Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3564abfb-1962-44a9-8376-cbfb1efcdaba/0/3130332e3135352e36342e302f32332d3233203d3e20313432333831.roa
File:                     3130332e3135352e36342e302f32332d3233203d3e20313432333831.roa (raw, json)
Hash identifier:          2WIOYX46p74zIiYunJq4TWtX4WOqlO2yPDX3Ww98WUc=
Subject key identifier:   54:B2:C0:AB:59:15:17:EB:E5:BF:2A:2F:65:43:8A:FC:8E:89:54:29
Certificate issuer:       /CN=571E2EFA23FEA611810611410635E23A090F4550
Certificate serial:       42F8D50601A5647E6E42F01E400495605461ABCF
Authority key identifier: 57:1E:2E:FA:23:FE:A6:11:81:06:11:41:06:35:E2:3A:09:0F:45:50
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/571E2EFA23FEA611810611410635E23A090F4550.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3564abfb-1962-44a9-8376-cbfb1efcdaba/0/3130332e3135352e36342e302f32332d3233203d3e20313432333831.roa
Signing time:             Sat 14 Feb 2026 22:00:02 +0000
ROA not before:           Sat 14 Feb 2026 21:55:02 +0000
ROA not after:            Sat 13 Feb 2027 22:00:02 +0000
asID:                     142381
IP address blocks:        103.155.64.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/3564abfb-1962-44a9-8376-cbfb1efcdaba/0/571E2EFA23FEA611810611410635E23A090F4550.crl
                          rsync://repo-rpki.idnic.net/repo/3564abfb-1962-44a9-8376-cbfb1efcdaba/0/571E2EFA23FEA611810611410635E23A090F4550.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/571E2EFA23FEA611810611410635E23A090F4550.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Mar 2026 13:26:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:f8:d5:06:01:a5:64:7e:6e:42:f0:1e:40:04:95:60:54:61:ab:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=571E2EFA23FEA611810611410635E23A090F4550
        Validity
            Not Before: Feb 14 21:55:02 2026 GMT
            Not After : Feb 13 22:00:02 2027 GMT
        Subject: CN=54B2C0AB591517EBE5BF2A2F65438AFC8E895429
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:65:80:0e:61:b9:f6:6b:19:f5:39:79:e8:93:
                    2d:5f:07:e2:bd:10:21:3e:b6:ec:8c:68:7d:2b:4b:
                    a6:9e:57:62:96:fd:ca:e6:3f:3f:2e:5d:ad:8b:31:
                    fa:3c:3b:e2:29:bb:56:74:fe:8b:aa:34:31:ca:47:
                    3e:ed:1c:30:09:6e:52:c5:8e:52:e0:fe:fe:eb:2f:
                    83:fb:43:a4:b5:db:df:41:63:6e:41:1a:9e:fa:91:
                    99:45:62:1e:7e:96:b8:a3:8a:d4:54:23:62:81:84:
                    2a:ae:9f:58:b2:4d:17:ff:bb:80:cd:3b:c4:68:6c:
                    4e:43:2a:65:b1:82:b9:71:33:4c:5c:42:d0:94:4c:
                    8d:ab:2e:c3:6e:ef:79:c9:59:0b:d5:4b:25:56:c7:
                    43:c6:75:28:44:8b:03:d1:3d:6d:8d:3e:df:41:0e:
                    6c:1a:d2:ed:c9:af:e2:4c:06:e0:b5:cb:13:a8:1c:
                    50:36:be:d1:66:96:95:77:d3:7d:50:26:de:b4:49:
                    4e:f8:fa:e8:c1:60:18:57:3e:7d:b5:c0:67:a9:f6:
                    ce:fe:e8:67:05:36:39:38:ac:76:a9:52:97:f0:b0:
                    5b:d3:18:6e:10:ae:cb:5b:9a:bb:3d:53:0f:5d:7c:
                    cc:e2:61:c4:ac:0b:65:7e:28:cc:69:3a:40:f5:e4:
                    3d:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:B2:C0:AB:59:15:17:EB:E5:BF:2A:2F:65:43:8A:FC:8E:89:54:29
            X509v3 Authority Key Identifier:
                keyid:57:1E:2E:FA:23:FE:A6:11:81:06:11:41:06:35:E2:3A:09:0F:45:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3564abfb-1962-44a9-8376-cbfb1efcdaba/0/571E2EFA23FEA611810611410635E23A090F4550.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/571E2EFA23FEA611810611410635E23A090F4550.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3564abfb-1962-44a9-8376-cbfb1efcdaba/0/3130332e3135352e36342e302f32332d3233203d3e20313432333831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.155.64.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4e:bd:17:5b:94:01:c3:91:11:bf:41:4f:7e:2d:7a:8c:22:ec:
         32:c6:4e:25:02:d1:33:ba:56:48:a8:e9:d7:09:1b:1f:91:dc:
         60:33:41:a4:27:31:c4:57:c1:7e:f9:2b:75:7e:3f:3c:7a:82:
         87:25:86:fe:ca:b8:d3:5f:99:a1:16:da:39:98:26:12:ad:c6:
         d5:38:26:96:b0:fe:d5:af:ad:af:51:87:5a:31:16:c5:1f:eb:
         6d:80:d9:47:1d:2d:c0:2f:65:ce:f5:10:b8:a4:6d:71:0b:63:
         40:55:33:8b:64:60:3d:ec:32:45:c8:0b:c2:a8:03:0b:ad:d0:
         e1:c4:79:a4:fe:7e:c7:0d:8b:d9:c8:23:f1:9c:4c:02:90:c3:
         e0:88:db:f2:ca:7a:c0:04:fd:fd:dc:58:c8:73:56:82:a3:7e:
         80:97:4c:5c:09:42:a6:81:0b:35:03:78:e5:41:81:58:84:5e:
         8e:32:5e:1f:79:83:8e:bf:62:a9:f8:7e:bc:21:9e:fa:01:97:
         18:e4:86:5f:6a:2c:59:d0:f4:59:9a:63:1f:80:2c:bb:97:d6:
         4c:2b:36:46:25:e7:0b:eb:6d:82:3f:ff:41:cf:c8:ef:a8:2d:
         ab:b3:a8:90:83:16:69:f2:88:6d:23:37:f3:62:e7:fd:ce:b0:
         9f:57:f5:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:42:31 2026 by rpki-client