Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/0e96ed89-2a16-4151-bf83-59dce561460c/0/3130332e3133322e35352e302f32342d3234203d3e20313338313233.roa
File:                     3130332e3133322e35352e302f32342d3234203d3e20313338313233.roa (raw, json)
Hash identifier:          llfvBWQZwUtGN5WIcIKsyjRqZVhpsHgsie5x9cpo0pM=
Subject key identifier:   B3:E6:C1:5D:83:51:F7:C9:CE:D9:33:AF:E5:AF:0A:F3:17:FE:91:75
Certificate issuer:       /CN=B88116E180F32C03362804A81CB0CF2EB0C261B6
Certificate serial:       4A73B4ACEFB1375000B0298F467EA24AE45BB585
Authority key identifier: B8:81:16:E1:80:F3:2C:03:36:28:04:A8:1C:B0:CF:2E:B0:C2:61:B6
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B88116E180F32C03362804A81CB0CF2EB0C261B6.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/0e96ed89-2a16-4151-bf83-59dce561460c/0/3130332e3133322e35352e302f32342d3234203d3e20313338313233.roa
Signing time:             Mon 13 Apr 2026 08:03:31 +0000
ROA not before:           Mon 13 Apr 2026 07:58:31 +0000
ROA not after:            Mon 12 Apr 2027 08:03:31 +0000
asID:                     138123
IP address blocks:        103.132.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/0e96ed89-2a16-4151-bf83-59dce561460c/0/B88116E180F32C03362804A81CB0CF2EB0C261B6.crl
                          rsync://repo-rpki.idnic.net/repo/0e96ed89-2a16-4151-bf83-59dce561460c/0/B88116E180F32C03362804A81CB0CF2EB0C261B6.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B88116E180F32C03362804A81CB0CF2EB0C261B6.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 19:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:73:b4:ac:ef:b1:37:50:00:b0:29:8f:46:7e:a2:4a:e4:5b:b5:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B88116E180F32C03362804A81CB0CF2EB0C261B6
        Validity
            Not Before: Apr 13 07:58:31 2026 GMT
            Not After : Apr 12 08:03:31 2027 GMT
        Subject: CN=B3E6C15D8351F7C9CED933AFE5AF0AF317FE9175
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:97:dd:49:12:1e:b8:7e:eb:97:cd:8a:bc:38:
                    5e:85:04:65:f3:97:fd:f7:90:1f:1b:d6:30:59:bf:
                    36:c1:15:ed:f0:b8:79:33:27:de:3a:89:85:97:b7:
                    ca:11:25:d5:f0:d9:15:d9:2b:31:ab:1c:51:7a:95:
                    93:03:da:96:08:6f:12:fb:7f:2a:3d:63:e0:f5:a9:
                    83:18:11:d1:22:14:f0:c6:49:28:df:3b:9b:23:95:
                    4b:93:e4:ce:10:3d:94:bd:38:77:7d:f0:db:80:0e:
                    59:18:d8:e6:50:88:08:98:fe:55:92:28:50:8f:c6:
                    1f:33:32:69:c0:5c:ef:c7:ae:1e:8c:ee:2c:b9:0a:
                    77:ec:ee:59:5e:63:84:5a:2a:af:03:1a:5b:a1:cf:
                    97:5c:4e:be:09:d3:ce:fb:85:27:d7:3c:7f:bc:c7:
                    0e:b8:cc:ae:64:4b:80:0e:15:40:e6:32:c4:b0:75:
                    bb:0f:3c:c7:6d:73:ab:2a:5c:b5:b6:42:67:ab:9a:
                    1c:3b:6d:12:e7:93:f2:4a:d8:0e:cc:19:67:8d:2c:
                    94:9c:38:8c:c8:29:ef:ee:34:dd:4d:78:cf:49:55:
                    b6:4d:26:9e:e3:fa:8f:92:64:98:d4:c9:1f:67:6a:
                    b1:c2:f5:28:1f:1f:a1:60:fa:ee:11:de:34:46:80:
                    bd:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:E6:C1:5D:83:51:F7:C9:CE:D9:33:AF:E5:AF:0A:F3:17:FE:91:75
            X509v3 Authority Key Identifier:
                keyid:B8:81:16:E1:80:F3:2C:03:36:28:04:A8:1C:B0:CF:2E:B0:C2:61:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/0e96ed89-2a16-4151-bf83-59dce561460c/0/B88116E180F32C03362804A81CB0CF2EB0C261B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B88116E180F32C03362804A81CB0CF2EB0C261B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0e96ed89-2a16-4151-bf83-59dce561460c/0/3130332e3133322e35352e302f32342d3234203d3e20313338313233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.132.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:c4:bd:58:47:a3:de:d7:ea:4d:de:0d:58:db:c9:55:a9:28:
         06:37:d6:7c:a9:1a:97:fc:65:f4:83:de:af:19:f7:bd:f8:e5:
         21:dd:c4:4c:55:d0:33:98:25:c4:5a:49:20:f0:29:0a:73:6c:
         42:92:12:a9:b6:79:49:46:c3:72:2f:4d:74:c5:c8:23:b7:ed:
         19:46:54:33:e5:2a:7d:05:3b:93:f2:e3:4b:20:55:b1:0d:91:
         5d:3f:54:67:22:14:3e:49:e4:3f:d4:b6:fc:64:2e:2b:c6:b1:
         4f:02:72:dd:79:bb:c7:48:a7:76:1b:65:b6:11:53:35:f6:6f:
         95:0d:2d:1f:17:2f:e4:e1:97:fb:f0:07:ac:a1:86:3a:a8:6f:
         18:77:b2:e0:65:44:82:54:db:f3:53:cc:72:14:59:ba:6f:b5:
         d6:7a:00:d9:3f:2a:98:ee:a6:70:40:e7:07:98:fc:a0:e2:4d:
         7a:4e:ac:4e:8c:52:c7:d9:07:c8:57:10:f5:e2:11:e1:d2:dc:
         48:61:1a:96:9b:3b:fd:51:04:b5:9f:36:43:29:6c:53:ac:02:
         6b:01:fe:3b:74:db:0e:31:33:19:6b:ec:da:e1:8b:d4:53:5b:
         14:b4:5b:f4:c0:8f:57:de:61:58:c3:39:51:fb:f0:c1:7d:22:
         8c:b2:a3:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:03:03 2026 by rpki-client