Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/3130332e33392e31322e302f32342d3234203d3e203633383237.roa
File:                     3130332e33392e31322e302f32342d3234203d3e203633383237.roa (raw, json)
Hash identifier:          f4T+onCxZDveeFTCMzFwwEAIgiLhuur5vB8ungh3o6Q=
Subject key identifier:   37:67:13:1C:6E:6B:96:D5:81:3C:58:CB:96:FB:E7:65:07:C9:DB:9A
Certificate issuer:       /CN=F69B637EA94DE4CC9150BDFD5327BE03A033784B
Certificate serial:       07F4E52E8FFF01CBDD1BD704E6F6A36DAE272E67
Authority key identifier: F6:9B:63:7E:A9:4D:E4:CC:91:50:BD:FD:53:27:BE:03:A0:33:78:4B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F69B637EA94DE4CC9150BDFD5327BE03A033784B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/3130332e33392e31322e302f32342d3234203d3e203633383237.roa
Signing time:             Wed 22 Oct 2025 08:00:02 +0000
ROA not before:           Wed 22 Oct 2025 07:55:02 +0000
ROA not after:            Wed 21 Oct 2026 08:00:02 +0000
asID:                     63827
IP address blocks:        103.39.12.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/F69B637EA94DE4CC9150BDFD5327BE03A033784B.crl
                          rsync://repo-rpki.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/F69B637EA94DE4CC9150BDFD5327BE03A033784B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F69B637EA94DE4CC9150BDFD5327BE03A033784B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 08 Nov 2025 10:23:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:f4:e5:2e:8f:ff:01:cb:dd:1b:d7:04:e6:f6:a3:6d:ae:27:2e:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F69B637EA94DE4CC9150BDFD5327BE03A033784B
        Validity
            Not Before: Oct 22 07:55:02 2025 GMT
            Not After : Oct 21 08:00:02 2026 GMT
        Subject: CN=3767131C6E6B96D5813C58CB96FBE76507C9DB9A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:40:f7:b2:1e:1d:55:6c:47:42:9c:ca:c1:fb:
                    a9:aa:20:b3:a3:f2:5d:25:6d:85:9b:44:ac:32:54:
                    cb:c2:b2:f3:ac:16:a5:4f:1e:ed:24:e8:42:28:2d:
                    19:8d:d4:3b:c2:87:88:77:f4:51:c8:e2:b2:62:2f:
                    51:cd:12:c4:dc:5a:d6:1e:b1:e3:00:84:ff:53:6f:
                    17:6f:b2:7d:b0:07:76:53:e9:e6:8f:8f:d6:3b:05:
                    21:b4:69:8a:0b:3d:51:f4:95:0e:80:76:ee:f7:1f:
                    4e:49:b7:86:c6:e5:52:9e:a7:6e:23:4a:47:5b:85:
                    20:a1:3a:6f:fa:cb:07:ed:e0:b0:a1:55:1b:e5:45:
                    59:6f:5b:41:3f:fb:a7:ab:f9:f3:2c:a8:b5:df:f4:
                    bc:6f:fa:f0:04:22:80:43:92:56:7f:cc:a8:a7:cc:
                    ff:98:c7:2d:27:63:27:7a:87:cc:1e:a5:f2:6d:77:
                    f9:92:01:70:ae:7c:c7:cf:dc:85:a3:40:ee:fe:5c:
                    fe:be:bb:02:3a:0c:76:53:e0:7d:b9:5e:a3:dc:8c:
                    38:6d:87:87:4d:30:47:81:49:72:2a:48:28:02:86:
                    e8:b5:08:50:9b:ed:20:46:fd:c7:9d:d7:80:9a:f4:
                    cc:4b:3d:2a:ee:51:2a:b0:63:00:b3:a6:6b:65:c5:
                    57:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:67:13:1C:6E:6B:96:D5:81:3C:58:CB:96:FB:E7:65:07:C9:DB:9A
            X509v3 Authority Key Identifier:
                keyid:F6:9B:63:7E:A9:4D:E4:CC:91:50:BD:FD:53:27:BE:03:A0:33:78:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/F69B637EA94DE4CC9150BDFD5327BE03A033784B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F69B637EA94DE4CC9150BDFD5327BE03A033784B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/3130332e33392e31322e302f32342d3234203d3e203633383237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.39.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:2e:a8:b8:b8:d2:74:0b:1c:44:2c:87:7c:65:a6:a3:9f:55:
         55:1a:8f:45:07:7d:03:93:2b:38:47:f7:18:eb:68:3b:d8:3e:
         ea:48:79:59:a4:18:4d:64:8a:10:3e:6a:70:4c:69:2f:52:a5:
         0a:a0:9f:fb:2e:da:f2:32:47:6f:5c:be:95:ac:dd:4c:df:4c:
         88:d8:5f:0c:16:4d:5b:87:75:9a:3a:65:43:90:22:80:d7:d6:
         f5:4f:e2:13:61:d5:05:1e:f9:1e:50:73:2f:54:76:e5:35:1d:
         f5:ee:8a:9c:ed:4d:36:4b:0c:4b:c6:e8:da:c4:6c:04:20:f9:
         e8:0b:e8:72:ed:20:5c:ab:52:30:65:60:21:ae:7a:19:8a:57:
         08:03:b8:38:fa:9b:58:46:56:bc:36:ad:84:ee:9d:d1:ea:72:
         e3:29:9e:3b:92:f8:38:5b:e4:53:ee:b3:ec:10:e8:70:37:3b:
         8f:a9:6d:b8:77:00:0a:7c:df:95:d6:21:57:83:ee:93:b4:c7:
         64:1d:d6:80:bb:c7:43:51:1c:46:e9:61:eb:e0:0c:d6:8c:79:
         a1:02:65:88:1d:f0:a1:31:71:98:ea:fb:58:c9:24:c2:21:45:
         3f:a9:f9:fd:a8:da:0a:39:25:e8:45:75:71:8d:69:87:52:dd:
         0d:fa:c5:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:25:27 2025 by rpki-client