Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/3130332e3130332e3133372e302f32342d3234203d3e203233363739.roa
File:                     3130332e3130332e3133372e302f32342d3234203d3e203233363739.roa (raw, json)
Hash identifier:          l4GcivfXw6SwZo56pMYeMVHqpfDialpaVG+j23PsPTc=
Subject key identifier:   84:93:F3:57:61:07:1A:30:72:44:C1:3A:83:5E:34:66:83:A8:3E:A9
Certificate issuer:       /CN=084550E9619FF5ABD20864D9A6383053B59BF91E
Certificate serial:       4A2DD36A4BF07E2811AA27CC698B545875AC2D0B
Authority key identifier: 08:45:50:E9:61:9F:F5:AB:D2:08:64:D9:A6:38:30:53:B5:9B:F9:1E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/084550E9619FF5ABD20864D9A6383053B59BF91E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/3130332e3130332e3133372e302f32342d3234203d3e203233363739.roa
Signing time:             Fri 17 Apr 2026 06:00:02 +0000
ROA not before:           Fri 17 Apr 2026 05:55:02 +0000
ROA not after:            Fri 16 Apr 2027 06:00:02 +0000
asID:                     23679
IP address blocks:        103.103.137.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/084550E9619FF5ABD20864D9A6383053B59BF91E.crl
                          rsync://repo-rpki.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/084550E9619FF5ABD20864D9A6383053B59BF91E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/084550E9619FF5ABD20864D9A6383053B59BF91E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 20 Apr 2026 19:09:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:2d:d3:6a:4b:f0:7e:28:11:aa:27:cc:69:8b:54:58:75:ac:2d:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=084550E9619FF5ABD20864D9A6383053B59BF91E
        Validity
            Not Before: Apr 17 05:55:02 2026 GMT
            Not After : Apr 16 06:00:02 2027 GMT
        Subject: CN=8493F35761071A307244C13A835E346683A83EA9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:b9:a1:22:c7:bc:3b:ff:63:1f:9f:a1:e4:6f:
                    5c:3f:5b:d0:11:e4:3a:1d:a6:fb:80:37:19:2d:20:
                    a3:81:67:11:9b:d5:dc:8a:54:b3:ec:63:51:51:29:
                    e9:a0:bd:c4:9d:b0:c2:97:d4:d6:1c:af:b0:79:4e:
                    38:95:5b:aa:db:06:3c:4c:01:ea:0e:06:6e:a7:11:
                    f2:60:45:49:dc:f1:b5:1c:d4:47:c4:f1:f0:31:96:
                    b5:98:35:8a:2a:d0:fb:85:61:2c:b9:a2:28:47:79:
                    20:d0:aa:78:24:6e:e0:9b:bb:57:fa:8f:1e:9e:c3:
                    e1:6a:f4:c8:55:6d:a4:00:06:b5:bb:34:14:6f:fd:
                    2c:3b:36:34:82:3d:ae:14:06:4f:95:ad:77:04:25:
                    c7:9e:1a:4c:ff:24:dc:8c:72:64:2c:28:0e:bc:04:
                    3f:28:80:c8:5f:7d:38:e1:ec:4e:32:a0:57:6e:00:
                    6e:c2:5d:6e:d9:e6:44:e6:1b:11:8b:d7:d0:ac:0b:
                    64:c9:e0:19:b1:35:42:bb:8b:27:40:28:18:94:7d:
                    0e:00:2e:f8:32:dc:dc:7c:d2:34:b3:64:c0:e3:27:
                    76:e3:56:91:49:66:37:40:14:d0:66:31:19:3b:a6:
                    77:35:84:7a:21:23:9a:9e:7a:46:f6:14:bc:9a:01:
                    54:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:93:F3:57:61:07:1A:30:72:44:C1:3A:83:5E:34:66:83:A8:3E:A9
            X509v3 Authority Key Identifier:
                keyid:08:45:50:E9:61:9F:F5:AB:D2:08:64:D9:A6:38:30:53:B5:9B:F9:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/084550E9619FF5ABD20864D9A6383053B59BF91E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/084550E9619FF5ABD20864D9A6383053B59BF91E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/3130332e3130332e3133372e302f32342d3234203d3e203233363739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.103.137.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:a5:e6:85:fd:a3:65:b7:cd:fb:b1:00:1f:60:9f:3f:cd:dc:
         3b:0f:f8:f6:69:41:8f:09:b6:3e:c6:0e:01:9f:5c:18:3c:f9:
         d2:70:c1:d4:3d:4b:eb:d6:45:95:fd:09:ea:02:84:e2:5b:67:
         dc:0d:fa:fe:e5:cf:bb:81:59:92:e1:c3:10:da:52:7e:0a:55:
         fa:3e:40:8a:ef:42:87:5b:39:fa:29:cd:ab:94:f9:de:0f:5f:
         ff:da:7a:b1:74:a6:4a:51:94:e4:33:e6:18:ec:a7:a2:f8:79:
         ff:75:ba:d8:b9:11:5f:5d:4c:7c:9e:32:89:eb:f9:19:7e:f6:
         a0:8d:a4:6f:53:77:32:87:38:e9:91:b5:e6:8c:b7:8a:64:56:
         7c:1e:45:8c:95:bc:46:8d:5e:29:27:3f:b1:9c:c1:ac:4f:0f:
         7a:c9:3d:62:51:d0:67:63:e3:91:90:32:dd:e0:2e:4e:30:12:
         5f:ba:49:80:62:43:ee:19:09:21:99:99:79:42:d5:b5:05:a6:
         9e:af:c5:47:cb:f3:d5:23:f4:ef:11:da:07:32:a4:0e:fb:f3:
         79:be:47:7a:99:48:f6:29:77:8a:3c:f5:ba:a5:e9:b0:2b:54:
         7a:fc:33:f2:13:d6:44:17:f0:f0:13:75:63:f7:bb:4a:94:cc:
         e9:b4:55:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:50:29 2026 by rpki-client