Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/5d794d36-69f8-4406-bf9f-122ddd17f450/0/3130332e3133342e37382e302f32342d3234203d3e20313338313433.roa
File:                     3130332e3133342e37382e302f32342d3234203d3e20313338313433.roa (raw, json)
Hash identifier:          0xzsOD0/72+ecdCN96VhA/wi5UoGvNdj0fVlSK9Vprs=
Subject key identifier:   CE:A1:22:C9:83:A9:ED:3D:7D:EE:EE:16:AD:0D:CD:C8:21:05:BF:BF
Certificate issuer:       /CN=F5CC08F1CD0B94579D4F773CEE5ABFBD5E8E220B
Certificate serial:       2BB98B937E30FF930619323A770E7B98816B26A2
Authority key identifier: F5:CC:08:F1:CD:0B:94:57:9D:4F:77:3C:EE:5A:BF:BD:5E:8E:22:0B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F5CC08F1CD0B94579D4F773CEE5ABFBD5E8E220B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5d794d36-69f8-4406-bf9f-122ddd17f450/0/3130332e3133342e37382e302f32342d3234203d3e20313338313433.roa
Signing time:             Fri 17 Apr 2026 07:55:17 +0000
ROA not before:           Fri 17 Apr 2026 07:50:17 +0000
ROA not after:            Fri 16 Apr 2027 07:55:17 +0000
asID:                     138143
IP address blocks:        103.134.78.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/5d794d36-69f8-4406-bf9f-122ddd17f450/0/F5CC08F1CD0B94579D4F773CEE5ABFBD5E8E220B.crl
                          rsync://repo-rpki.idnic.net/repo/5d794d36-69f8-4406-bf9f-122ddd17f450/0/F5CC08F1CD0B94579D4F773CEE5ABFBD5E8E220B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F5CC08F1CD0B94579D4F773CEE5ABFBD5E8E220B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Apr 2026 10:15:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:b9:8b:93:7e:30:ff:93:06:19:32:3a:77:0e:7b:98:81:6b:26:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F5CC08F1CD0B94579D4F773CEE5ABFBD5E8E220B
        Validity
            Not Before: Apr 17 07:50:17 2026 GMT
            Not After : Apr 16 07:55:17 2027 GMT
        Subject: CN=CEA122C983A9ED3D7DEEEE16AD0DCDC82105BFBF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:6a:84:bf:24:43:ab:cf:3e:91:88:7c:0e:d7:
                    c1:f8:2c:90:ed:57:f1:5c:0d:3b:8e:2a:89:9c:56:
                    92:28:36:d4:d6:45:4e:1d:20:6d:ee:13:3b:25:a2:
                    5e:14:65:0b:34:ad:c3:03:81:53:8a:83:9e:99:48:
                    7c:c9:e6:37:72:09:d2:95:cc:3e:c9:4b:dd:43:f2:
                    b9:4c:98:a9:35:99:8c:24:7e:ba:4f:bf:ef:44:27:
                    fc:e2:45:96:28:f9:4d:33:d1:20:b0:ee:39:ef:0d:
                    57:bb:e0:a3:58:6a:e7:50:68:8a:76:d0:b3:dc:11:
                    64:97:4e:d9:72:f8:c4:70:46:2b:54:f5:1c:e0:31:
                    00:62:7c:b8:c9:4d:ab:dd:db:2f:a4:f3:59:68:3f:
                    d8:e5:18:e2:57:9f:34:86:ca:4d:ef:a1:fd:c2:2c:
                    50:91:6e:8b:f6:6f:1f:9f:94:b8:f3:f1:26:45:4e:
                    23:36:7f:e3:48:0e:a4:86:32:d5:22:ef:68:4f:6e:
                    84:e0:23:74:19:aa:d2:ca:3b:e8:50:e2:16:0d:8c:
                    c9:f7:d9:fe:c3:b2:33:67:5f:a5:70:1c:b8:6d:bd:
                    b6:62:4e:a0:ca:06:5d:9e:23:94:7e:3a:30:e3:b2:
                    25:60:80:ef:69:5f:b9:3d:e2:9b:ac:7d:0c:52:70:
                    34:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:A1:22:C9:83:A9:ED:3D:7D:EE:EE:16:AD:0D:CD:C8:21:05:BF:BF
            X509v3 Authority Key Identifier:
                keyid:F5:CC:08:F1:CD:0B:94:57:9D:4F:77:3C:EE:5A:BF:BD:5E:8E:22:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5d794d36-69f8-4406-bf9f-122ddd17f450/0/F5CC08F1CD0B94579D4F773CEE5ABFBD5E8E220B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F5CC08F1CD0B94579D4F773CEE5ABFBD5E8E220B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5d794d36-69f8-4406-bf9f-122ddd17f450/0/3130332e3133342e37382e302f32342d3234203d3e20313338313433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.134.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:b3:b5:70:e8:05:a9:c1:14:e9:25:55:bd:c1:01:c4:76:ee:
         8d:6c:b2:6f:74:df:dd:7f:7d:35:5c:c5:15:d3:98:06:c0:63:
         c8:89:72:f0:dd:6b:8b:a7:6e:e2:b8:8c:04:1b:1e:a6:18:ad:
         87:4d:21:30:2f:f8:b4:d4:c1:7c:b8:a2:ea:78:50:54:b3:ea:
         28:5f:b8:2e:45:f7:00:f5:44:3b:e0:fb:86:fc:16:30:de:01:
         95:51:14:0d:f7:33:2c:0f:3e:a3:c8:21:e6:7f:4f:a5:c3:72:
         95:c7:2b:a6:a3:6d:bd:37:14:32:39:3c:91:1c:79:76:4c:62:
         df:13:fe:f4:12:32:28:db:e9:42:f7:9c:68:9a:e2:06:38:48:
         6c:3f:5b:ff:08:93:93:25:e6:48:6e:8c:4b:ee:ab:b6:f3:68:
         a1:b6:e8:d4:bb:e7:71:b3:c1:00:e0:0b:9f:ea:99:bb:71:85:
         9a:df:03:6a:4e:27:96:e4:a5:c1:87:5d:a0:4e:2a:00:af:39:
         6b:46:b3:d2:d8:33:19:3f:45:45:56:0d:a6:ef:5d:21:25:75:
         c7:26:e4:13:bf:4b:7d:2d:91:0c:61:cb:36:c4:3e:bf:de:07:
         6b:3e:f7:b0:c6:da:31:36:aa:75:8d:fa:76:2d:75:cb:33:b4:
         ff:fa:42:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:34:07 2026 by rpki-client