Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/3130332e3130332e3133382e302f32342d3234203d3e20313338383138.roa
File:                     3130332e3130332e3133382e302f32342d3234203d3e20313338383138.roa (raw, json)
Hash identifier:          CdigtV0KRumHac+YdmlkgGQc8Ljd+odm2u1CZQ1CWcY=
Subject key identifier:   08:9B:D4:6E:CC:D8:E8:95:13:D0:45:F8:9C:5D:5C:A1:FA:F2:DF:40
Certificate issuer:       /CN=084550E9619FF5ABD20864D9A6383053B59BF91E
Certificate serial:       30AD9CB8A4004C382AEB2D9513CC8EAB58DF842E
Authority key identifier: 08:45:50:E9:61:9F:F5:AB:D2:08:64:D9:A6:38:30:53:B5:9B:F9:1E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/084550E9619FF5ABD20864D9A6383053B59BF91E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/3130332e3130332e3133382e302f32342d3234203d3e20313338383138.roa
Signing time:             Fri 17 Apr 2026 06:00:01 +0000
ROA not before:           Fri 17 Apr 2026 05:55:01 +0000
ROA not after:            Fri 16 Apr 2027 06:00:01 +0000
asID:                     138818
IP address blocks:        103.103.138.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/084550E9619FF5ABD20864D9A6383053B59BF91E.crl
                          rsync://repo-rpki.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/084550E9619FF5ABD20864D9A6383053B59BF91E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/084550E9619FF5ABD20864D9A6383053B59BF91E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 20 Apr 2026 19:09:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:ad:9c:b8:a4:00:4c:38:2a:eb:2d:95:13:cc:8e:ab:58:df:84:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=084550E9619FF5ABD20864D9A6383053B59BF91E
        Validity
            Not Before: Apr 17 05:55:01 2026 GMT
            Not After : Apr 16 06:00:01 2027 GMT
        Subject: CN=089BD46ECCD8E89513D045F89C5D5CA1FAF2DF40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:16:d2:54:3d:1a:22:8f:67:8a:6f:2c:6f:83:
                    7c:97:01:3f:50:ac:19:b5:34:f3:56:37:30:a2:b4:
                    82:13:7c:51:1b:02:31:fe:66:4c:78:f0:4c:7e:81:
                    ba:8a:e5:bf:8e:d6:69:8c:79:36:21:f5:e8:f6:72:
                    37:a6:36:20:d1:7f:3c:bd:a9:12:c4:6a:15:2f:9d:
                    3f:f4:92:44:ad:a8:af:99:43:d0:1e:af:e6:7d:07:
                    0f:ba:16:15:d1:a1:d9:96:73:21:8d:a8:b3:ec:66:
                    39:7f:2c:62:b9:1a:19:ab:cb:e7:76:83:67:d5:aa:
                    cb:55:9c:d1:cb:60:6c:52:2a:d7:3e:4f:ab:16:45:
                    7d:f6:2f:02:8e:08:77:b1:54:9f:1d:d2:07:1c:1c:
                    19:a1:85:c8:01:21:7d:40:0c:5c:58:a6:6d:3f:f9:
                    58:00:eb:4f:4d:15:2f:19:71:3b:5b:b3:d9:9b:1c:
                    37:a0:2e:83:f3:bd:dc:ce:2d:fb:de:99:f7:e5:c4:
                    40:b0:ca:b8:93:45:65:bd:f1:c7:85:78:1b:ad:9d:
                    94:de:a0:08:79:9a:ea:f1:78:7f:84:98:bb:2d:9f:
                    f6:1d:43:d3:4d:9e:3a:b8:25:ce:ba:c0:60:88:01:
                    09:d5:8a:b7:89:ac:6a:f9:04:d3:18:2a:42:89:56:
                    68:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:9B:D4:6E:CC:D8:E8:95:13:D0:45:F8:9C:5D:5C:A1:FA:F2:DF:40
            X509v3 Authority Key Identifier:
                keyid:08:45:50:E9:61:9F:F5:AB:D2:08:64:D9:A6:38:30:53:B5:9B:F9:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/084550E9619FF5ABD20864D9A6383053B59BF91E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/084550E9619FF5ABD20864D9A6383053B59BF91E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/3130332e3130332e3133382e302f32342d3234203d3e20313338383138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.103.138.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:cf:b1:62:17:fd:da:35:5d:11:2b:96:6a:3a:04:63:02:7c:
         9c:1b:25:80:81:70:3d:97:61:03:59:04:07:d4:55:af:20:c4:
         7c:1b:c3:2c:03:bd:fb:a7:22:3a:53:6b:f0:f9:82:c3:ab:6b:
         85:dc:17:31:e6:8b:37:6c:4e:e5:77:e0:48:2d:bf:2b:c2:03:
         9b:60:9f:1b:dc:c6:e1:f5:37:c8:90:3b:44:05:bd:64:6b:2e:
         95:a7:bc:a7:40:14:66:6f:15:3b:28:3b:68:7d:dc:15:24:7e:
         75:f2:83:78:44:a4:81:3d:12:ff:05:b3:ff:e9:b3:50:04:76:
         7c:fe:36:0c:ef:64:f1:45:da:d7:ce:34:9c:11:ba:54:71:de:
         d4:6b:d9:5b:3b:2a:91:b3:78:02:06:d7:b2:96:de:38:71:e5:
         4f:23:42:6a:ca:88:73:60:f4:9f:b9:7b:fd:20:b2:76:01:e0:
         56:06:8f:de:35:27:e8:cf:0d:e2:5e:75:af:01:23:a3:34:a2:
         0b:5e:f4:87:ca:bf:d4:c5:84:c6:c6:6f:23:bc:45:76:2a:1c:
         10:a2:0e:ad:d1:25:5a:5f:06:84:7d:9b:a8:2c:23:92:5c:d4:
         89:3a:1d:fd:d5:ab:ff:3b:0d:5d:af:f2:de:ec:30:8b:cc:24:
         4a:99:43:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 05:01:48 2026 by rpki-client