Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3c88442b-c48e-4ba0-8ad7-58e1263c6dc7/0/3130332e3136342e3135312e302f32342d3234203d3e20313431393039.roa
File:                     3130332e3136342e3135312e302f32342d3234203d3e20313431393039.roa (raw, json)
Hash identifier:          RtmvtUA3xRWC9VT0xTAk68Lh95SXsOw+zLbR9Rhj3Sc=
Subject key identifier:   4B:D7:13:25:07:7B:C0:81:98:4E:20:E1:48:6D:BB:EC:1C:98:8F:8D
Certificate issuer:       /CN=5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F
Certificate serial:       4EF9007104161F823CF09E3B81C26DFB600B050F
Authority key identifier: 5C:1D:C7:E8:74:57:A9:1F:35:91:5A:F1:DE:3F:BB:CC:2E:6B:3D:8F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3c88442b-c48e-4ba0-8ad7-58e1263c6dc7/0/3130332e3136342e3135312e302f32342d3234203d3e20313431393039.roa
Signing time:             Wed 15 Apr 2026 08:00:54 +0000
ROA not before:           Wed 15 Apr 2026 07:55:54 +0000
ROA not after:            Wed 14 Apr 2027 08:00:54 +0000
asID:                     141909
IP address blocks:        103.164.151.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/3c88442b-c48e-4ba0-8ad7-58e1263c6dc7/0/5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.crl
                          rsync://repo-rpki.idnic.net/repo/3c88442b-c48e-4ba0-8ad7-58e1263c6dc7/0/5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 20 Apr 2026 20:07:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:f9:00:71:04:16:1f:82:3c:f0:9e:3b:81:c2:6d:fb:60:0b:05:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F
        Validity
            Not Before: Apr 15 07:55:54 2026 GMT
            Not After : Apr 14 08:00:54 2027 GMT
        Subject: CN=4BD71325077BC081984E20E1486DBBEC1C988F8D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:e2:b4:d5:32:00:9a:19:34:27:2a:d9:ab:bb:
                    6c:11:c9:fa:7a:39:25:05:e3:b2:05:aa:76:fe:98:
                    7a:38:dc:1c:88:4a:27:51:54:b5:c2:46:7e:ee:f6:
                    7e:5c:0e:60:36:5f:45:e1:58:38:e9:0f:22:f0:b1:
                    46:14:5e:1d:a5:94:db:68:c9:15:c2:f5:2d:00:f1:
                    c8:c9:b1:e9:0f:a8:b0:c7:1a:7c:7d:40:11:2e:da:
                    5e:d1:f7:6a:71:15:10:02:43:69:93:c9:24:5e:b0:
                    23:d0:57:ed:87:b6:ab:73:01:a3:15:bd:47:4f:af:
                    c1:2e:a2:0e:e1:43:43:e4:35:d2:18:5f:06:b9:4a:
                    91:9f:bb:f7:5c:43:cd:61:6c:ae:d7:55:2a:9a:60:
                    48:c8:56:48:78:12:30:82:2f:98:a5:84:13:b7:d8:
                    b2:6f:7b:92:91:91:87:3f:5f:28:61:94:47:10:37:
                    06:da:65:af:46:39:3e:4f:2a:52:21:bc:ca:07:19:
                    43:38:39:e8:34:90:ac:ea:b7:76:c8:cf:32:86:4d:
                    12:5f:2d:01:6c:85:a7:dc:97:5c:29:c0:97:ed:f4:
                    35:1e:e9:cc:d7:76:39:30:e9:37:29:a3:8b:bb:f4:
                    7d:a7:19:a6:2e:b2:28:6d:10:26:de:16:dc:b8:ab:
                    27:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:D7:13:25:07:7B:C0:81:98:4E:20:E1:48:6D:BB:EC:1C:98:8F:8D
            X509v3 Authority Key Identifier:
                keyid:5C:1D:C7:E8:74:57:A9:1F:35:91:5A:F1:DE:3F:BB:CC:2E:6B:3D:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3c88442b-c48e-4ba0-8ad7-58e1263c6dc7/0/5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3c88442b-c48e-4ba0-8ad7-58e1263c6dc7/0/3130332e3136342e3135312e302f32342d3234203d3e20313431393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.164.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:a4:e7:e2:17:1d:cd:fc:a9:f7:bd:3d:90:fd:98:0d:e7:41:
         a8:0d:fb:9f:e8:7c:72:60:5f:c4:8d:e4:2e:c8:1c:40:db:48:
         e8:c0:b6:7d:f6:46:ee:fa:f7:7a:18:e0:7f:23:62:97:d4:39:
         71:48:b9:df:2f:23:23:f1:b9:65:bd:88:6c:93:ec:59:da:dd:
         22:19:46:81:8f:57:20:bb:19:8a:09:b4:a6:bb:6d:e9:26:0e:
         cd:69:00:48:65:90:ef:cf:31:9d:75:bb:39:60:0b:51:95:89:
         0c:09:d3:6f:f1:8a:3d:c8:48:d1:18:bb:34:6a:e6:b4:0d:ac:
         39:43:01:06:18:c3:ae:61:5c:e3:2e:54:66:4f:a2:46:1a:0f:
         15:81:55:ba:0e:dc:f8:2f:54:5e:2d:59:22:e4:8c:40:18:e7:
         2b:bd:cd:ee:32:f7:b2:ff:46:37:98:49:00:a4:27:33:fc:02:
         1b:53:d3:c2:c6:ce:8f:4b:04:91:bd:f5:f1:33:d1:98:ca:1c:
         1c:74:06:65:a5:a0:1a:ab:b1:14:8a:f5:f4:e2:d5:d4:6e:fa:
         5a:9a:c7:81:64:77:6a:bb:38:d0:17:ae:b1:16:d6:4a:5d:41:
         62:12:fd:32:8b:20:0d:c1:78:16:59:a0:9a:12:8e:ad:51:c4:
         ac:7d:dc:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:41:42 2026 by rpki-client