Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/0e96ed89-2a16-4151-bf83-59dce561460c/0/3130332e3133322e35342e302f32342d3234203d3e20313338313233.roa
File:                     3130332e3133322e35342e302f32342d3234203d3e20313338313233.roa (raw, json)
Hash identifier:          UimHittJWPQNKQyZqcG9jCR1sw6KQh/n956nN6tASro=
Subject key identifier:   81:4D:BE:2A:BF:92:AA:8E:8F:E9:CF:53:00:1D:EE:52:AA:42:8F:A5
Certificate issuer:       /CN=B88116E180F32C03362804A81CB0CF2EB0C261B6
Certificate serial:       585A0DD07FBABA9C2D1FFA45E90D8369B3418411
Authority key identifier: B8:81:16:E1:80:F3:2C:03:36:28:04:A8:1C:B0:CF:2E:B0:C2:61:B6
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B88116E180F32C03362804A81CB0CF2EB0C261B6.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/0e96ed89-2a16-4151-bf83-59dce561460c/0/3130332e3133322e35342e302f32342d3234203d3e20313338313233.roa
Signing time:             Mon 13 Apr 2026 08:03:31 +0000
ROA not before:           Mon 13 Apr 2026 07:58:31 +0000
ROA not after:            Mon 12 Apr 2027 08:03:31 +0000
asID:                     138123
IP address blocks:        103.132.54.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/0e96ed89-2a16-4151-bf83-59dce561460c/0/B88116E180F32C03362804A81CB0CF2EB0C261B6.crl
                          rsync://repo-rpki.idnic.net/repo/0e96ed89-2a16-4151-bf83-59dce561460c/0/B88116E180F32C03362804A81CB0CF2EB0C261B6.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B88116E180F32C03362804A81CB0CF2EB0C261B6.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 19:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:5a:0d:d0:7f:ba:ba:9c:2d:1f:fa:45:e9:0d:83:69:b3:41:84:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B88116E180F32C03362804A81CB0CF2EB0C261B6
        Validity
            Not Before: Apr 13 07:58:31 2026 GMT
            Not After : Apr 12 08:03:31 2027 GMT
        Subject: CN=814DBE2ABF92AA8E8FE9CF53001DEE52AA428FA5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:58:58:a6:1a:05:c9:8f:0a:66:36:37:b2:c5:
                    f7:25:15:26:3a:51:a0:f0:75:7c:d5:7b:09:70:88:
                    7a:b4:c6:7a:f2:e5:56:52:cd:8a:c6:14:d2:f8:af:
                    4f:0b:10:77:55:50:b9:1d:9c:f4:dc:8d:d7:f4:25:
                    f2:4b:66:fd:4d:8e:07:f1:e2:c4:47:7f:63:5f:14:
                    eb:ab:55:13:ab:0e:77:bc:4b:26:07:ff:f1:15:5f:
                    dc:cb:9c:ea:fe:f6:6c:45:77:a1:21:aa:cb:2a:70:
                    e2:f8:3b:11:36:d7:f3:57:41:b0:ad:3a:97:fc:3a:
                    09:34:f7:25:04:bb:13:31:55:44:05:4f:68:32:cf:
                    ce:1d:b0:85:11:d5:da:b7:29:3d:08:7b:dd:ff:78:
                    3b:47:34:44:fe:da:a3:1e:bf:c2:c2:80:96:34:11:
                    b8:da:8f:38:f0:b8:ca:59:29:e9:5f:78:cf:d7:05:
                    84:5b:98:03:18:fa:53:e7:c3:ed:17:74:c7:f2:d0:
                    2a:d5:b2:ed:a2:f6:27:b4:56:11:eb:c2:5f:9b:f9:
                    63:56:21:81:6a:b4:7a:b3:c8:57:9e:4e:9f:5b:50:
                    38:79:1e:23:ba:17:c8:41:53:9e:14:f8:68:0d:49:
                    ea:9b:15:7c:0b:2c:e2:c4:83:dc:4b:55:13:87:16:
                    34:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:4D:BE:2A:BF:92:AA:8E:8F:E9:CF:53:00:1D:EE:52:AA:42:8F:A5
            X509v3 Authority Key Identifier:
                keyid:B8:81:16:E1:80:F3:2C:03:36:28:04:A8:1C:B0:CF:2E:B0:C2:61:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/0e96ed89-2a16-4151-bf83-59dce561460c/0/B88116E180F32C03362804A81CB0CF2EB0C261B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B88116E180F32C03362804A81CB0CF2EB0C261B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0e96ed89-2a16-4151-bf83-59dce561460c/0/3130332e3133322e35342e302f32342d3234203d3e20313338313233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.132.54.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:6d:b7:23:26:a5:62:2f:98:cd:a3:da:3b:c5:0d:7e:31:16:
         d8:ca:46:1c:4e:95:03:38:51:9b:16:ff:12:c1:42:80:12:02:
         0c:fe:54:88:e6:3d:ce:59:d2:90:ed:71:ad:b0:6a:58:a9:99:
         a6:19:fb:f4:b0:3d:c3:70:4d:c4:c5:3f:76:8e:82:64:e0:bc:
         10:ab:06:3c:a4:a3:2a:8c:26:ad:b1:58:df:4d:38:28:d8:3d:
         17:fc:a6:ea:bf:9f:c0:d8:68:ba:9e:d0:8e:b2:22:f7:d3:9c:
         ef:7c:ed:3a:b1:ff:3f:0d:5c:91:3e:fc:4f:31:29:90:e5:bc:
         cf:2c:ee:b5:78:5b:32:aa:e0:4a:ab:07:c6:c0:d8:e9:be:5e:
         69:2a:cc:5d:60:02:41:6f:4c:5e:90:c2:f0:c0:af:6f:38:6d:
         e7:52:7f:1b:90:e0:4f:96:a1:95:7f:90:e5:cc:00:50:4b:7a:
         37:16:b8:22:34:51:ec:f5:fa:e4:ce:44:6f:b7:7e:6e:ff:6d:
         4a:af:39:4d:82:23:0e:de:06:b0:3c:a8:e3:61:4a:36:12:2a:
         eb:cb:b7:30:67:83:29:ba:63:69:38:e6:0e:2a:61:25:fe:df:
         6a:92:f8:e8:6d:cc:a1:02:69:84:61:6a:83:27:8b:dc:5d:cd:
         3c:46:03:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:04:42 2026 by rpki-client