Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/3130332e31312e33302e302f32342d3234203d3e203538333839.roa
File:                     3130332e31312e33302e302f32342d3234203d3e203538333839.roa (raw, json)
Hash identifier:          JIAtKyvQfcpWQ+i6HEHQnh+4RynKPWl0nfQdyAzocl0=
Subject key identifier:   A1:52:03:5D:47:33:94:09:1D:B7:A6:AB:AC:03:85:27:84:80:F3:28
Certificate issuer:       /CN=AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6
Certificate serial:       3329FAABA438FCEDD263C91D1B6068ACB799D74E
Authority key identifier: AF:4B:58:D4:B1:65:30:B9:F6:91:9D:BF:4F:53:DC:3A:E4:D5:FD:E6
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/3130332e31312e33302e302f32342d3234203d3e203538333839.roa
Signing time:             Tue 10 Feb 2026 04:54:59 +0000
ROA not before:           Tue 10 Feb 2026 04:49:59 +0000
ROA not after:            Tue 09 Feb 2027 04:54:59 +0000
asID:                     58389
IP address blocks:        103.11.30.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.crl
                          rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Mar 2026 13:02:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:29:fa:ab:a4:38:fc:ed:d2:63:c9:1d:1b:60:68:ac:b7:99:d7:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6
        Validity
            Not Before: Feb 10 04:49:59 2026 GMT
            Not After : Feb  9 04:54:59 2027 GMT
        Subject: CN=A152035D473394091DB7A6ABAC0385278480F328
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:fc:c7:55:89:90:7a:81:ea:e7:68:01:4e:ef:
                    85:f5:e0:2f:f6:8c:b1:52:8a:cf:0c:20:a6:09:3d:
                    51:b6:65:bb:1d:9c:51:7d:32:06:c4:92:0d:5f:1f:
                    cc:de:2b:fd:9d:06:d9:df:30:e3:30:e9:b8:fa:ca:
                    08:31:93:c7:71:c2:ca:31:8b:12:76:53:23:e6:85:
                    a9:70:be:06:a9:58:8e:dd:e9:d0:13:c3:e1:c2:91:
                    dd:ee:bb:a4:17:a8:c7:a1:17:d8:0d:fe:e4:ac:70:
                    1a:3b:2b:ff:12:d3:01:d0:f6:ff:c7:7c:1a:6e:4d:
                    a8:53:9e:7b:ab:a9:6b:ec:25:4c:f4:0a:1e:1b:07:
                    3a:99:b3:d7:56:15:d8:71:b7:12:c7:75:15:c9:1d:
                    67:18:1e:eb:47:f1:75:09:9a:ae:e4:86:80:51:e3:
                    e2:8d:b4:ae:8b:5c:bc:bf:44:b8:3d:b9:b6:d7:da:
                    98:b4:c1:bf:86:0e:f7:8a:ad:a0:81:ab:09:b3:80:
                    ae:db:e6:23:9d:7d:71:e5:cb:3b:fa:82:32:4f:c4:
                    8d:23:e5:5e:d7:0c:f3:16:ee:87:11:15:cf:d4:fa:
                    fd:c9:97:36:a5:f1:b9:90:c2:6a:57:72:c0:36:55:
                    4e:ee:91:0f:18:82:44:10:48:ba:ab:98:6a:70:9e:
                    ad:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:52:03:5D:47:33:94:09:1D:B7:A6:AB:AC:03:85:27:84:80:F3:28
            X509v3 Authority Key Identifier:
                keyid:AF:4B:58:D4:B1:65:30:B9:F6:91:9D:BF:4F:53:DC:3A:E4:D5:FD:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/3130332e31312e33302e302f32342d3234203d3e203538333839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.11.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:0a:4b:61:10:18:02:54:c3:f0:0b:e7:1c:0a:59:0a:d3:b3:
         3d:d9:d2:08:7a:60:13:67:21:ff:2e:73:f9:11:02:4b:80:71:
         f7:9b:a8:ee:01:73:bc:02:c7:05:0d:2a:c7:3f:df:91:a4:3a:
         f6:d3:12:d6:be:3f:7e:1b:4b:ea:ab:7a:eb:d3:a9:59:4c:c4:
         da:d7:6c:42:c0:f6:e8:58:8d:fe:dc:32:88:b8:76:89:be:0c:
         9c:fd:a1:cc:d1:4d:41:33:fc:f5:d3:4c:8d:d9:17:31:58:3b:
         90:16:4b:24:c4:17:b5:ee:95:62:8d:3b:b8:03:78:9b:28:aa:
         60:29:50:12:8a:25:c9:55:0c:2d:9d:04:23:b4:0c:ba:65:4b:
         94:1f:33:c2:f0:cc:72:93:c9:fb:74:0e:eb:f3:0f:3a:5b:67:
         a8:7a:a5:10:dd:91:73:00:8b:1a:25:9a:a0:bb:28:96:52:43:
         25:e6:73:b9:06:9d:ef:4a:e5:d8:36:6b:ac:67:69:e4:fc:fb:
         92:5d:2f:fe:61:d1:d3:2c:e3:81:12:75:37:36:f6:2d:69:35:
         7e:fa:53:75:47:ed:52:10:c6:5a:5e:51:7c:40:95:51:b5:68:
         64:ae:ef:69:b6:46:8e:42:68:b5:fa:d5:3a:ac:ad:9f:5f:c5:
         f1:e8:fe:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:01:00 2026 by rpki-client