Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/3130332e3131382e3137352e302f32342d3234203d3e203530313034.roa
File:                     3130332e3131382e3137352e302f32342d3234203d3e203530313034.roa (raw, json)
Hash identifier:          BudoqincKc1GD3R0XKH1VG2/DReqrJGsxd0biSt/A2g=
Subject key identifier:   A7:E2:10:53:8C:35:28:6B:8F:AC:5A:97:A2:ED:ED:AC:6D:3A:14:F7
Certificate issuer:       /CN=DBB18CCF58914524AFB113FE13359CC6B08EFBF3
Certificate serial:       49D0579BE2B3E48D9D14218B47C7A50C9A3B8976
Authority key identifier: DB:B1:8C:CF:58:91:45:24:AF:B1:13:FE:13:35:9C:C6:B0:8E:FB:F3
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/3130332e3131382e3137352e302f32342d3234203d3e203530313034.roa
Signing time:             Tue 27 Jan 2026 03:00:00 +0000
ROA not before:           Tue 27 Jan 2026 02:55:00 +0000
ROA not after:            Tue 26 Jan 2027 03:00:00 +0000
asID:                     50104
IP address blocks:        103.118.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.crl
                          rsync://repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Mar 2026 21:19:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:d0:57:9b:e2:b3:e4:8d:9d:14:21:8b:47:c7:a5:0c:9a:3b:89:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DBB18CCF58914524AFB113FE13359CC6B08EFBF3
        Validity
            Not Before: Jan 27 02:55:00 2026 GMT
            Not After : Jan 26 03:00:00 2027 GMT
        Subject: CN=A7E210538C35286B8FAC5A97A2EDEDAC6D3A14F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:a7:3d:59:b1:16:84:2f:b6:f9:09:53:0e:c8:
                    6c:f2:90:0f:1d:51:15:2a:a4:bb:ed:84:db:62:11:
                    77:f4:ef:56:a8:8b:84:62:eb:ca:b5:77:03:b6:89:
                    b1:c4:41:86:34:9c:59:2a:f9:2b:a0:fb:00:ac:66:
                    4c:1b:0d:87:b7:5a:76:45:e6:9d:b5:d0:0a:0e:05:
                    14:5d:8d:be:12:d9:a6:a5:ee:86:7f:59:84:61:68:
                    4f:a8:b2:bd:e9:b0:df:b9:28:6c:de:5c:b7:25:3d:
                    f8:d0:06:50:94:3c:4c:18:47:04:64:c9:4e:7d:5b:
                    04:24:ab:4c:5c:04:9b:3f:4b:c3:c5:86:5f:dc:3f:
                    84:69:e7:be:a1:1c:57:0e:eb:e1:de:d5:cd:d1:c1:
                    2d:5e:e0:b5:d5:6f:7e:d2:bf:88:82:fc:33:c3:2e:
                    d6:d2:a0:06:9d:bd:db:c0:62:c7:77:c8:7a:a1:db:
                    f7:d4:a3:49:ec:29:ea:77:65:e9:b7:5c:00:60:eb:
                    9e:4b:20:82:d2:e5:7a:89:67:64:4c:51:7b:63:52:
                    23:06:b8:28:15:2b:09:cf:4a:bf:08:a0:77:fd:ad:
                    c2:74:41:f2:09:9f:0c:f7:c7:fd:66:8c:bd:cd:73:
                    de:fb:3a:92:3c:ff:ab:ac:1c:3a:d1:de:c3:7f:c7:
                    f8:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:E2:10:53:8C:35:28:6B:8F:AC:5A:97:A2:ED:ED:AC:6D:3A:14:F7
            X509v3 Authority Key Identifier:
