Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/8165e481-5a79-4868-a4e4-facfd922d813/0/3130332e3135302e3135392e302f32342d3234203d3e20313430343331.roa
File:                     3130332e3135302e3135392e302f32342d3234203d3e20313430343331.roa (raw, json)
Hash identifier:          CGAoHXC7doLa7L2UX4gtwXXVRkntwsNxS8iyNxkUX1U=
Subject key identifier:   62:E8:7E:09:B8:7E:C0:17:74:66:C5:1E:2A:61:77:BF:75:53:9A:65
Certificate issuer:       /CN=FB3AAFE074610C85854BE75082EC16E60A126879
Certificate serial:       47FE37338C8F65A19C393AF3F6BDF3CE425D59DE
Authority key identifier: FB:3A:AF:E0:74:61:0C:85:85:4B:E7:50:82:EC:16:E6:0A:12:68:79
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FB3AAFE074610C85854BE75082EC16E60A126879.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8165e481-5a79-4868-a4e4-facfd922d813/0/3130332e3135302e3135392e302f32342d3234203d3e20313430343331.roa
Signing time:             Thu 05 Feb 2026 15:00:02 +0000
ROA not before:           Thu 05 Feb 2026 14:55:02 +0000
ROA not after:            Thu 04 Feb 2027 15:00:02 +0000
asID:                     140431
IP address blocks:        103.150.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8165e481-5a79-4868-a4e4-facfd922d813/0/FB3AAFE074610C85854BE75082EC16E60A126879.crl
                          rsync://repo-rpki.idnic.net/repo/8165e481-5a79-4868-a4e4-facfd922d813/0/FB3AAFE074610C85854BE75082EC16E60A126879.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FB3AAFE074610C85854BE75082EC16E60A126879.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Mar 2026 13:32:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:fe:37:33:8c:8f:65:a1:9c:39:3a:f3:f6:bd:f3:ce:42:5d:59:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB3AAFE074610C85854BE75082EC16E60A126879
        Validity
            Not Before: Feb  5 14:55:02 2026 GMT
            Not After : Feb  4 15:00:02 2027 GMT
        Subject: CN=62E87E09B87EC0177466C51E2A6177BF75539A65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:de:79:2e:7a:6c:6b:ba:43:7b:db:20:76:af:
                    ef:4a:fc:77:2a:fc:3c:29:90:7d:c9:a5:21:1d:3f:
                    15:7f:5a:4d:20:1f:26:09:aa:65:83:2d:66:50:d1:
                    2e:96:eb:fd:e1:48:5d:7c:d0:c9:07:07:36:61:3f:
                    f2:18:a4:bd:9e:0e:f6:77:68:72:a2:16:38:0f:a4:
                    6d:c2:bd:89:94:90:e8:53:62:9d:6b:d0:a4:8a:2a:
                    0d:83:22:80:cc:d3:61:32:90:8f:6c:3a:d7:93:13:
                    64:1d:c5:64:48:b8:d6:a1:c6:61:be:83:84:f4:77:
                    ca:2e:19:3e:c1:18:3c:b1:65:90:01:ee:01:d5:50:
                    15:85:d8:65:2e:8f:a6:2b:d9:f5:3a:84:ed:2c:e9:
                    57:5a:a2:64:94:92:ba:40:47:29:82:45:d0:2a:a8:
                    eb:e7:84:c1:84:3f:c3:f6:b6:53:2b:1c:4d:8d:e5:
                    28:f4:a6:e3:15:3f:21:42:05:2a:5f:84:8b:72:e8:
                    df:b4:9f:67:2d:a5:11:5b:33:91:67:bc:42:4f:81:
                    43:d4:f0:90:ba:8e:d2:4a:7a:52:55:0c:9f:b4:14:
                    5e:45:e3:75:38:c0:87:32:d8:05:9c:7e:f5:e5:d7:
                    60:24:2a:87:df:47:9b:0a:b3:e0:5a:4d:ad:7e:c6:
                    83:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:E8:7E:09:B8:7E:C0:17:74:66:C5:1E:2A:61:77:BF:75:53:9A:65
            X509v3 Authority Key Identifier:
                keyid:FB:3A:AF:E0:74:61:0C:85:85:4B:E7:50:82:EC:16:E6:0A:12:68:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8165e481-5a79-4868-a4e4-facfd922d813/0/FB3AAFE074610C85854BE75082EC16E60A126879.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FB3AAFE074610C85854BE75082EC16E60A126879.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8165e481-5a79-4868-a4e4-facfd922d813/0/3130332e3135302e3135392e302f32342d3234203d3e20313430343331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.150.159.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:ed:01:a3:78:2f:fb:a0:5c:cd:4b:ed:0e:8e:6d:96:ab:09:
         12:2d:88:3d:38:78:b7:b8:f6:75:34:e2:36:55:30:f6:ed:8c:
         23:a8:21:e6:5a:5d:8e:c8:22:11:79:fc:da:9f:ab:1b:91:25:
         45:5d:ef:9c:c2:6e:d1:ea:8f:b2:f0:83:5e:c1:66:7d:22:c7:
         4f:b7:14:93:2a:b7:7f:e1:3c:a0:58:a6:07:4d:a3:eb:d9:31:
         4c:62:ac:40:b9:f8:81:ca:25:42:92:ad:ea:99:85:06:22:0c:
         b0:8d:14:b8:b5:6d:81:03:40:41:99:82:5a:b4:cf:35:1b:08:
         11:41:81:fa:a5:62:3d:04:b0:32:8d:46:1f:19:e1:df:63:20:
         a7:08:a9:69:55:4f:1a:38:ee:75:ae:ce:ea:4c:7b:64:af:6e:
         88:40:bd:4d:00:ef:23:f0:26:49:81:c5:b7:9b:dc:d0:1b:38:
         c3:d9:37:7e:67:48:69:c8:cc:85:d1:58:3c:9d:02:50:e2:69:
         40:ed:9b:0d:81:94:ab:f5:af:a7:8b:07:c7:98:f8:d8:e6:ec:
         ba:f4:3a:1b:da:9b:a7:f5:a8:6a:3a:82:df:fe:62:f5:6b:8d:
         15:0d:7f:c6:2b:30:8c:10:7e:e2:98:b2:70:36:cc:f2:d2:8a:
         87:59:ec:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:12:42 2026 by rpki-client