Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a262d341-94b5-474e-8bcd-d17988f099b3/0/3130332e3131372e35382e302f32332d3234203d3e20313530393534.roa
File:                     3130332e3131372e35382e302f32332d3234203d3e20313530393534.roa (raw, json)
Hash identifier:          oxm1JtkBeyGlYrT9RyVgRcjSHEEp+72qseHuuICIm9o=
Subject key identifier:   B0:38:28:F6:7A:42:4A:F6:E5:9B:F5:CF:DA:34:01:3E:07:D7:40:E6
Certificate issuer:       /CN=64B2DB7703C5C56A6F69C4789AB9F69214F22695
Certificate serial:       60D9F55AD87BACF280306732698F775C7DEF2434
Authority key identifier: 64:B2:DB:77:03:C5:C5:6A:6F:69:C4:78:9A:B9:F6:92:14:F2:26:95
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64B2DB7703C5C56A6F69C4789AB9F69214F22695.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a262d341-94b5-474e-8bcd-d17988f099b3/0/3130332e3131372e35382e302f32332d3234203d3e20313530393534.roa
Signing time:             Thu 12 Feb 2026 10:00:00 +0000
ROA not before:           Thu 12 Feb 2026 09:55:00 +0000
ROA not after:            Thu 11 Feb 2027 10:00:00 +0000
asID:                     150954
IP address blocks:        103.117.58.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a262d341-94b5-474e-8bcd-d17988f099b3/0/64B2DB7703C5C56A6F69C4789AB9F69214F22695.crl
                          rsync://repo-rpki.idnic.net/repo/a262d341-94b5-474e-8bcd-d17988f099b3/0/64B2DB7703C5C56A6F69C4789AB9F69214F22695.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64B2DB7703C5C56A6F69C4789AB9F69214F22695.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Mar 2026 06:31:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:d9:f5:5a:d8:7b:ac:f2:80:30:67:32:69:8f:77:5c:7d:ef:24:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64B2DB7703C5C56A6F69C4789AB9F69214F22695
        Validity
            Not Before: Feb 12 09:55:00 2026 GMT
            Not After : Feb 11 10:00:00 2027 GMT
        Subject: CN=B03828F67A424AF6E59BF5CFDA34013E07D740E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:51:2b:04:a0:ef:d5:fa:21:75:ed:24:bb:5e:
                    87:0b:8f:58:7a:6a:13:db:39:53:96:1e:8a:63:34:
                    e3:ca:7a:fb:62:f4:2f:43:e8:15:34:99:3e:8d:07:
                    ca:27:dc:15:d9:05:19:9e:3a:a8:3d:8b:2f:fc:5f:
                    ae:fa:7c:4e:50:5e:d9:ef:cd:a1:96:53:01:b8:04:
                    36:10:1d:b2:fa:93:b2:b1:2c:30:41:1d:a2:1f:f1:
                    72:9a:27:14:e3:9b:77:39:4e:df:cb:30:b0:9f:d3:
                    8d:6b:38:9e:7e:5c:ea:17:c6:29:5e:47:03:08:ee:
                    03:ae:fc:20:58:13:20:37:c0:7f:a6:79:99:08:33:
                    68:fc:42:de:ec:95:9b:7b:56:42:52:7b:6f:5e:ec:
                    35:ca:12:1d:14:ae:2e:e6:be:ba:73:b4:6f:1e:ba:
                    ea:b5:82:c1:27:dd:fa:11:cb:c4:4f:39:38:be:6d:
                    23:f4:7e:e0:cb:3c:1f:53:b3:ec:c7:20:1b:17:37:
                    50:a8:24:5d:da:45:6f:f3:f8:67:df:89:dd:46:35:
                    d4:41:d6:fe:a6:df:77:a8:39:83:8e:af:bc:b9:d7:
                    5c:75:9d:25:90:47:25:f7:42:a5:d7:2a:d9:a8:9e:
                    2c:c5:95:80:a5:b2:9e:f6:0f:f6:41:62:7d:21:f9:
                    bf:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:38:28:F6:7A:42:4A:F6:E5:9B:F5:CF:DA:34:01:3E:07:D7:40:E6
            X509v3 Authority Key Identifier:
                keyid:64:B2:DB:77:03:C5:C5:6A:6F:69:C4:78:9A:B9:F6:92:14:F2:26:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a262d341-94b5-474e-8bcd-d17988f099b3/0/64B2DB7703C5C56A6F69C4789AB9F69214F22695.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64B2DB7703C5C56A6F69C4789AB9F69214F22695.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a262d341-94b5-474e-8bcd-d17988f099b3/0/3130332e3131372e35382e302f32332d3234203d3e20313530393534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.117.58.0/23

    Signature Algorithm: sha256WithRSAEncryption
         d7:2c:3b:22:94:8e:e9:52:69:96:b9:1f:e0:6f:4e:7b:7d:49:
         b0:a1:10:ac:9d:57:ed:db:b9:c0:29:cd:cd:db:2a:d1:2c:85:
         72:04:99:a5:9f:28:a1:f3:42:2f:79:c4:a9:2a:4b:83:19:84:
         56:43:d9:19:78:af:09:31:d2:f2:27:84:33:30:45:6c:52:70:
         28:14:24:0d:55:dd:ae:40:dc:91:37:76:eb:8a:95:55:c7:94:
         39:7e:fc:f2:ee:c4:bd:9a:f4:88:81:b6:41:d9:ae:68:84:1d:
         76:e9:a2:1b:48:7d:9f:5c:1a:ef:3d:5d:4a:eb:31:77:5d:6e:
         90:2a:4d:36:36:09:7b:76:7f:af:2e:ad:06:ed:01:39:fd:06:
         3c:3c:15:a1:d5:6f:98:98:ec:f2:c7:34:db:86:0f:8c:72:ee:
         e1:c8:50:97:98:5c:33:3d:6f:7f:42:76:ee:59:97:08:bf:98:
         f9:8c:68:29:d7:62:f9:b6:c8:0f:e8:bc:56:0e:e8:e6:a6:4e:
         ef:cf:48:41:d8:95:e2:7e:24:94:fc:cd:8e:06:33:d1:1e:2e:
         7e:80:f7:89:14:39:d7:85:ae:a8:86:b6:71:a3:c4:a8:eb:0c:
         13:84:db:8d:0b:b2:a0:a8:5d:30:52:9a:26:2b:b9:56:92:e4:
         91:c3:73:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 23:25:32 2026 by rpki-client