Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/54c77666-4c74-440d-9167-af63faa6eb9e/0/3130332e3137352e38352e302f32342d3234203d3e20313437313137.roa
File:                     3130332e3137352e38352e302f32342d3234203d3e20313437313137.roa (raw, json)
Hash identifier:          MBO50ixnmdcKnxEcvpWaLj198LKrw8rzzEP+vUicSq4=
Subject key identifier:   EC:E5:E6:BF:27:78:B0:2A:31:DB:1D:0C:4A:23:C6:F0:E8:A2:97:A0
Certificate issuer:       /CN=1A88815F25C9ADC8E68E2145CC20A00096657347
Certificate serial:       4AB8D78D4D18565ED53BC041754026950EAE8200
Authority key identifier: 1A:88:81:5F:25:C9:AD:C8:E6:8E:21:45:CC:20:A0:00:96:65:73:47
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A88815F25C9ADC8E68E2145CC20A00096657347.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/54c77666-4c74-440d-9167-af63faa6eb9e/0/3130332e3137352e38352e302f32342d3234203d3e20313437313137.roa
Signing time:             Wed 08 Apr 2026 08:04:26 +0000
ROA not before:           Wed 08 Apr 2026 07:59:26 +0000
ROA not after:            Wed 07 Apr 2027 08:04:26 +0000
asID:                     147117
IP address blocks:        103.175.85.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/54c77666-4c74-440d-9167-af63faa6eb9e/0/1A88815F25C9ADC8E68E2145CC20A00096657347.crl
                          rsync://repo-rpki.idnic.net/repo/54c77666-4c74-440d-9167-af63faa6eb9e/0/1A88815F25C9ADC8E68E2145CC20A00096657347.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A88815F25C9ADC8E68E2145CC20A00096657347.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 21 Apr 2026 02:49:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:b8:d7:8d:4d:18:56:5e:d5:3b:c0:41:75:40:26:95:0e:ae:82:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A88815F25C9ADC8E68E2145CC20A00096657347
        Validity
            Not Before: Apr  8 07:59:26 2026 GMT
            Not After : Apr  7 08:04:26 2027 GMT
        Subject: CN=ECE5E6BF2778B02A31DB1D0C4A23C6F0E8A297A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:0c:c9:ce:7a:2d:15:a6:76:01:ae:18:96:c6:
                    78:75:68:15:24:34:24:d6:8f:f6:e0:ba:8d:a9:84:
                    ef:e2:f6:c5:03:ff:d2:3a:e2:7a:51:d4:52:4f:9b:
                    9a:0d:d9:3f:ee:68:5d:2d:ab:ed:5c:00:1c:8e:d2:
                    c8:58:e8:e9:37:63:80:f1:80:73:ff:27:06:ac:f4:
                    d7:95:3f:17:aa:53:9b:18:67:01:89:50:90:c4:1a:
                    e8:ce:42:b4:8d:ba:ac:51:f5:94:53:1d:aa:7e:b6:
                    d7:d8:88:4d:39:8c:77:25:a1:f6:bc:6f:51:32:bf:
                    40:c5:33:40:8a:3c:9a:59:7e:ed:ee:02:d0:b4:f6:
                    9a:6d:85:98:8c:f4:e4:a4:93:4c:0f:9c:09:fa:0c:
                    39:a6:3f:0b:15:b7:6c:7f:85:20:c4:56:21:ab:59:
                    19:7d:27:95:a2:f6:8d:5d:bc:61:f4:ee:ef:4e:b0:
                    09:16:c3:0c:96:98:be:d0:39:3c:34:ec:74:4a:74:
                    90:21:d8:af:c7:b6:75:8f:0d:c0:a5:20:f9:29:03:
                    35:ec:42:1f:b7:6c:c2:95:4a:93:d1:78:9f:27:fc:
                    fc:5c:09:05:ae:21:6a:ee:ad:77:8b:60:b1:53:14:
                    4c:ad:e2:81:25:e8:54:8f:ca:e1:35:ea:ff:95:ce:
                    b3:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:E5:E6:BF:27:78:B0:2A:31:DB:1D:0C:4A:23:C6:F0:E8:A2:97:A0
            X509v3 Authority Key Identifier:
                keyid:1A:88:81:5F:25:C9:AD:C8:E6:8E:21:45:CC:20:A0:00:96:65:73:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/54c77666-4c74-440d-9167-af63faa6eb9e/0/1A88815F25C9ADC8E68E2145CC20A00096657347.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A88815F25C9ADC8E68E2145CC20A00096657347.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/54c77666-4c74-440d-9167-af63faa6eb9e/0/3130332e3137352e38352e302f32342d3234203d3e20313437313137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.175.85.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:c6:e0:4a:76:ab:a6:81:11:cb:7a:34:0b:05:68:e4:37:ab:
         bc:eb:25:58:bd:ea:5f:0c:cd:b6:96:38:81:65:dc:e3:9e:b2:
         0f:19:b2:ca:f9:f4:2c:4b:94:cc:84:f3:1c:d7:18:84:dc:00:
         58:15:8b:6e:35:60:4e:1e:ba:05:6f:52:8f:89:2b:75:4a:a1:
         0c:e5:f6:e7:93:fa:67:68:d1:91:36:57:b5:b6:c9:10:8a:94:
         b7:37:28:b4:3e:ff:15:14:7d:ab:8e:f1:06:f1:9d:d2:c1:fd:
         a2:8c:42:3d:9e:99:23:03:52:96:ca:23:c8:e5:ac:d4:39:8b:
         ed:74:a5:32:fb:86:11:f9:4d:c6:56:ee:90:5a:a4:2e:b0:62:
         bd:39:37:0d:57:e3:56:60:24:32:14:56:52:41:66:db:d4:93:
         ef:ca:4d:d1:69:84:d2:9f:3e:ac:45:12:a8:36:14:f2:e7:74:
         2c:c5:09:1e:1f:ba:09:e9:39:79:81:ad:ee:91:f3:0d:4e:18:
         20:79:41:a5:c4:37:8c:4c:09:50:e2:76:07:13:5c:0c:ee:0f:
         ce:7a:97:8c:fc:3f:d6:a5:81:8b:31:5a:8d:5d:26:8a:f9:50:
         79:5c:8d:cc:11:82:6b:39:72:87:fb:fd:5e:8c:47:bc:99:04:
         48:c5:b8:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:27:01 2026 by rpki-client