Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/1ed46f82-cf11-4e32-b051-6ac334a92622/0/3130332e3233332e3130382e302f32342d3234203d3e203633343838.roa
File:                     3130332e3233332e3130382e302f32342d3234203d3e203633343838.roa (raw, json)
Hash identifier:          Wfy8788i5fY/ej9a3YM/+k7wfb0vlK99rdw4A0vlE+o=
Subject key identifier:   53:D6:F5:3F:EA:89:FC:43:56:2D:A7:2E:96:85:92:3D:08:CD:28:26
Certificate issuer:       /CN=4A4CC1D625A4519B23D73717C879F10A6173AEAB
Certificate serial:       1D1F04820EC090F74CA40BD6EE94D5EA17472AC6
Authority key identifier: 4A:4C:C1:D6:25:A4:51:9B:23:D7:37:17:C8:79:F1:0A:61:73:AE:AB
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A4CC1D625A4519B23D73717C879F10A6173AEAB.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/1ed46f82-cf11-4e32-b051-6ac334a92622/0/3130332e3233332e3130382e302f32342d3234203d3e203633343838.roa
Signing time:             Mon 16 Feb 2026 03:00:02 +0000
ROA not before:           Mon 16 Feb 2026 02:55:02 +0000
ROA not after:            Mon 15 Feb 2027 03:00:02 +0000
asID:                     63488
IP address blocks:        103.233.108.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/1ed46f82-cf11-4e32-b051-6ac334a92622/0/4A4CC1D625A4519B23D73717C879F10A6173AEAB.crl
                          rsync://repo-rpki.idnic.net/repo/1ed46f82-cf11-4e32-b051-6ac334a92622/0/4A4CC1D625A4519B23D73717C879F10A6173AEAB.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A4CC1D625A4519B23D73717C879F10A6173AEAB.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Mar 2026 05:24:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:1f:04:82:0e:c0:90:f7:4c:a4:0b:d6:ee:94:d5:ea:17:47:2a:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4A4CC1D625A4519B23D73717C879F10A6173AEAB
        Validity
            Not Before: Feb 16 02:55:02 2026 GMT
            Not After : Feb 15 03:00:02 2027 GMT
        Subject: CN=53D6F53FEA89FC43562DA72E9685923D08CD2826
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:f5:52:0e:16:81:d4:a1:cf:7f:c7:fd:6f:52:
                    3c:b4:c8:71:2f:2e:63:e7:e2:bc:ed:5c:1c:71:64:
                    46:fe:ce:89:b8:33:5b:21:38:d3:7d:17:0d:04:5b:
                    ad:d0:88:fd:7a:7d:2a:19:dc:03:60:63:35:f5:f0:
                    2b:e0:17:f0:d0:60:3d:b1:0f:b7:b1:03:5b:83:8d:
                    b4:c7:4f:03:45:6c:65:c4:54:4b:38:d4:b2:7b:9a:
                    88:5c:8f:18:e8:f6:cd:d0:44:f8:e9:b7:75:a2:f9:
                    d3:4a:7d:31:e9:d1:27:c3:54:c5:b5:7d:5d:47:bd:
                    3f:bc:c6:6b:6c:2f:25:3b:04:82:1d:e9:bb:b3:38:
                    0e:47:42:aa:3d:b8:54:59:90:f4:2d:b4:d0:d7:ea:
                    40:60:49:ac:89:f1:6b:7f:cb:e7:d7:98:85:ad:e0:
                    d3:c7:5c:d6:4c:7b:70:78:be:00:a8:b9:94:c1:7b:
                    5c:75:e8:41:d9:8b:a3:de:17:f3:7c:83:06:0c:fe:
                    46:cb:6f:55:74:19:de:45:1f:66:85:22:7b:e3:a5:
                    5b:ac:60:f1:29:23:6a:6c:ff:65:65:be:f2:34:e3:
                    b9:90:91:42:a2:ca:57:e4:db:a5:18:65:05:35:1d:
                    7d:d2:60:f3:5b:d1:00:71:00:95:72:81:9d:d7:f1:
                    49:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:D6:F5:3F:EA:89:FC:43:56:2D:A7:2E:96:85:92:3D:08:CD:28:26
            X509v3 Authority Key Identifier:
                keyid:4A:4C:C1:D6:25:A4:51:9B:23:D7:37:17:C8:79:F1:0A:61:73:AE:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/1ed46f82-cf11-4e32-b051-6ac334a92622/0/4A4CC1D625A4519B23D73717C879F10A6173AEAB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A4CC1D625A4519B23D73717C879F10A6173AEAB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ed46f82-cf11-4e32-b051-6ac334a92622/0/3130332e3233332e3130382e302f32342d3234203d3e203633343838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.233.108.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:33:3a:a1:ac:81:e1:3d:5e:43:29:ba:ce:1d:06:bf:ee:2a:
         83:5c:2f:38:c7:4d:61:99:61:36:23:60:10:8b:1d:c1:34:ad:
         9a:6c:a7:03:01:b7:bf:b3:e6:46:c2:28:5b:08:80:08:57:5e:
         a4:43:65:cb:60:5e:20:a6:9b:16:21:b4:8c:85:05:5e:78:a4:
         39:7e:05:c4:4b:22:be:d1:42:7a:ab:d4:74:bf:a2:d8:7e:88:
         87:64:e0:b5:f7:bb:61:5f:0f:f4:6c:a2:b1:17:07:90:76:dc:
         a9:92:09:fc:66:62:25:15:df:af:c3:10:4d:ea:b7:4c:9c:e4:
         ea:42:31:03:62:f1:4e:2b:a2:3a:85:fc:2b:9e:c2:a0:b9:4a:
         85:23:c3:06:67:ed:aa:d3:2d:d4:e8:61:0d:0a:f2:99:22:4b:
         32:56:5a:ff:ba:f8:7f:59:47:40:94:33:2b:1e:77:83:71:20:
         4f:b4:19:a6:22:7e:52:19:86:7f:d7:2b:17:02:b3:ea:20:5d:
         ec:5c:bd:50:00:b0:e4:88:89:a9:ec:04:78:b5:f6:13:77:ca:
         a9:bd:7a:c9:2d:02:62:21:8b:bd:ca:79:e3:33:0c:cd:4e:01:
         01:71:39:49:46:2a:8d:06:41:22:3b:7e:c6:30:e6:f3:a5:cf:
         d3:71:d2:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:36:46 2026 by rpki-client