Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/2f13a6ef-3434-4401-b3e1-65153066fb3e/0/3130332e35312e39392e302f32342d3234203d3e20313530343639.roa
File:                     3130332e35312e39392e302f32342d3234203d3e20313530343639.roa (raw, json)
Hash identifier:          uMixIBGfnJwbx8ZC7E3ZXlEGGIahQPMgxVwK42yhPM8=
Subject key identifier:   94:FE:20:55:96:A9:AE:8F:6C:07:80:70:15:80:5C:E3:6B:C8:4A:3E
Certificate issuer:       /CN=245A17CADB2BB2FDC5786C27E5BE959636E7F409
Certificate serial:       2BE7053319BAE13F67B2A3B692772496C2B571FA
Authority key identifier: 24:5A:17:CA:DB:2B:B2:FD:C5:78:6C:27:E5:BE:95:96:36:E7:F4:09
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/245A17CADB2BB2FDC5786C27E5BE959636E7F409.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2f13a6ef-3434-4401-b3e1-65153066fb3e/0/3130332e35312e39392e302f32342d3234203d3e20313530343639.roa
Signing time:             Thu 16 Apr 2026 12:00:01 +0000
ROA not before:           Thu 16 Apr 2026 11:55:01 +0000
ROA not after:            Thu 15 Apr 2027 12:00:01 +0000
asID:                     150469
IP address blocks:        103.51.99.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/2f13a6ef-3434-4401-b3e1-65153066fb3e/0/245A17CADB2BB2FDC5786C27E5BE959636E7F409.crl
                          rsync://repo-rpki.idnic.net/repo/2f13a6ef-3434-4401-b3e1-65153066fb3e/0/245A17CADB2BB2FDC5786C27E5BE959636E7F409.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/245A17CADB2BB2FDC5786C27E5BE959636E7F409.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 19 Apr 2026 15:31:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:e7:05:33:19:ba:e1:3f:67:b2:a3:b6:92:77:24:96:c2:b5:71:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=245A17CADB2BB2FDC5786C27E5BE959636E7F409
        Validity
            Not Before: Apr 16 11:55:01 2026 GMT
            Not After : Apr 15 12:00:01 2027 GMT
        Subject: CN=94FE205596A9AE8F6C07807015805CE36BC84A3E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:b4:f3:b0:4b:de:aa:7b:4d:e5:b0:9d:01:04:
                    ed:e8:e8:70:c9:4f:3d:12:de:4e:a4:9f:e8:d4:51:
                    b9:95:73:a6:14:2e:6f:dd:43:5e:86:1e:ba:53:60:
                    1e:9c:19:4d:70:3b:f0:bd:04:1f:00:af:2b:20:89:
                    27:4f:0b:4b:4f:2f:3f:07:53:92:07:5e:11:20:6e:
                    bc:f8:57:f8:95:f9:06:43:95:ac:28:9f:bb:1f:f3:
                    df:c4:f3:75:20:32:5a:03:16:15:f1:1a:61:a8:1e:
                    be:2a:d9:a1:d2:2d:c0:e3:90:12:f7:52:fb:62:9e:
                    fa:e8:f7:c6:7b:b4:15:73:bd:ff:db:2e:17:1f:1d:
                    e1:31:ec:35:ef:6b:98:ef:58:fd:3e:9e:cb:bd:cf:
                    20:48:f5:fa:82:9f:dc:f5:cc:44:c8:a2:9f:cc:77:
                    e6:d5:21:a0:6d:bd:8f:ce:41:1e:f0:a1:b1:b3:1f:
                    5b:58:d7:c4:d5:8e:e7:be:bc:07:68:1f:09:91:b7:
                    63:1e:39:54:ac:00:ef:29:22:30:ff:72:2d:72:49:
                    0d:06:6d:f2:f4:55:08:35:32:46:f4:50:ac:d3:06:
                    01:b9:88:ed:c7:fe:da:b4:99:d2:42:e6:27:e2:9b:
                    2d:62:1a:3e:a1:c2:82:d1:72:76:04:be:89:2b:19:
                    d2:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:FE:20:55:96:A9:AE:8F:6C:07:80:70:15:80:5C:E3:6B:C8:4A:3E
            X509v3 Authority Key Identifier:
                keyid:24:5A:17:CA:DB:2B:B2:FD:C5:78:6C:27:E5:BE:95:96:36:E7:F4:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2f13a6ef-3434-4401-b3e1-65153066fb3e/0/245A17CADB2BB2FDC5786C27E5BE959636E7F409.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/245A17CADB2BB2FDC5786C27E5BE959636E7F409.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2f13a6ef-3434-4401-b3e1-65153066fb3e/0/3130332e35312e39392e302f32342d3234203d3e20313530343639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.51.99.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:38:ba:5b:c9:a5:ce:dd:5a:e6:a6:c4:62:97:b7:4a:9c:0c:
         64:63:fb:52:ca:b5:7a:6f:a5:2f:bc:29:2a:bd:4d:cc:c1:b3:
         26:f3:29:47:ed:36:2e:f6:0c:ab:bd:e7:e7:fb:3f:86:8b:f8:
         de:69:af:47:6a:cb:49:b8:07:ca:8a:32:7d:11:0e:51:4f:d5:
         e0:78:ef:cf:29:7d:ba:04:93:4a:e6:ef:4d:7d:59:ee:48:7b:
         d5:af:2b:da:6b:96:f5:4d:c3:a5:11:29:94:d4:30:63:8d:a5:
         e3:48:bd:46:b1:04:82:53:7b:82:65:0e:31:37:d4:da:09:3d:
         7e:75:ff:bf:e7:5d:71:3d:ac:73:df:46:3c:66:89:1c:e2:93:
         0e:3b:0a:6f:95:31:50:92:2e:5d:4b:5e:73:52:9c:d6:03:01:
         c8:3b:48:37:36:2c:5d:1f:d3:f8:31:e5:38:a7:2a:b6:dd:01:
         64:b2:06:49:ea:c3:6d:77:c1:a3:a8:70:30:3f:2e:1d:5e:3c:
         f7:b3:07:18:25:16:b0:9e:dc:82:b6:dc:cb:43:55:00:83:d5:
         fe:2e:f9:af:0e:0f:eb:1a:c3:e3:f1:ba:7c:f8:a9:52:f6:eb:
         9e:53:fa:92:39:41:a2:94:1f:c4:b9:b9:f0:66:f6:48:2a:56:
         b4:bd:6a:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 05:50:26 2026 by rpki-client