                keyid:DB:B1:8C:CF:58:91:45:24:AF:B1:13:FE:13:35:9C:C6:B0:8E:FB:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/3130332e3131382e3137352e302f32342d3234203d3e203530313034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.118.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:46:6b:ec:6b:fd:20:8c:a7:b8:46:a3:62:b7:da:04:17:31:
         44:bc:3c:59:db:b8:25:f1:72:00:50:9c:5a:ec:af:91:70:03:
         f3:86:30:c8:a6:23:64:62:a0:2c:4f:53:a9:1b:1b:d5:f0:ed:
         d8:01:08:7e:3e:c8:5a:12:c2:86:b4:c7:54:ee:f9:a2:2a:0b:
         3f:f5:bf:de:f4:67:38:8f:f7:0d:fe:91:e7:71:da:2a:73:4e:
         f3:6f:f1:06:54:f0:c5:94:cf:94:a6:34:57:ee:45:ab:91:1b:
         d2:eb:52:58:94:f8:1e:1c:06:06:f6:c8:15:cc:f0:8d:82:d7:
         4c:6b:90:07:a5:d3:dd:49:07:13:93:dd:c5:9e:58:a4:e3:6c:
         12:f1:e4:f1:07:4a:94:5a:70:b6:24:00:3f:03:53:c3:5c:c2:
         d4:9b:59:3d:d8:79:44:38:4a:2f:d7:5f:16:44:41:65:24:ac:
         f7:00:42:89:f0:7e:97:02:e0:b2:eb:d2:fe:11:d2:83:b2:a8:
         53:34:c9:a2:bf:28:dc:67:79:20:be:b7:6e:3e:8a:40:c8:8d:
         fc:b0:e5:0d:b2:d5:fd:7d:b9:5c:91:79:4c:4c:b8:5b:a9:b8:
         55:78:84:cf:6b:79:5f:63:97:d6:9b:82:2f:b6:33:55:16:55:
         c1:56:3a:63
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUSdBXm+Kz5I2dFCGLR8elDJo7iXYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREJCMThDQ0Y1ODkxNDUyNEFGQjExM0ZFMTMzNTlDQzZC
MDhFRkJGMzAeFw0yNjAxMjcwMjU1MDBaFw0yNzAxMjYwMzAwMDBaMDMxMTAvBgNV
BAMTKEE3RTIxMDUzOEMzNTI4NkI4RkFDNUE5N0EyRURFREFDNkQzQTE0RjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHpz1ZsRaEL7b5CVMOyGzykA8d
URUqpLvthNtiEXf071aoi4Ri68q1dwO2ibHEQYY0nFkq+Sug+wCsZkwbDYe3WnZF
5p210AoOBRRdjb4S2aal7oZ/WYRhaE+osr3psN+5KGzeXLclPfjQBlCUPEwYRwRk
yU59WwQkq0xcBJs/S8PFhl/cP4Rp576hHFcO6+He1c3RwS1e4LXVb37Sv4iC/DPD
LtbSoAadvdvAYsd3yHqh2/fUo0nsKep3Zem3XABg655LIILS5XqJZ2RMUXtjUiMG
uCgVKwnPSr8IoHf9rcJ0QfIJnwz3x/1mjL3Nc977OpI8/6usHDrR3sN/x/iZAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUp+IQU4w1KGuPrFqXou3trG06FPcwHwYDVR0j
BBgwFoAU27GMz1iRRSSvsRP+EzWcxrCO+/MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y
N2Q5ZDdjYi02Y2ZiLTRkZTAtOWRhYS1kMjIyYjdhODkwNzIvMC9EQkIxOENDRjU4
OTE0NTI0QUZCMTEzRkUxMzM1OUNDNkIwOEVGQkYzLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvREJCMThDQ0Y1ODkxNDUyNEFGQjExM0ZFMTMzNTlDQzZCMDhF
RkJGMy5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzI3ZDlkN2NiLTZjZmItNGRlMC05
ZGFhLWQyMjJiN2E4OTA3Mi8wLzMxMzAzMzJlMzEzMTM4MmUzMTM3MzUyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzNTMwMzEzMDM0LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ3avMA0GCSqG
SIb3DQEBCwUAA4IBAQCVRmvsa/0gjKe4RqNit9oEFzFEvDxZ27gl8XIAUJxa7K+R
cAPzhjDIpiNkYqAsT1OpGxvV8O3YAQh+PshaEsKGtMdU7vmiKgs/9b/e9Gc4j/cN
/pHncdoqc07zb/EGVPDFlM+UpjRX7kWrkRvS61JYlPgeHAYG9sgVzPCNgtdMa5AH
pdPdSQcTk93Fnlik42wS8eTxB0qUWnC2JAA/A1PDXMLUm1k92HlEOEov118WREFl
JKz3AEKJ8H6XAuCy69L+EdKDsqhTNMmivyjcZ3kgvrduPopAyI38sOUNstX9fblc
kXlMTLhbqbhVeITPa3lfY5fWm4IvtjNVFlXBVjpj
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:25:12 2026 by rpki-client