Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/89a40089-6041-45ed-8e44-a997c8acf480/0/3130332e3132362e3233322e302f32332d3233203d3e20313530393738.roa
File:                     3130332e3132362e3233322e302f32332d3233203d3e20313530393738.roa (raw, json)
Hash identifier:          7aAnLwLyoxNgqlWxFpWfDVj1GSIKBYbbGGdGC77eU1M=
Subject key identifier:   07:06:39:39:7E:C7:C8:4D:E5:A3:CC:30:07:C9:66:3F:54:1C:1F:63
Certificate issuer:       /CN=98906779AB8F30762B65B3E6AD7F48326A08605E
Certificate serial:       4CAE421B660882A0A7C050309A47227527572343
Authority key identifier: 98:90:67:79:AB:8F:30:76:2B:65:B3:E6:AD:7F:48:32:6A:08:60:5E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98906779AB8F30762B65B3E6AD7F48326A08605E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/89a40089-6041-45ed-8e44-a997c8acf480/0/3130332e3132362e3233322e302f32332d3233203d3e20313530393738.roa
Signing time:             Sat 14 Feb 2026 09:00:01 +0000
ROA not before:           Sat 14 Feb 2026 08:55:01 +0000
ROA not after:            Sat 13 Feb 2027 09:00:01 +0000
asID:                     150978
IP address blocks:        103.126.232.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/89a40089-6041-45ed-8e44-a997c8acf480/0/98906779AB8F30762B65B3E6AD7F48326A08605E.crl
                          rsync://repo-rpki.idnic.net/repo/89a40089-6041-45ed-8e44-a997c8acf480/0/98906779AB8F30762B65B3E6AD7F48326A08605E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98906779AB8F30762B65B3E6AD7F48326A08605E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Mar 2026 06:31:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:ae:42:1b:66:08:82:a0:a7:c0:50:30:9a:47:22:75:27:57:23:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98906779AB8F30762B65B3E6AD7F48326A08605E
        Validity
            Not Before: Feb 14 08:55:01 2026 GMT
            Not After : Feb 13 09:00:01 2027 GMT
        Subject: CN=070639397EC7C84DE5A3CC3007C9663F541C1F63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:c8:43:58:f9:15:91:bd:c5:cb:30:73:6a:fd:
                    1c:83:2a:90:b3:61:66:07:11:b8:eb:89:8a:72:7c:
                    65:34:7d:66:26:e2:53:be:73:23:5c:be:a5:1b:56:
                    3e:8a:75:fd:03:09:94:21:6a:19:74:95:5b:8f:3e:
                    0b:76:09:8c:bc:d6:90:b2:f5:c3:f5:0c:af:42:7e:
                    79:20:4d:20:c4:08:5e:9b:cf:18:45:a8:55:67:32:
                    4d:d8:94:45:41:58:80:93:89:93:d0:e5:75:a1:e3:
                    53:6d:f8:f0:22:52:89:3d:2b:fd:68:ed:29:82:46:
                    1c:99:67:ea:82:ba:4e:2e:5a:c3:fd:9a:f4:ff:d5:
                    6d:7c:5e:9b:e8:ac:91:8e:77:00:83:3e:af:cf:2e:
                    bb:59:90:97:f5:ab:d7:cd:a3:fe:9a:69:39:ae:f6:
                    0f:14:d8:24:86:29:c5:1d:49:c3:c6:a5:ac:cf:1b:
                    a4:90:be:bb:19:11:bb:9e:d7:e7:be:65:31:43:10:
                    cb:fa:0a:fc:48:55:b0:60:cf:39:03:d9:80:6b:eb:
                    ee:83:9b:ee:c7:9f:50:bd:42:ad:01:f1:07:82:e2:
                    5a:62:f0:f3:f0:67:5c:60:e3:e0:b8:7f:57:ba:12:
                    55:7e:62:a9:c9:f2:6a:e0:e3:01:6b:bd:48:96:6e:
                    6a:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:06:39:39:7E:C7:C8:4D:E5:A3:CC:30:07:C9:66:3F:54:1C:1F:63
            X509v3 Authority Key Identifier:
                keyid:98:90:67:79:AB:8F:30:76:2B:65:B3:E6:AD:7F:48:32:6A:08:60:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/89a40089-6041-45ed-8e44-a997c8acf480/0/98906779AB8F30762B65B3E6AD7F48326A08605E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98906779AB8F30762B65B3E6AD7F48326A08605E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/89a40089-6041-45ed-8e44-a997c8acf480/0/3130332e3132362e3233322e302f32332d3233203d3e20313530393738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.126.232.0/23

    Signature Algorithm: sha256WithRSAEncryption
         03:18:09:9c:5c:17:44:d7:1c:1d:20:f7:3d:45:a6:e0:18:60:
         53:51:31:f4:0f:c1:c8:dc:65:be:98:fc:ef:d1:2b:21:84:ae:
         7e:24:a8:1f:bd:fb:4b:05:33:8a:08:e5:ec:83:89:0c:6e:4d:
         38:54:29:9d:7f:5b:06:1c:b6:ad:0c:2f:1b:4d:a2:9a:9c:08:
         3e:d5:22:e8:c7:b1:38:11:96:27:17:1e:b6:fa:b7:c5:09:9c:
         3e:97:0c:3a:1e:d7:d6:76:c6:07:91:05:7e:b7:d2:9c:23:39:
         36:0a:63:6d:e7:bd:ad:ac:eb:c8:7d:63:86:b9:64:a6:ab:9d:
         eb:79:e7:32:a1:c1:b7:be:06:62:4c:a0:52:04:a2:ca:72:8b:
         89:80:b0:9d:47:0b:0e:22:a4:f1:6c:64:9f:90:c4:ff:ca:49:
         2a:f1:36:25:c4:66:bb:97:c9:e8:80:a5:7b:8e:8d:4c:69:9c:
         7e:d9:64:1d:06:c4:fc:67:71:45:fb:25:47:7e:a1:2a:92:e7:
         d8:78:e9:b3:98:32:b5:79:32:11:4d:d2:90:3b:2b:fb:ad:87:
         43:f5:6c:06:03:96:f0:20:90:7a:87:34:aa:a2:1b:a4:64:1b:
         48:b1:cc:fa:0c:95:0a:37:2c:59:42:c4:bc:82:c6:8a:7a:ee:
         1c:62:18:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:05:59 2026 by rpki-client