Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/dbbcbfd9-57df-490c-88fc-00d360070651/0/3130332e3138302e3132372e302f32342d3234203d3e20313439333734.roa
File:                     3130332e3138302e3132372e302f32342d3234203d3e20313439333734.roa (raw, json)
Hash identifier:          3Knx8y7HjCayzY59m9qpVEW2nzLHDq9oC5iOSNpESSg=
Subject key identifier:   FE:CF:7C:BC:D6:8C:A9:9C:8C:46:98:EE:FA:D8:FB:8E:FA:13:6C:40
Certificate issuer:       /CN=569E00BE70FA71DE5510B7D81700C2EB98DAD8C6
Certificate serial:       2776BC1ABE67D4A1DE08D74C10025E5F6BB98378
Authority key identifier: 56:9E:00:BE:70:FA:71:DE:55:10:B7:D8:17:00:C2:EB:98:DA:D8:C6
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/569E00BE70FA71DE5510B7D81700C2EB98DAD8C6.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/dbbcbfd9-57df-490c-88fc-00d360070651/0/3130332e3138302e3132372e302f32342d3234203d3e20313439333734.roa
Signing time:             Tue 04 Nov 2025 01:00:01 +0000
ROA not before:           Tue 04 Nov 2025 00:55:01 +0000
ROA not after:            Tue 03 Nov 2026 01:00:01 +0000
asID:                     149374
IP address blocks:        103.180.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/dbbcbfd9-57df-490c-88fc-00d360070651/0/569E00BE70FA71DE5510B7D81700C2EB98DAD8C6.crl
                          rsync://repo-rpki.idnic.net/repo/dbbcbfd9-57df-490c-88fc-00d360070651/0/569E00BE70FA71DE5510B7D81700C2EB98DAD8C6.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/569E00BE70FA71DE5510B7D81700C2EB98DAD8C6.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Nov 2025 02:34:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:76:bc:1a:be:67:d4:a1:de:08:d7:4c:10:02:5e:5f:6b:b9:83:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=569E00BE70FA71DE5510B7D81700C2EB98DAD8C6
        Validity
            Not Before: Nov  4 00:55:01 2025 GMT
            Not After : Nov  3 01:00:01 2026 GMT
        Subject: CN=FECF7CBCD68CA99C8C4698EEFAD8FB8EFA136C40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:cf:d0:55:c1:45:ab:0f:ad:da:ff:b6:76:8e:
                    a6:52:1f:ab:2e:36:ca:55:73:e2:76:17:14:4c:38:
                    a8:0c:0f:cd:77:0f:7b:4e:98:5a:cb:51:06:dd:18:
                    c5:1e:64:ea:dd:32:d7:c6:3a:e4:85:0a:f2:db:63:
                    2e:79:54:be:4a:b0:65:df:0b:84:a1:72:03:1f:b1:
                    94:f5:7a:45:f5:2e:84:71:22:71:f9:dc:eb:20:42:
                    a8:3c:69:c8:a5:59:58:9a:95:75:8b:1c:07:7d:a9:
                    c5:10:be:e4:6c:fb:cf:3e:82:93:d7:ec:b2:3d:ed:
                    87:52:cf:6e:b0:a5:24:f8:8b:7c:74:c4:77:0e:a4:
                    50:68:2d:34:ac:04:64:19:c0:fa:56:36:67:12:cf:
                    fc:78:f0:1e:92:27:b6:23:8a:ea:ba:86:54:a4:73:
                    07:56:7d:ef:93:bb:1d:e0:98:3d:27:87:92:28:7f:
                    e9:45:ea:19:d8:b1:80:57:57:b7:85:e3:39:72:0c:
                    37:7b:e2:36:47:19:f1:3d:c4:85:2a:c6:ea:fd:87:
                    cf:db:09:6f:10:e3:e9:b3:36:7a:11:d6:e0:5e:f3:
                    a2:a3:01:2d:4f:94:e7:dc:5d:97:4a:1c:30:fc:bd:
                    7d:05:58:3b:fa:c3:f7:d0:19:ea:90:3a:f5:4c:f7:
                    a1:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:CF:7C:BC:D6:8C:A9:9C:8C:46:98:EE:FA:D8:FB:8E:FA:13:6C:40
            X509v3 Authority Key Identifier:
                keyid:56:9E:00:BE:70:FA:71:DE:55:10:B7:D8:17:00:C2:EB:98:DA:D8:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/dbbcbfd9-57df-490c-88fc-00d360070651/0/569E00BE70FA71DE5510B7D81700C2EB98DAD8C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/569E00BE70FA71DE5510B7D81700C2EB98DAD8C6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dbbcbfd9-57df-490c-88fc-00d360070651/0/3130332e3138302e3132372e302f32342d3234203d3e20313439333734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.180.127.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:d7:7e:5b:b8:8b:ca:4b:25:5b:73:c0:af:cb:e8:3f:71:6b:
         1d:0b:68:8e:3f:e3:1b:c3:ef:9a:3f:24:4e:45:39:a2:1e:ab:
         29:85:b1:cd:20:be:c5:7a:cb:82:12:36:ee:1e:eb:fa:3e:14:
         89:61:4b:c0:21:4d:f2:f2:9e:b5:7c:70:0a:47:32:e5:13:2a:
         62:65:e8:c9:5d:30:6f:5a:c8:0b:89:c2:24:be:49:fa:85:38:
         ef:96:4d:ab:fd:4c:9a:4b:70:28:1c:ce:d7:86:8b:80:1c:8e:
         7d:80:56:a3:de:90:55:9e:7a:0a:32:36:a4:2b:dc:2a:6e:06:
         f1:80:e6:c0:a8:de:6b:f5:f4:55:d1:f7:81:3a:15:2a:67:22:
         79:7d:c9:8e:a3:1a:61:b3:b2:9f:f2:21:17:39:b8:d2:23:29:
         2c:97:af:0a:d7:56:0e:fb:9b:e5:82:c1:d9:bd:e9:1e:32:1f:
         12:04:3b:b3:08:e2:20:90:57:55:4e:24:1a:27:8a:7d:7f:ef:
         e1:1e:a5:94:ee:07:e7:d2:02:94:89:e5:cb:e0:11:1b:f2:d8:
         ba:a6:96:1b:9a:02:e3:6c:50:cc:78:06:10:c5:18:4e:27:2b:
         05:d8:77:87:c2:6c:bb:93:4a:b9:38:cf:ec:ab:44:82:51:7a:
         33:e7:eb:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 08:17:59 2025 by rpki-client