Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c13739e1-b5db-4734-838a-b0b580beb9f3/0/3130332e3137382e39302e302f32342d3234203d3e20313430343034.roa
File:                     3130332e3137382e39302e302f32342d3234203d3e20313430343034.roa (raw, json)
Hash identifier:          OK/qKcmCWZLbUU0gqTVd4CzrA30sPM3AN1RD82duRis=
Subject key identifier:   27:92:83:85:F4:D9:81:FB:96:EE:A4:C4:D8:5F:35:4E:5D:67:7C:DD
Certificate issuer:       /CN=411479424B4016269EB9E266CD48905F63DC9F0B
Certificate serial:       0CC6C0AE54F5B169C47A3013E0645BA907D462C0
Authority key identifier: 41:14:79:42:4B:40:16:26:9E:B9:E2:66:CD:48:90:5F:63:DC:9F:0B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/411479424B4016269EB9E266CD48905F63DC9F0B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c13739e1-b5db-4734-838a-b0b580beb9f3/0/3130332e3137382e39302e302f32342d3234203d3e20313430343034.roa
Signing time:             Fri 29 Aug 2025 19:00:00 +0000
ROA not before:           Fri 29 Aug 2025 18:55:00 +0000
ROA not after:            Fri 28 Aug 2026 19:00:00 +0000
asID:                     140404
IP address blocks:        103.178.90.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c13739e1-b5db-4734-838a-b0b580beb9f3/0/411479424B4016269EB9E266CD48905F63DC9F0B.crl
                          rsync://repo-rpki.idnic.net/repo/c13739e1-b5db-4734-838a-b0b580beb9f3/0/411479424B4016269EB9E266CD48905F63DC9F0B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/411479424B4016269EB9E266CD48905F63DC9F0B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 10 Sep 2025 23:24:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:c6:c0:ae:54:f5:b1:69:c4:7a:30:13:e0:64:5b:a9:07:d4:62:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=411479424B4016269EB9E266CD48905F63DC9F0B
        Validity
            Not Before: Aug 29 18:55:00 2025 GMT
            Not After : Aug 28 19:00:00 2026 GMT
        Subject: CN=27928385F4D981FB96EEA4C4D85F354E5D677CDD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:2c:9b:bd:5c:f5:f1:13:c8:9d:83:d1:f2:43:
                    3f:1c:3e:cc:27:09:c2:00:c5:2e:71:be:16:5d:86:
                    d7:0a:09:cb:f0:2d:4e:d8:fe:de:41:26:92:4a:39:
                    2c:84:fd:51:7f:b3:a9:e1:7d:de:cc:44:9a:16:e2:
                    4b:d1:d4:e4:be:f4:cc:f6:67:5d:4a:24:da:62:b1:
                    96:1e:cb:ac:11:be:44:97:bd:43:b6:7a:f1:49:8c:
                    7f:49:8c:50:b3:5d:c1:a8:49:4b:42:54:75:7f:0f:
                    c5:50:f5:ea:f4:b5:e0:0a:bd:e1:5b:db:52:38:bc:
                    24:8b:75:da:95:5e:fc:f7:d7:f9:2b:e3:32:20:b9:
                    d7:3f:6d:2f:f5:de:f4:bb:c4:09:40:fc:05:fa:bc:
                    9f:0c:59:3d:9f:21:b7:db:69:f9:a7:43:4a:35:07:
                    df:8a:19:27:ed:53:95:ad:3a:4e:5f:c9:13:8c:b1:
                    6a:2c:71:43:80:1c:c0:16:67:f0:87:eb:7c:0b:43:
                    8d:e9:f3:ce:98:e4:12:b6:5c:b1:8f:98:f7:30:f9:
                    6e:53:13:23:43:f3:52:d7:4e:79:65:c3:fd:53:d1:
                    16:cb:b3:96:2f:75:13:ba:e8:15:7a:7d:3e:a8:67:
                    1d:aa:81:f3:bf:d5:ca:f0:88:ab:18:08:44:b4:97:
                    bb:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:92:83:85:F4:D9:81:FB:96:EE:A4:C4:D8:5F:35:4E:5D:67:7C:DD
            X509v3 Authority Key Identifier:
                keyid:41:14:79:42:4B:40:16:26:9E:B9:E2:66:CD:48:90:5F:63:DC:9F:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c13739e1-b5db-4734-838a-b0b580beb9f3/0/411479424B4016269EB9E266CD48905F63DC9F0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/411479424B4016269EB9E266CD48905F63DC9F0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c13739e1-b5db-4734-838a-b0b580beb9f3/0/3130332e3137382e39302e302f32342d3234203d3e20313430343034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.178.90.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:c3:8d:1c:19:ca:b9:5a:51:f0:0c:ca:80:f4:69:f5:d6:60:
         eb:7f:a2:9d:d7:07:e5:3b:a1:56:09:6f:18:b0:a7:64:8c:ac:
         fa:56:45:62:a3:c4:15:89:82:2d:96:c4:d4:53:4b:eb:a3:e1:
         13:b7:7d:67:77:bb:de:20:e4:47:f8:6d:11:54:31:bf:29:68:
         3f:e0:22:6c:6a:92:94:7c:86:9a:7b:d8:8d:8e:6a:08:66:d9:
         49:ad:75:2b:16:34:e7:93:a2:ae:29:04:f9:97:3d:a1:51:3a:
         f4:92:8e:4b:a0:7f:fd:73:7d:a6:96:27:2b:44:04:12:33:40:
         9b:09:2d:7d:90:e7:63:65:cb:32:20:ee:67:7f:c7:87:dc:8f:
         00:74:ab:ed:d5:29:79:b9:74:19:eb:56:59:d6:8e:5f:c3:04:
         24:7a:d7:07:44:de:96:a5:9d:38:27:27:c7:be:b9:67:07:59:
         3c:1e:1c:a0:f1:de:a5:01:be:0d:08:41:76:38:30:a3:62:4f:
         55:46:bd:cd:fb:bd:15:14:89:61:0f:2a:25:47:6b:6a:4e:1c:
         9f:08:bd:fc:09:17:50:f3:be:07:33:c1:a5:b0:be:a0:c1:55:
         71:c7:a9:ab:1d:96:5d:0e:db:7e:98:21:27:eb:1b:e0:3d:13:
         24:9b:0b:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 03:04:41 2025 by rpki-client