Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3360f078-8a20-48d1-82b8-e1f50a155201/0/3130332e3135302e3135382e302f32342d3234203d3e20313430333937.roa
File:                     3130332e3135302e3135382e302f32342d3234203d3e20313430333937.roa (raw, json)
Hash identifier:          TdkojAMY+wSZbicHywd7DAWzVbOYznEjtIqDGm6dfZc=
Subject key identifier:   BC:F3:08:4D:DF:EF:F8:E7:09:E2:57:05:03:72:B2:5F:2B:DE:BD:4D
Certificate issuer:       /CN=B93759B19E4C1F8FFB6E9D1E2E674E4E317D7E94
Certificate serial:       6CBB0153F1078D7921EB5F4813AA4CE094074717
Authority key identifier: B9:37:59:B1:9E:4C:1F:8F:FB:6E:9D:1E:2E:67:4E:4E:31:7D:7E:94
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B93759B19E4C1F8FFB6E9D1E2E674E4E317D7E94.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3360f078-8a20-48d1-82b8-e1f50a155201/0/3130332e3135302e3135382e302f32342d3234203d3e20313430333937.roa
Signing time:             Tue 07 Apr 2026 16:02:44 +0000
ROA not before:           Tue 07 Apr 2026 15:57:44 +0000
ROA not after:            Tue 06 Apr 2027 16:02:44 +0000
asID:                     140397
IP address blocks:        103.150.158.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/3360f078-8a20-48d1-82b8-e1f50a155201/0/B93759B19E4C1F8FFB6E9D1E2E674E4E317D7E94.crl
                          rsync://repo-rpki.idnic.net/repo/3360f078-8a20-48d1-82b8-e1f50a155201/0/B93759B19E4C1F8FFB6E9D1E2E674E4E317D7E94.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B93759B19E4C1F8FFB6E9D1E2E674E4E317D7E94.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 19 Apr 2026 20:02:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:bb:01:53:f1:07:8d:79:21:eb:5f:48:13:aa:4c:e0:94:07:47:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B93759B19E4C1F8FFB6E9D1E2E674E4E317D7E94
        Validity
            Not Before: Apr  7 15:57:44 2026 GMT
            Not After : Apr  6 16:02:44 2027 GMT
        Subject: CN=BCF3084DDFEFF8E709E257050372B25F2BDEBD4D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:bd:70:df:97:dd:52:a5:eb:1e:25:9f:b5:30:
                    a1:43:e0:90:22:1f:e5:0c:3a:9d:0a:7e:3a:75:ac:
                    02:7b:df:c6:17:f8:c0:bd:a7:ca:8f:c0:1c:b6:02:
                    72:0b:5f:a7:f4:01:85:d6:a6:1b:9f:7c:5e:0e:a0:
                    f7:b5:c7:41:ce:8b:2e:56:2d:41:9d:aa:0c:8a:50:
                    a3:23:7b:92:ba:82:04:e7:b1:c8:77:2e:14:f0:b4:
                    58:5c:12:b6:e3:96:f0:7f:7c:dc:4e:67:63:cb:cb:
                    7c:9c:13:d9:1f:16:54:4a:dc:db:34:d0:88:a1:62:
                    02:ba:67:40:7e:8a:ec:13:0d:9a:6e:8e:bf:54:07:
                    47:25:fe:3f:72:82:7f:46:16:85:5a:03:5e:62:6f:
                    d9:88:cd:94:c8:50:63:06:a1:fd:04:88:56:4c:38:
                    3b:28:c9:9a:c6:ba:37:fb:06:ed:16:eb:e4:c5:a1:
                    da:b7:79:61:b8:c0:aa:16:20:50:47:2d:e5:ce:90:
                    09:d6:11:3c:8f:8a:a4:34:86:d8:30:1d:a6:34:aa:
                    34:b7:34:8e:15:b9:e4:ed:62:7b:e4:31:80:74:65:
                    34:47:cc:12:b2:f9:85:10:89:8d:a0:39:1c:d0:7a:
                    9d:59:2a:af:d7:08:17:72:be:60:98:95:64:11:55:
                    ee:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:F3:08:4D:DF:EF:F8:E7:09:E2:57:05:03:72:B2:5F:2B:DE:BD:4D
            X509v3 Authority Key Identifier:
                keyid:B9:37:59:B1:9E:4C:1F:8F:FB:6E:9D:1E:2E:67:4E:4E:31:7D:7E:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3360f078-8a20-48d1-82b8-e1f50a155201/0/B93759B19E4C1F8FFB6E9D1E2E674E4E317D7E94.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B93759B19E4C1F8FFB6E9D1E2E674E4E317D7E94.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3360f078-8a20-48d1-82b8-e1f50a155201/0/3130332e3135302e3135382e302f32342d3234203d3e20313430333937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.150.158.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b1:45:a2:e8:4e:bc:03:13:83:86:36:6b:42:4c:56:09:35:97:
         87:ef:63:82:ee:f5:39:26:30:30:93:7e:7c:e8:7c:f1:9b:d9:
         f7:f0:f5:b6:6b:e3:58:40:97:82:15:b5:ab:b6:cc:78:18:52:
         dc:37:21:d2:2b:d8:fa:25:16:9c:e3:5d:aa:94:40:1b:9d:65:
         c7:79:74:b2:c4:33:7d:f8:04:f9:71:e2:55:a8:9b:dc:8e:3b:
         b8:13:39:3f:4d:a8:20:f1:50:25:ce:85:04:88:59:58:2c:34:
         82:1b:8d:b6:54:60:48:04:c8:43:7b:41:c3:7e:ae:11:21:4c:
         99:a8:e3:47:24:82:6c:a1:51:2e:e2:5a:e1:ab:e4:d3:46:c7:
         76:57:91:25:4c:4d:ff:1b:2b:83:0c:f4:bb:20:94:a1:65:58:
         1c:c6:3f:5c:05:f6:54:ad:1c:e4:cf:34:79:3c:1e:a3:4d:06:
         9e:a6:7a:9e:4d:00:06:7e:28:f6:a2:7a:5f:94:b0:7d:88:52:
         6e:39:95:b3:5b:b7:d1:87:af:9d:92:ba:07:f5:0c:d0:76:96:
         b8:9a:3b:f6:7e:a4:75:ac:f5:8e:5b:54:bf:11:ca:88:3b:34:
         43:a9:6f:64:04:24:39:36:82:d7:39:36:0d:2f:53:18:6b:0c:
         20:14:ef:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:26:37 2026 by rpki-client