Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/414e04fa-7188-4f4f-81bb-330389f87015/0/3130332e35352e3235332e302f32342d3234203d3e20313531353838.roa
File:                     3130332e35352e3235332e302f32342d3234203d3e20313531353838.roa (raw, json)
Hash identifier:          mRl7LsxxrqoZ14Wej++LBaETb6pStPT/dVWUhTpy1lg=
Subject key identifier:   62:22:4B:21:25:70:5C:47:B8:6C:66:01:49:F6:47:10:9F:E2:7F:DF
Certificate issuer:       /CN=782659A7F6433029248A38A1C68F2E9971161391
Certificate serial:       4BFA56DD78419CF36939F683409DE621DE6241A1
Authority key identifier: 78:26:59:A7:F6:43:30:29:24:8A:38:A1:C6:8F:2E:99:71:16:13:91
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/782659A7F6433029248A38A1C68F2E9971161391.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/414e04fa-7188-4f4f-81bb-330389f87015/0/3130332e35352e3235332e302f32342d3234203d3e20313531353838.roa
Signing time:             Mon 13 Apr 2026 08:00:00 +0000
ROA not before:           Mon 13 Apr 2026 07:55:00 +0000
ROA not after:            Mon 12 Apr 2027 08:00:00 +0000
asID:                     151588
IP address blocks:        103.55.253.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/414e04fa-7188-4f4f-81bb-330389f87015/0/782659A7F6433029248A38A1C68F2E9971161391.crl
                          rsync://repo-rpki.idnic.net/repo/414e04fa-7188-4f4f-81bb-330389f87015/0/782659A7F6433029248A38A1C68F2E9971161391.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/782659A7F6433029248A38A1C68F2E9971161391.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 21 Apr 2026 00:05:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:fa:56:dd:78:41:9c:f3:69:39:f6:83:40:9d:e6:21:de:62:41:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=782659A7F6433029248A38A1C68F2E9971161391
        Validity
            Not Before: Apr 13 07:55:00 2026 GMT
            Not After : Apr 12 08:00:00 2027 GMT
        Subject: CN=62224B2125705C47B86C660149F647109FE27FDF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:d2:c7:68:bd:0c:3b:49:8f:4e:85:16:80:a4:
                    b0:7c:ee:02:5a:0d:fe:f7:b0:d4:f1:46:41:8d:5d:
                    cd:24:05:9a:8a:df:e2:85:ee:e1:c0:09:b6:d4:58:
                    3a:7d:ff:c8:0c:a9:c5:74:a8:29:61:0c:bc:02:dc:
                    c5:04:e2:f0:86:34:31:54:2c:38:f7:d6:63:ea:f9:
                    fa:d8:2d:a7:7e:bb:04:43:9a:85:0a:f5:ae:f2:39:
                    ed:47:85:6e:16:2a:5d:04:be:86:ab:ea:88:c9:4d:
                    7e:d7:a3:07:6c:a8:55:6c:01:ae:e3:71:28:37:f8:
                    4e:35:32:cb:5e:cb:9f:ca:ad:b1:50:7f:2a:e8:d6:
                    ae:6f:40:40:e8:1d:73:44:02:b4:6a:11:bc:78:6c:
                    a6:e1:23:da:46:d5:7e:4b:d9:9d:2d:12:42:d1:c9:
                    0f:ad:57:d4:5a:16:32:e6:c3:58:a9:31:04:be:d9:
                    9f:0b:52:44:01:26:86:f7:da:5d:2a:ca:90:24:af:
                    38:7b:ba:1c:f5:58:9b:c5:85:86:43:43:ef:9f:dc:
                    ff:ea:30:0a:f1:96:25:a0:a8:ea:98:a3:e5:29:40:
                    49:69:b0:61:e7:d3:b4:65:15:98:6d:d5:28:2d:fa:
                    5b:dd:ac:41:df:35:da:95:ed:88:77:5f:5f:28:18:
                    1e:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:22:4B:21:25:70:5C:47:B8:6C:66:01:49:F6:47:10:9F:E2:7F:DF
            X509v3 Authority Key Identifier:
                keyid:78:26:59:A7:F6:43:30:29:24:8A:38:A1:C6:8F:2E:99:71:16:13:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/414e04fa-7188-4f4f-81bb-330389f87015/0/782659A7F6433029248A38A1C68F2E9971161391.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/782659A7F6433029248A38A1C68F2E9971161391.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/414e04fa-7188-4f4f-81bb-330389f87015/0/3130332e35352e3235332e302f32342d3234203d3e20313531353838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.55.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:ff:fe:94:76:5b:74:b7:7c:37:9c:80:9c:87:c0:60:52:40:
         1d:c9:04:73:db:a4:3c:0b:ad:8d:8b:ff:88:37:0b:51:35:b6:
         da:5e:95:48:e4:e9:d0:ae:57:89:5d:56:8d:77:b2:f0:d6:29:
         4e:a3:5c:08:4f:b6:e6:f2:f0:e5:38:bd:d5:ba:2b:2f:1b:cc:
         67:6f:41:bc:c4:bb:48:30:5d:04:be:f8:24:16:ab:a8:13:6b:
         40:46:8c:91:e2:6d:ef:eb:36:2a:8b:34:2d:ce:0c:3d:3c:b3:
         56:a5:10:f3:e6:5e:5f:a3:25:27:7f:84:f4:84:74:51:12:d8:
         3a:f0:72:e3:ad:b3:25:1d:3d:04:01:14:71:73:db:e6:4e:94:
         fb:ff:9b:4a:45:14:1d:30:dd:f0:c8:e2:22:24:ad:88:e9:26:
         5d:0f:a6:b8:31:34:68:c9:bb:a9:2a:51:57:cc:a3:90:3d:37:
         4e:c8:87:36:a2:ee:21:f0:7f:62:9e:c9:ab:29:09:91:80:67:
         d3:73:ac:39:2a:0e:b7:50:66:2d:7d:41:72:85:10:fc:a5:41:
         68:aa:13:c9:58:3b:64:9d:22:38:25:4c:2a:4e:69:17:36:16:
         9c:72:1f:4b:88:cf:69:4e:ea:8b:33:59:ba:27:3c:30:55:18:
         a9:c0:67:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:07:01 2026 by rpki-client