Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/57280400-9654-4d45-888b-9067bada190b/0/3130332e38312e36362e302f32342d3234203d3e20313336303535.roa
File:                     3130332e38312e36362e302f32342d3234203d3e20313336303535.roa (raw, json)
Hash identifier:          ATuxXOYK3e/3Ld+KeMllvgXdJfLA5B6FogxB4ZqIC5o=
Subject key identifier:   41:09:1E:1B:02:AF:64:79:A7:59:26:2E:AD:85:B2:B5:85:AE:A5:F8
Certificate issuer:       /CN=A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F
Certificate serial:       08B9DE16F3192C2C6254DEE7B403F58EA88C8FB3
Authority key identifier: A4:AC:49:C4:F5:5B:F5:D4:AF:3D:42:10:4A:8A:5E:C1:F2:12:3E:6F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/57280400-9654-4d45-888b-9067bada190b/0/3130332e38312e36362e302f32342d3234203d3e20313336303535.roa
Signing time:             Tue 30 Dec 2025 04:02:32 +0000
ROA not before:           Tue 30 Dec 2025 03:57:32 +0000
ROA not after:            Tue 29 Dec 2026 04:02:32 +0000
asID:                     136055
IP address blocks:        103.81.66.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/57280400-9654-4d45-888b-9067bada190b/0/A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F.crl
                          rsync://repo-rpki.idnic.net/repo/57280400-9654-4d45-888b-9067bada190b/0/A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Mar 2026 17:05:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:b9:de:16:f3:19:2c:2c:62:54:de:e7:b4:03:f5:8e:a8:8c:8f:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F
        Validity
            Not Before: Dec 30 03:57:32 2025 GMT
            Not After : Dec 29 04:02:32 2026 GMT
        Subject: CN=41091E1B02AF6479A759262EAD85B2B585AEA5F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:a4:6d:5b:c6:b9:d0:34:e3:c7:e3:03:80:4b:
                    65:c8:b1:4e:93:fd:ad:68:9e:ff:bb:aa:b6:8e:39:
                    bf:09:11:46:1e:5c:e0:01:d3:d6:2a:5e:48:91:90:
                    13:12:85:6d:b2:f2:a9:a0:45:e3:b6:cf:61:4a:03:
                    22:af:ba:c5:a6:51:f1:5d:89:15:e8:fb:60:e6:4d:
                    b7:e5:2f:1b:3d:dd:63:af:cd:5f:43:0d:a4:52:1e:
                    29:83:18:1f:f5:1d:69:3e:bc:62:c9:ea:ac:e7:4d:
                    5d:36:0a:09:d9:cc:d1:2b:f9:87:97:47:3d:d5:fa:
                    4e:23:e8:fd:01:b9:d9:e9:0b:98:00:83:8a:59:9c:
                    c2:f9:d0:51:d0:3d:73:41:7e:18:da:62:46:85:50:
                    3b:25:9a:4e:61:33:3c:fa:88:ff:fa:5d:03:33:1a:
                    7f:4f:b2:57:12:9a:30:1e:c8:79:33:c9:c0:82:ca:
                    d8:18:07:11:9e:3e:61:2a:51:de:e8:02:c5:ef:88:
                    2b:07:94:94:1f:cc:89:89:a9:f4:cf:fb:f1:92:17:
                    bc:d5:4f:60:e7:6a:d6:4d:b7:f4:c3:c9:a6:78:bc:
                    f6:a4:de:5a:89:cf:14:09:41:54:db:c9:a0:83:df:
                    dc:b4:3e:e6:5b:66:e5:08:3e:25:5a:06:34:1b:67:
                    79:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:09:1E:1B:02:AF:64:79:A7:59:26:2E:AD:85:B2:B5:85:AE:A5:F8
            X509v3 Authority Key Identifier:
                keyid:A4:AC:49:C4:F5:5B:F5:D4:AF:3D:42:10:4A:8A:5E:C1:F2:12:3E:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/57280400-9654-4d45-888b-9067bada190b/0/A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/57280400-9654-4d45-888b-9067bada190b/0/3130332e38312e36362e302f32342d3234203d3e20313336303535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.81.66.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c2:1c:be:28:a7:f0:ef:68:74:61:6b:a7:a1:75:c9:00:57:31:
         86:64:86:19:c2:37:45:d7:21:2d:33:5d:e3:de:e3:31:07:46:
         cb:ee:b0:2c:c5:ce:90:86:b3:98:82:99:cb:b0:2f:75:87:ff:
         26:49:ef:5a:74:df:7b:11:7c:23:c2:45:8b:b6:05:88:dc:23:
         8a:d4:c6:11:de:af:6a:25:33:c6:6a:c6:b3:1a:fd:8e:37:a9:
         3a:0a:2c:a5:b7:80:44:81:9c:68:f2:15:40:0a:15:37:a0:56:
         96:fa:d7:87:a4:14:e6:47:41:53:28:a9:d6:b1:01:b9:7e:fe:
         96:e1:a1:4e:a7:cd:80:03:db:04:46:73:1a:9d:66:86:ad:20:
         86:51:75:35:43:73:2a:81:ff:54:88:80:97:22:11:20:9d:7f:
         eb:3b:fc:72:9e:45:5a:6e:0c:96:8d:51:b7:5f:4f:66:00:80:
         d0:fa:ee:c0:d6:d1:a7:f6:6d:bf:c8:58:c3:3f:0e:94:2a:22:
         ab:96:69:4f:b5:db:70:1e:2c:fc:b1:30:05:10:32:69:6a:6d:
         87:b6:ac:f7:f6:1d:6f:44:86:9d:70:5d:0c:ba:0d:ad:7a:5c:
         ee:de:4d:62:87:d4:a9:f0:bb:71:7c:60:a3:91:dc:43:69:14:
         99:88:3a:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:42:20 2026 by rpki-client