Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/03908782-4520-45b4-99ed-193e51df51c3/0/3130332e3138302e3136342e302f32332d3233203d3e20313338313331.roa
File:                     3130332e3138302e3136342e302f32332d3233203d3e20313338313331.roa (raw, json)
Hash identifier:          YBihOSXIj0+TsV9w8FB5TlmuTjj67BcUuD5PWZy4luk=
Subject key identifier:   AE:E5:9F:16:69:AB:C2:3D:5B:1D:69:45:FF:73:E5:3F:0B:5F:37:79
Certificate issuer:       /CN=52E77B06BC2691C613C7A9872EE1E28FCB8AA245
Certificate serial:       2003B933801AA17013B015232B9CCABF346EA0BC
Authority key identifier: 52:E7:7B:06:BC:26:91:C6:13:C7:A9:87:2E:E1:E2:8F:CB:8A:A2:45
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52E77B06BC2691C613C7A9872EE1E28FCB8AA245.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/03908782-4520-45b4-99ed-193e51df51c3/0/3130332e3138302e3136342e302f32332d3233203d3e20313338313331.roa
Signing time:             Sat 18 Oct 2025 13:00:00 +0000
ROA not before:           Sat 18 Oct 2025 12:55:00 +0000
ROA not after:            Sat 17 Oct 2026 13:00:00 +0000
asID:                     138131
IP address blocks:        103.180.164.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/03908782-4520-45b4-99ed-193e51df51c3/0/52E77B06BC2691C613C7A9872EE1E28FCB8AA245.crl
                          rsync://repo-rpki.idnic.net/repo/03908782-4520-45b4-99ed-193e51df51c3/0/52E77B06BC2691C613C7A9872EE1E28FCB8AA245.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52E77B06BC2691C613C7A9872EE1E28FCB8AA245.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 21 Oct 2025 16:05:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:03:b9:33:80:1a:a1:70:13:b0:15:23:2b:9c:ca:bf:34:6e:a0:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52E77B06BC2691C613C7A9872EE1E28FCB8AA245
        Validity
            Not Before: Oct 18 12:55:00 2025 GMT
            Not After : Oct 17 13:00:00 2026 GMT
        Subject: CN=AEE59F1669ABC23D5B1D6945FF73E53F0B5F3779
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:dc:4e:4f:a3:2a:36:2c:7d:84:5f:d0:b2:5a:
                    c1:13:a2:31:49:98:7d:0d:d1:7b:c3:5f:90:43:ca:
                    1f:c5:c3:38:42:cc:ce:13:bb:62:3a:85:a8:f4:a7:
                    9a:b9:11:1d:33:8d:f2:30:f9:c1:67:cf:d0:83:42:
                    7d:40:02:58:dd:35:9a:d8:62:10:62:6d:88:46:a3:
                    ea:89:d2:ca:18:65:4d:03:47:6f:24:5f:c7:3d:2b:
                    0b:09:f0:fa:16:78:04:b3:63:c5:e3:a9:ec:fa:7b:
                    e3:52:78:b1:05:f1:2b:f5:e5:7b:a0:36:6c:b0:08:
                    b2:39:e8:11:2c:d9:a2:7b:b9:cb:8b:bb:e9:d3:15:
                    77:af:08:2f:38:ff:79:c8:cb:78:fe:2a:27:80:55:
                    39:d6:b5:81:6a:05:f0:a3:39:e1:9b:9f:6b:6a:26:
                    63:ab:71:ad:26:e5:ff:58:79:2f:45:96:9d:04:ee:
                    56:4d:71:b7:36:5b:47:8d:61:41:af:26:77:1a:34:
                    f3:39:d6:10:ae:20:01:97:f6:61:2d:17:e7:6b:c0:
                    29:7c:61:32:74:41:18:e1:97:99:1f:b4:33:5f:8a:
                    e3:00:00:a5:ea:71:03:9b:50:d6:20:17:31:3a:2e:
                    cc:05:16:ef:75:60:97:41:20:a7:72:81:d4:cf:8a:
                    68:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:E5:9F:16:69:AB:C2:3D:5B:1D:69:45:FF:73:E5:3F:0B:5F:37:79
            X509v3 Authority Key Identifier:
                keyid:52:E7:7B:06:BC:26:91:C6:13:C7:A9:87:2E:E1:E2:8F:CB:8A:A2:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/03908782-4520-45b4-99ed-193e51df51c3/0/52E77B06BC2691C613C7A9872EE1E28FCB8AA245.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52E77B06BC2691C613C7A9872EE1E28FCB8AA245.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/03908782-4520-45b4-99ed-193e51df51c3/0/3130332e3138302e3136342e302f32332d3233203d3e20313338313331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.180.164.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4e:eb:8c:c0:89:d1:6f:7c:3d:0a:92:02:63:a8:5d:f0:28:fa:
         0b:a0:1e:bf:7f:4e:f0:f0:2c:a4:ff:70:2c:54:35:75:a1:f1:
         67:3a:85:3d:82:c9:77:c7:95:1b:57:7a:2a:06:63:6a:71:83:
         60:8c:ef:32:46:0b:3e:39:e6:22:51:21:31:38:7d:b7:bf:b4:
         66:f7:62:8e:6f:a4:7a:a2:ee:3f:b8:bb:5e:09:0b:e2:32:17:
         ff:9c:1b:03:65:54:4b:6d:67:09:db:06:b4:49:ce:9d:6d:f9:
         45:24:b0:30:8d:5f:92:fa:3e:92:52:f6:1b:75:4f:14:36:ee:
         5c:08:a0:64:24:62:27:c6:cb:aa:92:9f:18:ba:80:f7:5d:e2:
         1c:ad:26:78:44:fb:8c:22:97:2b:04:46:d5:3e:a5:39:81:00:
         9b:61:1a:42:cc:7b:df:ad:45:45:03:f9:0a:b0:19:8f:3a:b2:
         13:71:d7:89:e8:a4:49:72:ab:e6:fc:ff:f1:14:a4:e3:75:23:
         e4:6c:3f:98:59:f0:97:89:ee:0c:6e:bf:28:68:f3:68:90:88:
         3a:86:0f:9f:ab:28:a1:05:86:39:a6:92:ea:40:d4:d9:1c:e5:
         e6:cb:98:66:d1:15:c2:81:17:62:05:3e:08:7a:8e:6a:c8:9d:
         e2:35:ad:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:56:41 2025 by rpki-client