Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/362bacc9-d25d-4610-aee4-655a14ea2fd6/0/3130332e34332e3136352e302f32342d3234203d3e20313530323834.roa
File:                     3130332e34332e3136352e302f32342d3234203d3e20313530323834.roa (raw, json)
Hash identifier:          bQCYbMhbGxXH8PD6ECLPgkiyUquzUdq8MVmjyDGeByc=
Subject key identifier:   93:AD:84:C1:30:C3:D6:14:E4:C4:21:42:84:D0:2A:3B:80:AD:81:90
Certificate issuer:       /CN=44221B3D145FCC17734F7C523353CB67A0B8D3B3
Certificate serial:       35642623A0D82DCD076B44DF9A7E4EB2ABB93919
Authority key identifier: 44:22:1B:3D:14:5F:CC:17:73:4F:7C:52:33:53:CB:67:A0:B8:D3:B3
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44221B3D145FCC17734F7C523353CB67A0B8D3B3.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/362bacc9-d25d-4610-aee4-655a14ea2fd6/0/3130332e34332e3136352e302f32342d3234203d3e20313530323834.roa
Signing time:             Thu 16 Apr 2026 17:00:00 +0000
ROA not before:           Thu 16 Apr 2026 16:55:00 +0000
ROA not after:            Thu 15 Apr 2027 17:00:00 +0000
asID:                     150284
IP address blocks:        103.43.165.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/362bacc9-d25d-4610-aee4-655a14ea2fd6/0/44221B3D145FCC17734F7C523353CB67A0B8D3B3.crl
                          rsync://repo-rpki.idnic.net/repo/362bacc9-d25d-4610-aee4-655a14ea2fd6/0/44221B3D145FCC17734F7C523353CB67A0B8D3B3.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44221B3D145FCC17734F7C523353CB67A0B8D3B3.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 20 Apr 2026 03:50:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:64:26:23:a0:d8:2d:cd:07:6b:44:df:9a:7e:4e:b2:ab:b9:39:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44221B3D145FCC17734F7C523353CB67A0B8D3B3
        Validity
            Not Before: Apr 16 16:55:00 2026 GMT
            Not After : Apr 15 17:00:00 2027 GMT
        Subject: CN=93AD84C130C3D614E4C4214284D02A3B80AD8190
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:d1:4b:c6:e4:bb:1c:40:18:31:fa:3e:85:d5:
                    83:54:52:1f:5f:43:e9:15:75:16:da:92:65:b4:c8:
                    b6:77:c4:54:6c:12:62:25:ec:46:eb:c1:83:0c:ca:
                    ac:d9:9d:ad:71:85:92:07:d5:ec:0e:15:40:62:74:
                    81:f4:f3:0a:6f:d7:d9:54:4b:a6:79:be:fd:79:38:
                    39:8a:db:24:d2:b8:3d:f8:09:67:5b:8e:39:66:68:
                    1e:95:e3:c7:bb:26:93:72:28:22:b8:8d:84:08:26:
                    26:16:d2:1b:34:65:49:fa:a2:db:40:65:92:21:40:
                    99:75:79:b4:28:f6:90:bb:e4:db:8c:e3:07:ef:df:
                    b5:56:56:17:d7:20:96:a5:b7:64:a2:14:fb:0f:a4:
                    ea:a8:14:4e:2a:8e:6b:c5:b1:e4:ef:6a:42:4d:49:
                    ae:dc:81:82:6f:bc:a3:7e:41:a8:74:b9:00:8d:8e:
                    cf:92:f2:aa:9e:84:b9:75:6d:aa:60:a9:c1:cb:f9:
                    d7:c7:69:43:26:fe:a1:a1:e8:cb:71:58:36:83:3c:
                    f8:b2:86:b9:b8:25:7e:c3:6c:f4:a3:57:ee:68:da:
                    f5:1d:b8:82:c9:9d:c3:41:ed:2b:4c:71:63:19:3d:
                    41:f6:7b:44:61:95:c1:38:a5:08:19:54:10:f9:ac:
                    71:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:AD:84:C1:30:C3:D6:14:E4:C4:21:42:84:D0:2A:3B:80:AD:81:90
            X509v3 Authority Key Identifier:
                keyid:44:22:1B:3D:14:5F:CC:17:73:4F:7C:52:33:53:CB:67:A0:B8:D3:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/362bacc9-d25d-4610-aee4-655a14ea2fd6/0/44221B3D145FCC17734F7C523353CB67A0B8D3B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44221B3D145FCC17734F7C523353CB67A0B8D3B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/362bacc9-d25d-4610-aee4-655a14ea2fd6/0/3130332e34332e3136352e302f32342d3234203d3e20313530323834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.43.165.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:c4:72:12:33:50:3d:d7:b1:8a:48:ae:0d:ea:8e:30:d3:d4:
         38:88:2f:30:b2:61:01:1a:1e:d2:63:fd:05:b7:d6:31:87:ac:
         3b:97:66:30:c2:06:c3:6c:d1:25:61:59:c7:1a:01:90:8c:98:
         5e:a7:13:01:06:e0:e5:63:0b:a5:5a:59:55:46:7f:3a:15:d0:
         2f:1e:3c:c7:e5:b1:f4:8e:70:ef:8d:58:8b:7f:d6:87:a2:ce:
         4d:a6:61:43:a5:0f:54:43:9d:51:c2:6b:21:43:0a:55:ca:16:
         49:a4:5c:cc:ee:aa:1a:ae:65:62:ee:38:57:ac:6f:01:4d:71:
         51:12:b0:57:36:62:20:c9:b8:66:0c:ac:b5:ae:65:bc:b3:49:
         0c:02:b0:c7:6b:73:e0:3e:de:30:88:a1:9e:0f:7d:b6:8b:17:
         8b:34:5e:b6:a1:1e:94:37:b1:10:d7:35:58:bf:15:26:7c:39:
         ab:eb:17:b5:8d:7e:54:a3:07:93:f3:77:4d:f9:20:91:ef:d0:
         a1:20:91:35:7e:b9:6f:0e:03:44:2b:da:4d:11:37:5f:fa:3f:
         11:2a:45:d3:b6:0b:07:32:e7:ef:9a:82:b9:65:3d:26:9f:89:
         40:08:31:c6:74:7d:28:45:e4:bf:cd:a2:39:b9:32:e9:6f:90:
         3b:75:37:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:08:11 2026 by rpki-client