Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/98f92447-acd3-427c-b5e7-db3917f185c8/0/3130332e3134382e3131302e302f32332d3234203d3e2039333236.roa
File:                     3130332e3134382e3131302e302f32332d3234203d3e2039333236.roa (raw, json)
Hash identifier:          JwJzFf7FE4o0tJFEf6OMs5PvlK7ay4ylXK/2j1cdtmQ=
Subject key identifier:   07:1D:E9:DC:76:20:D8:8C:B4:CA:8B:FF:98:F7:A1:81:FC:6A:E0:0E
Certificate issuer:       /CN=5FCDFAAAB84905868D4FBDBE718B949501D97DC4
Certificate serial:       44308032047E103E40C836BD717C6D38D1F7EED4
Authority key identifier: 5F:CD:FA:AA:B8:49:05:86:8D:4F:BD:BE:71:8B:94:95:01:D9:7D:C4
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5FCDFAAAB84905868D4FBDBE718B949501D97DC4.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/98f92447-acd3-427c-b5e7-db3917f185c8/0/3130332e3134382e3131302e302f32332d3234203d3e2039333236.roa
Signing time:             Fri 03 Apr 2026 04:00:00 +0000
ROA not before:           Fri 03 Apr 2026 03:55:00 +0000
ROA not after:            Fri 02 Apr 2027 04:00:00 +0000
asID:                     9326
IP address blocks:        103.148.110.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/98f92447-acd3-427c-b5e7-db3917f185c8/0/5FCDFAAAB84905868D4FBDBE718B949501D97DC4.crl
                          rsync://repo-rpki.idnic.net/repo/98f92447-acd3-427c-b5e7-db3917f185c8/0/5FCDFAAAB84905868D4FBDBE718B949501D97DC4.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5FCDFAAAB84905868D4FBDBE718B949501D97DC4.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 20 Apr 2026 17:07:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:30:80:32:04:7e:10:3e:40:c8:36:bd:71:7c:6d:38:d1:f7:ee:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FCDFAAAB84905868D4FBDBE718B949501D97DC4
        Validity
            Not Before: Apr  3 03:55:00 2026 GMT
            Not After : Apr  2 04:00:00 2027 GMT
        Subject: CN=071DE9DC7620D88CB4CA8BFF98F7A181FC6AE00E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:d1:43:ed:db:ad:57:05:13:1c:a5:15:a6:18:
                    92:1d:92:39:3b:ef:e6:5c:49:65:48:22:e5:b2:aa:
                    ec:9f:4c:7d:72:13:b7:d7:09:77:af:f1:81:d2:c6:
                    f5:ea:92:64:be:f4:b3:e6:7d:6e:6a:b1:73:56:cc:
                    86:ba:f0:57:44:72:94:63:72:8a:34:24:1e:a9:12:
                    67:fa:32:2a:53:e8:4e:e9:64:94:b9:48:7f:5b:1c:
                    ba:25:ee:f3:36:c2:7f:01:cd:c6:b4:fd:95:c3:1d:
                    f4:04:e2:78:d2:16:e4:c2:f4:8f:7b:63:f6:43:bd:
                    fd:12:2b:28:35:75:ed:4d:73:9a:5e:5c:64:ea:77:
                    92:c9:b5:35:1b:41:8e:9a:86:a1:32:06:2e:9f:e6:
                    c4:77:ea:59:8b:68:7a:4b:bc:72:61:3c:a0:df:9a:
                    38:18:e2:ba:8b:f1:a1:1c:04:27:77:ee:9b:ea:53:
                    cf:f8:95:cd:5e:bd:5e:b5:5c:1a:02:e8:57:d4:f8:
                    a3:9e:a9:d1:00:70:dd:bd:ce:3c:30:50:6c:0c:ec:
                    5c:6e:99:7a:a1:ae:3e:6a:c4:5b:bc:f7:41:ca:eb:
                    6a:86:03:45:65:ee:b1:f0:b0:f3:bb:9d:f9:f8:8c:
                    0e:0e:28:a2:0e:ba:38:91:d4:7d:73:64:fa:c1:1a:
                    e7:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:1D:E9:DC:76:20:D8:8C:B4:CA:8B:FF:98:F7:A1:81:FC:6A:E0:0E
            X509v3 Authority Key Identifier:
                keyid:5F:CD:FA:AA:B8:49:05:86:8D:4F:BD:BE:71:8B:94:95:01:D9:7D:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/98f92447-acd3-427c-b5e7-db3917f185c8/0/5FCDFAAAB84905868D4FBDBE718B949501D97DC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5FCDFAAAB84905868D4FBDBE718B949501D97DC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/98f92447-acd3-427c-b5e7-db3917f185c8/0/3130332e3134382e3131302e302f32332d3234203d3e2039333236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.148.110.0/23

    Signature Algorithm: sha256WithRSAEncryption
         66:ac:88:cd:33:9c:c8:c5:66:38:d0:54:10:ec:21:21:4f:b4:
         25:cf:75:6d:ba:74:66:af:90:c1:7c:b6:b5:4e:2c:95:c3:ef:
         8c:f5:12:2e:d4:82:92:47:f3:59:3c:b8:49:68:0d:be:20:32:
         25:97:8a:e8:87:42:86:77:9e:17:71:27:d5:9d:b9:43:27:a9:
         6c:bc:dc:12:4a:00:ef:42:1f:27:74:d2:33:7c:74:bc:46:e6:
         93:76:4f:26:8c:43:af:bd:14:f2:1b:0c:1a:15:e0:91:4b:3e:
         74:5e:b9:9e:d7:ad:8f:87:b9:28:31:36:c2:51:2e:4d:32:3a:
         60:6f:63:7a:89:30:37:bc:cc:63:69:ed:0d:94:54:31:8e:c3:
         2e:9e:e3:fc:51:85:59:07:96:b1:79:67:5e:69:5f:88:33:49:
         4f:68:31:a6:16:62:3e:25:0a:ed:6d:53:a9:e5:87:94:f2:75:
         44:b6:e6:7f:52:ea:cf:df:7a:0f:9e:c7:ed:77:8a:15:b3:12:
         72:23:ba:9e:ec:22:44:69:2d:06:a6:1a:02:91:c2:e2:07:a6:
         cb:fd:23:33:db:9d:1d:3a:b2:c6:5c:fe:1d:79:7d:3d:92:43:
         43:1b:b3:57:d8:a6:a1:ab:85:b5:43:ff:8b:2f:b3:9f:a1:5a:
         0e:46:f4:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:18:43 2026 by rpki-client