Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/3130332e3234382e35392e302f32342d3234203d3e203538383136.roa
File:                     3130332e3234382e35392e302f32342d3234203d3e203538383136.roa (raw, json)
Hash identifier:          nuaGJGZ3YXO78mNDVOo1HOsr1j0BBeisM+PdT4vV70U=
Subject key identifier:   D9:BE:7D:40:E3:AC:D4:FD:B6:FA:BF:06:87:66:F4:01:79:06:D0:D6
Certificate issuer:       /CN=2042008AEC80152F373D2A04DFD3893EE2F92166
Certificate serial:       6B2F02ECCB41F57D71A38114320F3FCF3ED49DCD
Authority key identifier: 20:42:00:8A:EC:80:15:2F:37:3D:2A:04:DF:D3:89:3E:E2:F9:21:66
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2042008AEC80152F373D2A04DFD3893EE2F92166.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/3130332e3234382e35392e302f32342d3234203d3e203538383136.roa
Signing time:             Thu 05 Feb 2026 09:00:00 +0000
ROA not before:           Thu 05 Feb 2026 08:55:00 +0000
ROA not after:            Thu 04 Feb 2027 09:00:00 +0000
asID:                     58816
IP address blocks:        103.248.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/2042008AEC80152F373D2A04DFD3893EE2F92166.crl
                          rsync://repo-rpki.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/2042008AEC80152F373D2A04DFD3893EE2F92166.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2042008AEC80152F373D2A04DFD3893EE2F92166.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Mar 2026 06:31:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:2f:02:ec:cb:41:f5:7d:71:a3:81:14:32:0f:3f:cf:3e:d4:9d:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2042008AEC80152F373D2A04DFD3893EE2F92166
        Validity
            Not Before: Feb  5 08:55:00 2026 GMT
            Not After : Feb  4 09:00:00 2027 GMT
        Subject: CN=D9BE7D40E3ACD4FDB6FABF068766F4017906D0D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:be:a3:bd:cc:0c:c1:94:cb:f6:fc:f8:90:ab:
                    7f:e5:99:a3:35:eb:be:9f:f2:b9:e5:06:2a:f7:d7:
                    ba:bc:19:8a:e8:49:76:97:b8:8b:d4:c6:ce:f4:79:
                    22:ea:f2:9f:45:77:b5:db:7c:77:5f:53:ff:cb:e6:
                    61:86:f8:fe:85:ec:47:17:a6:8a:a4:d5:71:96:60:
                    cd:ab:62:63:0f:48:4e:7b:63:ef:57:38:c8:37:a7:
                    05:fd:27:8f:1d:c1:c5:2c:0c:eb:bf:88:b3:ec:41:
                    85:bf:94:6e:fe:42:c2:21:d6:05:ea:83:6e:08:3e:
                    66:51:0a:51:48:19:dc:32:dd:54:fb:a2:fa:bf:96:
                    55:9b:63:4f:f7:63:83:3d:83:9c:fe:ab:af:87:43:
                    14:a4:cc:e2:9c:6a:98:e5:53:e2:12:8d:90:99:6d:
                    63:d6:4d:41:7c:b3:8f:87:1a:d0:09:51:85:8d:c7:
                    da:f8:78:4e:64:db:6a:4a:5a:79:d9:d2:8d:d2:f6:
                    46:0e:5f:ab:70:a4:a3:41:63:0f:8b:21:ef:48:20:
                    8e:16:c7:a5:69:1c:c8:50:1a:10:4f:bb:a4:73:32:
                    a9:42:1c:5c:b9:35:10:c9:10:51:bd:67:b8:4a:61:
                    c2:a6:40:83:00:c1:af:23:5c:28:4a:d7:13:4a:ae:
                    f6:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:BE:7D:40:E3:AC:D4:FD:B6:FA:BF:06:87:66:F4:01:79:06:D0:D6
            X509v3 Authority Key Identifier:
                keyid:20:42:00:8A:EC:80:15:2F:37:3D:2A:04:DF:D3:89:3E:E2:F9:21:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/2042008AEC80152F373D2A04DFD3893EE2F92166.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2042008AEC80152F373D2A04DFD3893EE2F92166.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/3130332e3234382e35392e302f32342d3234203d3e203538383136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.248.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:75:4d:d1:8e:11:88:cc:d7:97:e0:c9:2c:87:fb:95:5c:0a:
         2b:4b:07:a7:94:a4:a4:21:d4:92:ab:ed:37:a2:06:35:df:28:
         3e:55:61:46:d4:10:05:29:73:89:88:67:43:bf:ce:c2:0d:8e:
         c7:d9:dd:bd:cb:1d:b9:23:5d:ae:5d:54:f8:e9:e6:4b:d8:8e:
         03:cb:d0:c9:86:c1:40:83:aa:c0:2b:18:b5:67:25:16:8a:08:
         a3:86:48:8d:9f:7b:6b:cb:98:69:5a:4f:16:34:44:1e:c5:72:
         e0:9a:5e:16:f5:c4:d1:54:e0:87:34:86:4a:f1:30:f2:cd:94:
         5e:bf:9c:88:20:7f:6c:02:60:58:09:a4:b4:e7:24:db:2e:25:
         65:1d:75:3d:bc:b4:3f:9c:85:12:c2:e6:77:11:66:41:53:25:
         dc:c0:3e:34:ad:d3:57:31:29:5b:d8:d3:79:6b:57:05:34:21:
         07:34:9c:74:64:09:70:8b:1a:c7:17:4c:ca:0e:eb:09:e6:ac:
         c9:2c:86:73:f1:8d:ff:8c:73:38:25:0d:92:5c:28:45:4b:ae:
         b6:b3:59:7d:95:ae:93:60:75:5a:22:d4:8e:10:e4:65:2f:15:
         99:18:9e:e0:ab:ec:d6:c0:a0:4c:c1:cf:60:46:c3:86:5e:27:
         04:d4:13:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:05:29 2026 by rpki-client