Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/8919b80d-4693-4095-a9e3-412e12828ff2/0/3130332e3137322e33302e302f32342d3234203d3e20313437303737.roa
File:                     3130332e3137322e33302e302f32342d3234203d3e20313437303737.roa (raw, json)
Hash identifier:          ino1QDYQDx2pfUj3BL+ZlKpPJfUhXo1WbnH0JMrs73I=
Subject key identifier:   43:AB:94:B6:52:C1:5A:26:6E:31:AB:10:05:74:77:C9:43:9F:D6:B2
Certificate issuer:       /CN=8DC2ED0870A005152606E2E6BEB6B6C78A522AF4
Certificate serial:       39BCFED6F06D8F7C33ACC1290D780E89E2DE49CE
Authority key identifier: 8D:C2:ED:08:70:A0:05:15:26:06:E2:E6:BE:B6:B6:C7:8A:52:2A:F4
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DC2ED0870A005152606E2E6BEB6B6C78A522AF4.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8919b80d-4693-4095-a9e3-412e12828ff2/0/3130332e3137322e33302e302f32342d3234203d3e20313437303737.roa
Signing time:             Wed 30 Jul 2025 07:00:00 +0000
ROA not before:           Wed 30 Jul 2025 06:55:00 +0000
ROA not after:            Wed 29 Jul 2026 07:00:00 +0000
asID:                     147077
IP address blocks:        103.172.30.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8919b80d-4693-4095-a9e3-412e12828ff2/0/8DC2ED0870A005152606E2E6BEB6B6C78A522AF4.crl
                          rsync://repo-rpki.idnic.net/repo/8919b80d-4693-4095-a9e3-412e12828ff2/0/8DC2ED0870A005152606E2E6BEB6B6C78A522AF4.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DC2ED0870A005152606E2E6BEB6B6C78A522AF4.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 12 Aug 2025 00:49:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:bc:fe:d6:f0:6d:8f:7c:33:ac:c1:29:0d:78:0e:89:e2:de:49:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8DC2ED0870A005152606E2E6BEB6B6C78A522AF4
        Validity
            Not Before: Jul 30 06:55:00 2025 GMT
            Not After : Jul 29 07:00:00 2026 GMT
        Subject: CN=43AB94B652C15A266E31AB10057477C9439FD6B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:af:3b:2d:75:48:9b:48:ff:5f:8d:77:32:39:
                    8a:97:de:0d:91:f2:31:a6:b3:67:09:07:9e:32:2e:
                    4a:bc:0a:27:dd:c3:3f:0a:76:66:99:9f:6d:4a:e8:
                    ae:85:28:e5:a8:0b:0b:0e:7c:f2:55:f2:3e:f3:ab:
                    ee:8d:62:98:65:5f:16:49:14:55:00:92:45:46:0a:
                    3a:4f:78:a1:f6:85:ae:ab:bd:e1:b3:cf:28:65:a4:
                    e2:a7:cc:5f:76:8b:51:b3:d2:1b:88:69:ac:94:a1:
                    7e:0e:ce:53:e3:6c:34:56:57:56:16:66:aa:d3:7e:
                    45:54:fb:af:22:e7:cb:67:34:e3:47:ed:28:63:b6:
                    a0:69:97:66:18:d6:d5:4e:15:ab:ed:33:f2:2e:4c:
                    18:c5:d2:bb:2c:f4:74:76:6f:29:1a:71:ed:d1:1f:
                    cc:ef:fa:1f:11:c8:d3:14:c6:a7:09:f4:e1:fe:53:
                    fe:25:27:77:24:26:6a:d0:16:3e:51:45:ca:5d:3f:
                    0e:fb:fa:59:45:81:78:f4:3b:f1:1e:d9:9a:bb:2d:
                    5f:67:00:55:ba:76:f7:cc:5e:a8:c8:2b:14:88:4d:
                    69:70:68:eb:ae:ee:18:56:6f:4b:61:95:a4:43:67:
                    78:9b:33:3d:38:c3:aa:0c:85:14:ae:f8:2c:fd:f4:
                    79:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:AB:94:B6:52:C1:5A:26:6E:31:AB:10:05:74:77:C9:43:9F:D6:B2
            X509v3 Authority Key Identifier:
                keyid:8D:C2:ED:08:70:A0:05:15:26:06:E2:E6:BE:B6:B6:C7:8A:52:2A:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8919b80d-4693-4095-a9e3-412e12828ff2/0/8DC2ED0870A005152606E2E6BEB6B6C78A522AF4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DC2ED0870A005152606E2E6BEB6B6C78A522AF4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8919b80d-4693-4095-a9e3-412e12828ff2/0/3130332e3137322e33302e302f32342d3234203d3e20313437303737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.172.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ae:8b:2b:9b:90:77:2d:81:44:ff:d9:91:88:ae:36:17:5c:11:
         64:4d:7a:f4:a0:96:e3:fb:1e:43:0a:31:c2:7e:22:b8:65:bb:
         de:ee:b1:78:6a:af:ba:54:d1:06:b3:ad:36:e0:1f:fc:c1:bc:
         ca:bd:5a:d8:81:73:86:0d:2c:44:cd:be:af:2a:d8:95:f5:36:
         8e:91:ee:c2:c3:a9:f0:66:d3:79:3e:08:63:5e:99:f2:fe:0d:
         01:8d:5e:a0:a0:f0:f6:0f:65:5d:f9:fb:ab:9e:89:b7:22:da:
         ab:e7:88:56:c6:29:10:57:ef:16:58:05:a4:21:3a:de:7d:20:
         a1:43:9b:d4:3a:a6:e2:24:2d:7f:bf:2a:24:39:e0:67:15:d8:
         16:0c:3f:d4:a7:68:2f:b1:18:7b:f8:c5:78:0c:b5:d0:1c:fd:
         d7:73:6a:19:c1:2d:86:39:5f:a0:2c:69:f5:61:54:e0:84:9e:
         d5:49:92:ab:50:81:1e:7a:01:c2:0b:10:67:cb:44:39:4f:ac:
         e6:2f:6b:d8:ae:c7:91:bb:f7:a0:61:a9:11:7e:d6:de:a2:c4:
         3b:b2:bb:fb:9e:4e:69:f4:cc:09:0f:b2:cb:4b:01:f8:1e:96:
         12:ca:d4:fa:90:79:0d:02:8a:73:94:65:69:4e:8d:74:2f:26:
         05:c2:82:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 20:51:05 2025 by rpki-client