Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/36cc4734-beb6-4e33-9b1c-46dcd16425a1/0/3130332e3138312e37372e302f32342d3234203d3e20313430343233.roa
File:                     3130332e3138312e37372e302f32342d3234203d3e20313430343233.roa (raw, json)
Hash identifier:          ysHwcI5ENqF/e0DNaL77TsbeGSsghP307b8/eRPgpE4=
Subject key identifier:   12:5B:BB:0F:2A:63:ED:93:67:A0:D2:47:CF:96:E7:1E:01:95:2E:56
Certificate issuer:       /CN=35C14EEB27CE42DEB1F331CF080FE5F918D2364E
Certificate serial:       5A83E904D34B3E6C6B8A3E58B03A2BBCD61548A0
Authority key identifier: 35:C1:4E:EB:27:CE:42:DE:B1:F3:31:CF:08:0F:E5:F9:18:D2:36:4E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35C14EEB27CE42DEB1F331CF080FE5F918D2364E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/36cc4734-beb6-4e33-9b1c-46dcd16425a1/0/3130332e3138312e37372e302f32342d3234203d3e20313430343233.roa
Signing time:             Mon 03 Nov 2025 11:33:24 +0000
ROA not before:           Mon 03 Nov 2025 11:28:24 +0000
ROA not after:            Mon 02 Nov 2026 11:33:24 +0000
asID:                     140423
IP address blocks:        103.181.77.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/36cc4734-beb6-4e33-9b1c-46dcd16425a1/0/35C14EEB27CE42DEB1F331CF080FE5F918D2364E.crl
                          rsync://repo-rpki.idnic.net/repo/36cc4734-beb6-4e33-9b1c-46dcd16425a1/0/35C14EEB27CE42DEB1F331CF080FE5F918D2364E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35C14EEB27CE42DEB1F331CF080FE5F918D2364E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 06 Nov 2025 12:41:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:83:e9:04:d3:4b:3e:6c:6b:8a:3e:58:b0:3a:2b:bc:d6:15:48:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35C14EEB27CE42DEB1F331CF080FE5F918D2364E
        Validity
            Not Before: Nov  3 11:28:24 2025 GMT
            Not After : Nov  2 11:33:24 2026 GMT
        Subject: CN=125BBB0F2A63ED9367A0D247CF96E71E01952E56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:3b:05:78:05:8c:19:c2:ab:f2:e1:54:7a:a5:
                    43:0e:fa:d3:ae:71:68:c6:e4:3a:cb:1a:64:c2:ad:
                    05:50:36:97:ee:9f:06:2d:ca:57:89:6f:00:25:4b:
                    25:e5:c5:81:72:67:d9:37:84:c0:a0:8f:4d:09:38:
                    e5:91:c7:67:dc:5f:e4:51:ef:2a:c0:1a:8b:bd:30:
                    9b:e9:df:36:19:bf:54:a0:3f:52:e9:f0:dc:1d:75:
                    f2:4b:80:45:cf:31:3b:45:91:bd:90:4b:95:f5:79:
                    65:c2:48:c7:e8:64:c6:9f:00:97:f5:6d:7e:49:ac:
                    31:05:44:71:96:6d:49:1c:24:6a:1c:47:34:8e:8c:
                    53:5e:95:12:73:b9:99:b5:f4:96:fc:c0:d9:e2:57:
                    56:ff:b1:29:92:48:a6:d6:30:d9:6c:3f:f3:39:76:
                    9a:9d:64:38:80:6a:30:53:6c:cd:14:d2:c1:14:e1:
                    d2:41:c0:7f:2e:14:6f:6e:a0:cd:9d:4d:fa:6e:6b:
                    89:1c:06:91:2b:69:23:35:7f:13:f2:ee:f2:47:0e:
                    00:e4:9c:9f:8e:68:05:58:d9:a8:e0:0e:f4:f9:da:
                    b7:cd:97:1f:a2:14:e0:ac:7c:63:a9:5b:23:27:f5:
                    56:b0:97:e5:bc:c3:08:ae:f8:ae:08:5d:63:60:9e:
                    7a:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:5B:BB:0F:2A:63:ED:93:67:A0:D2:47:CF:96:E7:1E:01:95:2E:56
            X509v3 Authority Key Identifier:
                keyid:35:C1:4E:EB:27:CE:42:DE:B1:F3:31:CF:08:0F:E5:F9:18:D2:36:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/36cc4734-beb6-4e33-9b1c-46dcd16425a1/0/35C14EEB27CE42DEB1F331CF080FE5F918D2364E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35C14EEB27CE42DEB1F331CF080FE5F918D2364E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/36cc4734-beb6-4e33-9b1c-46dcd16425a1/0/3130332e3138312e37372e302f32342d3234203d3e20313430343233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.181.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:05:a7:41:d9:09:29:9c:80:6d:70:82:2e:5f:17:f2:91:8b:
         ad:3a:b9:97:9d:f6:76:a6:14:5e:76:2c:d7:4f:55:ea:49:c2:
         fe:0e:fa:f7:9c:83:e9:48:f3:ce:0e:c6:3c:5c:75:98:8f:65:
         a3:04:8e:05:4c:5a:51:2d:83:0a:e4:67:87:78:6a:0a:e4:67:
         cc:ce:7a:24:7f:7b:b9:4a:7b:ba:59:37:b8:e4:1a:96:37:3c:
         25:19:f1:9b:e7:29:1b:f8:c1:7c:0a:0c:51:2a:d7:52:d5:af:
         60:92:9d:d2:a2:5e:92:60:fd:bc:aa:95:95:9e:89:7d:aa:0f:
         de:e6:87:8b:02:b0:9c:29:b9:3f:51:3d:c4:c8:22:7f:51:67:
         54:eb:4d:89:e3:f5:3c:40:0f:c3:22:a2:b4:cf:df:0e:41:bf:
         23:a1:90:3d:87:6b:83:8c:08:c0:84:88:19:07:60:d4:05:50:
         09:f3:05:49:18:6a:28:b7:6b:2b:04:d9:c5:2a:9f:4a:2d:e1:
         4e:80:36:2c:17:5d:51:e1:c9:af:60:e8:c3:b3:0c:2e:2d:0c:
         ca:21:c1:4a:3b:4a:c7:08:c6:bb:79:92:a7:11:08:23:6c:ff:
         c3:83:ac:1d:f0:9b:16:74:fd:bc:98:da:4a:d9:cd:53:ae:e2:
         c2:ae:d9:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 06:47:32 2025 by rpki-client