Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/50661332-3773-45d6-801a-1d7eae341cac/0/3130332e3138302e3136362e302f32342d3234203d3e20313439333635.roa
File:                     3130332e3138302e3136362e302f32342d3234203d3e20313439333635.roa (raw, json)
Hash identifier:          0JmyDde/8xa7KVgULa8LHSN/eOm6rNnYk0rlEuieKDo=
Subject key identifier:   46:28:B2:21:CB:3D:2A:26:F3:A5:87:B1:64:1B:B0:D9:98:BA:BD:59
Certificate issuer:       /CN=EE6CBB9BBDADA4EABD41A094453212A55B300C81
Certificate serial:       26DD5F10529F98878022D0899B5381C2E7D9D4A8
Authority key identifier: EE:6C:BB:9B:BD:AD:A4:EA:BD:41:A0:94:45:32:12:A5:5B:30:0C:81
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EE6CBB9BBDADA4EABD41A094453212A55B300C81.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/50661332-3773-45d6-801a-1d7eae341cac/0/3130332e3138302e3136362e302f32342d3234203d3e20313439333635.roa
Signing time:             Thu 09 Oct 2025 12:02:25 +0000
ROA not before:           Thu 09 Oct 2025 11:57:25 +0000
ROA not after:            Thu 08 Oct 2026 12:02:25 +0000
asID:                     149365
IP address blocks:        103.180.166.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/50661332-3773-45d6-801a-1d7eae341cac/0/EE6CBB9BBDADA4EABD41A094453212A55B300C81.crl
                          rsync://repo-rpki.idnic.net/repo/50661332-3773-45d6-801a-1d7eae341cac/0/EE6CBB9BBDADA4EABD41A094453212A55B300C81.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EE6CBB9BBDADA4EABD41A094453212A55B300C81.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 21 Oct 2025 21:31:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:dd:5f:10:52:9f:98:87:80:22:d0:89:9b:53:81:c2:e7:d9:d4:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE6CBB9BBDADA4EABD41A094453212A55B300C81
        Validity
            Not Before: Oct  9 11:57:25 2025 GMT
            Not After : Oct  8 12:02:25 2026 GMT
        Subject: CN=4628B221CB3D2A26F3A587B1641BB0D998BABD59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:e8:dc:4a:7b:c2:89:65:c6:e2:fb:00:c6:63:
                    cc:35:75:ec:7a:e4:7a:42:03:80:ac:6d:20:f5:4e:
                    c6:c5:04:9f:6f:78:0b:8d:0e:6c:d3:13:69:3e:42:
                    cd:57:c2:b0:49:74:34:ef:3c:f2:cb:ef:cc:71:fb:
                    28:24:b5:1e:0f:32:5f:a1:b7:1b:20:8a:e1:42:4d:
                    f9:43:6d:8e:d0:a3:72:f7:2c:59:40:c5:1a:fb:d9:
                    69:5a:da:79:13:22:12:c1:d6:67:54:40:6d:81:fd:
                    32:cb:7c:3f:c6:b5:ab:a3:a7:68:24:30:81:fa:75:
                    a9:8d:e4:80:7f:ab:af:70:45:bc:87:99:8d:11:f0:
                    a4:1b:79:2d:ec:59:6f:c4:4e:b2:5b:5d:7f:49:bb:
                    bf:2e:44:39:59:73:ad:6a:a1:c4:ac:d8:cc:bc:1f:
                    32:97:0b:e3:3b:22:fa:7a:ab:bc:69:65:34:64:54:
                    06:a5:41:71:f7:bb:e1:55:43:22:27:8d:3a:f1:61:
                    cd:c5:05:21:c7:20:66:9a:e6:5b:b8:06:20:c8:9f:
                    4f:66:9a:fd:05:e2:29:b4:e1:f1:16:7e:fd:d8:19:
                    80:37:c5:67:fe:59:02:50:d7:33:dc:2c:db:7c:be:
                    f5:09:49:b3:c6:40:a7:3e:8d:54:a1:7a:6e:41:1c:
                    f6:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:28:B2:21:CB:3D:2A:26:F3:A5:87:B1:64:1B:B0:D9:98:BA:BD:59
            X509v3 Authority Key Identifier:
