Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/3130332e3234372e32312e302f32342d3234203d3e203538343835.roa
File:                     3130332e3234372e32312e302f32342d3234203d3e203538343835.roa (raw, json)
Hash identifier:          J7nzxQoOQZd+f5FsS1z2JuLaZuo8BSYFqnL/f85DF9g=
Subject key identifier:   A8:0D:67:4B:FB:A4:FB:28:43:C8:64:02:C2:E5:BB:01:D7:3A:64:84
Certificate issuer:       /CN=FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39
Certificate serial:       34369B40CF59B1C2F0D211B172C85DA426157AA2
Authority key identifier: FA:5B:CA:98:4E:EB:AF:FD:CE:D8:41:90:C7:07:56:DB:EB:3B:FF:39
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/3130332e3234372e32312e302f32342d3234203d3e203538343835.roa
Signing time:             Sun 08 Feb 2026 06:00:01 +0000
ROA not before:           Sun 08 Feb 2026 05:55:01 +0000
ROA not after:            Sun 07 Feb 2027 06:00:01 +0000
asID:                     58485
IP address blocks:        103.247.21.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39.crl
                          rsync://repo-rpki.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Mar 2026 11:58:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:36:9b:40:cf:59:b1:c2:f0:d2:11:b1:72:c8:5d:a4:26:15:7a:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39
        Validity
            Not Before: Feb  8 05:55:01 2026 GMT
            Not After : Feb  7 06:00:01 2027 GMT
        Subject: CN=A80D674BFBA4FB2843C86402C2E5BB01D73A6484
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:f7:f0:6b:03:ee:7b:19:e5:99:0c:c3:7a:11:
                    c8:2b:82:af:9e:47:94:48:06:6e:ff:10:29:ed:ea:
                    f0:6f:87:8a:b7:c9:a5:58:64:86:31:fc:00:9c:77:
                    22:79:50:a9:35:46:91:c1:ff:17:9f:ce:3f:02:e1:
                    2d:05:5c:25:26:50:dc:33:46:a1:cc:3e:9f:49:86:
                    4e:64:ed:96:bd:9a:ac:53:96:2a:a8:be:f9:1d:cc:
                    b4:8e:01:12:84:d2:f6:a7:c7:91:1a:d9:a0:78:85:
                    ff:5c:9e:04:9c:d6:45:b7:55:5e:b1:bd:55:7d:80:
                    28:fd:c3:ae:b6:b5:b8:14:4c:01:62:95:a0:a8:f7:
                    c6:07:05:07:0f:31:78:15:2d:d2:3e:3d:cd:0a:22:
                    6e:77:99:ab:8a:70:98:12:93:16:d7:b6:52:3e:95:
                    46:76:e6:e4:63:fe:27:42:b8:66:e7:ad:38:bd:7e:
                    34:e7:b5:a7:25:30:68:c8:d3:b9:d2:81:b8:11:8d:
                    27:33:f1:2e:17:10:e2:c7:f7:f7:76:25:20:38:df:
                    39:ef:3a:5a:74:c0:37:cb:52:f6:0e:96:a3:5a:9e:
                    be:1d:31:56:5f:75:ca:61:0f:a5:5b:b6:ba:d6:b6:
                    5d:5c:25:f6:89:2b:1b:6a:e4:72:da:9e:bf:27:35:
                    8b:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:0D:67:4B:FB:A4:FB:28:43:C8:64:02:C2:E5:BB:01:D7:3A:64:84
            X509v3 Authority Key Identifier:
                keyid:FA:5B:CA:98:4E:EB:AF:FD:CE:D8:41:90:C7:07:56:DB:EB:3B:FF:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/3130332e3234372e32312e302f32342d3234203d3e203538343835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.247.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:48:13:ce:26:31:d5:03:6b:a9:ed:c1:d3:59:91:50:a5:31:
         ca:47:23:4a:dc:dc:14:f6:84:7c:f3:43:ac:7c:69:6d:fa:d1:
         da:80:0f:ef:6c:06:c7:8e:be:94:12:d7:39:fb:8d:0c:a3:b2:
         0d:4b:7e:3f:2a:c0:b3:2c:fa:69:8e:39:e2:4e:c2:d8:15:77:
         ee:cf:92:c8:5e:ff:9a:27:1b:ef:cb:bd:31:46:89:8a:26:16:
         e2:a8:11:fc:04:ac:28:7b:75:a8:33:37:d0:54:2c:92:5b:d5:
         e1:65:77:97:d4:3d:be:4b:0f:0e:c4:01:e3:9e:f3:a3:26:bd:
         e9:a5:3f:68:4e:2b:d7:d5:3c:1a:e8:3b:d5:7f:86:5e:9a:c7:
         2f:57:1c:88:03:04:2a:4a:75:13:ff:bc:55:9f:da:2c:de:6b:
         4c:33:28:29:e9:51:c6:67:80:f6:57:91:62:df:62:46:91:49:
         ea:0d:f4:98:1c:be:db:bf:1b:00:94:e8:bc:0e:b5:24:e7:66:
         18:9f:d1:08:a3:36:da:1c:13:00:2f:81:9d:1f:1e:d3:e2:62:
         33:ce:be:df:83:91:fa:8d:a6:a8:87:d6:b2:0a:17:4a:30:5b:
         b7:b8:5e:e1:01:21:f7:33:e5:be:d9:1c:ae:f9:fe:96:53:ea:
         1e:df:21:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:37:35 2026 by rpki-client