Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/0e96ed89-2a16-4151-bf83-59dce561460c/0/3130332e3133322e35322e302f32342d3234203d3e20313338313233.roa
File:                     3130332e3133322e35322e302f32342d3234203d3e20313338313233.roa (raw, json)
Hash identifier:          IhBI48Y0qSwtl0A61dBFnjchaaCHAHneFx+wHoW6B2s=
Subject key identifier:   20:3F:17:D0:FB:DA:4C:D0:97:8C:87:E3:DA:38:8E:A0:4B:95:C6:CA
Certificate issuer:       /CN=B88116E180F32C03362804A81CB0CF2EB0C261B6
Certificate serial:       52A3B9DDFC543181E424A530E41779C42F3BB3BC
Authority key identifier: B8:81:16:E1:80:F3:2C:03:36:28:04:A8:1C:B0:CF:2E:B0:C2:61:B6
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B88116E180F32C03362804A81CB0CF2EB0C261B6.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/0e96ed89-2a16-4151-bf83-59dce561460c/0/3130332e3133322e35322e302f32342d3234203d3e20313338313233.roa
Signing time:             Mon 13 Apr 2026 08:03:31 +0000
ROA not before:           Mon 13 Apr 2026 07:58:31 +0000
ROA not after:            Mon 12 Apr 2027 08:03:31 +0000
asID:                     138123
IP address blocks:        103.132.52.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/0e96ed89-2a16-4151-bf83-59dce561460c/0/B88116E180F32C03362804A81CB0CF2EB0C261B6.crl
                          rsync://repo-rpki.idnic.net/repo/0e96ed89-2a16-4151-bf83-59dce561460c/0/B88116E180F32C03362804A81CB0CF2EB0C261B6.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B88116E180F32C03362804A81CB0CF2EB0C261B6.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 21 Apr 2026 00:12:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:a3:b9:dd:fc:54:31:81:e4:24:a5:30:e4:17:79:c4:2f:3b:b3:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B88116E180F32C03362804A81CB0CF2EB0C261B6
        Validity
            Not Before: Apr 13 07:58:31 2026 GMT
            Not After : Apr 12 08:03:31 2027 GMT
        Subject: CN=203F17D0FBDA4CD0978C87E3DA388EA04B95C6CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:f0:47:1d:eb:76:bc:95:39:e8:9a:82:f5:43:
                    1d:c6:86:be:e8:f4:cd:26:3e:d5:c9:80:95:5d:0f:
                    57:ff:63:37:0a:17:95:42:8e:b8:02:bf:d1:81:a0:
                    5f:0a:ae:d3:0d:86:6e:bc:ea:14:21:cb:4e:81:f3:
                    5a:a2:93:17:54:8d:f5:c8:f7:5a:1b:cc:97:e1:48:
                    90:20:f5:3f:43:2a:46:dc:27:da:a3:46:2a:f9:c4:
                    56:eb:05:83:3f:5c:98:fe:94:2f:76:b2:a8:9c:9d:
                    79:7f:9a:dd:81:82:a2:23:9a:9d:d4:4b:bb:39:69:
                    fe:8c:f0:02:c2:fb:c5:bc:59:98:04:b1:51:38:70:
                    9c:3c:fa:40:b1:4f:74:96:2e:26:2f:a3:58:0b:9b:
                    80:d6:c7:37:5e:66:30:82:02:4a:ef:37:f9:e9:62:
                    01:54:6b:df:f4:cf:be:a1:ab:10:ad:0c:8a:16:53:
                    89:51:be:7a:ff:5a:5d:45:e6:b7:a0:81:70:68:d6:
                    3f:18:20:78:7b:83:db:f6:56:ac:8c:1f:7c:03:56:
                    6b:5a:1f:64:d3:e5:8e:23:48:02:d9:15:4f:c5:95:
                    ba:5a:00:51:5b:82:60:4e:c2:42:f5:e9:7c:17:87:
                    e6:a1:93:d1:82:f0:8f:25:58:2f:66:b7:30:49:50:
                    5e:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:3F:17:D0:FB:DA:4C:D0:97:8C:87:E3:DA:38:8E:A0:4B:95:C6:CA
            X509v3 Authority Key Identifier:
                keyid:B8:81:16:E1:80:F3:2C:03:36:28:04:A8:1C:B0:CF:2E:B0:C2:61:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/0e96ed89-2a16-4151-bf83-59dce561460c/0/B88116E180F32C03362804A81CB0CF2EB0C261B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B88116E180F32C03362804A81CB0CF2EB0C261B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0e96ed89-2a16-4151-bf83-59dce561460c/0/3130332e3133322e35322e302f32342d3234203d3e20313338313233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.132.52.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:d2:62:a4:76:6a:e6:d1:02:99:07:70:ee:66:ba:cb:47:fa:
         30:84:8f:6b:de:f2:42:f0:35:d7:a5:4c:2c:1a:fc:43:0b:ce:
         4f:fb:0f:88:66:b7:d9:a1:28:66:6f:58:9b:d0:a5:48:05:09:
         41:cc:e9:c3:0d:40:db:7a:0f:ff:5e:f3:c8:70:c8:1f:09:be:
         df:f4:98:75:f3:41:f0:4f:51:7d:94:2e:1d:7c:f6:97:50:a7:
         0e:f9:38:3b:5d:0a:ed:b9:f4:56:5c:a6:f9:d2:48:0b:a5:81:
         d4:78:0e:70:4d:33:9e:68:80:e9:66:7c:8f:90:98:70:03:2d:
         c1:c0:5d:40:cc:a1:a0:b7:dd:2f:12:41:28:8f:a4:39:8a:3e:
         13:05:66:28:e4:8c:b3:d3:8a:81:14:30:c4:80:10:4e:24:1b:
         df:2f:6d:0d:5a:7c:72:d8:ea:ac:07:7e:84:f1:23:f7:d4:52:
         56:3d:7a:b9:b2:1c:0a:cb:d9:c5:04:26:8f:16:d1:be:24:e3:
         72:d7:b4:a1:f8:75:58:96:eb:33:4f:50:96:e1:5b:07:e1:63:
         81:87:9c:20:0c:35:27:bb:61:4f:e4:20:42:b5:a1:ed:ad:3d:
         48:29:a0:90:6b:63:9c:95:a4:0b:23:72:53:ed:8b:ce:f6:ba:
         ed:0b:cc:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:52:40 2026 by rpki-client