Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/46302810-564c-45b7-8a72-ef6b8f6309c0/0/3130332e3133372e33372e302f32342d3234203d3e20313335343731.roa
File:                     3130332e3133372e33372e302f32342d3234203d3e20313335343731.roa (raw, json)
Hash identifier:          8kKWUHzz3zsaht7nwecnfnkRiCcN2BwawIfqksKIHAY=
Subject key identifier:   B1:EB:2A:01:0D:23:AD:5F:10:52:E4:82:AF:26:29:D6:46:48:F0:D2
Certificate issuer:       /CN=EDBD845A9597FEC4AD90030F9018E4B8B63FCC77
Certificate serial:       01E8F5A7AB9D8052C53A205FC57377ED1FB1C04F
Authority key identifier: ED:BD:84:5A:95:97:FE:C4:AD:90:03:0F:90:18:E4:B8:B6:3F:CC:77
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EDBD845A9597FEC4AD90030F9018E4B8B63FCC77.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/46302810-564c-45b7-8a72-ef6b8f6309c0/0/3130332e3133372e33372e302f32342d3234203d3e20313335343731.roa
Signing time:             Thu 02 Apr 2026 04:43:37 +0000
ROA not before:           Thu 02 Apr 2026 04:38:37 +0000
ROA not after:            Thu 01 Apr 2027 04:43:37 +0000
asID:                     135471
IP address blocks:        103.137.37.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/46302810-564c-45b7-8a72-ef6b8f6309c0/0/EDBD845A9597FEC4AD90030F9018E4B8B63FCC77.crl
                          rsync://repo-rpki.idnic.net/repo/46302810-564c-45b7-8a72-ef6b8f6309c0/0/EDBD845A9597FEC4AD90030F9018E4B8B63FCC77.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EDBD845A9597FEC4AD90030F9018E4B8B63FCC77.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 20 Apr 2026 21:57:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:e8:f5:a7:ab:9d:80:52:c5:3a:20:5f:c5:73:77:ed:1f:b1:c0:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EDBD845A9597FEC4AD90030F9018E4B8B63FCC77
        Validity
            Not Before: Apr  2 04:38:37 2026 GMT
            Not After : Apr  1 04:43:37 2027 GMT
        Subject: CN=B1EB2A010D23AD5F1052E482AF2629D64648F0D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:01:bc:5e:13:35:02:4f:c1:50:95:09:07:6d:
                    3a:9e:7f:35:36:02:6e:7a:c1:1f:6b:6f:04:50:8d:
                    58:1c:b7:97:9e:a2:d3:8b:10:0c:ce:95:b6:bd:1c:
                    1e:31:25:0d:74:a5:de:f8:7d:b2:3e:1c:b7:c5:1c:
                    16:05:25:2d:ec:13:13:74:c1:32:42:0e:f8:66:5c:
                    fa:4c:7d:fe:f0:f0:69:31:5e:e1:c8:11:6b:84:67:
                    98:2b:c0:0d:e8:b7:b2:c2:36:37:df:da:ba:75:96:
                    b5:0f:e3:85:25:47:50:56:db:0b:80:a0:f5:7e:e7:
                    54:a4:39:e9:21:04:05:de:10:20:e3:f7:40:6e:32:
                    2c:77:84:66:62:a8:9b:1b:4c:fb:e2:95:b0:9d:51:
                    51:7e:7f:2f:3b:11:3c:25:7e:78:69:c7:e0:c5:62:
                    4a:80:70:cd:40:79:6c:2d:09:84:82:74:43:0a:cf:
                    75:d1:cb:76:2a:13:46:13:64:7e:5f:69:0d:e6:7c:
                    0f:ec:f5:90:87:a5:10:4f:22:dc:9a:b0:6d:64:f3:
                    f3:27:09:20:1f:48:6d:7a:bd:40:78:1a:32:13:95:
                    d3:cb:59:f8:d6:90:6a:fe:30:8e:b3:c0:28:47:f3:
                    1a:d8:f2:ef:b5:4a:e5:0c:6a:19:95:a0:f6:82:65:
                    79:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:EB:2A:01:0D:23:AD:5F:10:52:E4:82:AF:26:29:D6:46:48:F0:D2
            X509v3 Authority Key Identifier:
                keyid:ED:BD:84:5A:95:97:FE:C4:AD:90:03:0F:90:18:E4:B8:B6:3F:CC:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/46302810-564c-45b7-8a72-ef6b8f6309c0/0/EDBD845A9597FEC4AD90030F9018E4B8B63FCC77.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EDBD845A9597FEC4AD90030F9018E4B8B63FCC77.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/46302810-564c-45b7-8a72-ef6b8f6309c0/0/3130332e3133372e33372e302f32342d3234203d3e20313335343731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.137.37.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:97:6b:e0:3b:06:26:66:92:30:45:02:ff:2d:d5:c5:f8:d4:
         32:dc:64:b9:2c:e6:a9:66:41:2d:4a:b8:49:7d:a3:95:2c:a0:
         b9:4c:8a:ae:b3:c6:f1:f8:60:95:c9:f9:d8:6a:14:a3:9a:d9:
         d5:16:de:1e:8c:f6:da:54:83:0e:ff:a3:10:ef:dc:72:06:44:
         c3:93:32:6f:95:e7:8b:74:e7:c9:3c:d5:4a:bd:51:c9:73:43:
         27:2a:7e:b2:98:ee:5c:f5:a2:33:84:33:a8:1e:12:a2:39:b5:
         32:a3:8b:39:fb:aa:23:ab:21:1f:c0:a1:c9:03:4d:a7:13:03:
         67:2c:85:a0:59:b1:d8:ba:61:9b:44:97:9d:cb:fe:18:ed:bf:
         62:a8:b6:21:e8:49:56:d1:0d:ba:b0:30:c0:01:e9:d7:90:ba:
         b9:dc:ac:68:50:32:5a:33:16:9a:91:e4:c1:69:19:4a:d1:dd:
         ff:66:45:cc:96:cf:c6:f7:51:e8:47:68:ac:b4:74:d1:e7:64:
         fd:7f:ff:f5:b6:15:5f:de:31:26:53:71:a2:86:4a:15:49:94:
         6d:d2:40:85:b7:ce:cc:ad:3a:e4:03:64:a6:21:da:30:6b:34:
         20:bb:56:67:c0:ee:28:9f:fa:00:14:36:f9:99:35:16:26:e1:
         b8:37:29:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 15:34:04 2026 by rpki-client