Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3340df13-c4e9-4218-b114-dead1648285c/0/3130332e3231382e3130342e302f32342d3234203d3e20313530323138.roa
File:                     3130332e3231382e3130342e302f32342d3234203d3e20313530323138.roa (raw, json)
Hash identifier:          nIy/VfCP7zSkMzr8OonFtu6YLocFepg02ssVATdkB1M=
Subject key identifier:   F2:59:C5:46:64:8D:F8:0E:E2:44:15:57:A4:1F:C0:98:03:59:93:2C
Certificate issuer:       /CN=038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4
Certificate serial:       2FA90818845BD3349EDFE85A1E30546B99C7A6DE
Authority key identifier: 03:8F:C8:DB:9F:4F:38:1D:61:4C:3C:DA:94:4E:DB:CE:2C:EB:B6:F4
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3340df13-c4e9-4218-b114-dead1648285c/0/3130332e3231382e3130342e302f32342d3234203d3e20313530323138.roa
Signing time:             Mon 06 Apr 2026 06:02:50 +0000
ROA not before:           Mon 06 Apr 2026 05:57:50 +0000
ROA not after:            Mon 05 Apr 2027 06:02:50 +0000
asID:                     150218
IP address blocks:        103.218.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/3340df13-c4e9-4218-b114-dead1648285c/0/038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.crl
                          rsync://repo-rpki.idnic.net/repo/3340df13-c4e9-4218-b114-dead1648285c/0/038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 20 Apr 2026 22:28:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:a9:08:18:84:5b:d3:34:9e:df:e8:5a:1e:30:54:6b:99:c7:a6:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4
        Validity
            Not Before: Apr  6 05:57:50 2026 GMT
            Not After : Apr  5 06:02:50 2027 GMT
        Subject: CN=F259C546648DF80EE2441557A41FC0980359932C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:83:9a:59:f5:07:e4:13:df:8c:6e:13:82:1f:
                    ac:a9:cd:78:40:0c:f0:19:23:0c:e7:ef:75:68:0b:
                    2e:c9:b1:a4:65:d8:e8:5b:fd:35:bb:b9:54:8e:e4:
                    12:1a:ce:53:e7:54:16:79:bc:ea:e2:90:11:8f:11:
                    e4:13:d1:df:cf:17:ab:0b:69:a2:84:e3:21:ea:44:
                    b7:77:6e:0a:53:cc:d5:43:10:08:7b:ed:54:c9:49:
                    f7:70:9d:a8:a8:c0:97:0b:9c:32:a7:53:fc:f4:a7:
                    87:f2:16:6b:5b:9c:b9:aa:54:62:e2:75:36:76:16:
                    e5:c7:fc:14:73:b2:d9:73:cf:ae:31:28:76:c6:ea:
                    a9:84:5e:52:64:7c:6f:a6:10:fe:19:5f:6b:77:5f:
                    64:25:25:3f:af:df:1e:9a:bd:77:12:2d:a7:e2:02:
                    37:ac:cf:a2:5c:41:43:44:47:50:76:bd:e2:d5:c1:
                    50:34:8a:5b:d5:42:59:7d:65:8d:a7:6e:a9:63:c4:
                    da:e4:d6:c9:6f:f7:88:99:fc:67:23:c9:47:9b:9f:
                    a2:14:04:e4:f3:f6:bc:20:21:4b:5d:da:a9:48:5d:
                    5f:3e:e4:fe:86:7a:6b:44:a9:50:cb:ba:ed:b5:8e:
                    90:5c:93:08:1c:be:38:f6:36:af:d0:0b:1b:c4:95:
                    fc:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:59:C5:46:64:8D:F8:0E:E2:44:15:57:A4:1F:C0:98:03:59:93:2C
            X509v3 Authority Key Identifier:
                keyid:03:8F:C8:DB:9F:4F:38:1D:61:4C:3C:DA:94:4E:DB:CE:2C:EB:B6:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3340df13-c4e9-4218-b114-dead1648285c/0/038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3340df13-c4e9-4218-b114-dead1648285c/0/3130332e3231382e3130342e302f32342d3234203d3e20313530323138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.218.104.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bf:26:a0:7c:6c:cc:ea:75:b5:7c:4c:1f:71:0b:89:92:91:8e:
         84:5f:d1:b3:ac:52:a2:d7:a9:f1:28:6b:12:b8:9c:50:a5:f1:
         bc:20:bd:40:61:7a:2f:05:b8:18:86:6f:1a:25:37:ad:3e:2f:
         79:10:1e:9d:45:55:05:50:2e:13:82:aa:27:33:d9:0d:bb:84:
         79:a3:f0:e1:67:01:9d:59:a5:9b:f0:dc:69:62:6e:62:a4:b5:
         b5:12:73:82:ce:75:47:64:70:76:57:cd:f4:43:d9:bd:42:68:
         4a:3d:e6:bc:80:d9:aa:b9:16:c5:16:87:bf:62:fd:4c:b9:dc:
         a4:bc:b6:8f:ac:51:c2:05:9c:a7:55:96:64:70:41:e5:fa:67:
         76:d9:06:8a:b8:5e:d6:37:e9:20:5d:3e:c2:1b:73:56:e5:a1:
         84:18:4e:14:19:b2:ba:75:44:34:3b:5f:0c:2b:2e:58:17:22:
         e1:4e:1c:b7:6a:22:39:19:5d:0b:63:5b:e3:75:c4:8b:4a:14:
         a0:da:2f:22:53:0f:fe:19:9c:a2:94:50:ec:c0:46:f5:a5:b2:
         db:cf:56:57:28:77:58:e3:1f:67:20:ad:78:85:1b:8a:c7:79:
         a4:11:31:c0:52:51:a9:6f:36:2b:9c:f4:b5:f0:e1:f4:ce:dd:
         37:8d:b5:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 05:00:48 2026 by rpki-client