Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/4b388f6e-9974-4457-af4b-5c9c82f50e97/0/3130332e3232372e3138372e302f32342d3234203d3e20313432333730.roa
File:                     3130332e3232372e3138372e302f32342d3234203d3e20313432333730.roa (raw, json)
Hash identifier:          9Uf4ulFgzLDelJ37ckoyeTkyvf3uIkPeeowXypaqZ6c=
Subject key identifier:   34:A4:A4:FD:B4:7A:CF:65:0A:DB:A1:89:F8:65:10:BC:7B:92:ED:D5
Certificate issuer:       /CN=3A5EDACC61BD7D05EBD424BBDBF51D4C50852A67
Certificate serial:       447F4D26A05EFF73E014B36CCA18ADEC6EA8C605
Authority key identifier: 3A:5E:DA:CC:61:BD:7D:05:EB:D4:24:BB:DB:F5:1D:4C:50:85:2A:67
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3A5EDACC61BD7D05EBD424BBDBF51D4C50852A67.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/4b388f6e-9974-4457-af4b-5c9c82f50e97/0/3130332e3232372e3138372e302f32342d3234203d3e20313432333730.roa
Signing time:             Fri 17 Apr 2026 04:01:49 +0000
ROA not before:           Fri 17 Apr 2026 03:56:49 +0000
ROA not after:            Fri 16 Apr 2027 04:01:49 +0000
asID:                     142370
IP address blocks:        103.227.187.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/4b388f6e-9974-4457-af4b-5c9c82f50e97/0/3A5EDACC61BD7D05EBD424BBDBF51D4C50852A67.crl
                          rsync://repo-rpki.idnic.net/repo/4b388f6e-9974-4457-af4b-5c9c82f50e97/0/3A5EDACC61BD7D05EBD424BBDBF51D4C50852A67.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3A5EDACC61BD7D05EBD424BBDBF51D4C50852A67.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 20 Apr 2026 05:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:7f:4d:26:a0:5e:ff:73:e0:14:b3:6c:ca:18:ad:ec:6e:a8:c6:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3A5EDACC61BD7D05EBD424BBDBF51D4C50852A67
        Validity
            Not Before: Apr 17 03:56:49 2026 GMT
            Not After : Apr 16 04:01:49 2027 GMT
        Subject: CN=34A4A4FDB47ACF650ADBA189F86510BC7B92EDD5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:cf:90:6d:53:d3:92:f1:d2:30:d6:e6:45:c1:
                    62:20:66:98:5b:a4:55:c7:07:cc:61:2c:52:da:a3:
                    60:0c:5f:c6:c7:ce:57:90:a2:f8:60:60:c1:4d:70:
                    2a:ba:4e:06:84:a1:f5:ea:35:90:f1:a2:cb:c1:3e:
                    de:00:ba:8a:4d:5c:31:07:58:a0:1a:12:bd:67:63:
                    f0:4a:0c:a9:09:7c:c2:d4:e0:f7:44:1e:fd:65:cb:
                    19:6e:d5:97:a0:e0:d2:b8:99:3a:6a:f4:39:8f:f6:
                    fb:47:bf:56:0e:4b:22:f4:65:76:d8:6c:d3:b8:59:
                    46:23:98:06:96:84:89:a3:47:f1:e4:93:36:70:79:
                    a5:15:18:c5:cf:26:8e:75:21:70:aa:39:dd:b2:26:
                    b9:13:9f:9a:5a:4e:11:9c:cf:e3:85:ce:b7:59:e5:
                    ab:e5:77:12:dd:e8:05:7c:86:e9:d4:64:0c:2d:eb:
                    6c:e0:48:ac:a3:5b:70:3a:1f:21:d4:12:db:aa:92:
                    86:a7:e8:b5:6f:92:ae:59:67:2f:ec:3b:27:1c:a9:
                    10:fa:c5:fa:b0:7e:40:36:1b:c0:3e:7b:97:8e:37:
                    e5:54:76:3f:d3:85:53:f9:1e:20:25:ca:44:a7:08:
                    72:74:12:8e:e6:a4:dc:83:29:0a:72:a5:30:4c:12:
                    44:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:A4:A4:FD:B4:7A:CF:65:0A:DB:A1:89:F8:65:10:BC:7B:92:ED:D5
            X509v3 Authority Key Identifier:
                keyid:3A:5E:DA:CC:61:BD:7D:05:EB:D4:24:BB:DB:F5:1D:4C:50:85:2A:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/4b388f6e-9974-4457-af4b-5c9c82f50e97/0/3A5EDACC61BD7D05EBD424BBDBF51D4C50852A67.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3A5EDACC61BD7D05EBD424BBDBF51D4C50852A67.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4b388f6e-9974-4457-af4b-5c9c82f50e97/0/3130332e3232372e3138372e302f32342d3234203d3e20313432333730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.227.187.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:be:26:3e:c3:51:9d:e7:0c:51:bb:e2:11:cd:3c:6f:f8:f6:
         fd:8f:ce:c0:50:32:d8:30:f1:28:4f:1a:39:28:4b:57:dc:e0:
         f3:77:0f:af:14:13:c6:5a:22:a4:5a:6b:03:58:d0:61:8c:60:
         1d:6b:ac:8b:76:50:51:0c:bf:86:73:c4:f1:8e:ef:68:e0:9d:
         e6:44:f7:f1:be:28:75:2a:43:4f:ca:83:ba:5f:1d:ef:73:61:
         62:c6:64:e3:3c:19:5f:ef:54:6e:94:b4:16:a3:96:ab:a3:18:
         c6:7e:11:94:32:8e:4d:22:fe:d7:3f:24:b3:7e:1a:ef:44:c7:
         22:78:45:90:de:f6:e9:06:ba:d1:3c:54:97:3e:44:b3:ea:ee:
         07:dd:45:04:87:1a:25:10:6f:0e:66:a4:5e:d4:86:8d:b8:c3:
         28:25:be:b4:ed:61:0c:c7:c7:b3:bf:38:40:ee:ef:61:45:90:
         05:83:bc:a6:84:71:28:41:65:16:c8:10:a7:ad:fa:df:14:5d:
         86:dd:7d:27:fb:63:e4:bc:86:15:21:d6:ab:34:8a:a0:ec:1e:
         25:04:34:21:fc:ad:ba:7e:29:11:cb:e1:b7:8e:ed:f9:47:12:
         4e:b1:ce:4d:f3:f1:d5:32:89:4c:b5:47:93:ec:10:55:e8:bc:
         0c:8a:ef:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:41:29 2026 by rpki-client