Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/9497d828-984a-43f1-9b6e-a01ba21bb518/0/3130332e352e3134392e302f32342d3234203d3e20313439393338.roa
File:                     3130332e352e3134392e302f32342d3234203d3e20313439393338.roa (raw, json)
Hash identifier:          S+FUnSTLpAzf0sQY9/1pfDrnx0eDuyk5g6lfSEGXmEs=
Subject key identifier:   51:9C:EC:DF:71:DC:9D:C0:37:71:34:E1:27:2E:7C:5F:CF:55:8D:B3
Certificate issuer:       /CN=B8E467F9AD3F6AB1EEF3A9099A390231708C790A
Certificate serial:       078D1E4A8D35205478058B0C6AFF05434AB1C053
Authority key identifier: B8:E4:67:F9:AD:3F:6A:B1:EE:F3:A9:09:9A:39:02:31:70:8C:79:0A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8E467F9AD3F6AB1EEF3A9099A390231708C790A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/9497d828-984a-43f1-9b6e-a01ba21bb518/0/3130332e352e3134392e302f32342d3234203d3e20313439393338.roa
Signing time:             Sat 04 Apr 2026 08:00:00 +0000
ROA not before:           Sat 04 Apr 2026 07:55:00 +0000
ROA not after:            Sat 03 Apr 2027 08:00:00 +0000
asID:                     149938
IP address blocks:        103.5.149.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/9497d828-984a-43f1-9b6e-a01ba21bb518/0/B8E467F9AD3F6AB1EEF3A9099A390231708C790A.crl
                          rsync://repo-rpki.idnic.net/repo/9497d828-984a-43f1-9b6e-a01ba21bb518/0/B8E467F9AD3F6AB1EEF3A9099A390231708C790A.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8E467F9AD3F6AB1EEF3A9099A390231708C790A.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 21 Apr 2026 09:53:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:8d:1e:4a:8d:35:20:54:78:05:8b:0c:6a:ff:05:43:4a:b1:c0:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8E467F9AD3F6AB1EEF3A9099A390231708C790A
        Validity
            Not Before: Apr  4 07:55:00 2026 GMT
            Not After : Apr  3 08:00:00 2027 GMT
        Subject: CN=519CECDF71DC9DC0377134E1272E7C5FCF558DB3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:47:a9:95:b7:25:19:11:12:ca:18:ba:b9:57:
                    1f:7a:8c:02:2c:f9:30:3e:c1:7d:2d:64:b8:a1:83:
                    fb:04:25:2c:5f:b8:73:81:7c:6e:f9:a7:9b:6a:f4:
                    d0:1f:db:d2:b5:17:7b:a9:5a:5d:cb:83:ad:b1:57:
                    ec:1e:1b:60:b2:01:65:52:09:81:5d:26:13:d6:4a:
                    fa:86:da:66:40:5d:be:28:fc:b3:d6:e7:cb:33:a4:
                    1a:38:fc:df:57:48:ce:e7:19:b1:d6:ee:05:b4:e6:
                    f4:d1:8f:a1:09:cc:d0:d7:7d:e0:eb:f3:0e:c5:f7:
                    45:fb:ae:5b:23:b7:b2:4c:9e:dc:46:cd:d7:83:e4:
                    ca:88:e8:4b:3c:e2:32:13:c2:8d:64:71:9d:27:39:
                    46:42:6a:fb:35:f8:de:3f:39:6f:87:43:a5:12:8f:
                    1b:3c:78:ea:af:a6:fb:41:1b:16:72:52:96:7e:f7:
                    2e:65:74:59:59:c2:ba:74:c8:38:6a:01:d6:14:cf:
                    8d:58:6b:47:5e:9a:50:fc:a1:14:d4:88:50:04:b1:
                    7a:6a:a8:20:0a:7e:6d:e0:0d:a0:74:02:9a:c1:74:
                    73:b8:27:0c:de:68:78:a9:68:fd:75:51:6d:c1:74:
                    c6:e9:1a:4d:86:e4:fb:25:c0:5d:f6:8b:94:b7:41:
                    8e:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:9C:EC:DF:71:DC:9D:C0:37:71:34:E1:27:2E:7C:5F:CF:55:8D:B3
            X509v3 Authority Key Identifier:
                keyid:B8:E4:67:F9:AD:3F:6A:B1:EE:F3:A9:09:9A:39:02:31:70:8C:79:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/9497d828-984a-43f1-9b6e-a01ba21bb518/0/B8E467F9AD3F6AB1EEF3A9099A390231708C790A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8E467F9AD3F6AB1EEF3A9099A390231708C790A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9497d828-984a-43f1-9b6e-a01ba21bb518/0/3130332e352e3134392e302f32342d3234203d3e20313439393338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.5.149.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:ce:f3:3a:d9:d4:15:a9:f8:f1:1e:01:8e:d4:bf:bd:7f:be:
         a0:68:1c:97:b7:e1:59:f9:7f:f6:1d:96:5d:18:72:7f:87:d7:
         f3:71:24:15:18:cc:81:fb:70:a8:41:6e:55:e0:48:44:4d:db:
         e8:25:48:b5:9e:87:e6:85:f2:06:45:d4:86:83:cf:1f:b5:80:
         52:d0:66:01:27:13:67:e1:fc:93:11:95:64:8b:eb:6a:f2:3d:
         f6:a7:0a:e3:80:23:91:26:c0:84:f8:e4:6f:25:1f:d1:e9:9d:
         3e:0b:ba:44:d3:08:cb:da:ca:63:c8:05:db:1c:6d:2f:d4:86:
         15:54:41:e8:04:85:e1:3b:8f:ba:7c:38:f1:a4:9e:a6:03:1e:
         b4:5a:c5:43:b6:e2:64:16:b2:db:ac:ab:20:5c:4d:d8:97:60:
         64:b2:37:c9:30:50:7b:81:52:71:a4:9d:a1:b4:97:a9:9e:71:
         4a:8f:79:90:ec:c2:45:e5:c4:24:36:99:d1:02:6e:51:35:e3:
         73:00:14:3b:3c:8a:2c:c8:3a:14:63:3a:af:24:57:4c:bb:65:
         1e:c5:03:dd:e5:b8:2b:fc:79:24:44:ee:c7:18:fa:0d:15:47:
         3f:43:9e:06:c0:ca:8f:f3:16:82:42:01:6c:89:03:b0:e7:f6:
         b0:71:63:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 14:07:54 2026 by rpki-client