Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/239ead81-ac12-4479-b2fb-998e01854551/0/3130332e35342e3231362e302f32322d3234203d3e20313331313131.roa
File:                     3130332e35342e3231362e302f32322d3234203d3e20313331313131.roa (raw, json)
Hash identifier:          U8QCfT/GcTAUTmlMkXfPTINKFIq2zee/mS/Nl3ODwDA=
Subject key identifier:   BC:72:7C:4F:3A:C1:B6:16:FF:CF:1A:80:F9:37:0A:82:AE:74:B2:87
Certificate issuer:       /CN=A53CE1A1762318BA9130A47CFA16027E8D1EBAC8
Certificate serial:       3F87F54817DAF38A71780D16A0F9D92EC9414904
Authority key identifier: A5:3C:E1:A1:76:23:18:BA:91:30:A4:7C:FA:16:02:7E:8D:1E:BA:C8
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A53CE1A1762318BA9130A47CFA16027E8D1EBAC8.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/239ead81-ac12-4479-b2fb-998e01854551/0/3130332e35342e3231362e302f32322d3234203d3e20313331313131.roa
Signing time:             Wed 01 Apr 2026 08:00:00 +0000
ROA not before:           Wed 01 Apr 2026 07:55:00 +0000
ROA not after:            Wed 31 Mar 2027 08:00:00 +0000
asID:                     131111
IP address blocks:        103.54.216.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/239ead81-ac12-4479-b2fb-998e01854551/0/A53CE1A1762318BA9130A47CFA16027E8D1EBAC8.crl
                          rsync://repo-rpki.idnic.net/repo/239ead81-ac12-4479-b2fb-998e01854551/0/A53CE1A1762318BA9130A47CFA16027E8D1EBAC8.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A53CE1A1762318BA9130A47CFA16027E8D1EBAC8.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 20 Apr 2026 20:07:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:87:f5:48:17:da:f3:8a:71:78:0d:16:a0:f9:d9:2e:c9:41:49:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A53CE1A1762318BA9130A47CFA16027E8D1EBAC8
        Validity
            Not Before: Apr  1 07:55:00 2026 GMT
            Not After : Mar 31 08:00:00 2027 GMT
        Subject: CN=BC727C4F3AC1B616FFCF1A80F9370A82AE74B287
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:20:02:e3:2e:93:36:ac:a1:9c:73:6a:b2:c7:
                    a5:c3:03:fe:81:db:bb:ca:f8:de:bc:93:da:40:a5:
                    0b:9a:02:f7:ef:6c:2d:1e:b3:87:9f:4d:f3:00:d2:
                    51:50:4c:db:b1:4f:bc:8e:dc:a3:bd:28:1a:2f:e1:
                    cf:56:bc:cd:89:85:89:fb:d6:c3:06:bb:2a:bd:a2:
                    39:a7:13:c4:77:06:85:d3:27:bc:58:c2:ff:5c:ac:
                    40:b6:93:b1:1c:c3:13:4c:eb:51:dc:7c:58:f5:61:
                    fd:fa:f1:ad:0d:a5:18:2e:ce:da:ca:b5:f0:80:f5:
                    a9:39:6d:93:5e:90:d8:95:3a:62:13:d3:62:e2:73:
                    76:8d:4f:11:7d:ac:c9:08:01:7d:83:cc:df:33:9a:
                    02:15:76:17:f0:77:73:d1:7e:44:79:88:bb:69:7f:
                    7f:36:cc:cb:58:14:66:ab:89:aa:dd:92:df:07:64:
                    72:de:ad:cb:43:98:05:d6:05:89:9d:e7:16:84:60:
                    26:7e:1a:47:18:18:ee:5a:d2:18:ac:ea:a2:0c:59:
                    a1:39:bf:79:85:87:5a:67:28:28:f7:d7:af:b5:13:
                    c8:c8:64:d1:24:ae:29:e4:8c:cc:b3:d6:6d:72:22:
                    a8:7e:99:7c:57:0f:be:f3:66:85:b2:3e:34:70:25:
                    92:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:72:7C:4F:3A:C1:B6:16:FF:CF:1A:80:F9:37:0A:82:AE:74:B2:87
            X509v3 Authority Key Identifier:
                keyid:A5:3C:E1:A1:76:23:18:BA:91:30:A4:7C:FA:16:02:7E:8D:1E:BA:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/239ead81-ac12-4479-b2fb-998e01854551/0/A53CE1A1762318BA9130A47CFA16027E8D1EBAC8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A53CE1A1762318BA9130A47CFA16027E8D1EBAC8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/239ead81-ac12-4479-b2fb-998e01854551/0/3130332e35342e3231362e302f32322d3234203d3e20313331313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.54.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         87:58:08:3a:8c:f4:23:63:d4:1f:de:99:14:c1:ea:5a:37:5c:
         09:c5:10:dc:4a:39:40:bf:e6:bf:e8:4c:17:ff:3b:21:c4:0a:
         b7:9f:d9:2a:1e:c2:9b:f4:ca:88:48:99:af:08:3b:00:7e:a7:
         b9:d6:bd:3d:16:24:74:45:24:59:c8:06:11:91:33:37:3e:58:
         1a:7f:8a:9a:c0:7f:4d:de:fe:4a:cd:6d:60:72:28:12:dd:73:
         0d:b2:52:f3:85:e0:40:70:89:51:37:11:dd:c9:2e:11:49:0a:
         8d:5f:29:26:e8:45:59:e2:95:e9:92:e5:86:aa:b4:42:3c:bd:
         79:23:65:b6:97:f4:9f:a2:41:54:65:bc:73:4b:85:d5:38:bc:
         2f:f5:f2:f5:2c:a3:2e:9c:81:08:c3:2b:5d:2e:9e:2a:d8:10:
         0d:c8:dc:45:6d:f1:c3:57:4b:a8:85:be:c5:47:6c:78:80:2a:
         89:78:cc:d1:4b:17:11:20:33:95:44:d8:e5:f0:bd:b3:8e:88:
         9b:11:a4:19:55:94:fc:d8:a0:a1:f3:c0:6b:69:e9:88:d0:c6:
         31:a2:61:a3:6b:70:c0:87:97:f6:0a:5a:05:56:34:c0:fc:5e:
         b8:57:29:44:17:58:2f:2e:7e:e0:25:76:02:ed:d1:52:d9:93:
         78:25:68:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:44:13 2026 by rpki-client