Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/5e314858-b33a-4b65-9a55-dce41e223873/0/3130332e3139302e36312e302f32342d3234203d3e20313439393031.roa
File:                     3130332e3139302e36312e302f32342d3234203d3e20313439393031.roa (raw, json)
Hash identifier:          xOxv8Fz6Tpmz/YRUuUjQ79JRZubX1fq53E188IFgqko=
Subject key identifier:   50:8D:28:95:E8:2A:4B:A0:F5:B7:B8:A7:54:6F:BE:FC:F2:A3:04:B8
Certificate issuer:       /CN=3BA5C10190ADC96EE34EB4A6D054457022CBDEE9
Certificate serial:       52EF128447B9332377A34A4A4A2D4C208F1F0BDC
Authority key identifier: 3B:A5:C1:01:90:AD:C9:6E:E3:4E:B4:A6:D0:54:45:70:22:CB:DE:E9
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3BA5C10190ADC96EE34EB4A6D054457022CBDEE9.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5e314858-b33a-4b65-9a55-dce41e223873/0/3130332e3139302e36312e302f32342d3234203d3e20313439393031.roa
Signing time:             Wed 15 Apr 2026 04:00:00 +0000
ROA not before:           Wed 15 Apr 2026 03:55:00 +0000
ROA not after:            Wed 14 Apr 2027 04:00:00 +0000
asID:                     149901
IP address blocks:        103.190.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/5e314858-b33a-4b65-9a55-dce41e223873/0/3BA5C10190ADC96EE34EB4A6D054457022CBDEE9.crl
                          rsync://repo-rpki.idnic.net/repo/5e314858-b33a-4b65-9a55-dce41e223873/0/3BA5C10190ADC96EE34EB4A6D054457022CBDEE9.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3BA5C10190ADC96EE34EB4A6D054457022CBDEE9.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 20 Apr 2026 16:52:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:ef:12:84:47:b9:33:23:77:a3:4a:4a:4a:2d:4c:20:8f:1f:0b:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3BA5C10190ADC96EE34EB4A6D054457022CBDEE9
        Validity
            Not Before: Apr 15 03:55:00 2026 GMT
            Not After : Apr 14 04:00:00 2027 GMT
        Subject: CN=508D2895E82A4BA0F5B7B8A7546FBEFCF2A304B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:9f:71:97:f2:24:47:db:d3:c1:fd:b3:83:68:
                    bb:0f:56:04:08:6a:d9:8d:c5:19:08:22:58:76:e4:
                    15:52:92:1c:81:ee:bc:85:39:ec:1b:e0:77:f1:91:
                    b2:35:15:9d:2f:84:5d:b7:e1:fa:e3:bc:c2:3c:bf:
                    84:0f:ff:41:eb:f8:8b:81:d9:5d:fe:93:cd:d9:a9:
                    98:e5:46:19:01:56:75:fe:1f:df:93:88:54:e6:6e:
                    66:55:e3:11:b9:23:94:9c:52:db:95:ec:9d:64:29:
                    af:f0:aa:c5:4f:c4:00:ca:75:05:44:63:35:51:83:
                    cb:2c:98:72:4e:b1:90:eb:47:ac:b0:16:8d:8b:41:
                    09:96:b6:29:81:34:c4:52:3c:65:74:5b:b5:83:1f:
                    df:43:30:d0:f1:e2:c4:fc:d7:29:7f:ec:13:11:3b:
                    fb:ed:27:54:96:36:f3:93:13:04:45:9a:32:e7:65:
                    17:09:b1:eb:ab:63:70:4d:d4:cd:e3:a5:b4:63:0c:
                    a1:ef:ea:de:e2:9a:4a:61:10:3b:47:4c:92:7e:bc:
                    77:cb:19:29:f3:34:7c:f8:09:1c:51:45:3e:1e:20:
                    bc:fa:b4:8d:5d:98:05:3a:4e:d2:f0:9a:96:cb:15:
                    23:79:fe:f6:7b:27:d0:2b:41:c3:ff:45:1b:22:ac:
                    84:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:8D:28:95:E8:2A:4B:A0:F5:B7:B8:A7:54:6F:BE:FC:F2:A3:04:B8
            X509v3 Authority Key Identifier:
                keyid:3B:A5:C1:01:90:AD:C9:6E:E3:4E:B4:A6:D0:54:45:70:22:CB:DE:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5e314858-b33a-4b65-9a55-dce41e223873/0/3BA5C10190ADC96EE34EB4A6D054457022CBDEE9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3BA5C10190ADC96EE34EB4A6D054457022CBDEE9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5e314858-b33a-4b65-9a55-dce41e223873/0/3130332e3139302e36312e302f32342d3234203d3e20313439393031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.190.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:6e:46:6f:17:eb:99:a4:88:1c:8f:91:28:4e:08:a8:1e:94:
         f1:e7:9f:af:f3:dd:10:3a:09:86:92:e5:65:d6:dc:bc:1e:f1:
         b8:1c:25:8e:28:e6:1b:db:03:20:80:10:89:0d:a3:55:59:23:
         04:2a:b0:f5:a3:c5:be:6a:d9:e8:f9:d7:8b:99:27:5e:dc:e8:
         c8:39:cc:03:a5:8a:7b:31:13:23:15:0d:fd:a6:d6:85:03:06:
         15:1d:28:d4:e4:73:dc:66:e4:3b:19:76:93:5a:24:7f:1e:59:
         fe:61:c9:15:c4:65:6f:b4:a5:6a:25:6a:3b:4c:ec:11:89:b3:
         ba:94:32:50:d0:14:c2:6f:3f:ba:8a:cf:86:d0:76:5c:ee:33:
         e6:8a:1c:6e:c9:2b:52:c9:0c:9d:c0:e6:1d:1f:09:52:9e:76:
         c9:57:bb:10:07:d1:b9:a5:f6:f0:22:91:39:64:45:6e:06:67:
         c2:ec:95:81:9a:23:8a:b5:23:1c:76:92:82:21:ba:88:4f:87:
         30:64:79:85:7b:79:a0:5b:99:dd:63:37:ff:16:eb:a1:01:a2:
         85:4c:62:eb:55:81:2b:09:03:00:7e:80:e9:5c:22:6a:04:f5:
         1c:91:37:32:c1:1a:a7:1a:2f:8f:9d:4b:35:13:bd:df:9e:44:
         50:c9:2a:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:40:07 2026 by rpki-client