Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/1249d387-70cf-40e9-8759-9b86e0c65128/0/3130332e3138302e3235302e302f32332d3234203d3e20313439333733.roa
File:                     3130332e3138302e3235302e302f32332d3234203d3e20313439333733.roa (raw, json)
Hash identifier:          6+aOTOrAxzWsWipZ2VbdRwlhEyJYsC/PS67oMR2JaEk=
Subject key identifier:   D7:0B:FB:79:4E:89:A2:1D:CE:51:A4:70:FF:5D:0F:D5:43:F0:2B:4E
Certificate issuer:       /CN=1697127AE288F4C03503ED0ED8F09BD7A10A1E20
Certificate serial:       4295DDC16BD959191B5D9B6CECDCC3BCBC49AAB1
Authority key identifier: 16:97:12:7A:E2:88:F4:C0:35:03:ED:0E:D8:F0:9B:D7:A1:0A:1E:20
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1697127AE288F4C03503ED0ED8F09BD7A10A1E20.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/1249d387-70cf-40e9-8759-9b86e0c65128/0/3130332e3138302e3235302e302f32332d3234203d3e20313439333733.roa
Signing time:             Tue 24 Jun 2025 12:33:55 +0000
ROA not before:           Tue 24 Jun 2025 12:28:55 +0000
ROA not after:            Tue 23 Jun 2026 12:33:55 +0000
asID:                     149373
IP address blocks:        103.180.250.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/1249d387-70cf-40e9-8759-9b86e0c65128/0/1697127AE288F4C03503ED0ED8F09BD7A10A1E20.crl
                          rsync://repo-rpki.idnic.net/repo/1249d387-70cf-40e9-8759-9b86e0c65128/0/1697127AE288F4C03503ED0ED8F09BD7A10A1E20.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1697127AE288F4C03503ED0ED8F09BD7A10A1E20.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 08 Jul 2025 17:39:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:95:dd:c1:6b:d9:59:19:1b:5d:9b:6c:ec:dc:c3:bc:bc:49:aa:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1697127AE288F4C03503ED0ED8F09BD7A10A1E20
        Validity
            Not Before: Jun 24 12:28:55 2025 GMT
            Not After : Jun 23 12:33:55 2026 GMT
        Subject: CN=D70BFB794E89A21DCE51A470FF5D0FD543F02B4E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:72:34:09:fa:f7:48:0f:0c:63:74:e2:ba:4f:
                    26:a9:25:32:7a:8c:f2:6e:b7:9a:75:fc:eb:b1:a9:
                    66:ad:3f:13:cd:4d:05:49:06:e9:a3:79:10:77:33:
                    af:ab:83:ce:10:29:e4:f2:44:fc:89:da:5f:28:7c:
                    43:1e:aa:de:3c:41:29:f4:ed:46:d1:c6:76:89:05:
                    cf:6d:28:0e:e8:94:a0:fd:5c:45:1a:06:81:00:e1:
                    25:21:10:e1:02:a6:32:c9:ce:e8:0f:a7:08:e6:bf:
                    6b:3e:db:fb:15:66:fb:ba:ad:dc:a6:35:d9:47:51:
                    8c:d6:1a:03:bb:7c:4a:93:3d:d5:0a:9b:67:73:26:
                    a5:c3:c9:c6:08:31:76:11:6b:1d:01:10:1f:59:3b:
                    a9:4b:9a:43:fe:50:e0:2c:a4:e9:95:a8:cd:ea:6b:
                    a6:05:ec:83:4b:34:c7:f8:17:d8:e0:f0:f6:c1:a8:
                    a6:c3:bf:65:5d:b4:ac:69:5a:06:ed:24:4e:1b:50:
                    11:0c:cb:43:21:7c:37:d3:9c:cd:7e:20:c8:ea:86:
                    32:9b:84:c3:91:35:37:ba:75:1b:eb:26:03:3f:66:
                    0a:30:2c:03:62:ea:28:0b:30:bd:42:d1:4d:c2:a2:
                    07:c6:77:2e:95:6b:65:36:f6:90:1d:3c:33:5b:ea:
                    3c:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:0B:FB:79:4E:89:A2:1D:CE:51:A4:70:FF:5D:0F:D5:43:F0:2B:4E
            X509v3 Authority Key Identifier:
                keyid:16:97:12:7A:E2:88:F4:C0:35:03:ED:0E:D8:F0:9B:D7:A1:0A:1E:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/1249d387-70cf-40e9-8759-9b86e0c65128/0/1697127AE288F4C03503ED0ED8F09BD7A10A1E20.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1697127AE288F4C03503ED0ED8F09BD7A10A1E20.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1249d387-70cf-40e9-8759-9b86e0c65128/0/3130332e3138302e3235302e302f32332d3234203d3e20313439333733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.180.250.0/23

    Signature Algorithm: sha256WithRSAEncryption
         49:f5:41:df:28:a7:f2:56:b2:28:72:ee:b9:20:80:9c:f7:ff:
         90:e6:8a:c8:78:ee:51:5e:ca:e2:bf:35:be:ad:1c:5f:87:2b:
         a6:09:e6:30:12:e3:f5:b9:83:0c:a6:85:c5:f1:e9:a3:e7:c6:
         8e:fa:22:88:b1:dd:62:2d:44:2d:8a:fb:f8:8b:39:29:3a:d6:
         52:08:9a:1c:a0:c1:d6:53:8e:6b:4a:29:0e:6e:26:3f:e2:1d:
         a0:fb:60:c1:68:d4:8d:e1:f2:23:17:e3:10:71:99:dd:ab:5d:
         7d:3e:ae:91:cc:f8:69:5f:2f:2e:98:72:65:c1:43:e9:b9:42:
         ef:f8:f8:7d:89:c3:1b:41:2d:a1:0d:32:a2:a0:11:7d:5e:bb:
         27:d6:8d:40:9f:44:a0:48:5f:46:64:cc:1f:3b:8e:6a:d3:fd:
         b6:db:cd:da:5c:d4:29:cd:68:56:e9:7b:25:d2:67:65:f8:c9:
         de:a0:5b:90:23:23:c4:31:61:34:17:ac:27:41:28:7a:e7:9e:
         e9:75:02:3e:e9:fb:87:a1:55:5b:dc:94:f2:f7:2f:2e:99:5b:
         bd:59:5a:ca:2b:f6:8f:84:b1:2a:66:82:35:26:d6:15:e7:86:
         dc:6b:38:97:c0:39:d6:c3:f8:81:d2:ee:0b:38:ed:bd:64:6f:
         68:0e:27:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 6 00:07:58 2025 by rpki-client