Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/03a79d95-64a9-4809-94b2-62de24192245/0/3130332e3137382e31332e302f32342d3234203d3e20313437313635.roa
File:                     3130332e3137382e31332e302f32342d3234203d3e20313437313635.roa (raw, json)
Hash identifier:          3AxVb6J8QGyIMX4nnpHtCvYFVxODojImY3S+dPMLim4=
Subject key identifier:   EF:85:FD:A8:E0:7B:10:4D:DA:8E:11:B8:C3:4D:09:92:0D:A1:26:99
Certificate issuer:       /CN=032FA8F0C6C70F4D276EF4A2E9C85F6AAE925AE8
Certificate serial:       5DFA699FF39DD31D59FBBA353ABC8D9E5B1593E8
Authority key identifier: 03:2F:A8:F0:C6:C7:0F:4D:27:6E:F4:A2:E9:C8:5F:6A:AE:92:5A:E8
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/032FA8F0C6C70F4D276EF4A2E9C85F6AAE925AE8.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/03a79d95-64a9-4809-94b2-62de24192245/0/3130332e3137382e31332e302f32342d3234203d3e20313437313635.roa
Signing time:             Fri 03 Apr 2026 05:03:58 +0000
ROA not before:           Fri 03 Apr 2026 04:58:58 +0000
ROA not after:            Fri 02 Apr 2027 05:03:58 +0000
asID:                     147165
IP address blocks:        103.178.13.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/03a79d95-64a9-4809-94b2-62de24192245/0/032FA8F0C6C70F4D276EF4A2E9C85F6AAE925AE8.crl
                          rsync://repo-rpki.idnic.net/repo/03a79d95-64a9-4809-94b2-62de24192245/0/032FA8F0C6C70F4D276EF4A2E9C85F6AAE925AE8.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/032FA8F0C6C70F4D276EF4A2E9C85F6AAE925AE8.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 20 Apr 2026 08:18:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:fa:69:9f:f3:9d:d3:1d:59:fb:ba:35:3a:bc:8d:9e:5b:15:93:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=032FA8F0C6C70F4D276EF4A2E9C85F6AAE925AE8
        Validity
            Not Before: Apr  3 04:58:58 2026 GMT
            Not After : Apr  2 05:03:58 2027 GMT
        Subject: CN=EF85FDA8E07B104DDA8E11B8C34D09920DA12699
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:a9:79:df:e4:19:fa:04:32:43:7e:bc:a7:fc:
                    62:76:f2:b1:0e:de:39:bc:00:3e:d7:1c:94:a1:b9:
                    e0:69:6c:a7:1a:f0:ac:e6:49:ba:6f:28:c7:d0:fd:
                    38:8c:23:cc:df:17:c0:34:88:0c:c3:36:cf:f0:a2:
                    04:25:43:ff:1f:63:16:ad:b9:83:78:29:1c:b6:2d:
                    6a:b7:d7:c5:d2:a7:27:6f:fb:c9:3a:15:3e:b6:9f:
                    84:bb:d1:28:bb:5a:b1:7e:51:eb:25:a1:5e:fd:a2:
                    d0:ee:2e:14:75:6a:4a:23:5a:cb:c1:18:ea:3f:82:
                    fc:43:1a:6e:74:8c:0a:5e:f1:d0:91:94:cd:86:eb:
                    50:45:8f:06:6f:3f:9c:a8:b2:34:87:62:ee:51:93:
                    4b:c0:dc:fd:ec:ad:a3:6f:46:18:2e:35:87:62:5c:
                    cb:7d:c3:25:c6:ab:dd:77:93:43:22:c7:93:37:22:
                    74:5b:15:af:be:34:69:be:21:25:a6:28:fc:da:a4:
                    bd:85:5d:92:f4:76:9f:17:e1:37:a1:50:83:fb:a1:
                    4d:9e:75:c2:13:0e:b3:94:4b:5f:80:02:c7:c7:52:
                    01:ab:7f:8c:e7:d3:44:b4:36:64:2e:40:bf:50:8a:
                    01:c0:17:54:56:a6:5f:40:c2:2d:10:c7:7e:90:3b:
                    05:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:85:FD:A8:E0:7B:10:4D:DA:8E:11:B8:C3:4D:09:92:0D:A1:26:99
            X509v3 Authority Key Identifier:
                keyid:03:2F:A8:F0:C6:C7:0F:4D:27:6E:F4:A2:E9:C8:5F:6A:AE:92:5A:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/03a79d95-64a9-4809-94b2-62de24192245/0/032FA8F0C6C70F4D276EF4A2E9C85F6AAE925AE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/032FA8F0C6C70F4D276EF4A2E9C85F6AAE925AE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/03a79d95-64a9-4809-94b2-62de24192245/0/3130332e3137382e31332e302f32342d3234203d3e20313437313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.178.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ed:16:6a:23:44:18:65:93:7e:a1:66:23:08:79:82:ca:b4:f8:
         a6:33:69:7c:17:b8:da:eb:d4:06:c0:83:fd:fd:5b:ea:cd:46:
         80:84:e0:d4:18:ba:59:da:11:4a:c1:b7:19:9e:48:b7:d3:f9:
         d9:dd:82:92:d4:0b:de:4a:cf:ed:a8:ba:33:67:15:1b:fa:9e:
         43:c7:c6:ec:8b:73:17:fc:78:f7:72:34:df:48:78:16:94:53:
         8c:59:6b:34:b6:11:eb:81:d6:45:88:71:f4:b3:a0:bb:22:cb:
         c9:8c:d1:50:54:f3:2f:ca:be:b0:af:c4:d7:39:5a:f7:11:7a:
         56:f8:ca:eb:73:a3:d1:64:40:86:42:0b:02:46:42:0c:30:55:
         74:38:7d:6c:d5:6c:61:9d:7e:4d:dc:87:b9:67:12:24:72:ba:
         fc:44:0a:1f:7d:0c:0c:be:8e:5c:b8:54:21:90:76:d3:a6:66:
         19:fd:1b:10:52:e1:2e:a1:1d:9f:b6:2a:99:37:bb:5d:84:1e:
         d9:44:96:2b:bc:79:7e:b4:09:7f:70:66:b7:4f:e1:3b:49:e5:
         b5:3a:fd:f5:44:b0:9d:b9:58:ee:eb:00:78:98:f0:e9:c7:03:
         b3:77:74:8f:df:3b:ff:cf:f7:1b:7f:aa:5c:65:e5:f2:9b:ff:
         9f:d9:db:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:44:58 2026 by rpki-client