09:B0:4D:7C:0B
Certificate issuer:       /CN=73BD266EEF13136ED4F4E96AB4984B5A0E310448
Certificate serial:       3AB7BD7E443488020A6EA1D0D9B8D2A5F5B28152
Authority key identifier: 73:BD:26:6E:EF:13:13:6E:D4:F4:E9:6A:B4:98:4B:5A:0E:31:04:48
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/73BD266EEF13136ED4F4E96AB4984B5A0E310448.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6e97dbc6-9374-42e2-a3d0-879ed6a19196/0/3130332e36382e302e302f32342d3234203d3e20313335343539.roa
Signing time:             Wed 22 Oct 2025 18:00:01 +0000
ROA not before:           Wed 22 Oct 2025 17:55:01 +0000
ROA not after:            Wed 21 Oct 2026 18:00:01 +0000
asID:                     135459
IP address blocks:        103.68.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/6e97dbc6-9374-42e2-a3d0-879ed6a19196/0/73BD266EEF13136ED4F4E96AB4984B5A0E310448.crl
                          rsync://repo-rpki.idnic.net/repo/6e97dbc6-9374-42e2-a3d0-879ed6a19196/0/73BD266EEF13136ED4F4E96AB4984B5A0E310448.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/73BD266EEF13136ED4F4E96AB4984B5A0E310448.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 06 Nov 2025 11:07:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:b7:bd:7e:44:34:88:02:0a:6e:a1:d0:d9:b8:d2:a5:f5:b2:81:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73BD266EEF13136ED4F4E96AB4984B5A0E310448
        Validity
            Not Before: Oct 22 17:55:01 2025 GMT
            Not After : Oct 21 18:00:01 2026 GMT
        Subject: CN=404C0B72669D37A368F8D820A4811809B04D7C0B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:76:84:8b:00:e2:3f:74:c9:ca:bd:83:f9:83:
                    ed:dd:13:7e:ea:bf:71:6e:bb:9a:0e:6a:4c:59:7a:
                    57:06:46:75:e0:d2:ca:e9:14:35:8f:5d:ab:8a:c7:
                    ff:d3:21:57:e3:a3:f9:7e:55:4c:5c:6c:98:a8:8e:
                    58:64:4c:90:1b:2b:69:a8:9c:ed:1a:95:d6:13:26:
                    7f:e0:02:02:31:10:36:46:d0:96:b4:c0:a5:e8:d7:
                    58:22:91:5b:cc:9d:c6:56:5a:64:1c:c6:bd:ae:c9:
                    64:2d:82:0a:a9:54:d4:7f:66:4d:5a:d3:7d:da:d4:
                    92:86:13:14:78:75:1e:b3:da:9f:b0:3d:86:a3:17:
                    f6:df:bd:d5:04:7f:4a:da:75:33:0c:ab:56:4b:19:
                    5f:f1:2e:c1:ca:e9:8d:9f:bf:0b:80:4d:66:3b:29:
                    f7:55:b4:76:75:41:e2:65:57:0c:3b:83:f5:0f:a5:
                    6c:87:c8:7f:07:66:23:f8:76:92:51:dc:8e:8d:f7:
                    6a:55:7f:34:e5:4c:31:14:29:b5:b3:ad:63:e1:7f:
                    b8:14:08:10:a7:79:bb:e1:00:52:e1:f6:c9:d2:a5:
                    40:97:e2:ff:97:39:19:cf:85:98:88:9c:68:bb:58:
                    02:af:09:4a:e1:9c:40:12:13:e2:f6:d1:d1:c7:36:
                    fc:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:4C:0B:72:66:9D:37:A3:68:F8:D8:20:A4:81:18:09:B0:4D:7C:0B
            X509v3 Authority Key Identifier:
