Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/362bacc9-d25d-4610-aee4-655a14ea2fd6/0/3130332e34332e3136342e302f32342d3234203d3e20313530323834.roa
File:                     3130332e34332e3136342e302f32342d3234203d3e20313530323834.roa (raw, json)
Hash identifier:          bfjSzcy/JvaZYnZkSo/Oqmg+cr4NUoQU759G/evdQ4M=
Subject key identifier:   7C:1E:39:AF:4A:0F:A7:28:F7:92:BF:C1:1C:BC:8E:CA:D8:3A:AE:92
Certificate issuer:       /CN=44221B3D145FCC17734F7C523353CB67A0B8D3B3
Certificate serial:       7EBF5A01B0938993B35F26BE9134D11956B84DBA
Authority key identifier: 44:22:1B:3D:14:5F:CC:17:73:4F:7C:52:33:53:CB:67:A0:B8:D3:B3
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44221B3D145FCC17734F7C523353CB67A0B8D3B3.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/362bacc9-d25d-4610-aee4-655a14ea2fd6/0/3130332e34332e3136342e302f32342d3234203d3e20313530323834.roa
Signing time:             Thu 16 Apr 2026 17:00:00 +0000
ROA not before:           Thu 16 Apr 2026 16:55:00 +0000
ROA not after:            Thu 15 Apr 2027 17:00:00 +0000
asID:                     150284
IP address blocks:        103.43.164.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/362bacc9-d25d-4610-aee4-655a14ea2fd6/0/44221B3D145FCC17734F7C523353CB67A0B8D3B3.crl
                          rsync://repo-rpki.idnic.net/repo/362bacc9-d25d-4610-aee4-655a14ea2fd6/0/44221B3D145FCC17734F7C523353CB67A0B8D3B3.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44221B3D145FCC17734F7C523353CB67A0B8D3B3.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 20 Apr 2026 03:50:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:bf:5a:01:b0:93:89:93:b3:5f:26:be:91:34:d1:19:56:b8:4d:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44221B3D145FCC17734F7C523353CB67A0B8D3B3
        Validity
            Not Before: Apr 16 16:55:00 2026 GMT
            Not After : Apr 15 17:00:00 2027 GMT
        Subject: CN=7C1E39AF4A0FA728F792BFC11CBC8ECAD83AAE92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:4c:30:8e:22:38:0f:d0:00:37:e5:6f:7f:20:
                    a6:46:3f:eb:1b:ef:fd:9a:3a:23:4d:63:7b:8b:77:
                    15:68:2f:a3:f8:10:da:80:02:b4:40:2e:a1:0d:63:
                    d8:76:47:39:cb:a8:73:51:8d:24:cb:86:a9:ab:56:
                    9a:0f:d7:17:72:6e:c5:54:b5:0e:88:eb:f7:ec:e2:
                    62:6f:7e:4d:e3:d2:67:b2:d0:af:ce:00:fe:f7:30:
                    b7:ad:fe:f7:e5:be:2a:1c:07:9c:27:a0:de:80:42:
                    0b:50:a1:16:a2:38:9c:80:2b:d1:42:92:92:f8:92:
                    38:ff:90:26:1c:db:8e:a2:0e:cb:2a:57:8f:60:ae:
                    dd:dd:c1:f8:b5:26:eb:47:bd:ad:9d:71:14:3a:b1:
                    9d:01:90:1e:5b:01:2e:30:69:45:14:30:70:c2:57:
                    22:1f:f9:ff:ad:0b:fc:05:58:46:4b:b9:a2:d2:20:
                    41:9c:0f:be:e4:ea:9e:91:d0:ab:31:37:40:03:4d:
                    74:44:fa:64:6f:8f:3a:58:13:f4:c0:ad:f7:07:be:
                    34:b8:f7:f2:63:8a:77:e8:f6:b5:11:a8:2e:41:b8:
                    8a:ac:a9:91:33:a6:5a:98:ac:4e:9e:ce:bc:a3:8f:
                    f0:49:d1:93:f5:10:9f:8c:e4:bb:af:b0:a8:1d:04:
                    a5:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:1E:39:AF:4A:0F:A7:28:F7:92:BF:C1:1C:BC:8E:CA:D8:3A:AE:92
            X509v3 Authority Key Identifier:
                keyid:44:22:1B:3D:14:5F:CC:17:73:4F:7C:52:33:53:CB:67:A0:B8:D3:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/362bacc9-d25d-4610-aee4-655a14ea2fd6/0/44221B3D145FCC17734F7C523353CB67A0B8D3B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44221B3D145FCC17734F7C523353CB67A0B8D3B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/362bacc9-d25d-4610-aee4-655a14ea2fd6/0/3130332e34332e3136342e302f32342d3234203d3e20313530323834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.43.164.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:bb:86:9a:f3:f0:9a:87:19:ac:b7:ca:55:57:97:b2:b6:af:
         62:67:0c:17:ab:36:69:c4:a9:95:82:90:ea:89:88:20:86:6a:
         a9:77:8c:ed:91:ba:9e:54:fa:82:a5:a8:a8:81:ec:7f:fb:7c:
         64:97:8f:72:cb:71:6e:4e:6a:29:ce:f1:1c:4a:70:15:9a:bf:
         e6:b6:9c:cd:75:c8:ed:40:a0:68:9d:95:27:dc:7f:9e:08:66:
         21:9d:a1:fd:09:dc:49:21:49:03:d7:7f:c1:5b:ba:00:1c:77:
         44:f2:1b:c3:5c:51:93:96:93:d4:e4:5a:7a:49:24:11:7b:af:
         d3:08:40:55:8c:35:4d:2c:ff:68:01:93:69:7c:ae:d4:47:f1:
         64:02:d8:49:28:9a:40:8e:18:11:9b:af:ff:ec:a0:19:5c:8d:
         c9:c0:85:f9:a9:9f:25:16:05:79:32:48:56:1e:c8:68:ce:69:
         6f:04:a7:b7:08:b3:fc:70:2f:16:fa:6b:95:ff:66:db:47:93:
         0f:46:80:ac:1b:12:1f:cf:55:78:22:db:6f:da:c0:41:06:20:
         99:4b:59:48:83:4c:51:83:ac:80:d1:9e:37:76:92:e4:8c:e8:
         b4:f2:59:1c:17:d8:49:31:d5:99:2d:e9:d3:ea:af:f4:fd:73:
         31:df:34:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:07:32 2026 by rpki-client