Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/3130332e3234362e3131382e302f32342d3234203d3e203536323433.roa
File:                     3130332e3234362e3131382e302f32342d3234203d3e203536323433.roa (raw, json)
Hash identifier:          4j+tqqSjRxRC5wP14Ab2+PnCdH4SdFWngGel2yQngwY=
Subject key identifier:   15:B6:05:EC:AE:B1:30:E9:D0:04:1F:36:31:32:EB:0A:F5:D3:25:14
Certificate issuer:       /CN=012D2F59937FDBE65095B9EB4971D9D31EFDA93C
Certificate serial:       75ED9B27E2A52D68CCE45CE6D2410F9DBBD80517
Authority key identifier: 01:2D:2F:59:93:7F:DB:E6:50:95:B9:EB:49:71:D9:D3:1E:FD:A9:3C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/3130332e3234362e3131382e302f32342d3234203d3e203536323433.roa
Signing time:             Wed 08 Apr 2026 11:00:00 +0000
ROA not before:           Wed 08 Apr 2026 10:55:00 +0000
ROA not after:            Wed 07 Apr 2027 11:00:00 +0000
asID:                     56243
IP address blocks:        103.246.118.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.crl
                          rsync://repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 21 Apr 2026 00:51:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:ed:9b:27:e2:a5:2d:68:cc:e4:5c:e6:d2:41:0f:9d:bb:d8:05:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=012D2F59937FDBE65095B9EB4971D9D31EFDA93C
        Validity
            Not Before: Apr  8 10:55:00 2026 GMT
            Not After : Apr  7 11:00:00 2027 GMT
        Subject: CN=15B605ECAEB130E9D0041F363132EB0AF5D32514
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:c3:9a:ef:04:5c:ec:7a:cc:cc:ba:3a:ed:5a:
                    11:7e:f5:10:de:20:d8:c7:25:a0:65:92:6f:38:f1:
                    c4:01:64:71:58:f1:65:61:16:55:17:4b:ec:38:26:
                    97:de:2d:9e:b9:cd:30:35:28:33:fd:6e:84:b9:2a:
                    f8:53:4c:0f:68:b2:a4:f3:36:5f:e7:ec:32:d9:50:
                    0c:de:f0:8d:18:97:40:87:3f:b8:25:ff:f0:c5:2e:
                    ae:28:d4:f1:89:04:17:7f:48:5e:0f:13:56:91:2c:
                    5a:88:89:9a:99:83:5e:78:93:4e:6a:df:3b:4b:cf:
                    60:21:12:67:6c:44:4b:69:e6:c8:d7:2d:13:05:35:
                    f4:96:7d:24:04:15:1c:ae:ba:81:6c:98:08:e3:14:
                    58:b1:3b:cb:72:ad:40:71:ce:af:92:1f:8f:59:22:
                    c5:a2:05:75:d5:10:08:1f:98:bc:e3:99:90:ce:c9:
                    1d:f1:66:1b:e0:66:80:03:96:a1:0c:23:39:94:0b:
                    14:93:a7:1d:7e:40:90:49:f9:48:60:a4:23:76:71:
                    ec:7c:3c:7f:d3:48:51:f2:35:0d:4c:dc:89:55:d2:
                    1e:84:ea:e2:78:e9:4a:6a:d6:d5:7b:e1:ab:18:35:
                    46:d0:71:10:6d:28:c7:90:ba:be:c5:bf:bd:4f:1f:
                    b7:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:B6:05:EC:AE:B1:30:E9:D0:04:1F:36:31:32:EB:0A:F5:D3:25:14
            X509v3 Authority Key Identifier:
                keyid:01:2D:2F:59:93:7F:DB:E6:50:95:B9:EB:49:71:D9:D3:1E:FD:A9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/3130332e3234362e3131382e302f32342d3234203d3e203536323433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.246.118.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:d4:ff:79:5b:86:43:ee:17:bb:10:38:11:be:05:77:ea:d8:
         30:e3:38:d9:6c:4e:9a:b1:74:e2:38:d4:f9:d7:ce:c7:1b:26:
         b4:f6:cd:07:65:92:1a:95:33:f8:4d:56:53:09:69:aa:11:c4:
         03:d9:40:a8:6e:77:a1:f7:31:80:9c:52:1a:d8:81:58:f3:8c:
         e9:e5:92:9b:2d:1c:3d:ac:d7:f6:52:ec:9f:a9:a8:d0:49:cf:
         5c:f1:eb:2a:54:22:8f:3f:d6:36:43:e2:b9:75:d1:2f:6a:01:
         49:54:a7:93:1d:06:77:ea:56:d9:60:76:af:e8:b9:dd:f2:43:
         7e:6b:bb:6a:d3:5f:9b:e6:40:fd:c6:62:32:cb:75:b6:12:58:
         a6:be:c4:4e:02:2a:64:d1:ff:6c:45:29:9b:35:90:a5:a0:13:
         48:07:30:f4:29:f5:30:de:cc:93:8b:f9:d3:6c:9e:d8:ed:31:
         32:2a:4e:6b:4e:ca:be:ed:7a:df:99:2a:ff:28:80:78:a1:28:
         5a:38:b4:bb:bb:7f:96:43:0b:09:f4:01:0b:e1:d9:67:b7:68:
         38:06:35:37:a6:3a:b5:ed:b8:15:49:bc:94:0c:49:4c:a8:ea:
         8f:2b:7f:9b:3e:ac:f9:6a:cb:25:b7:f8:31:69:df:2a:34:b3:
         46:9c:6d:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 15:33:59 2026 by rpki-client