Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/89a40089-6041-45ed-8e44-a997c8acf480/0/3130332e3132362e3233332e302f32342d3234203d3e20313530393738.roa
File:                     3130332e3132362e3233332e302f32342d3234203d3e20313530393738.roa (raw, json)
Hash identifier:          sxrk5CDSoBL56Ttog6hwyxfrtBwflddJUqnqqBhlagE=
Subject key identifier:   3D:B5:34:83:99:E5:39:84:12:69:1C:C0:05:20:E2:7F:AF:C5:57:C5
Certificate issuer:       /CN=98906779AB8F30762B65B3E6AD7F48326A08605E
Certificate serial:       274C4DFDF216310608B8040B07CF0E13FD86BE1D
Authority key identifier: 98:90:67:79:AB:8F:30:76:2B:65:B3:E6:AD:7F:48:32:6A:08:60:5E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98906779AB8F30762B65B3E6AD7F48326A08605E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/89a40089-6041-45ed-8e44-a997c8acf480/0/3130332e3132362e3233332e302f32342d3234203d3e20313530393738.roa
Signing time:             Sat 14 Feb 2026 09:00:00 +0000
ROA not before:           Sat 14 Feb 2026 08:55:00 +0000
ROA not after:            Sat 13 Feb 2027 09:00:00 +0000
asID:                     150978
IP address blocks:        103.126.233.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/89a40089-6041-45ed-8e44-a997c8acf480/0/98906779AB8F30762B65B3E6AD7F48326A08605E.crl
                          rsync://repo-rpki.idnic.net/repo/89a40089-6041-45ed-8e44-a997c8acf480/0/98906779AB8F30762B65B3E6AD7F48326A08605E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98906779AB8F30762B65B3E6AD7F48326A08605E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Mar 2026 06:31:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:4c:4d:fd:f2:16:31:06:08:b8:04:0b:07:cf:0e:13:fd:86:be:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98906779AB8F30762B65B3E6AD7F48326A08605E
        Validity
            Not Before: Feb 14 08:55:00 2026 GMT
            Not After : Feb 13 09:00:00 2027 GMT
        Subject: CN=3DB5348399E5398412691CC00520E27FAFC557C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:a3:8f:4a:de:15:19:95:ad:65:30:a6:41:26:
                    13:d0:25:c8:14:3b:48:7f:84:14:d2:77:38:f1:7b:
                    a3:7d:23:aa:c5:60:74:7b:63:b9:38:c6:03:31:ac:
                    07:64:d2:c4:d2:5b:22:c2:ee:51:3c:3e:b7:bc:0b:
                    56:41:6d:74:ce:c1:cc:c9:d4:30:b4:21:2f:8c:f4:
                    ca:00:58:d7:4b:74:0e:91:af:19:c0:53:b1:36:2c:
                    32:4e:b0:29:5c:56:db:2b:d1:73:69:95:92:f6:a4:
                    25:a9:ea:be:fb:b7:56:e0:98:dd:85:f3:c6:2b:e6:
                    33:c5:b0:6e:9e:b1:f9:3f:cb:db:18:d8:c0:ea:e9:
                    d9:92:df:22:ee:7b:9d:de:92:c1:46:fd:59:11:d2:
                    79:57:79:8c:a7:aa:f3:f6:66:e2:a3:1b:bd:0b:ac:
                    42:4a:19:31:22:15:24:54:0f:e0:ab:ac:11:8e:de:
                    d2:3c:dd:b3:6d:5b:25:5c:ce:63:4c:06:c5:13:27:
                    1d:b0:a0:91:72:5e:27:c2:ae:ec:f9:53:cb:c4:b7:
                    3b:42:1f:e8:b8:f7:3d:a1:3c:a9:e1:ec:50:5c:9c:
                    c4:35:71:49:8c:8d:c7:08:35:99:0c:29:7d:eb:fd:
                    96:b9:cd:1e:4a:21:6e:62:1b:28:ae:74:32:83:40:
                    79:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:B5:34:83:99:E5:39:84:12:69:1C:C0:05:20:E2:7F:AF:C5:57:C5
            X509v3 Authority Key Identifier:
                keyid:98:90:67:79:AB:8F:30:76:2B:65:B3:E6:AD:7F:48:32:6A:08:60:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/89a40089-6041-45ed-8e44-a997c8acf480/0/98906779AB8F30762B65B3E6AD7F48326A08605E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98906779AB8F30762B65B3E6AD7F48326A08605E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/89a40089-6041-45ed-8e44-a997c8acf480/0/3130332e3132362e3233332e302f32342d3234203d3e20313530393738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.126.233.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b7:16:2f:c8:2f:ec:d8:3c:63:3e:c2:bc:9e:d5:97:f1:4c:96:
         4a:f0:96:08:5d:5d:83:a2:0a:f0:34:ea:7a:27:49:5e:d7:ca:
         6c:35:f3:71:3b:5c:65:f8:dd:fa:0e:37:66:f0:1d:1e:ec:4e:
         7d:8d:62:8e:17:f0:2e:14:bd:c3:1f:c2:f2:f0:cf:7a:5c:da:
         01:0d:e8:d6:24:5b:cf:b2:70:e4:76:d6:52:e3:15:92:18:25:
         90:01:8b:e2:96:e3:d2:21:a6:c8:ce:87:12:a0:e5:32:63:bc:
         91:7d:4c:8b:94:55:3d:02:a9:ed:06:3e:24:e5:ba:fd:9b:91:
         aa:7a:bf:48:63:98:2e:88:44:26:1c:aa:7b:32:d1:8c:ef:c9:
         a3:51:8b:8d:fc:95:51:5d:c7:28:5c:a7:b6:47:9d:e0:a5:c8:
         7e:13:ca:81:13:ff:1a:69:69:7c:da:c4:21:55:3a:e4:26:44:
         dd:f6:0d:b5:ed:9c:ee:98:66:36:4d:dd:8b:e3:bb:b7:a1:e3:
         37:0c:67:1b:fe:2f:af:38:cd:45:2d:43:ab:9d:d4:39:50:ea:
         00:96:f8:d2:3f:2f:f3:9b:d5:99:3a:79:cf:08:95:02:3f:76:
         f5:54:ad:b6:8c:84:1e:b4:15:5c:16:6f:4a:5a:8a:d4:37:3f:
         43:a2:4e:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:49:25 2026 by rpki-client