Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/927a6f34-1b6e-4e92-b2d2-0b9301a666a5/0/3130332e3234372e31322e302f32342d3234203d3e203535363935.roa
File:                     3130332e3234372e31322e302f32342d3234203d3e203535363935.roa (raw, json)
Hash identifier:          fC+4pLH4upbRJiJYtSpDhyvCOyqsm8KVDJLsLZlAJfs=
Subject key identifier:   FA:30:E3:87:80:22:46:B5:3A:DA:BC:A6:C5:10:83:3E:CE:12:E6:49
Certificate issuer:       /CN=8DEDABAD21AD1A6BEF27E91FCEE30465563DFE72
Certificate serial:       55A75975F248580F4DD580298591D8C18D72F343
Authority key identifier: 8D:ED:AB:AD:21:AD:1A:6B:EF:27:E9:1F:CE:E3:04:65:56:3D:FE:72
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DEDABAD21AD1A6BEF27E91FCEE30465563DFE72.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/927a6f34-1b6e-4e92-b2d2-0b9301a666a5/0/3130332e3234372e31322e302f32342d3234203d3e203535363935.roa
Signing time:             Mon 23 Feb 2026 23:50:04 +0000
ROA not before:           Mon 23 Feb 2026 23:45:04 +0000
ROA not after:            Mon 22 Feb 2027 23:50:04 +0000
asID:                     55695
IP address blocks:        103.247.12.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/927a6f34-1b6e-4e92-b2d2-0b9301a666a5/0/8DEDABAD21AD1A6BEF27E91FCEE30465563DFE72.crl
                          rsync://repo-rpki.idnic.net/repo/927a6f34-1b6e-4e92-b2d2-0b9301a666a5/0/8DEDABAD21AD1A6BEF27E91FCEE30465563DFE72.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DEDABAD21AD1A6BEF27E91FCEE30465563DFE72.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Mar 2026 12:51:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:a7:59:75:f2:48:58:0f:4d:d5:80:29:85:91:d8:c1:8d:72:f3:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8DEDABAD21AD1A6BEF27E91FCEE30465563DFE72
        Validity
            Not Before: Feb 23 23:45:04 2026 GMT
            Not After : Feb 22 23:50:04 2027 GMT
        Subject: CN=FA30E387802246B53ADABCA6C510833ECE12E649
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:34:36:e2:8e:1f:d4:e9:58:3d:38:ce:13:7f:
                    40:00:ea:29:28:d9:c6:1b:7a:f8:08:c7:ac:c6:15:
                    dd:0d:e1:0e:23:4a:d4:17:9a:8b:1a:7c:1f:98:e5:
                    d6:31:1b:31:b5:ff:05:c1:74:b1:94:5c:a0:0a:47:
                    b4:26:fd:74:cf:bf:2d:9a:31:f4:68:54:4f:85:d9:
                    fd:f1:1c:c8:79:94:17:62:1e:73:06:ea:78:e1:0f:
                    3e:94:f2:4a:1e:fa:b2:0a:63:bc:36:88:c8:1a:62:
                    4b:d5:33:fd:35:37:19:2b:8e:2c:32:8e:18:0a:db:
                    e4:06:74:42:be:38:79:63:9c:b5:2a:e1:1a:7e:78:
                    6d:ee:03:24:4e:b6:ed:f6:b9:c5:88:77:4d:eb:84:
                    8f:5f:16:f0:5a:5a:b2:de:d9:c7:29:ca:e7:ed:48:
                    b4:4f:83:a6:ac:e7:df:b7:0c:e1:8b:9e:b8:89:ad:
                    63:17:a2:69:ac:3b:88:0a:28:15:96:b1:04:cc:e2:
                    5e:56:a6:08:c3:c2:7f:65:ee:91:46:60:3d:eb:56:
                    e7:eb:81:92:4d:47:b1:89:01:0a:86:b3:fa:bc:18:
                    9f:bc:85:a5:29:27:c5:cc:38:82:83:f5:bd:0b:b9:
                    9a:67:2a:75:0c:d2:a9:9a:ad:12:60:9c:b1:11:b9:
                    09:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:30:E3:87:80:22:46:B5:3A:DA:BC:A6:C5:10:83:3E:CE:12:E6:49
            X509v3 Authority Key Identifier:
                keyid:8D:ED:AB:AD:21:AD:1A:6B:EF:27:E9:1F:CE:E3:04:65:56:3D:FE:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/927a6f34-1b6e-4e92-b2d2-0b9301a666a5/0/8DEDABAD21AD1A6BEF27E91FCEE30465563DFE72.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DEDABAD21AD1A6BEF27E91FCEE30465563DFE72.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/927a6f34-1b6e-4e92-b2d2-0b9301a666a5/0/3130332e3234372e31322e302f32342d3234203d3e203535363935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.247.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:18:9b:b1:6a:59:9f:88:df:5e:0f:72:98:99:a8:9f:a3:3b:
         c0:4c:60:34:7b:cf:1d:a5:a7:22:3e:52:53:66:c2:d8:b0:6a:
         58:ca:28:22:bd:46:1d:6e:75:aa:e0:88:a9:63:52:a0:6b:da:
         0b:21:b3:f9:c6:6b:f0:3d:a1:71:ce:7c:19:24:f2:c0:3f:81:
         00:a6:51:23:4e:b7:1b:f8:b6:ee:fc:82:d8:c1:c8:e4:f3:bb:
         71:7e:ac:d9:d7:62:4f:85:5b:f2:90:15:88:00:3f:47:61:ea:
         e4:43:df:09:d0:31:39:1f:95:18:be:d3:ff:a9:06:ae:f9:60:
         6f:e6:53:24:5f:59:7b:58:e8:38:bb:d9:dc:e6:d9:04:0d:41:
         d5:89:fc:23:e8:28:7c:85:9f:7f:66:d7:e9:b5:5f:a8:a8:fc:
         82:be:fe:b9:10:76:28:c9:e0:14:eb:59:c7:b0:5d:82:92:e7:
         34:85:0b:03:76:dc:4f:f7:fa:b7:53:25:45:fe:8f:23:51:76:
         28:15:73:aa:2d:0f:1a:95:97:6a:3d:a5:3b:cf:2c:96:2a:f3:
         a0:fa:bd:69:d0:8f:07:c5:f2:e6:a7:fe:c8:99:85:ee:87:db:
         24:61:13:95:b5:15:fd:7a:b2:51:9f:dd:c1:d9:fa:1b:25:22:
         a9:44:10:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:31:20 2026 by rpki-client