Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/2565a1cf-2950-47dc-a212-f653b8c3f5a9/0/3130332e33302e3231322e302f32342d3234203d3e20313530313838.roa
File:                     3130332e33302e3231322e302f32342d3234203d3e20313530313838.roa (raw, json)
Hash identifier:          zbn7bS7zn2tJjes0380O9wZ4ybsEKzCS4tMfNtC1rmk=
Subject key identifier:   7B:1F:C3:30:15:61:1D:69:33:83:26:23:6E:E3:67:82:A6:09:BC:E2
Certificate issuer:       /CN=AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C
Certificate serial:       074988E197F52B1D04206817932E3526D28A7C06
Authority key identifier: AF:CF:00:A9:0B:7E:9E:A1:E3:01:82:B0:BF:F9:34:BE:4D:C0:97:1C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2565a1cf-2950-47dc-a212-f653b8c3f5a9/0/3130332e33302e3231322e302f32342d3234203d3e20313530313838.roa
Signing time:             Mon 09 Feb 2026 07:00:03 +0000
ROA not before:           Mon 09 Feb 2026 06:55:03 +0000
ROA not after:            Mon 08 Feb 2027 07:00:03 +0000
asID:                     150188
IP address blocks:        103.30.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/2565a1cf-2950-47dc-a212-f653b8c3f5a9/0/AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C.crl
                          rsync://repo-rpki.idnic.net/repo/2565a1cf-2950-47dc-a212-f653b8c3f5a9/0/AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Mar 2026 19:08:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:49:88:e1:97:f5:2b:1d:04:20:68:17:93:2e:35:26:d2:8a:7c:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C
        Validity
            Not Before: Feb  9 06:55:03 2026 GMT
            Not After : Feb  8 07:00:03 2027 GMT
        Subject: CN=7B1FC33015611D69338326236EE36782A609BCE2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:e4:dd:a8:b2:fb:60:42:7e:37:4f:cb:5c:f4:
                    0f:a8:5c:13:86:f3:99:e9:36:c4:28:a0:0f:47:38:
                    ef:c1:1f:fb:91:c1:73:7f:9c:71:6d:f8:c1:6f:6d:
                    2b:b8:56:9a:32:b6:a7:33:b0:61:a6:f3:31:c8:ab:
                    fc:66:44:99:c6:d2:89:7f:33:08:27:1a:a2:cd:8b:
                    dc:6c:26:46:15:b3:78:32:2f:2c:60:d5:4c:f0:95:
                    23:da:28:f2:e9:c0:49:7f:4c:32:b2:1a:ff:79:33:
                    ed:6f:c8:73:89:2a:e0:b2:bf:cd:e0:ef:9e:90:d6:
                    ae:a8:44:df:0c:5e:e3:22:ff:99:39:de:ff:ef:fa:
                    01:35:aa:07:1e:d2:0e:c5:f1:18:98:45:86:c0:00:
                    c1:36:73:83:46:4b:ad:50:01:f4:99:ae:fb:e1:8d:
                    01:0d:e0:cf:e0:56:33:e4:90:04:47:35:fd:d1:33:
                    75:bb:c6:b3:1b:bd:49:1a:53:ae:a4:de:f6:8b:3f:
                    4a:d8:a2:10:b9:67:66:02:7f:f3:bd:cb:60:c0:cb:
                    06:d4:53:d8:bf:29:19:6a:0d:28:41:9e:9f:d6:c6:
                    e8:0e:11:90:37:b8:25:e5:e7:53:18:5d:f5:fa:a2:
                    91:a1:e0:14:a7:b3:7f:3b:f7:0b:e3:4d:09:a6:a4:
                    14:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:1F:C3:30:15:61:1D:69:33:83:26:23:6E:E3:67:82:A6:09:BC:E2
            X509v3 Authority Key Identifier:
                keyid:AF:CF:00:A9:0B:7E:9E:A1:E3:01:82:B0:BF:F9:34:BE:4D:C0:97:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2565a1cf-2950-47dc-a212-f653b8c3f5a9/0/AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2565a1cf-2950-47dc-a212-f653b8c3f5a9/0/3130332e33302e3231322e302f32342d3234203d3e20313530313838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.30.212.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a4:51:45:70:74:20:cb:d2:25:5e:06:82:3d:99:63:fa:29:3b:
         19:89:03:bd:7f:7c:3e:31:83:a7:5a:10:20:e2:0d:c9:18:21:
         63:d2:47:8d:21:50:7a:b6:7e:4c:7d:81:9d:db:21:8f:dd:4f:
         23:89:f7:1f:c2:76:e4:5c:d7:65:3c:15:11:7d:ee:41:54:6f:
         b7:a0:61:6c:59:9b:7d:67:c4:bb:12:7f:19:47:69:49:78:3d:
         7e:e7:77:31:cf:8f:69:da:80:e1:3d:cc:90:fc:f4:cf:9b:74:
         47:78:52:5d:8b:a9:2b:d7:bd:8a:b6:eb:49:fc:1b:57:1a:71:
         65:ff:d0:39:df:bd:d0:e9:f5:04:e6:33:c4:b7:53:93:9e:9d:
         7c:c8:17:c7:f5:cc:41:98:ec:96:57:ef:d6:74:60:24:2a:b5:
         b6:65:13:f7:b0:6a:0e:af:c7:dc:18:99:55:f2:63:f8:85:ff:
         a7:7a:40:cc:8f:69:5e:d4:40:c6:cb:d6:e7:64:e8:69:5b:b6:
         68:3f:db:fc:4d:82:71:b2:95:39:9d:59:7d:24:d5:33:d6:25:
         b7:65:46:6b:57:55:14:0c:a1:43:66:ac:d4:b6:77:7c:f7:c0:
         6f:27:8e:8e:ef:41:b3:df:dc:77:51:68:5b:cd:36:5d:ba:82:
         dd:02:36:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 07:50:06 2026 by rpki-client