Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/3130332e3234382e35362e302f32342d3234203d3e203538383136.roa
File:                     3130332e3234382e35362e302f32342d3234203d3e203538383136.roa (raw, json)
Hash identifier:          WKrMoI06/p5+G+xllObLjjqyxyOkWyvvq+1tJPmPHZo=
Subject key identifier:   F5:32:FC:B6:03:04:95:42:6B:79:F7:25:37:3C:FF:B3:94:C4:81:9C
Certificate issuer:       /CN=2042008AEC80152F373D2A04DFD3893EE2F92166
Certificate serial:       340D17C5BE32A149E14E04139866D3FDA3BCE024
Authority key identifier: 20:42:00:8A:EC:80:15:2F:37:3D:2A:04:DF:D3:89:3E:E2:F9:21:66
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2042008AEC80152F373D2A04DFD3893EE2F92166.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/3130332e3234382e35362e302f32342d3234203d3e203538383136.roa
Signing time:             Thu 05 Feb 2026 09:00:01 +0000
ROA not before:           Thu 05 Feb 2026 08:55:01 +0000
ROA not after:            Thu 04 Feb 2027 09:00:01 +0000
asID:                     58816
IP address blocks:        103.248.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/2042008AEC80152F373D2A04DFD3893EE2F92166.crl
                          rsync://repo-rpki.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/2042008AEC80152F373D2A04DFD3893EE2F92166.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2042008AEC80152F373D2A04DFD3893EE2F92166.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Mar 2026 06:31:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:0d:17:c5:be:32:a1:49:e1:4e:04:13:98:66:d3:fd:a3:bc:e0:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2042008AEC80152F373D2A04DFD3893EE2F92166
        Validity
            Not Before: Feb  5 08:55:01 2026 GMT
            Not After : Feb  4 09:00:01 2027 GMT
        Subject: CN=F532FCB6030495426B79F725373CFFB394C4819C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:6f:9e:21:53:b6:c7:26:34:e0:9d:2a:cf:40:
                    4c:da:39:83:30:7b:c7:48:81:22:ec:dc:46:15:bd:
                    b0:14:b0:72:99:6f:54:39:1a:14:db:b5:d3:9c:19:
                    3a:ef:0d:e3:c8:f3:a1:c7:a3:a1:2b:92:f2:26:16:
                    ec:a2:1e:52:4c:4e:03:ff:d3:3c:e2:22:46:22:c2:
                    63:6e:41:42:c6:da:27:b9:f4:12:ee:5e:71:3d:8b:
                    99:a8:a7:87:d9:48:8e:4d:fb:f6:90:cd:5a:ae:a2:
                    b0:78:b3:8e:91:40:ce:de:5a:4e:9b:72:fc:9f:12:
                    ed:14:4b:a1:6b:55:15:d8:05:5a:94:ff:65:94:63:
                    75:12:ec:07:33:02:1c:02:91:02:e7:bd:c4:0d:a6:
                    02:d1:88:97:50:33:4d:65:b3:dd:4f:b8:f3:49:d6:
                    40:45:ba:ba:22:12:aa:b2:75:b8:6f:a0:88:8f:b2:
                    50:e8:df:7a:29:2b:c4:11:14:9d:73:c8:ac:b3:4a:
                    9f:b3:b8:f5:0a:d9:68:a5:06:96:11:23:9d:06:a2:
                    bb:f6:5e:69:30:27:ba:7e:62:a6:1d:ee:6c:3d:51:
                    ab:cf:6e:3a:1b:23:5f:91:d5:04:18:c8:15:8b:65:
                    40:c9:ef:e2:c4:81:81:c8:16:82:c7:aa:8b:d6:0f:
                    87:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:32:FC:B6:03:04:95:42:6B:79:F7:25:37:3C:FF:B3:94:C4:81:9C
            X509v3 Authority Key Identifier:
                keyid:20:42:00:8A:EC:80:15:2F:37:3D:2A:04:DF:D3:89:3E:E2:F9:21:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/2042008AEC80152F373D2A04DFD3893EE2F92166.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2042008AEC80152F373D2A04DFD3893EE2F92166.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/3130332e3234382e35362e302f32342d3234203d3e203538383136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.248.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:96:e0:0a:e8:4e:9c:e3:bd:f3:43:6d:4f:d6:80:e9:b8:e2:
         23:cf:f6:51:52:29:92:1a:23:e7:a2:09:96:b7:65:6b:85:f1:
         11:ca:22:22:d7:28:88:09:8d:12:74:2d:36:21:6b:2f:0b:39:
         55:db:3f:3e:bb:a6:41:63:b8:0e:40:ca:fe:f7:2b:ce:cd:28:
         d6:75:e3:bd:fb:12:0c:d9:a9:b6:b4:28:85:16:cf:94:be:23:
         de:65:2c:99:44:a1:d4:a3:84:ea:63:f8:87:50:7e:dd:f3:60:
         46:17:bf:6e:c6:a3:f5:17:33:67:0f:ac:4f:38:2c:c0:ea:b3:
         e9:3c:0d:0b:1f:3c:fa:64:ed:06:39:59:45:8e:4b:f4:de:e0:
         9c:cc:01:85:95:b3:3e:7b:38:f9:64:c8:b9:61:ea:f2:57:3d:
         cb:5c:c0:ed:d7:5f:5b:03:23:e5:22:7e:9d:0f:ba:93:22:6c:
         dc:cb:6e:4b:50:eb:dc:e4:6a:5f:1c:a3:5c:50:74:1b:8a:2e:
         00:46:a3:ab:e3:70:bb:ca:c2:c0:43:31:64:9d:67:b3:cc:50:
         88:10:35:c1:67:b7:1c:93:fc:be:9a:ed:b2:be:3c:a0:bd:89:
         3a:d1:87:21:3f:09:1e:80:79:08:18:73:ad:bb:17:47:ae:cf:
         c0:37:5d:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:17:41 2026 by rpki-client