                keyid:EE:6C:BB:9B:BD:AD:A4:EA:BD:41:A0:94:45:32:12:A5:5B:30:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/50661332-3773-45d6-801a-1d7eae341cac/0/EE6CBB9BBDADA4EABD41A094453212A55B300C81.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EE6CBB9BBDADA4EABD41A094453212A55B300C81.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/50661332-3773-45d6-801a-1d7eae341cac/0/3130332e3138302e3136362e302f32342d3234203d3e20313439333635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.180.166.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:d3:38:d3:c6:a4:2f:09:81:68:e8:84:5f:89:c8:8d:72:cd:
         fe:14:a4:08:44:3e:bd:5d:8e:e8:c6:d8:ce:be:fb:04:e0:59:
         74:f3:9a:45:39:1e:fc:85:92:47:a7:f4:dd:87:5f:87:7a:f9:
         a3:2e:37:b8:5f:38:90:ec:d7:98:92:86:4e:52:cf:65:51:a0:
         5e:0a:6b:f8:10:d0:3c:46:e8:90:ed:17:9a:8f:5c:96:1c:a3:
         ce:cb:ba:92:8c:dc:17:6f:3f:20:53:84:3e:bb:9a:b4:37:22:
         9c:44:17:a7:e2:78:fd:3d:52:b8:5f:e3:e5:26:2c:6f:cb:65:
         8e:eb:bc:20:31:34:fd:8d:48:a5:1f:05:e1:8a:f0:66:2e:59:
         6b:5b:f5:46:8e:a8:c3:f5:b7:c7:6d:ea:e8:df:b8:9f:7c:63:
         06:7a:a7:c6:f7:1f:64:79:75:eb:73:a2:27:11:47:e5:d7:68:
         e3:89:b0:b1:55:13:8c:30:5d:41:c0:91:98:0c:fe:ca:66:7c:
         a6:44:1e:6b:80:61:d1:77:6e:f6:33:f1:67:20:26:41:d0:b1:
         b9:5e:e7:d8:7b:37:52:91:0d:42:69:c1:e0:e3:12:08:de:72:
         df:25:ea:7f:a7:9b:af:f7:31:1a:64:de:6b:d3:0d:41:d0:3d:
         5f:1f:ba:8d
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUJt1fEFKfmIeAItCJm1OBwufZ1KgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU2Q0JCOUJCREFEQTRFQUJENDFBMDk0NDUzMjEyQTU1
QjMwMEM4MTAeFw0yNTEwMDkxMTU3MjVaFw0yNjEwMDgxMjAyMjVaMDMxMTAvBgNV
BAMTKDQ2MjhCMjIxQ0IzRDJBMjZGM0E1ODdCMTY0MUJCMEQ5OThCQUJENTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDd6NxKe8KJZcbi+wDGY8w1dex6
5HpCA4CsbSD1TsbFBJ9veAuNDmzTE2k+Qs1XwrBJdDTvPPLL78xx+ygktR4PMl+h
txsgiuFCTflDbY7Qo3L3LFlAxRr72Wla2nkTIhLB1mdUQG2B/TLLfD/Gtaujp2gk
MIH6damN5IB/q69wRbyHmY0R8KQbeS3sWW/ETrJbXX9Ju78uRDlZc61qocSs2My8
HzKXC+M7Ivp6q7xpZTRkVAalQXH3u+FVQyInjTrxYc3FBSHHIGaa5lu4BiDIn09m
mv0F4im04fEWfv3YGYA3xWf+WQJQ1zPcLNt8vvUJSbPGQKc+jVShem5BHPbdAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQURiiyIcs9KibzpYexZBuw2Zi6vVkwHwYDVR0j
BBgwFoAU7my7m72tpOq9QaCURTISpVswDIEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81
MDY2MTMzMi0zNzczLTQ1ZDYtODAxYS0xZDdlYWUzNDFjYWMvMC9FRTZDQkI5QkJE
QURBNEVBQkQ0MUEwOTQ0NTMyMTJBNTVCMzAwQzgxLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRUU2Q0JCOUJCREFEQTRFQUJENDFBMDk0NDUzMjEyQTU1QjMw
MEM4MS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzUwNjYxMzMyLTM3NzMtNDVkNi04
MDFhLTFkN2VhZTM0MWNhYy8wLzMxMzAzMzJlMzEzODMwMmUzMTM2MzYyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzkzMzM2MzUucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABntKYwDQYJ
KoZIhvcNAQELBQADggEBAF/TONPGpC8JgWjohF+JyI1yzf4UpAhEPr1djujG2M6+
+wTgWXTzmkU5HvyFkken9N2HX4d6+aMuN7hfOJDs15iShk5Sz2VRoF4Ka/gQ0DxG
6JDtF5qPXJYco87LupKM3BdvPyBThD67mrQ3IpxEF6fieP09Urhf4+UmLG/LZY7r
vCAxNP2NSKUfBeGK8GYuWWtb9UaOqMP1t8dt6ujfuJ98YwZ6p8b3H2R5detzoicR
R+XXaOOJsLFVE4wwXUHAkZgM/spmfKZEHmuAYdF3bvYz8WcgJkHQsble59h7N1KR
DUJpweDjEgject8l6n+nm6/3MRpk3mvTDUHQPV8fuo0=
-----END CERTIFICATE-----
Generated at Mon Oct 20 21:00:02 2025 by rpki-client