Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/949c8680-bd0f-4a4f-996d-2102a0535374/0/3130332e3133322e3233372e302f32342d3234203d3e20313338313239.roa
File:                     3130332e3133322e3233372e302f32342d3234203d3e20313338313239.roa (raw, json)
Hash identifier:          4jYUGHzgqlt6RurnGux/NFBAQbNpobmY9uiPuWWXUgU=
Subject key identifier:   B3:B4:11:D2:E0:46:3A:66:92:8A:25:CA:7D:56:B3:97:56:9B:AA:34
Certificate issuer:       /CN=F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766
Certificate serial:       204110F50453AE66CB901970BDF5820389ACA238
Authority key identifier: F5:58:D9:AA:4E:66:D7:B6:E4:CB:29:EC:87:79:53:D3:ED:6C:D7:66
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/949c8680-bd0f-4a4f-996d-2102a0535374/0/3130332e3133322e3233372e302f32342d3234203d3e20313338313239.roa
Signing time:             Mon 02 Feb 2026 10:00:44 +0000
ROA not before:           Mon 02 Feb 2026 09:55:44 +0000
ROA not after:            Mon 01 Feb 2027 10:00:44 +0000
asID:                     138129
IP address blocks:        103.132.237.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/949c8680-bd0f-4a4f-996d-2102a0535374/0/F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.crl
                          rsync://repo-rpki.idnic.net/repo/949c8680-bd0f-4a4f-996d-2102a0535374/0/F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Mar 2026 17:55:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:41:10:f5:04:53:ae:66:cb:90:19:70:bd:f5:82:03:89:ac:a2:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766
        Validity
            Not Before: Feb  2 09:55:44 2026 GMT
            Not After : Feb  1 10:00:44 2027 GMT
        Subject: CN=B3B411D2E0463A66928A25CA7D56B397569BAA34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:6d:a1:6f:d3:ee:94:be:64:98:71:09:8e:c7:
                    1a:95:d1:a3:a4:0d:bd:da:d5:d4:97:31:61:d8:16:
                    11:70:ed:02:6e:72:38:bd:08:66:4f:c5:b3:79:70:
                    7f:31:50:ea:65:79:b8:aa:6f:34:8d:57:23:0f:d4:
                    b8:d0:ba:d5:6f:3b:cb:f2:68:81:83:82:5a:6e:cf:
                    64:7d:08:a1:8d:b5:11:2f:5f:50:cd:a1:51:52:19:
                    99:ae:c8:2e:4a:a7:89:8f:ce:9d:8f:71:f7:3a:ab:
                    39:14:92:f8:d9:ac:df:4e:ce:d8:8f:ef:32:e9:bc:
                    c5:41:30:44:23:7d:69:19:fd:70:3a:21:2d:e5:df:
                    25:41:ee:a4:28:45:c0:93:3d:3f:71:4c:d4:1e:9c:
                    a6:35:16:05:46:13:41:24:35:51:b4:cc:dc:cf:6b:
                    9f:60:24:ef:ae:86:d6:64:f3:21:85:6b:9e:6c:2b:
                    43:d0:45:cf:33:9f:16:8d:7b:59:51:54:44:a6:c3:
                    b8:a3:da:d8:42:0e:63:fd:3b:da:54:4a:b3:67:4f:
                    40:b2:35:1b:68:98:d8:ff:12:fa:e2:ff:70:67:d4:
                    0d:21:73:bb:15:06:b6:e9:c5:59:c5:70:c8:80:1c:
                    90:d3:81:d4:b8:06:5b:6e:fb:57:0c:f4:33:fb:ae:
                    5e:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:B4:11:D2:E0:46:3A:66:92:8A:25:CA:7D:56:B3:97:56:9B:AA:34
            X509v3 Authority Key Identifier:
                keyid:F5:58:D9:AA:4E:66:D7:B6:E4:CB:29:EC:87:79:53:D3:ED:6C:D7:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/949c8680-bd0f-4a4f-996d-2102a0535374/0/F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/949c8680-bd0f-4a4f-996d-2102a0535374/0/3130332e3133322e3233372e302f32342d3234203d3e20313338313239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.132.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:02:5e:86:26:12:a5:65:29:87:75:2e:a6:86:2d:fd:3e:07:
         8c:74:a3:12:6a:fa:f6:c3:dc:8c:17:16:60:5f:21:d0:ee:d9:
         67:ca:eb:ce:7d:a3:71:fb:4a:18:f6:a0:a2:b8:1e:3b:8e:83:
         fa:6d:c0:5a:61:05:5d:35:81:5d:d4:a3:35:95:5e:94:04:63:
         14:c6:9a:20:0e:59:95:5a:9e:db:ed:7f:72:da:b1:2f:87:f0:
         39:18:1f:fc:a3:0c:0d:cc:93:74:da:7d:f1:97:4b:8e:ed:0d:
         82:cb:b0:0d:39:18:a6:07:53:29:7f:52:e0:5b:51:9e:0e:44:
         86:a1:a1:fd:94:2d:b6:4e:22:df:60:ee:92:86:d3:d6:b0:35:
         fe:9d:d1:58:18:c6:7a:7a:b0:3b:9d:c4:9a:ce:b6:3c:b7:72:
         cf:e8:e2:d6:73:27:64:1b:d1:18:11:bb:70:20:ae:0c:54:13:
         b9:0a:59:46:84:28:48:b7:1e:23:8b:95:a3:ca:b0:d9:10:58:
         1d:6a:91:05:8d:ec:f4:93:6e:00:cd:9b:65:d2:40:00:97:59:
         de:c0:77:a5:d8:b3:a5:39:08:49:c4:e8:09:4a:94:6d:24:d6:
         55:f2:67:81:0c:b6:24:d2:2d:cc:4b:d6:c5:a2:cc:90:1e:91:
         d7:fc:45:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:58:01 2026 by rpki-client