Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/2049c210-f365-432f-a7ca-0b5eb86b01c6/0/3130332e33312e3230362e302f32342d3234203d3e203435373138.roa
File:                     3130332e33312e3230362e302f32342d3234203d3e203435373138.roa (raw, json)
Hash identifier:          jM1dJ3YR7TzVljwojJa4q/EeDXXOpsBTj/prM8KE7fc=
Subject key identifier:   53:DE:11:F3:C9:AA:D4:2E:37:27:1C:F2:FD:EF:14:B9:C3:AC:5C:FF
Certificate issuer:       /CN=E475A8B018BAE58448DDE55D9487442B3BD31D1D
Certificate serial:       4278CC654FDEF148F6453728F6D11E749F44EBF9
Authority key identifier: E4:75:A8:B0:18:BA:E5:84:48:DD:E5:5D:94:87:44:2B:3B:D3:1D:1D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E475A8B018BAE58448DDE55D9487442B3BD31D1D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2049c210-f365-432f-a7ca-0b5eb86b01c6/0/3130332e33312e3230362e302f32342d3234203d3e203435373138.roa
Signing time:             Sat 21 Feb 2026 09:00:02 +0000
ROA not before:           Sat 21 Feb 2026 08:55:02 +0000
ROA not after:            Sat 20 Feb 2027 09:00:02 +0000
asID:                     45718
IP address blocks:        103.31.206.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/2049c210-f365-432f-a7ca-0b5eb86b01c6/0/E475A8B018BAE58448DDE55D9487442B3BD31D1D.crl
                          rsync://repo-rpki.idnic.net/repo/2049c210-f365-432f-a7ca-0b5eb86b01c6/0/E475A8B018BAE58448DDE55D9487442B3BD31D1D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E475A8B018BAE58448DDE55D9487442B3BD31D1D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Mar 2026 06:31:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:78:cc:65:4f:de:f1:48:f6:45:37:28:f6:d1:1e:74:9f:44:eb:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E475A8B018BAE58448DDE55D9487442B3BD31D1D
        Validity
            Not Before: Feb 21 08:55:02 2026 GMT
            Not After : Feb 20 09:00:02 2027 GMT
        Subject: CN=53DE11F3C9AAD42E37271CF2FDEF14B9C3AC5CFF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:9b:cf:ff:17:1c:da:50:33:f1:33:ba:1a:cf:
                    ce:ef:d4:56:92:a5:02:d7:58:de:3c:6b:e1:57:e1:
                    56:64:1a:a0:2f:85:81:5d:a9:70:f5:82:fc:4f:f8:
                    a6:48:bf:2a:a4:0b:f6:45:08:44:a0:fe:e7:9a:a9:
                    7b:1a:da:26:c4:a4:b2:cc:d5:42:2e:79:99:ae:af:
                    c5:31:9f:4e:28:b8:18:da:10:4b:4f:9e:ce:6a:f5:
                    94:71:36:64:e6:33:3b:aa:16:ac:1f:e0:ef:96:30:
                    9a:8e:8d:56:dc:55:12:a4:05:90:51:59:e5:bd:82:
                    73:12:b9:ba:ce:9b:54:2c:66:03:6f:38:2f:b7:9e:
                    5a:28:41:cb:e3:5e:ed:b6:34:e4:0e:a4:1a:8b:0c:
                    45:5e:96:88:db:47:75:ba:e7:f8:79:79:24:ee:98:
                    5e:cc:62:5d:19:bb:75:5b:1f:47:bf:ba:32:e9:02:
                    c8:e5:07:16:ca:32:d1:82:5b:ca:12:eb:1e:9f:2a:
                    08:0a:bf:bf:10:63:4b:c9:83:7e:4e:b8:f4:b4:60:
                    4f:5a:6c:16:54:64:42:71:7a:b7:e4:e1:20:26:fc:
                    94:13:4e:1b:2a:b2:e7:6c:24:e3:b1:67:44:8c:61:
                    c6:3c:b7:da:74:1a:ee:9d:8c:74:82:d2:22:40:c8:
                    f5:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:DE:11:F3:C9:AA:D4:2E:37:27:1C:F2:FD:EF:14:B9:C3:AC:5C:FF
            X509v3 Authority Key Identifier:
                keyid:E4:75:A8:B0:18:BA:E5:84:48:DD:E5:5D:94:87:44:2B:3B:D3:1D:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2049c210-f365-432f-a7ca-0b5eb86b01c6/0/E475A8B018BAE58448DDE55D9487442B3BD31D1D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E475A8B018BAE58448DDE55D9487442B3BD31D1D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2049c210-f365-432f-a7ca-0b5eb86b01c6/0/3130332e33312e3230362e302f32342d3234203d3e203435373138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.31.206.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:7f:ef:dc:40:82:2f:92:2e:19:1a:27:2b:98:98:21:48:84:
         3a:c4:b4:a7:4b:69:46:05:60:79:c3:d4:80:19:81:1f:f6:d9:
         16:2d:5a:94:bb:82:13:8f:96:43:05:35:e7:0f:5b:c2:eb:b9:
         4e:d8:46:c5:bf:4a:00:f1:ef:73:d2:2e:92:e1:ac:8a:f5:87:
         f7:99:69:b7:98:bd:ef:cf:76:fe:5b:b3:fb:eb:1d:6d:6d:ee:
         d1:73:b5:c3:18:cc:7c:0a:27:71:4a:93:c3:b2:6a:0f:55:be:
         4f:21:44:63:a4:20:e4:f6:10:58:c8:62:5a:d9:84:04:56:55:
         f3:6e:1c:c8:fb:19:69:e8:92:ea:4b:da:d7:2b:b9:1a:73:06:
         5c:ae:9c:cb:e6:b5:11:ef:13:d3:3c:e4:b9:fd:e3:68:ff:4f:
         b4:eb:bf:42:97:80:ca:77:9a:18:b9:e4:17:b7:87:4a:f8:5b:
         c6:19:ae:4a:9b:55:30:1c:70:69:2c:f3:1a:94:86:e3:9c:54:
         5d:ae:92:be:e6:a1:3a:d9:fc:cf:0e:d2:d0:bf:d1:f0:3f:d4:
         e7:4a:17:1c:b8:8a:18:53:21:b3:87:c3:ca:0e:a5:c7:05:7e:
         05:36:da:35:99:d7:e9:b4:57:1d:b4:4a:82:55:0f:15:6f:f1:
         1f:b8:8e:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:44:52 2026 by rpki-client