Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/0e96ed89-2a16-4151-bf83-59dce561460c/0/3130332e3133322e35332e302f32342d3234203d3e20313338313233.roa
File:                     3130332e3133322e35332e302f32342d3234203d3e20313338313233.roa (raw, json)
Hash identifier:          MWHW3Cq6gy7L/kj1MA+AmCanPBPHW3QJPohxWcq86fs=
Subject key identifier:   84:92:1E:B4:8B:0F:78:FF:3D:13:65:49:23:2D:59:0F:35:4E:D6:1A
Certificate issuer:       /CN=B88116E180F32C03362804A81CB0CF2EB0C261B6
Certificate serial:       530EC10EC42D64D2395140D3246ADBFBAE844F10
Authority key identifier: B8:81:16:E1:80:F3:2C:03:36:28:04:A8:1C:B0:CF:2E:B0:C2:61:B6
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B88116E180F32C03362804A81CB0CF2EB0C261B6.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/0e96ed89-2a16-4151-bf83-59dce561460c/0/3130332e3133322e35332e302f32342d3234203d3e20313338313233.roa
Signing time:             Mon 13 Apr 2026 08:03:31 +0000
ROA not before:           Mon 13 Apr 2026 07:58:31 +0000
ROA not after:            Mon 12 Apr 2027 08:03:31 +0000
asID:                     138123
IP address blocks:        103.132.53.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/0e96ed89-2a16-4151-bf83-59dce561460c/0/B88116E180F32C03362804A81CB0CF2EB0C261B6.crl
                          rsync://repo-rpki.idnic.net/repo/0e96ed89-2a16-4151-bf83-59dce561460c/0/B88116E180F32C03362804A81CB0CF2EB0C261B6.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B88116E180F32C03362804A81CB0CF2EB0C261B6.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 19:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:0e:c1:0e:c4:2d:64:d2:39:51:40:d3:24:6a:db:fb:ae:84:4f:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B88116E180F32C03362804A81CB0CF2EB0C261B6
        Validity
            Not Before: Apr 13 07:58:31 2026 GMT
            Not After : Apr 12 08:03:31 2027 GMT
        Subject: CN=84921EB48B0F78FF3D136549232D590F354ED61A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:6c:7d:8a:39:e7:b1:23:3d:40:79:e8:00:da:
                    e3:98:97:05:15:91:8f:9f:47:22:ee:2a:97:dc:0f:
                    c1:19:79:73:1d:d7:a0:a6:a5:d0:54:7b:ff:d0:3a:
                    0c:bb:cc:d3:32:df:a8:28:ec:16:15:5d:2d:57:d0:
                    d8:ea:9a:88:67:1d:84:cd:50:21:18:52:5b:20:44:
                    fa:37:73:d6:a4:a9:13:20:b9:7e:2b:db:11:97:fa:
                    81:b2:ad:59:40:7c:cc:dd:bc:1c:9d:6e:14:e6:67:
                    e4:cd:8d:1d:84:7b:04:bc:ab:4b:f3:89:df:0c:96:
                    fd:cf:04:c3:00:f2:f1:31:68:d2:4b:d2:fd:d4:19:
                    f9:23:2b:e0:da:9a:58:25:20:a0:98:a3:fe:7a:aa:
                    8d:fe:6d:a4:31:0c:ea:c3:ff:11:1f:4e:b0:b3:da:
                    d9:48:37:f9:5f:a1:60:e8:ab:f4:78:b3:0f:bc:fc:
                    9a:54:59:90:7e:51:22:35:4a:a3:4c:d5:4c:d7:22:
                    b0:0c:45:eb:0a:e2:4b:47:43:39:9e:7e:35:67:10:
                    44:25:bb:8c:66:cb:54:57:65:72:47:a4:97:28:4b:
                    76:da:03:34:50:93:10:09:5c:c5:6d:84:dc:bb:c3:
                    bc:62:07:a0:a5:b1:f2:20:60:a9:54:6d:56:8d:49:
                    c2:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:92:1E:B4:8B:0F:78:FF:3D:13:65:49:23:2D:59:0F:35:4E:D6:1A
            X509v3 Authority Key Identifier:
