Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/786599a6-d86b-471a-a05b-a9fafe3bb69a/0/3130332e3134392e34322e302f32342d3234203d3e20313530353236.roa
File:                     3130332e3134392e34322e302f32342d3234203d3e20313530353236.roa (raw, json)
Hash identifier:          CFMMeUCwt3u6soEKOfFxVb6+3CB6NoHwfl39FZsC3dQ=
Subject key identifier:   57:83:B5:37:5F:39:D2:4C:20:CA:A9:02:97:AD:6F:60:1D:6A:5A:7F
Certificate issuer:       /CN=15B7AAB48355A98C761DD27A589DF602A4D38E3D
Certificate serial:       46011F91822ECE163F6A6240D2487ADA5B6630CB
Authority key identifier: 15:B7:AA:B4:83:55:A9:8C:76:1D:D2:7A:58:9D:F6:02:A4:D3:8E:3D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/15B7AAB48355A98C761DD27A589DF602A4D38E3D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/786599a6-d86b-471a-a05b-a9fafe3bb69a/0/3130332e3134392e34322e302f32342d3234203d3e20313530353236.roa
Signing time:             Fri 20 Feb 2026 05:02:48 +0000
ROA not before:           Fri 20 Feb 2026 04:57:48 +0000
ROA not after:            Fri 19 Feb 2027 05:02:48 +0000
asID:                     150526
IP address blocks:        103.149.42.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/786599a6-d86b-471a-a05b-a9fafe3bb69a/0/15B7AAB48355A98C761DD27A589DF602A4D38E3D.crl
                          rsync://repo-rpki.idnic.net/repo/786599a6-d86b-471a-a05b-a9fafe3bb69a/0/15B7AAB48355A98C761DD27A589DF602A4D38E3D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/15B7AAB48355A98C761DD27A589DF602A4D38E3D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Mar 2026 06:34:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:01:1f:91:82:2e:ce:16:3f:6a:62:40:d2:48:7a:da:5b:66:30:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15B7AAB48355A98C761DD27A589DF602A4D38E3D
        Validity
            Not Before: Feb 20 04:57:48 2026 GMT
            Not After : Feb 19 05:02:48 2027 GMT
        Subject: CN=5783B5375F39D24C20CAA90297AD6F601D6A5A7F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:03:e6:04:7d:81:65:c9:88:f5:4c:5e:e6:52:
                    a5:a5:4a:ce:5a:22:37:01:79:1e:19:f4:ba:05:62:
                    8f:ee:9a:9e:2a:24:fa:3d:01:38:98:f9:ab:63:4c:
                    77:6a:72:aa:37:89:40:00:dd:53:46:bf:09:f5:fe:
                    44:0f:46:b0:6b:de:86:43:cf:55:75:9e:e0:56:8d:
                    59:dc:a3:24:3f:e1:6f:57:e7:d6:ea:f0:a0:a6:f4:
                    c5:53:18:5f:88:54:66:79:69:6d:cf:03:34:9c:fa:
                    86:aa:20:d1:41:f4:d5:ff:fe:78:ac:8f:93:5d:31:
                    6f:52:2a:50:47:a0:c3:f1:e5:0a:3f:4b:97:06:00:
                    c1:b0:fe:39:71:c2:d4:5f:6b:f0:1d:2f:99:87:95:
                    7c:a9:e1:97:72:fc:1f:3c:76:a6:34:2e:71:3e:6f:
                    81:dc:31:a5:b2:ca:06:a4:fd:38:67:3f:1f:16:a7:
                    04:33:89:00:3e:86:6b:77:e0:ec:98:53:dc:29:c6:
                    d5:4b:24:10:1e:ca:1b:f6:3b:de:0f:a9:be:d5:59:
                    e4:21:4e:09:6d:90:50:05:81:06:05:29:73:64:35:
                    d5:2f:41:c8:a6:1d:65:a6:ab:31:7b:70:7d:03:e1:
                    6f:ff:cf:b1:77:d2:43:ce:df:6e:9a:b0:bf:55:dd:
                    45:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:83:B5:37:5F:39:D2:4C:20:CA:A9:02:97:AD:6F:60:1D:6A:5A:7F
            X509v3 Authority Key Identifier:
                keyid:15:B7:AA:B4:83:55:A9:8C:76:1D:D2:7A:58:9D:F6:02:A4:D3:8E:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/786599a6-d86b-471a-a05b-a9fafe3bb69a/0/15B7AAB48355A98C761DD27A589DF602A4D38E3D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/15B7AAB48355A98C761DD27A589DF602A4D38E3D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/786599a6-d86b-471a-a05b-a9fafe3bb69a/0/3130332e3134392e34322e302f32342d3234203d3e20313530353236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.149.42.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:88:5f:27:45:f3:ac:3a:5b:2d:bd:1b:b1:b5:bd:fd:4f:5b:
         67:27:b5:cd:40:18:a8:1b:05:c2:45:25:1f:e4:f8:35:ff:0d:
         28:57:f1:27:b9:38:84:81:b3:a5:86:30:9a:f5:60:ba:01:48:
         43:7f:da:64:f5:6a:71:92:be:b9:87:97:06:d2:db:2a:cf:13:
         40:d9:08:83:35:7b:b8:9b:2a:37:fa:ae:e2:59:9a:85:4d:f5:
         ba:06:bf:31:ab:5f:fe:fa:35:12:c7:c9:cd:23:96:92:41:c9:
         f8:21:94:06:71:b6:70:1a:84:f9:51:b1:9c:18:bd:4f:17:38:
         fd:89:0c:6d:ef:ee:c2:17:0d:34:31:86:06:fd:16:89:e7:a9:
         9d:c7:8b:aa:cb:cb:78:a8:93:21:7f:3a:98:b0:0b:3f:6b:07:
         55:50:a1:63:33:9f:29:51:6a:7f:9d:5e:cb:24:d6:f7:b8:54:
         53:3f:5a:10:0c:4f:e9:ff:6f:57:a2:26:14:74:3e:21:4a:6b:
         bc:41:ad:c9:27:68:25:9d:8a:5d:78:85:8f:a6:39:2d:f1:7f:
         d9:35:54:e2:00:1c:ae:dd:44:a7:b9:4d:d9:d3:36:ef:e1:e4:
         15:00:00:94:1b:04:af:cf:48:c3:54:0d:aa:c0:f1:cd:51:1c:
         af:a0:48:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:37:12 2026 by rpki-client