                keyid:73:BD:26:6E:EF:13:13:6E:D4:F4:E9:6A:B4:98:4B:5A:0E:31:04:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6e97dbc6-9374-42e2-a3d0-879ed6a19196/0/73BD266EEF13136ED4F4E96AB4984B5A0E310448.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/73BD266EEF13136ED4F4E96AB4984B5A0E310448.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6e97dbc6-9374-42e2-a3d0-879ed6a19196/0/3130332e36382e302e302f32342d3234203d3e20313335343539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.68.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:14:a5:d9:3d:62:a1:6d:88:07:8c:e1:5f:d7:e5:0b:7c:75:
         05:dc:f8:57:18:a4:0c:ab:33:ac:eb:68:82:15:e6:9c:51:db:
         d5:98:2f:d8:02:89:c6:b6:fa:d9:f6:ee:c1:a2:60:27:40:b5:
         62:18:6a:71:9b:7a:b9:95:a7:d8:d0:eb:4e:45:47:c2:c1:a9:
         ff:ca:9d:3e:01:78:70:82:2e:3f:e4:92:82:2c:2a:5b:ae:ab:
         c1:a9:06:a2:a7:3c:19:f3:4b:97:57:91:22:47:90:6b:0f:42:
         45:e8:38:7f:21:6d:75:57:ef:ca:e6:a3:b6:e9:da:1a:0d:6b:
         77:d7:5b:f8:0f:c5:da:b3:e1:b2:14:3e:26:ba:75:b1:77:12:
         3d:40:99:d1:46:72:9e:ec:41:b7:78:40:39:46:74:c0:3e:fd:
         47:54:31:2d:17:d5:82:83:fb:7f:4d:d7:3d:cf:7e:db:00:f1:
         70:26:bd:a4:da:ed:58:a1:81:bc:41:09:1f:d8:3e:a5:2f:8c:
         23:0a:f6:07:16:2f:53:c9:a3:75:81:34:5a:93:5b:09:c3:68:
         8a:c6:77:59:14:e6:a1:61:fd:f5:28:d0:11:69:5c:2c:35:ed:
         28:d7:a0:af:39:bd:9b:22:b4:fa:22:da:c9:6a:bc:85:1d:67:
         82:f9:0c:52
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUOre9fkQ0iAIKbqHQ2bjSpfWygVIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzNCRDI2NkVFRjEzMTM2RUQ0RjRFOTZBQjQ5ODRCNUEw
RTMxMDQ0ODAeFw0yNTEwMjIxNzU1MDFaFw0yNjEwMjExODAwMDFaMDMxMTAvBgNV
BAMTKDQwNEMwQjcyNjY5RDM3QTM2OEY4RDgyMEE0ODExODA5QjA0RDdDMEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDddoSLAOI/dMnKvYP5g+3dE37q
v3Fuu5oOakxZelcGRnXg0srpFDWPXauKx//TIVfjo/l+VUxcbJiojlhkTJAbK2mo
nO0aldYTJn/gAgIxEDZG0Ja0wKXo11gikVvMncZWWmQcxr2uyWQtggqpVNR/Zk1a
033a1JKGExR4dR6z2p+wPYajF/bfvdUEf0radTMMq1ZLGV/xLsHK6Y2fvwuATWY7
KfdVtHZ1QeJlVww7g/UPpWyHyH8HZiP4dpJR3I6N92pVfzTlTDEUKbWzrWPhf7gU
CBCnebvhAFLh9snSpUCX4v+XORnPhZiInGi7WAKvCUrhnEASE+L20dHHNvwlAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQUQEwLcmadN6No+NggpIEYCbBNfAswHwYDVR0j
BBgwFoAUc70mbu8TE27U9OlqtJhLWg4xBEgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82
ZTk3ZGJjNi05Mzc0LTQyZTItYTNkMC04NzllZDZhMTkxOTYvMC83M0JEMjY2RUVG
MTMxMzZFRDRGNEU5NkFCNDk4NEI1QTBFMzEwNDQ4LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNzNCRDI2NkVFRjEzMTM2RUQ0RjRFOTZBQjQ5ODRCNUEwRTMx
MDQ0OC5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzZlOTdkYmM2LTkzNzQtNDJlMi1h
M2QwLTg3OWVkNmExOTE5Ni8wLzMxMzAzMzJlMzYzODJlMzAyZTMwMmYzMjM0MmQz
MjM0MjAzZDNlMjAzMTMzMzUzNDM1Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnRAAwDQYJKoZIhvcN
AQELBQADggEBAEkUpdk9YqFtiAeM4V/X5Qt8dQXc+FcYpAyrM6zraIIV5pxR29WY
L9gCica2+tn27sGiYCdAtWIYanGbermVp9jQ605FR8LBqf/KnT4BeHCCLj/kkoIs
Kluuq8GpBqKnPBnzS5dXkSJHkGsPQkXoOH8hbXVX78rmo7bp2hoNa3fXW/gPxdqz
4bIUPia6dbF3Ej1AmdFGcp7sQbd4QDlGdMA+/UdUMS0X1YKD+39N1z3PftsA8XAm
vaTa7VihgbxBCR/YPqUvjCMK9gcWL1PJo3WBNFqTWwnDaIrGd1kU5qFh/fUo0BFp
XCw17SjXoK85vZsitPoi2slqvIUdZ4L5DFI=
-----END CERTIFICATE-----
Generated at Tue Nov 4 16:43:29 2025 by rpki-client