                keyid:B8:81:16:E1:80:F3:2C:03:36:28:04:A8:1C:B0:CF:2E:B0:C2:61:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/0e96ed89-2a16-4151-bf83-59dce561460c/0/B88116E180F32C03362804A81CB0CF2EB0C261B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B88116E180F32C03362804A81CB0CF2EB0C261B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0e96ed89-2a16-4151-bf83-59dce561460c/0/3130332e3133322e35332e302f32342d3234203d3e20313338313233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.132.53.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:f8:d5:96:fd:7a:b6:9e:ce:e0:2b:23:e9:52:8a:2d:3a:da:
         2d:95:8e:bd:37:22:ae:9c:03:96:3f:a2:3c:0c:36:d4:3e:0e:
         83:fc:db:d1:0e:b1:54:25:26:11:de:6c:b9:cf:5f:24:b7:64:
         8b:f5:1d:19:44:b0:fc:ce:f5:d6:56:55:0e:f1:39:49:f1:7e:
         b4:2b:78:11:be:5d:bb:11:61:7f:a4:7f:d5:6e:25:12:94:24:
         bc:54:e7:42:52:6d:c0:d3:0a:ad:30:69:8d:c7:af:9f:0d:af:
         62:1f:1f:fb:8b:29:a1:c2:3c:6c:eb:59:c0:de:5d:96:d0:8a:
         5c:f5:b9:ec:b7:98:d0:6a:61:7e:02:e9:87:23:e2:2d:54:d4:
         c3:90:59:3a:80:09:4a:0b:5d:2b:24:01:a1:a5:66:bc:12:71:
         4d:21:3b:3d:42:4b:46:70:cc:f5:39:99:e7:e5:35:60:1d:db:
         b8:d0:f0:3f:cc:6c:1e:d6:02:26:aa:86:c9:f5:5d:81:11:c4:
         c7:29:af:cb:12:f2:61:a6:11:a0:05:65:04:6d:dc:0a:2f:5c:
         6b:12:b3:9d:9c:40:e9:22:b8:c6:f1:18:c5:17:1d:1d:9a:2d:
         8b:53:a6:16:14:5a:4a:4c:3a:76:b5:fd:23:df:2c:84:5c:f0:
         25:69:09:de
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUUw7BDsQtZNI5UUDTJGrb+66ETxAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjg4MTE2RTE4MEYzMkMwMzM2MjgwNEE4MUNCMENGMkVC
MEMyNjFCNjAeFw0yNjA0MTMwNzU4MzFaFw0yNzA0MTIwODAzMzFaMDMxMTAvBgNV
BAMTKDg0OTIxRUI0OEIwRjc4RkYzRDEzNjU0OTIzMkQ1OTBGMzU0RUQ2MUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCbH2KOeexIz1AeegA2uOYlwUV
kY+fRyLuKpfcD8EZeXMd16CmpdBUe//QOgy7zNMy36go7BYVXS1X0NjqmohnHYTN
UCEYUlsgRPo3c9akqRMguX4r2xGX+oGyrVlAfMzdvBydbhTmZ+TNjR2EewS8q0vz
id8Mlv3PBMMA8vExaNJL0v3UGfkjK+DamlglIKCYo/56qo3+baQxDOrD/xEfTrCz
2tlIN/lfoWDoq/R4sw+8/JpUWZB+USI1SqNM1UzXIrAMResK4ktHQzmefjVnEEQl
u4xmy1RXZXJHpJcoS3baAzRQkxAJXMVthNy7w7xiB6ClsfIgYKlUbVaNScJdAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUhJIetIsPeP89E2VJIy1ZDzVO1howHwYDVR0j
BBgwFoAUuIEW4YDzLAM2KASoHLDPLrDCYbYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w
ZTk2ZWQ4OS0yYTE2LTQxNTEtYmY4My01OWRjZTU2MTQ2MGMvMC9CODgxMTZFMTgw
RjMyQzAzMzYyODA0QTgxQ0IwQ0YyRUIwQzI2MUI2LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQjg4MTE2RTE4MEYzMkMwMzM2MjgwNEE4MUNCMENGMkVCMEMy
NjFCNi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzBlOTZlZDg5LTJhMTYtNDE1MS1i
ZjgzLTU5ZGNlNTYxNDYwYy8wLzMxMzAzMzJlMzEzMzMyMmUzNTMzMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzMzM4MzEzMjMzLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ4Q1MA0GCSqG
SIb3DQEBCwUAA4IBAQAM+NWW/Xq2ns7gKyPpUootOtotlY69NyKunAOWP6I8DDbU
Pg6D/NvRDrFUJSYR3my5z18kt2SL9R0ZRLD8zvXWVlUO8TlJ8X60K3gRvl27EWF/
pH/VbiUSlCS8VOdCUm3A0wqtMGmNx6+fDa9iHx/7iymhwjxs61nA3l2W0Ipc9bns
t5jQamF+AumHI+ItVNTDkFk6gAlKC10rJAGhpWa8EnFNITs9QktGcMz1OZnn5TVg
Hdu40PA/zGwe1gImqobJ9V2BEcTHKa/LEvJhphGgBWUEbdwKL1xrErOdnEDpIrjG
8RjFFx0dmi2LU6YWFFpKTDp2tf0j3yyEXPAlaQne
-----END CERTIFICATE-----
Generated at Fri Apr 17 19:50:09 2026 by rpki-client