Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/9a1794aa-3291-483b-ac0b-7bc7b1a67cc6/0/3130332e3136342e3233302e302f32342d3234203d3e20313431393133.roa
File:                     3130332e3136342e3233302e302f32342d3234203d3e20313431393133.roa (raw, json)
Hash identifier:          pKlBaXyIgyfojCUnlgCrIBURDkMptmxsGcEdz1CjbSY=
Subject key identifier:   24:39:E2:FD:B1:AB:05:9B:11:D1:D4:97:5B:EE:46:A3:D6:49:58:B2
Certificate issuer:       /CN=E7231D1A3E051BD903DB86D7DE0077C2333EBB58
Certificate serial:       35C5FB546042198F0BC1B49128AE2371E93109A6
Authority key identifier: E7:23:1D:1A:3E:05:1B:D9:03:DB:86:D7:DE:00:77:C2:33:3E:BB:58
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7231D1A3E051BD903DB86D7DE0077C2333EBB58.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/9a1794aa-3291-483b-ac0b-7bc7b1a67cc6/0/3130332e3136342e3233302e302f32342d3234203d3e20313431393133.roa
Signing time:             Sun 29 Mar 2026 02:00:02 +0000
ROA not before:           Sun 29 Mar 2026 01:55:02 +0000
ROA not after:            Sun 28 Mar 2027 02:00:02 +0000
asID:                     141913
IP address blocks:        103.164.230.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/9a1794aa-3291-483b-ac0b-7bc7b1a67cc6/0/E7231D1A3E051BD903DB86D7DE0077C2333EBB58.crl
                          rsync://repo-rpki.idnic.net/repo/9a1794aa-3291-483b-ac0b-7bc7b1a67cc6/0/E7231D1A3E051BD903DB86D7DE0077C2333EBB58.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7231D1A3E051BD903DB86D7DE0077C2333EBB58.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 19 Apr 2026 10:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:c5:fb:54:60:42:19:8f:0b:c1:b4:91:28:ae:23:71:e9:31:09:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E7231D1A3E051BD903DB86D7DE0077C2333EBB58
        Validity
            Not Before: Mar 29 01:55:02 2026 GMT
            Not After : Mar 28 02:00:02 2027 GMT
        Subject: CN=2439E2FDB1AB059B11D1D4975BEE46A3D64958B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:a1:af:ad:ab:76:80:6d:cb:ba:85:8b:c8:b0:
                    59:eb:a7:e8:f9:5e:5c:ea:09:61:cc:7c:2f:61:25:
                    3d:9f:d5:15:ae:04:a9:54:33:0f:26:ec:cc:20:e2:
                    42:77:b6:3e:5d:02:c9:67:bc:d6:54:6c:3c:f4:48:
                    ea:e1:c2:62:29:a9:40:83:3b:3c:74:a9:2b:d8:ed:
                    ac:4b:c3:88:0d:18:12:55:94:20:d3:fe:51:7a:e8:
                    98:26:60:c8:29:14:9a:fe:b2:2e:d7:28:ea:5e:d1:
                    62:b8:2c:68:f7:3a:e1:1d:c6:74:73:59:54:f6:b5:
                    48:48:21:0d:ab:13:35:fa:fa:b6:57:4f:35:87:11:
                    bc:75:52:ad:80:12:ad:bc:bf:39:65:49:cd:cf:60:
                    17:56:fe:17:8e:d5:30:0c:c4:2d:55:c5:5e:ef:74:
                    89:2f:c7:9f:0b:2a:d9:f7:a1:d8:6b:f0:35:50:0b:
                    af:9b:ec:f4:e2:75:0b:d1:68:15:ef:3c:6e:cd:31:
                    6b:a2:82:d3:73:09:ce:39:1e:96:44:0c:a9:11:9b:
                    a5:c3:36:49:14:db:f7:66:e7:7b:ed:b9:df:4a:87:
                    87:4e:c5:40:6f:ff:a6:36:2d:37:86:d0:ec:2f:68:
                    10:2e:32:e8:d6:9d:a0:74:39:cf:0d:f1:b3:c4:cb:
                    df:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:39:E2:FD:B1:AB:05:9B:11:D1:D4:97:5B:EE:46:A3:D6:49:58:B2
            X509v3 Authority Key Identifier:
                keyid:E7:23:1D:1A:3E:05:1B:D9:03:DB:86:D7:DE:00:77:C2:33:3E:BB:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/9a1794aa-3291-483b-ac0b-7bc7b1a67cc6/0/E7231D1A3E051BD903DB86D7DE0077C2333EBB58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7231D1A3E051BD903DB86D7DE0077C2333EBB58.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9a1794aa-3291-483b-ac0b-7bc7b1a67cc6/0/3130332e3136342e3233302e302f32342d3234203d3e20313431393133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.164.230.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d0:bd:92:e8:4c:61:57:fe:6d:6a:47:d4:9d:be:2c:86:81:be:
         34:07:11:8b:bf:86:f7:3c:6b:43:54:d9:c6:57:67:ee:1d:8d:
         29:4f:ad:44:d8:fe:74:63:32:ec:df:b0:be:c7:a5:ed:c8:e3:
         53:09:2e:b2:b4:f8:15:f8:57:52:a9:40:b9:c3:43:38:ec:3a:
         85:f1:04:94:b7:5a:8f:f4:3a:5b:fe:71:dd:99:49:fc:47:bd:
         be:b8:8b:bf:7c:af:0f:33:ac:bc:e8:2d:b7:ee:5b:e5:ad:bd:
         c7:ab:b2:2b:70:31:b2:e0:dd:4f:ab:15:d2:05:59:8e:ab:59:
         be:e7:5b:63:de:ea:8e:b9:5e:20:7c:56:46:78:dd:20:3e:ac:
         1c:f3:04:32:9b:5d:47:60:8b:2e:ca:da:9c:37:2d:33:c6:a5:
         ea:b1:5e:ed:00:4b:e3:9a:a4:2c:4c:43:5a:63:da:60:59:6c:
         03:fd:9f:1b:dd:8b:68:eb:d2:ee:15:73:b8:5b:e8:b9:a4:80:
         ba:dc:81:a2:d0:6c:9c:f5:3b:02:d5:72:a7:14:fe:99:34:1d:
         18:41:49:b1:5c:1f:a4:c2:07:27:9a:35:16:4c:87:20:c3:c9:
         21:a0:d4:cb:ce:84:56:e8:ae:40:2b:7d:82:bf:29:ab:50:69:
         43:93:33:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 04:02:13 2026 by rpki-client