Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/6d80b321-aa31-4317-9d31-c2bd190c1384/0/3130332e3137392e3133362e302f32332d3234203d3e20313339393737.roa
File:                     3130332e3137392e3133362e302f32332d3234203d3e20313339393737.roa (raw, json)
Hash identifier:          TPHc8hMgpG4lNB1VT7M46EhAo2F9SEdX4ITwbrTmfrk=
Subject key identifier:   C8:1B:BD:A8:16:20:DB:2D:E3:6A:3D:E1:F0:2D:D9:A8:5A:6D:33:21
Certificate issuer:       /CN=5E027C2ABE4A1F46340ED83A3AD8F06DBCCDCD21
Certificate serial:       167F21CAC5B26CE49DBF7086B7918E12BCE4AEA9
Authority key identifier: 5E:02:7C:2A:BE:4A:1F:46:34:0E:D8:3A:3A:D8:F0:6D:BC:CD:CD:21
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5E027C2ABE4A1F46340ED83A3AD8F06DBCCDCD21.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6d80b321-aa31-4317-9d31-c2bd190c1384/0/3130332e3137392e3133362e302f32332d3234203d3e20313339393737.roa
Signing time:             Wed 24 Sep 2025 09:00:02 +0000
ROA not before:           Wed 24 Sep 2025 08:55:02 +0000
ROA not after:            Wed 23 Sep 2026 09:00:02 +0000
asID:                     139977
IP address blocks:        103.179.136.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/6d80b321-aa31-4317-9d31-c2bd190c1384/0/5E027C2ABE4A1F46340ED83A3AD8F06DBCCDCD21.crl
                          rsync://repo-rpki.idnic.net/repo/6d80b321-aa31-4317-9d31-c2bd190c1384/0/5E027C2ABE4A1F46340ED83A3AD8F06DBCCDCD21.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5E027C2ABE4A1F46340ED83A3AD8F06DBCCDCD21.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Oct 2025 21:54:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:7f:21:ca:c5:b2:6c:e4:9d:bf:70:86:b7:91:8e:12:bc:e4:ae:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5E027C2ABE4A1F46340ED83A3AD8F06DBCCDCD21
        Validity
            Not Before: Sep 24 08:55:02 2025 GMT
            Not After : Sep 23 09:00:02 2026 GMT
        Subject: CN=C81BBDA81620DB2DE36A3DE1F02DD9A85A6D3321
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:c1:db:cf:ba:60:4b:77:79:41:93:72:4c:ff:
                    da:ad:f2:b8:2b:14:1e:e0:3b:02:de:8e:a7:3b:5f:
                    3a:34:ac:42:88:a9:c7:ef:26:57:92:d1:8b:bd:4d:
                    01:dd:85:fb:c0:1a:10:6f:c0:21:1b:bd:0f:99:45:
                    f7:02:cf:ce:5f:ac:44:ce:7a:19:70:f6:a5:4f:7e:
                    9a:7b:94:a1:b5:eb:6c:22:5d:28:f7:a2:42:37:a6:
                    55:a8:07:18:63:f2:48:ba:3c:69:7f:b9:e7:37:46:
                    35:da:6b:c6:a8:0f:a9:24:a6:c4:61:20:46:cd:c7:
                    55:52:82:bd:f1:b3:df:1d:df:02:1a:60:fc:a7:75:
                    6a:f8:b3:b8:19:0f:54:cf:4c:76:23:2a:41:06:94:
                    53:6e:51:21:e1:87:62:d8:58:11:8c:4c:13:d6:04:
                    14:78:0c:82:99:d9:45:86:34:c5:e1:a8:16:5e:25:
                    6f:fd:f1:66:6d:d2:e0:eb:7a:fa:ac:b2:78:89:1f:
                    c8:45:a5:3a:03:a1:59:ba:d9:af:01:e0:3d:36:f2:
                    c9:84:00:3e:bb:fa:7a:de:92:d8:18:d6:19:1a:df:
                    6f:08:ed:59:7b:3a:75:ef:ed:ba:92:06:c1:02:14:
                    b8:cd:ae:9c:16:ab:b4:85:46:21:89:80:02:ec:57:
                    b1:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:1B:BD:A8:16:20:DB:2D:E3:6A:3D:E1:F0:2D:D9:A8:5A:6D:33:21
            X509v3 Authority Key Identifier:
                keyid:5E:02:7C:2A:BE:4A:1F:46:34:0E:D8:3A:3A:D8:F0:6D:BC:CD:CD:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6d80b321-aa31-4317-9d31-c2bd190c1384/0/5E027C2ABE4A1F46340ED83A3AD8F06DBCCDCD21.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5E027C2ABE4A1F46340ED83A3AD8F06DBCCDCD21.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6d80b321-aa31-4317-9d31-c2bd190c1384/0/3130332e3137392e3133362e302f32332d3234203d3e20313339393737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.179.136.0/23

    Signature Algorithm: sha256WithRSAEncryption
         43:ef:33:69:56:3a:ab:3a:f5:49:86:5b:1a:6f:63:7b:f4:c4:
         7a:61:b3:53:84:30:08:f6:f2:b9:ad:47:f0:ed:2d:7a:37:bc:
         b9:0e:60:85:b2:58:99:82:45:30:ca:50:f9:0a:0c:68:3b:49:
         6b:ab:16:21:09:d2:81:cd:5f:6f:1f:5f:bd:40:76:eb:b0:ca:
         bf:67:6b:30:aa:4a:56:30:b7:e4:40:de:71:55:0a:df:e1:61:
         ff:1c:38:a8:68:0e:39:84:4e:4d:15:07:6b:a9:47:6e:2a:3d:
         01:ab:bd:ca:1c:75:98:9a:b0:8a:6b:9a:0a:71:70:2e:88:77:
         fb:a0:cb:5f:21:39:29:5b:f9:90:58:8a:f1:43:10:e9:48:a8:
         7f:81:d7:49:ae:c5:21:3a:8c:4f:dd:5d:d8:86:b6:2e:dc:a2:
         2f:46:9a:f3:13:51:dd:7b:18:b2:73:0c:b9:38:6e:bd:b2:b4:
         12:ef:86:6a:68:b2:0e:65:aa:f4:38:ea:ea:3c:e2:9a:a3:72:
         dd:40:e9:67:79:b0:d2:88:2e:d4:43:af:8c:39:fd:2d:d2:46:
         71:4a:15:51:7a:73:f9:29:a2:c6:a1:69:90:90:45:91:bf:de:
         a8:f2:39:a5:89:21:01:29:92:6a:37:1e:e2:dd:06:a0:a1:aa:
         61:49:da:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:18:09 2025 by rpki-client