Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/3130332e38322e3138302e302f32342d3234203d3e20313336303631.roa
File:                     3130332e38322e3138302e302f32342d3234203d3e20313336303631.roa (raw, json)
Hash identifier:          J0EZhqosWRvlsFynFqUSuIzOBFwrUDGcW8i8aa6gdz0=
Subject key identifier:   C8:9F:48:DC:FE:D7:44:89:9B:95:35:F9:CE:03:84:A4:8A:32:CE:79
Certificate issuer:       /CN=D1CE4EF910CAB784EF293D26D983A92FCB3A3428
Certificate serial:       28DDA0C2E8A78B7908AE3359831B86A452B2EB4A
Authority key identifier: D1:CE:4E:F9:10:CA:B7:84:EF:29:3D:26:D9:83:A9:2F:CB:3A:34:28
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/3130332e38322e3138302e302f32342d3234203d3e20313336303631.roa
Signing time:             Fri 26 Sep 2025 13:00:01 +0000
ROA not before:           Fri 26 Sep 2025 12:55:01 +0000
ROA not after:            Fri 25 Sep 2026 13:00:01 +0000
asID:                     136061
IP address blocks:        103.82.180.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.crl
                          rsync://repo-rpki.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Oct 2025 05:05:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:dd:a0:c2:e8:a7:8b:79:08:ae:33:59:83:1b:86:a4:52:b2:eb:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1CE4EF910CAB784EF293D26D983A92FCB3A3428
        Validity
            Not Before: Sep 26 12:55:01 2025 GMT
            Not After : Sep 25 13:00:01 2026 GMT
        Subject: CN=C89F48DCFED744899B9535F9CE0384A48A32CE79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:7b:69:a2:b8:aa:6d:11:ac:13:cf:dd:1a:6a:
                    7e:be:a5:07:f4:db:11:c0:57:21:69:99:16:75:b2:
                    80:87:03:46:a9:35:d5:2c:48:99:32:e5:b2:09:d0:
                    ec:a3:02:f6:0c:37:9f:50:34:f4:74:d7:0c:60:f5:
                    9a:99:2c:79:0a:7b:b6:53:bc:4a:c1:3f:44:b8:b6:
                    6a:52:0c:89:22:92:95:1a:fc:4d:12:fc:17:14:0a:
                    bd:73:11:8b:d5:95:7c:86:9e:06:15:1d:c8:b6:ef:
                    cc:c5:24:61:bc:94:0e:0f:0e:cb:9f:7e:e0:d8:58:
                    6d:e0:73:94:12:af:95:11:0b:53:1a:02:62:05:b5:
                    40:74:fc:04:09:29:ad:af:82:45:bd:05:11:73:b3:
                    51:6e:2f:97:dd:a4:9d:66:da:36:22:9d:d0:e2:09:
                    b9:2b:e8:44:a8:6a:e4:2a:79:cb:30:ac:27:f6:c7:
                    15:95:77:25:d5:44:16:41:2e:f2:69:a4:37:ef:80:
                    3f:06:af:6c:01:fa:9d:07:e0:26:0f:cd:22:9d:67:
                    12:e9:7e:17:1c:93:cf:18:17:28:5c:c3:70:bf:92:
                    f8:da:25:5e:74:3f:e4:bb:0f:cf:08:58:a9:40:ed:
                    9b:ee:dd:c5:f6:85:5a:4e:1c:3c:88:1d:86:60:07:
                    bf:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:9F:48:DC:FE:D7:44:89:9B:95:35:F9:CE:03:84:A4:8A:32:CE:79
            X509v3 Authority Key Identifier:
                keyid:D1:CE:4E:F9:10:CA:B7:84:EF:29:3D:26:D9:83:A9:2F:CB:3A:34:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/3130332e38322e3138302e302f32342d3234203d3e20313336303631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.82.180.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:cb:07:82:1c:37:88:97:4a:75:a7:b4:0b:12:4c:0e:a2:10:
         e4:24:cd:6b:64:4d:42:14:20:1e:98:24:22:86:87:34:fc:17:
         7a:e0:08:4d:42:14:5c:1c:59:e4:4f:c5:19:ef:ea:5e:92:26:
         55:4b:5b:b8:27:82:05:9b:90:c2:ab:db:09:f0:ec:10:cb:e7:
         77:f8:52:a7:e6:9a:4c:c0:59:1e:3d:72:bb:58:1a:07:7a:bd:
         40:f8:7d:b7:0f:b3:af:94:cc:6c:98:8c:91:fc:ea:93:1c:04:
         42:fc:d3:bf:00:1c:e5:22:21:47:9f:11:51:74:14:08:74:c9:
         44:2f:36:c2:2c:48:c7:01:d8:79:c2:38:c7:56:16:5e:c3:e5:
         00:74:a5:d8:6c:97:bc:03:90:36:22:e0:b3:eb:c6:5c:74:1d:
         8f:d1:32:bf:6e:06:40:8b:9d:84:a3:40:d1:6f:87:7d:05:12:
         02:b0:ec:ee:e6:ef:11:dd:8f:2a:f8:27:20:80:94:06:38:b0:
         93:7a:bd:e9:13:10:b4:9f:b2:a5:72:a7:30:57:0e:75:d5:fb:
         cd:cc:92:b6:46:ae:c8:3c:07:ed:86:e2:cb:0b:ad:a0:14:d2:
         f3:84:02:13:fb:58:88:ba:ad:c1:11:c4:83:b9:9f:b2:72:03:
         d2:b5:05:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:41:10 2025 by rpki-client