Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/59cc2e5b-3b91-42af-8203-5e3b91704843/0/3130332e3138302e39352e302f32342d3234203d3e20313439333538.roa
File:                     3130332e3138302e39352e302f32342d3234203d3e20313439333538.roa (raw, json)
Hash identifier:          FKWGkuhrHToaQ6HQBG2hDishDUxJo1KcIBwHXf6jaDE=
Subject key identifier:   2D:89:3F:74:9A:9E:D7:DD:0B:12:D1:FE:35:CA:F6:7E:87:80:EA:EF
Certificate issuer:       /CN=8E5335B45EE371DC463E5C65783A244FD1846656
Certificate serial:       6A1ACDBAAA3515D4DC65F561B8FBD4B26D70E309
Authority key identifier: 8E:53:35:B4:5E:E3:71:DC:46:3E:5C:65:78:3A:24:4F:D1:84:66:56
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8E5335B45EE371DC463E5C65783A244FD1846656.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/59cc2e5b-3b91-42af-8203-5e3b91704843/0/3130332e3138302e39352e302f32342d3234203d3e20313439333538.roa
Signing time:             Tue 03 Feb 2026 08:00:01 +0000
ROA not before:           Tue 03 Feb 2026 07:55:01 +0000
ROA not after:            Tue 02 Feb 2027 08:00:01 +0000
asID:                     149358
IP address blocks:        103.180.95.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/59cc2e5b-3b91-42af-8203-5e3b91704843/0/8E5335B45EE371DC463E5C65783A244FD1846656.crl
                          rsync://repo-rpki.idnic.net/repo/59cc2e5b-3b91-42af-8203-5e3b91704843/0/8E5335B45EE371DC463E5C65783A244FD1846656.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8E5335B45EE371DC463E5C65783A244FD1846656.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Mar 2026 23:25:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:1a:cd:ba:aa:35:15:d4:dc:65:f5:61:b8:fb:d4:b2:6d:70:e3:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E5335B45EE371DC463E5C65783A244FD1846656
        Validity
            Not Before: Feb  3 07:55:01 2026 GMT
            Not After : Feb  2 08:00:01 2027 GMT
        Subject: CN=2D893F749A9ED7DD0B12D1FE35CAF67E8780EAEF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:41:38:60:1d:78:8c:ff:90:c1:14:9b:8d:ac:
                    c4:44:4e:3d:2a:a5:1b:04:56:fc:f6:04:50:08:c0:
                    15:bb:cc:2b:ff:35:12:5f:69:e2:9f:e0:b0:a9:d8:
                    4f:52:e6:b9:df:29:78:dc:be:9d:8b:df:fb:77:07:
                    77:94:08:36:02:81:ec:20:55:4c:46:cb:96:6a:57:
                    25:73:de:86:15:7c:e0:d0:45:dc:6e:66:26:e8:8a:
                    a4:0d:4b:38:bb:eb:df:fd:32:af:63:d8:05:aa:a0:
                    5f:a4:0d:b6:ed:ab:c3:f7:90:76:9b:d0:b5:b6:69:
                    d0:de:a8:42:eb:61:ad:25:91:60:9a:c6:6e:0c:91:
                    47:68:f2:a4:5a:11:27:9f:ee:51:09:9c:45:60:ec:
                    99:b0:62:1c:84:27:2c:62:1d:30:a0:26:c9:cb:8f:
                    fc:17:d1:34:79:b8:50:1a:a9:84:1d:c7:af:a2:60:
                    df:c0:79:76:e5:5c:c4:fe:07:bd:fa:7e:54:6a:d4:
                    be:55:69:cd:e0:12:03:ae:f8:7f:53:90:eb:91:e2:
                    47:d7:7e:51:e6:12:4d:79:1f:03:b8:13:63:f2:89:
                    e4:71:b6:88:85:c1:e6:61:d0:c6:23:d6:9a:32:96:
                    bf:c2:ae:76:04:d7:98:64:35:21:ef:1e:9a:65:c2:
                    bb:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:89:3F:74:9A:9E:D7:DD:0B:12:D1:FE:35:CA:F6:7E:87:80:EA:EF
            X509v3 Authority Key Identifier:
                keyid:8E:53:35:B4:5E:E3:71:DC:46:3E:5C:65:78:3A:24:4F:D1:84:66:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/59cc2e5b-3b91-42af-8203-5e3b91704843/0/8E5335B45EE371DC463E5C65783A244FD1846656.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8E5335B45EE371DC463E5C65783A244FD1846656.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/59cc2e5b-3b91-42af-8203-5e3b91704843/0/3130332e3138302e39352e302f32342d3234203d3e20313439333538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.180.95.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:21:7e:7f:1d:82:25:6e:c8:1c:5f:4c:0a:0b:4f:df:31:22:
         db:93:bf:04:dd:1d:84:84:f6:fb:7e:73:7f:cd:fb:61:87:26:
         7e:df:70:27:d9:9c:fa:86:f3:16:4d:4e:3c:9a:73:51:14:b8:
         08:13:1b:50:6b:81:fa:29:bb:bd:87:76:c0:a4:79:ae:1e:6d:
         34:e0:45:46:2f:10:1a:ee:d7:cf:43:e2:4d:b8:a6:db:49:14:
         99:25:98:7b:f9:d3:ac:27:7f:6b:93:2b:dd:50:7c:30:23:ec:
         84:2a:78:5b:46:a6:4d:e7:da:34:ce:c1:a9:13:44:31:08:9c:
         96:f3:d4:9a:3d:68:d5:50:40:d7:22:a3:e6:1d:76:e1:d8:47:
         0f:b7:cc:d0:cd:0a:1b:13:d6:7f:38:ab:c9:a1:3a:8e:70:93:
         41:7d:8b:c9:b5:7a:eb:b8:6a:51:3a:20:a0:5c:71:43:f4:ba:
         91:4d:f3:26:6e:47:ed:b9:12:16:cf:b1:ee:2a:7b:d8:63:0b:
         37:e5:50:18:19:01:37:52:67:15:18:52:2d:70:76:42:30:16:
         85:ae:ac:c7:3a:68:6e:9e:94:b8:03:d8:8d:b1:35:3b:e0:50:
         8f:35:f9:3d:c3:a7:89:40:5e:f3:40:ca:62:e4:bb:27:30:27:
         27:ad:95:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:42:51 2026 by rpki-client