Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/2f13a6ef-3434-4401-b3e1-65153066fb3e/0/3130332e35312e39382e302f32332d3233203d3e20313530343639.roa
File:                     3130332e35312e39382e302f32332d3233203d3e20313530343639.roa (raw, json)
Hash identifier:          xOFYW7iQm5qoeDLJ0+fcBg/w78CpzGMdoNL2cYq7/Nk=
Subject key identifier:   8F:95:58:22:04:15:DA:22:7F:D1:3A:57:4A:C0:87:F4:6E:7F:AE:E1
Certificate issuer:       /CN=245A17CADB2BB2FDC5786C27E5BE959636E7F409
Certificate serial:       7411526CA784692FC59DC81D191BFFF7078CFF31
Authority key identifier: 24:5A:17:CA:DB:2B:B2:FD:C5:78:6C:27:E5:BE:95:96:36:E7:F4:09
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/245A17CADB2BB2FDC5786C27E5BE959636E7F409.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2f13a6ef-3434-4401-b3e1-65153066fb3e/0/3130332e35312e39382e302f32332d3233203d3e20313530343639.roa
Signing time:             Thu 16 Apr 2026 12:00:01 +0000
ROA not before:           Thu 16 Apr 2026 11:55:01 +0000
ROA not after:            Thu 15 Apr 2027 12:00:01 +0000
asID:                     150469
IP address blocks:        103.51.98.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/2f13a6ef-3434-4401-b3e1-65153066fb3e/0/245A17CADB2BB2FDC5786C27E5BE959636E7F409.crl
                          rsync://repo-rpki.idnic.net/repo/2f13a6ef-3434-4401-b3e1-65153066fb3e/0/245A17CADB2BB2FDC5786C27E5BE959636E7F409.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/245A17CADB2BB2FDC5786C27E5BE959636E7F409.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 19 Apr 2026 15:31:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:11:52:6c:a7:84:69:2f:c5:9d:c8:1d:19:1b:ff:f7:07:8c:ff:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=245A17CADB2BB2FDC5786C27E5BE959636E7F409
        Validity
            Not Before: Apr 16 11:55:01 2026 GMT
            Not After : Apr 15 12:00:01 2027 GMT
        Subject: CN=8F9558220415DA227FD13A574AC087F46E7FAEE1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:dd:4d:49:27:26:42:2a:03:b8:51:1a:1b:0d:
                    0d:d0:cc:e1:63:98:e6:0c:06:29:74:67:37:c1:3b:
                    99:a1:dc:85:4f:cf:69:55:ba:98:e2:b0:12:c5:05:
                    20:ed:56:03:0c:1b:79:08:04:67:c6:2d:3f:ff:9e:
                    30:d4:7b:32:fd:55:7d:b9:ca:91:4b:06:a2:d6:f0:
                    cd:58:3f:1c:6b:24:a3:81:6b:fa:21:00:66:b4:a0:
                    4c:6a:5d:3f:14:32:12:95:3e:50:68:2b:c4:af:3b:
                    55:6a:25:5a:d4:8d:b2:42:50:9e:fd:00:36:16:8a:
                    fd:0e:40:4e:7e:f4:43:b4:f0:1e:13:49:31:fd:79:
                    d2:87:ec:3b:b3:e9:3d:51:87:23:7c:20:6a:48:c7:
                    9c:53:e8:e5:29:46:98:e2:b1:fa:a9:97:91:08:f7:
                    72:83:ca:6d:a5:05:8d:3f:11:22:3e:5b:5d:c9:93:
                    33:30:c2:ff:9a:6d:01:44:90:55:ad:4d:25:b2:2f:
                    2e:81:f5:b4:13:29:15:a4:5d:c8:f4:3b:22:d4:29:
                    1e:d3:b8:c3:78:28:9d:33:14:b9:e0:8f:fd:4d:19:
                    e9:13:c0:08:c3:a7:dd:f5:b4:54:ee:c5:1c:72:9f:
                    17:a6:53:52:99:44:d5:02:f8:e2:41:e6:3e:18:b8:
                    fe:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:95:58:22:04:15:DA:22:7F:D1:3A:57:4A:C0:87:F4:6E:7F:AE:E1
            X509v3 Authority Key Identifier:
                keyid:24:5A:17:CA:DB:2B:B2:FD:C5:78:6C:27:E5:BE:95:96:36:E7:F4:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2f13a6ef-3434-4401-b3e1-65153066fb3e/0/245A17CADB2BB2FDC5786C27E5BE959636E7F409.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/245A17CADB2BB2FDC5786C27E5BE959636E7F409.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2f13a6ef-3434-4401-b3e1-65153066fb3e/0/3130332e35312e39382e302f32332d3233203d3e20313530343639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.51.98.0/23

    Signature Algorithm: sha256WithRSAEncryption
         21:d2:f7:1d:75:6a:7d:5b:12:8c:66:4d:0f:22:76:04:39:26:
         cd:d6:bb:59:ac:55:f5:8d:9e:c7:6c:60:0e:6b:c2:77:7b:89:
         da:54:62:3c:7b:ff:ca:67:37:2b:12:2d:fa:6b:60:b1:6f:08:
         06:c0:81:57:e1:fe:0e:89:2e:f6:8d:ef:ef:e0:c6:de:3f:4c:
         07:3f:a7:d9:3a:a2:7e:c6:9c:42:56:9a:0d:c1:c3:f7:43:88:
         cb:ae:8d:af:b3:7d:23:94:5b:25:c6:9e:73:a1:7a:15:c0:0a:
         21:93:05:4a:0e:e6:b1:7f:34:e8:a1:6f:28:7d:0c:f2:55:62:
         10:82:65:f0:23:3d:64:ca:da:8b:0c:2e:70:9a:bf:90:cd:da:
         bd:72:66:73:88:39:01:71:35:24:5c:05:1d:d7:22:e1:b9:71:
         a3:70:37:ab:ef:9c:9d:93:46:d4:13:1a:e5:38:52:4b:cb:dc:
         22:f2:d2:11:0a:61:40:3e:16:f2:61:19:bd:2e:74:7b:41:3f:
         e7:55:10:02:29:7a:35:aa:99:5e:e6:e8:f7:32:f3:95:48:a9:
         f2:af:5c:38:94:55:94:a0:e7:71:a8:ff:2c:ea:7e:40:03:b7:
         77:cf:c9:86:5b:ca:78:eb:c8:a0:33:46:86:eb:c0:54:09:bb:
         3d:b1:28:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:23:41 2026 by rpki-client