Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/5ae2ebde-6311-488a-82b7-9d4c05530987/0/3130332e36392e3130362e302f32342d3234203d3e20313437303837.roa
File:                     3130332e36392e3130362e302f32342d3234203d3e20313437303837.roa (raw, json)
Hash identifier:          J8nc/ZkZUuiaLnI5jAoWLgIJJR1NS9p7mlRSvT0aL/o=
Subject key identifier:   F0:46:F5:24:72:FF:36:FE:69:11:30:3D:E6:E2:39:02:85:6C:16:A7
Certificate issuer:       /CN=35B589224D641562D0CFE2019F733A965FC8E0C7
Certificate serial:       016E0693065E0FC0C81A7C732B63529B89965B3F
Authority key identifier: 35:B5:89:22:4D:64:15:62:D0:CF:E2:01:9F:73:3A:96:5F:C8:E0:C7
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35B589224D641562D0CFE2019F733A965FC8E0C7.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5ae2ebde-6311-488a-82b7-9d4c05530987/0/3130332e36392e3130362e302f32342d3234203d3e20313437303837.roa
Signing time:             Wed 25 Feb 2026 22:00:00 +0000
ROA not before:           Wed 25 Feb 2026 21:55:00 +0000
ROA not after:            Wed 24 Feb 2027 22:00:00 +0000
asID:                     147087
IP address blocks:        103.69.106.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/5ae2ebde-6311-488a-82b7-9d4c05530987/0/35B589224D641562D0CFE2019F733A965FC8E0C7.crl
                          rsync://repo-rpki.idnic.net/repo/5ae2ebde-6311-488a-82b7-9d4c05530987/0/35B589224D641562D0CFE2019F733A965FC8E0C7.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35B589224D641562D0CFE2019F733A965FC8E0C7.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Mar 2026 19:23:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:6e:06:93:06:5e:0f:c0:c8:1a:7c:73:2b:63:52:9b:89:96:5b:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35B589224D641562D0CFE2019F733A965FC8E0C7
        Validity
            Not Before: Feb 25 21:55:00 2026 GMT
            Not After : Feb 24 22:00:00 2027 GMT
        Subject: CN=F046F52472FF36FE6911303DE6E23902856C16A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:05:56:72:04:0f:e4:a6:4f:cd:b9:86:71:b0:
                    38:89:f3:84:08:6c:d0:70:ea:a7:e9:ab:cf:ec:65:
                    77:32:7b:47:52:7d:e9:7f:6a:e5:f1:9b:ab:45:a6:
                    6c:d2:56:ca:7b:5f:59:ee:c9:9f:43:48:8a:2b:3d:
                    a5:db:7f:2d:57:5b:95:93:a2:18:bc:91:95:60:aa:
                    e8:5b:1e:c7:d3:00:a4:06:e0:03:fa:73:9b:a0:0f:
                    42:11:6c:ed:38:7c:b8:50:30:a1:f9:65:03:61:f0:
                    77:ab:3c:eb:87:85:ed:9d:79:80:3f:58:13:22:a5:
                    3e:4b:a9:69:f6:ab:e5:5c:84:42:6c:91:3a:f1:0d:
                    fd:39:43:21:59:2e:07:26:90:c7:e6:44:d9:89:f9:
                    e0:fb:19:ce:33:f3:a6:46:63:45:e8:a8:d5:5e:02:
                    e6:e5:4c:b1:9c:1a:1d:1a:69:73:a5:c7:00:4f:c9:
                    63:7e:af:20:69:3a:20:92:30:c2:21:6f:ab:60:ae:
                    32:3b:f9:21:39:a2:25:dd:68:3b:d9:6f:f0:db:df:
                    0e:4a:8f:23:5f:92:dd:c6:dc:dd:4a:49:0d:0b:ca:
                    cf:4f:d4:c7:0a:d4:42:56:c9:f3:f3:1b:c7:b8:90:
                    43:27:03:75:a5:e8:f6:ac:62:0e:43:ca:98:99:19:
                    e4:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:46:F5:24:72:FF:36:FE:69:11:30:3D:E6:E2:39:02:85:6C:16:A7
            X509v3 Authority Key Identifier:
                keyid:35:B5:89:22:4D:64:15:62:D0:CF:E2:01:9F:73:3A:96:5F:C8:E0:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5ae2ebde-6311-488a-82b7-9d4c05530987/0/35B589224D641562D0CFE2019F733A965FC8E0C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35B589224D641562D0CFE2019F733A965FC8E0C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5ae2ebde-6311-488a-82b7-9d4c05530987/0/3130332e36392e3130362e302f32342d3234203d3e20313437303837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.69.106.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:af:d6:12:c9:6d:16:e0:ab:3a:2b:91:93:98:6d:30:a0:19:
         56:04:3f:b4:37:11:b6:16:70:4a:f3:b2:f4:10:fc:fa:2b:82:
         91:9e:e3:82:df:f4:ae:19:09:d2:af:31:14:78:d1:a4:66:8e:
         b5:dd:6b:f9:56:5e:c6:aa:c2:2f:66:a9:c8:89:ce:90:90:90:
         4f:57:6a:ee:e1:10:1e:02:73:4c:ba:a9:96:59:4c:77:a9:c4:
         ed:8e:8d:ae:8c:f1:c1:1b:7c:8a:aa:74:30:4a:42:af:d8:67:
         fc:aa:fb:5f:90:61:a3:f2:ec:53:29:1b:ee:b9:8b:3b:1c:19:
         2b:4d:9f:25:a7:08:82:3f:91:3d:a7:68:18:ff:3c:6e:90:d6:
         9d:26:46:56:68:7e:3c:be:ab:28:cd:19:f7:ab:88:9b:c1:91:
         83:87:31:e1:01:8a:8b:35:7b:21:c9:4b:7d:53:5a:f8:23:f1:
         ca:87:73:b7:f2:cb:f2:91:0d:99:e1:8e:53:4b:d7:41:44:90:
         17:17:5b:cb:5c:e2:c4:a3:1b:eb:e3:a2:5e:17:b5:21:31:8f:
         fe:95:fc:51:ab:c3:06:48:ff:a5:54:af:35:14:5e:a6:68:96:
         fe:b0:dc:cb:b6:07:36:05:45:b1:1e:88:1b:51:70:9f:c8:d9:
         01:19:a1:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 01:53:15 2026 by rpki-client