Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/064ff7c9-e905-44d6-bc35-c7dbb070b757/0/3130332e3139322e38312e302f32342d3234203d3e20313530393137.roa
File:                     3130332e3139322e38312e302f32342d3234203d3e20313530393137.roa (raw, json)
Hash identifier:          aQThgKjoVxAf8QUrNI1h0L0h88SAkOAfUq9vTc5dAGo=
Subject key identifier:   CF:15:0B:5D:E7:AA:AB:F7:4E:B0:97:ED:14:3E:03:44:3D:C4:A6:B9
Certificate issuer:       /CN=893997EF53FFBB5A3C55A47213135040C1C5B843
Certificate serial:       3366E519ECF5BA620E4CD3265E8E0815A6DC84C6
Authority key identifier: 89:39:97:EF:53:FF:BB:5A:3C:55:A4:72:13:13:50:40:C1:C5:B8:43
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/893997EF53FFBB5A3C55A47213135040C1C5B843.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/064ff7c9-e905-44d6-bc35-c7dbb070b757/0/3130332e3139322e38312e302f32342d3234203d3e20313530393137.roa
Signing time:             Thu 26 Feb 2026 09:03:15 +0000
ROA not before:           Thu 26 Feb 2026 08:58:15 +0000
ROA not after:            Thu 25 Feb 2027 09:03:15 +0000
asID:                     150917
IP address blocks:        103.192.81.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/064ff7c9-e905-44d6-bc35-c7dbb070b757/0/893997EF53FFBB5A3C55A47213135040C1C5B843.crl
                          rsync://repo-rpki.idnic.net/repo/064ff7c9-e905-44d6-bc35-c7dbb070b757/0/893997EF53FFBB5A3C55A47213135040C1C5B843.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/893997EF53FFBB5A3C55A47213135040C1C5B843.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Mar 2026 02:47:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:66:e5:19:ec:f5:ba:62:0e:4c:d3:26:5e:8e:08:15:a6:dc:84:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=893997EF53FFBB5A3C55A47213135040C1C5B843
        Validity
            Not Before: Feb 26 08:58:15 2026 GMT
            Not After : Feb 25 09:03:15 2027 GMT
        Subject: CN=CF150B5DE7AAABF74EB097ED143E03443DC4A6B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:29:4a:5c:ef:ce:de:ca:37:66:44:2d:61:06:
                    62:67:de:49:41:6f:0c:cf:fd:31:4e:b7:cb:09:9d:
                    31:40:ea:ea:55:68:b2:ef:16:95:8b:50:14:5f:63:
                    c9:5b:f3:d5:98:2d:f0:66:19:28:bf:6e:5f:f9:39:
                    7f:4b:b7:ab:95:56:b8:5b:dd:03:51:56:78:a5:df:
                    31:3c:21:51:21:2d:90:0c:97:d8:5d:55:18:43:f3:
                    cd:19:ac:69:03:f6:64:88:58:d9:5e:86:9f:f3:d9:
                    6a:ef:e8:de:5a:c9:c9:53:9c:a3:40:77:eb:24:36:
                    bf:86:72:4b:3a:8f:00:b1:d2:8a:d9:b2:48:84:04:
                    d9:4f:e0:a5:ce:30:3f:60:ce:3f:d2:19:1c:aa:2a:
                    98:3a:79:c8:e8:22:ed:4c:3a:8d:68:a0:2d:3c:b9:
                    a9:9c:10:1c:0f:b4:6d:b7:da:9d:48:06:f8:36:15:
                    d8:a8:65:a2:c8:ee:95:5b:7c:66:a5:a5:30:e0:e8:
                    9f:1e:fa:69:2c:58:b4:dc:91:c9:38:c6:a0:be:82:
                    9d:97:4d:4f:86:08:cb:50:58:46:08:21:cb:2b:4b:
                    b3:19:35:f5:43:db:55:21:48:f4:b7:e5:d7:af:9e:
                    e1:48:ba:39:78:80:98:c6:06:40:e5:1c:b3:64:de:
                    b6:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:15:0B:5D:E7:AA:AB:F7:4E:B0:97:ED:14:3E:03:44:3D:C4:A6:B9
            X509v3 Authority Key Identifier:
                keyid:89:39:97:EF:53:FF:BB:5A:3C:55:A4:72:13:13:50:40:C1:C5:B8:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/064ff7c9-e905-44d6-bc35-c7dbb070b757/0/893997EF53FFBB5A3C55A47213135040C1C5B843.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/893997EF53FFBB5A3C55A47213135040C1C5B843.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/064ff7c9-e905-44d6-bc35-c7dbb070b757/0/3130332e3139322e38312e302f32342d3234203d3e20313530393137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.192.81.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:9a:2d:bc:77:e2:3c:1b:82:a6:36:a4:06:95:e2:88:28:da:
         e7:3d:24:3a:5e:0e:97:93:69:9e:b4:2e:89:72:c1:db:a2:63:
         bd:ce:b3:9e:e9:9d:e9:f3:71:36:70:92:71:e3:4a:a8:6e:49:
         9d:76:9b:5e:59:a4:0e:5c:67:03:56:e0:d8:9a:16:00:7b:f6:
         45:7c:02:ce:cd:28:35:b0:d7:98:c4:87:e2:ce:33:1d:ab:22:
         24:4c:0f:96:ab:40:9a:7c:6e:76:ac:5b:78:b7:83:48:e7:f6:
         3e:ff:4c:5e:f0:61:11:a5:9b:db:66:8d:78:27:06:b2:31:3a:
         0a:5b:3f:e8:b2:a2:43:8c:b8:90:49:e4:9f:ca:7f:48:26:8f:
         bf:6a:63:54:9c:61:f4:54:61:93:c4:28:60:81:27:cb:0e:b1:
         74:55:f0:6b:11:67:1e:91:ef:78:3d:8f:43:4a:8e:47:da:48:
         dd:6a:af:8c:06:3c:35:19:8f:a6:27:17:8c:a4:4f:9b:47:4d:
         11:5b:2e:96:c2:9c:5c:86:15:78:8d:61:91:e4:5b:2d:e5:a6:
         a5:84:f0:04:03:7e:99:e9:e5:3d:ff:e1:58:97:01:5f:ff:65:
         84:a7:94:c8:fe:c8:44:ae:fb:0c:57:54:8d:64:49:03:31:0a:
         e0:cf:18:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 01:14:52 2026 by rpki-client