Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/07680d0d-e240-4aaf-bc23-282359373289/0/3130332e3138362e3230342e302f32342d3234203d3e20313439373233.roa
File:                     3130332e3138362e3230342e302f32342d3234203d3e20313439373233.roa (raw, json)
Hash identifier:          qzLGHfcWhuFFpcCWkM64jiLAbtuonm9KkM2Hh0roSHc=
Subject key identifier:   0F:64:AC:3C:07:78:E9:1B:F4:6E:B9:72:A0:F1:6E:EA:EB:84:CD:81
Certificate issuer:       /CN=D4171C4C06975A4309FC59F2D340D6801EC26DD1
Certificate serial:       761DF6D1A8310C51E4ECDD9A6A0C49BBF4D42BF7
Authority key identifier: D4:17:1C:4C:06:97:5A:43:09:FC:59:F2:D3:40:D6:80:1E:C2:6D:D1
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D4171C4C06975A4309FC59F2D340D6801EC26DD1.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/07680d0d-e240-4aaf-bc23-282359373289/0/3130332e3138362e3230342e302f32342d3234203d3e20313439373233.roa
Signing time:             Wed 15 Apr 2026 22:00:00 +0000
ROA not before:           Wed 15 Apr 2026 21:55:00 +0000
ROA not after:            Wed 14 Apr 2027 22:00:00 +0000
asID:                     149723
IP address blocks:        103.186.204.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/07680d0d-e240-4aaf-bc23-282359373289/0/D4171C4C06975A4309FC59F2D340D6801EC26DD1.crl
                          rsync://repo-rpki.idnic.net/repo/07680d0d-e240-4aaf-bc23-282359373289/0/D4171C4C06975A4309FC59F2D340D6801EC26DD1.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D4171C4C06975A4309FC59F2D340D6801EC26DD1.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 22:50:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:1d:f6:d1:a8:31:0c:51:e4:ec:dd:9a:6a:0c:49:bb:f4:d4:2b:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D4171C4C06975A4309FC59F2D340D6801EC26DD1
        Validity
            Not Before: Apr 15 21:55:00 2026 GMT
            Not After : Apr 14 22:00:00 2027 GMT
        Subject: CN=0F64AC3C0778E91BF46EB972A0F16EEAEB84CD81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:c0:16:48:e7:92:08:c1:b3:aa:49:99:de:db:
                    85:af:2b:df:67:45:87:17:42:da:02:f7:f0:7e:bb:
                    f7:fe:86:56:1d:34:60:ac:94:f0:4a:b7:8b:32:43:
                    b0:26:a3:0e:05:9f:66:69:6f:42:bf:18:3b:ac:44:
                    61:5a:e8:11:ac:b9:2a:40:e0:71:10:27:85:57:d7:
                    d7:a2:7d:d4:12:3f:61:31:c5:dd:1b:7b:83:d7:0d:
                    15:22:d3:80:71:06:14:8b:fa:2c:34:8c:aa:c5:82:
                    5c:3e:84:27:a1:f0:0f:8f:5c:e6:7f:c6:95:c1:b3:
                    48:c8:99:c3:c3:16:1c:21:1e:94:b4:3c:ef:e0:1d:
                    4a:86:ce:b4:46:23:f6:97:f5:fd:ec:f5:47:12:71:
                    87:f6:e8:58:69:ae:fb:e2:79:39:19:65:c7:6a:f6:
                    fb:49:c9:7a:74:95:83:7c:b7:14:3b:12:93:0f:1d:
                    92:da:72:f5:c1:4f:24:77:13:00:cd:2b:34:4e:07:
                    18:d9:38:4e:e3:a2:f9:4b:75:19:04:64:54:9d:9d:
                    f9:18:4d:a5:8f:fe:aa:4f:18:ff:76:3f:a7:4d:56:
                    f9:63:ec:22:12:5a:1f:9b:d1:73:7c:e2:81:d9:86:
                    aa:13:4a:70:e3:3d:48:3e:80:34:cc:fd:80:40:2b:
                    bc:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:64:AC:3C:07:78:E9:1B:F4:6E:B9:72:A0:F1:6E:EA:EB:84:CD:81
            X509v3 Authority Key Identifier:
                keyid:D4:17:1C:4C:06:97:5A:43:09:FC:59:F2:D3:40:D6:80:1E:C2:6D:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/07680d0d-e240-4aaf-bc23-282359373289/0/D4171C4C06975A4309FC59F2D340D6801EC26DD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D4171C4C06975A4309FC59F2D340D6801EC26DD1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/07680d0d-e240-4aaf-bc23-282359373289/0/3130332e3138362e3230342e302f32342d3234203d3e20313439373233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.186.204.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:42:a8:bc:a2:b4:e3:09:11:63:25:cf:74:69:5c:a9:e0:ff:
         7d:61:1e:79:86:66:3e:e3:8c:0e:99:3d:99:c7:a6:cb:35:88:
         5e:09:23:a4:61:7a:7c:d6:ff:c3:7c:4b:fa:6a:05:26:27:85:
         1f:b4:c6:75:72:d4:a3:57:20:d6:bb:a8:43:9b:62:c1:d6:e0:
         18:3f:9a:1f:89:09:9f:5a:1c:5e:8d:ec:1a:0d:12:93:4c:12:
         b5:db:b8:0f:33:f6:c0:26:97:2a:19:c0:94:6e:f6:47:a2:4f:
         52:d8:66:dd:68:0d:a7:d3:10:6b:65:5c:6e:b6:20:c4:2a:a7:
         d2:8a:44:6c:73:e2:14:0b:76:6c:91:4e:ed:f6:91:0f:87:e6:
         7f:b3:b4:c9:97:f0:e8:0f:ba:df:ac:e3:a4:df:a3:40:7c:e5:
         da:fb:70:9f:f4:fb:28:95:2e:49:0a:44:44:f5:80:c3:94:89:
         e6:ab:03:73:48:01:30:28:77:a9:bd:dd:c6:cf:ce:61:ee:91:
         c4:5f:9a:3c:39:b5:21:77:7a:e5:7e:29:50:28:bb:78:1b:0e:
         cb:5f:01:d0:30:d1:98:6a:07:fd:4f:8a:09:eb:34:e9:2c:fa:
         a7:00:2e:a7:28:0c:86:69:55:7e:59:19:d7:a3:9c:70:ea:22:
         d6:e9:30:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:37:51 2026 by rpki-client