Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/7b3eabb4-4db3-4373-a348-fb1ed7055651/0/3130332e3135302e36312e302f32342d3234203d3e20313430333839.roa
File:                     3130332e3135302e36312e302f32342d3234203d3e20313430333839.roa (raw, json)
Hash identifier:          YBqJEgBScNZE40ToH6Xa8JtZcJ1wwXmCSVUNuGk+Tns=
Subject key identifier:   72:C3:EB:20:45:59:77:7B:BB:F1:81:7B:CF:C5:97:99:58:A6:B1:FD
Certificate issuer:       /CN=5C413D56294D9D20E64978B7296A9DA893C32CAB
Certificate serial:       52FDDD456443565EB714E01D1A79632FF330BD7F
Authority key identifier: 5C:41:3D:56:29:4D:9D:20:E6:49:78:B7:29:6A:9D:A8:93:C3:2C:AB
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C413D56294D9D20E64978B7296A9DA893C32CAB.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/7b3eabb4-4db3-4373-a348-fb1ed7055651/0/3130332e3135302e36312e302f32342d3234203d3e20313430333839.roa
Signing time:             Fri 13 Feb 2026 20:00:01 +0000
ROA not before:           Fri 13 Feb 2026 19:55:01 +0000
ROA not after:            Fri 12 Feb 2027 20:00:01 +0000
asID:                     140389
IP address blocks:        103.150.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/7b3eabb4-4db3-4373-a348-fb1ed7055651/0/5C413D56294D9D20E64978B7296A9DA893C32CAB.crl
                          rsync://repo-rpki.idnic.net/repo/7b3eabb4-4db3-4373-a348-fb1ed7055651/0/5C413D56294D9D20E64978B7296A9DA893C32CAB.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C413D56294D9D20E64978B7296A9DA893C32CAB.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Mar 2026 06:12:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:fd:dd:45:64:43:56:5e:b7:14:e0:1d:1a:79:63:2f:f3:30:bd:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5C413D56294D9D20E64978B7296A9DA893C32CAB
        Validity
            Not Before: Feb 13 19:55:01 2026 GMT
            Not After : Feb 12 20:00:01 2027 GMT
        Subject: CN=72C3EB204559777BBBF1817BCFC5979958A6B1FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:77:d9:1f:66:99:be:3b:99:72:07:21:de:04:
                    29:73:0e:5c:d2:d9:58:ca:6d:fc:75:97:fd:c6:59:
                    62:f0:86:34:f7:03:19:10:27:3d:2e:b3:89:59:b9:
                    dc:39:26:55:e1:92:21:e9:17:ae:94:3c:a3:9e:4d:
                    53:a8:63:8f:3a:f1:39:43:a6:74:90:df:94:5f:a5:
                    10:75:a9:03:04:d4:ca:bf:f3:35:87:18:06:00:cb:
                    8e:a6:2a:e0:f3:3d:ac:f0:d9:6b:2f:1a:14:2c:91:
                    f7:c9:1e:ae:c1:b4:af:c4:b3:36:95:17:80:f9:90:
                    87:a5:d7:a5:96:90:08:f0:36:e5:74:94:a5:46:78:
                    6b:ce:e8:3b:7b:23:fd:6c:27:87:45:8f:5e:d6:51:
                    82:69:7e:30:e5:b0:8d:52:45:77:19:86:e3:c2:c8:
                    7d:09:8d:3e:b8:37:e6:bd:5c:d6:02:f0:26:61:28:
                    1d:68:02:ce:a8:7e:5f:46:5f:6f:3d:84:03:68:28:
                    d1:99:34:fc:ed:32:9b:36:28:6b:23:47:3e:a5:32:
                    57:a2:2b:46:a1:b4:25:4b:29:da:83:d0:84:1c:2e:
                    68:6d:03:bb:3f:a1:4a:db:09:a9:d8:0b:65:96:58:
                    30:80:61:7c:c0:d9:b8:0d:f1:08:df:78:89:d5:dc:
                    c4:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:C3:EB:20:45:59:77:7B:BB:F1:81:7B:CF:C5:97:99:58:A6:B1:FD
            X509v3 Authority Key Identifier:
                keyid:5C:41:3D:56:29:4D:9D:20:E6:49:78:B7:29:6A:9D:A8:93:C3:2C:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/7b3eabb4-4db3-4373-a348-fb1ed7055651/0/5C413D56294D9D20E64978B7296A9DA893C32CAB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C413D56294D9D20E64978B7296A9DA893C32CAB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7b3eabb4-4db3-4373-a348-fb1ed7055651/0/3130332e3135302e36312e302f32342d3234203d3e20313430333839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.150.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b2:29:6f:d5:99:05:7a:d1:47:63:9f:2b:36:c6:b3:12:db:d4:
         ce:58:3b:5f:12:27:64:ad:f5:d8:96:71:2e:d9:43:fa:95:95:
         09:55:4d:3c:57:a2:de:35:f9:7d:de:9b:79:85:53:54:ec:5f:
         d5:8c:3f:cc:d6:af:b8:66:04:41:d1:4c:eb:08:81:e8:ee:78:
         29:2d:db:ba:40:03:57:d7:02:8c:7b:5a:ec:66:65:6f:11:3e:
         e9:ec:1e:ee:f9:35:91:f6:15:dc:b6:32:3f:dc:fc:08:6a:bb:
         e5:1b:8d:24:0f:e2:57:64:4b:73:f7:d5:0d:7d:ec:a2:5a:da:
         c2:b7:d6:8c:37:ac:26:ed:c0:89:c0:66:70:68:ed:00:6c:e5:
         07:06:9b:9d:7f:d8:91:3d:1e:13:ed:36:32:e4:24:97:d0:26:
         7b:7c:54:03:9c:75:b0:71:a5:e5:7b:20:99:35:8e:1f:1d:09:
         58:70:2a:3d:cd:9f:e8:8e:d7:96:ec:e1:e9:ed:9a:24:4d:98:
         a5:9e:0c:a9:5c:86:6c:bb:0f:43:7a:c0:84:40:a3:f7:01:25:
         34:f5:6e:d4:fa:ec:98:02:b4:17:fa:48:1e:d1:b2:2a:90:c3:
         af:24:cd:47:1f:bc:7f:45:fe:fb:5e:85:92:e3:78:04:f7:9a:
         b5:d5:cf:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:55:18 2026 by rpki-client