Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/3130332e3130302e3138312e302f32342d3234203d3e203435333035.roa
File:                     3130332e3130302e3138312e302f32342d3234203d3e203435333035.roa (raw, json)
Hash identifier:          lt8611+icqcOlcb0vp3/L3lkdrCllwLsjssGKj3PZL0=
Subject key identifier:   93:C2:A6:44:AE:92:80:7D:A7:9A:B2:C1:3C:76:88:94:AD:3C:11:F5
Certificate issuer:       /CN=F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3
Certificate serial:       379B9A99085ACD6A8978AF423F90A30898B9DBB2
Authority key identifier: F3:F9:AB:30:AC:2C:50:B3:ED:F7:C9:1C:45:31:CC:9A:EE:9C:9D:A3
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/3130332e3130302e3138312e302f32342d3234203d3e203435333035.roa
Signing time:             Mon 16 Feb 2026 10:18:24 +0000
ROA not before:           Mon 16 Feb 2026 10:13:24 +0000
ROA not after:            Mon 15 Feb 2027 10:18:24 +0000
asID:                     45305
IP address blocks:        103.100.181.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.crl
                          rsync://repo-rpki.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Mar 2026 01:49:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:9b:9a:99:08:5a:cd:6a:89:78:af:42:3f:90:a3:08:98:b9:db:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3
        Validity
            Not Before: Feb 16 10:13:24 2026 GMT
            Not After : Feb 15 10:18:24 2027 GMT
        Subject: CN=93C2A644AE92807DA79AB2C13C768894AD3C11F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:ee:00:62:82:cb:d4:71:3a:5f:33:cc:cb:cc:
                    62:4b:05:a9:12:a8:b4:20:61:7d:12:53:93:7f:7b:
                    d2:46:bd:f2:d4:f8:43:af:7c:e7:67:fb:bf:f4:9d:
                    5e:f1:4c:d9:cd:7e:f8:12:09:cc:8c:30:32:d2:77:
                    13:bb:40:f7:4f:a5:a9:9a:84:c5:86:22:6b:08:a2:
                    14:2b:ac:5d:dc:33:be:ca:91:8e:d9:ae:57:b5:bf:
                    86:61:bd:29:e7:70:88:51:56:ae:90:39:3c:de:d5:
                    7b:5c:c1:f8:c3:31:95:1a:91:28:5a:59:73:31:36:
                    09:b4:53:32:eb:70:d6:96:79:76:de:f4:d2:a8:64:
                    95:27:47:a4:0b:3c:73:63:67:b7:d8:1a:d1:6f:9f:
                    6e:08:8d:27:65:3f:a5:66:c5:a9:9d:c5:81:52:2a:
                    7e:d4:e9:0a:a6:50:f7:18:06:05:82:c1:ad:2a:05:
                    b3:6e:89:e3:15:b5:61:33:7f:cf:d1:bf:e0:6a:31:
                    76:a3:69:47:fc:f9:33:df:e9:b1:82:ae:a1:27:d8:
                    b8:98:78:7c:2b:79:61:f2:f6:f1:13:54:aa:64:2b:
                    a8:3e:57:69:86:b5:8f:89:27:9c:5c:3e:f5:31:36:
                    87:09:04:63:85:2b:57:c2:9e:76:ae:26:bd:cf:8b:
                    c4:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:C2:A6:44:AE:92:80:7D:A7:9A:B2:C1:3C:76:88:94:AD:3C:11:F5
            X509v3 Authority Key Identifier:
                keyid:F3:F9:AB:30:AC:2C:50:B3:ED:F7:C9:1C:45:31:CC:9A:EE:9C:9D:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/3130332e3130302e3138312e302f32342d3234203d3e203435333035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.100.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:92:90:03:69:20:52:ed:1f:1a:ab:31:53:0c:db:1c:9f:65:
         89:cb:a2:20:29:d3:24:17:f4:09:62:8f:8f:bd:41:a2:aa:9e:
         a4:ff:46:1b:5b:f8:0c:3d:ea:ac:07:98:6c:cf:ea:16:28:4c:
         b6:c1:32:8f:f8:01:98:ec:b3:c7:67:a1:6c:8d:e9:45:ad:a8:
         ba:34:f4:5a:da:0a:c6:9a:c6:94:40:ae:88:31:7d:5d:fc:2a:
         87:92:57:a1:a1:c1:43:1e:43:a9:83:f6:30:28:d3:80:1f:2f:
         28:f4:4c:98:47:de:67:a0:d5:d3:6b:8e:d5:34:9a:17:c1:b4:
         a2:2a:e7:97:dc:3b:96:83:22:f4:d4:71:3f:77:bd:93:f4:1f:
         2a:78:ee:04:1a:78:24:bb:f7:c4:8d:40:9e:af:e7:06:63:d2:
         56:bb:32:bd:6d:c0:98:17:d1:f4:47:e1:c5:9e:95:a1:0f:23:
         c0:d0:e4:9a:a6:a0:95:0d:f0:78:18:ed:0f:7b:77:a8:07:37:
         1b:98:74:87:e6:d4:79:e5:1e:26:f7:cf:c0:ca:52:b7:97:4a:
         6a:ee:b6:1b:3d:4c:5f:82:d7:a8:4e:c2:3c:c6:15:b8:44:7d:
         ae:cb:c0:88:57:6f:76:8f:f6:90:ff:e3:25:13:98:d8:d7:e8:
         ac:24:f4:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:25:46 2026 by rpki-client