Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a878c062-b092-4025-9b68-bfeb9b65a5a0/0/3130332e3231312e3130362e302f32342d3234203d3e20313530393938.roa
File:                     3130332e3231312e3130362e302f32342d3234203d3e20313530393938.roa (raw, json)
Hash identifier:          vuRRzDjTQytWwtwQf3Fvbi01X6u94kdOtwdioHqqum4=
Subject key identifier:   A3:FD:90:01:27:91:7B:51:95:A1:41:EC:D3:1D:3D:2D:5D:58:E5:E2
Certificate issuer:       /CN=6592459773B9BF90E892EF4DE9361A991482809F
Certificate serial:       7A61AC62C2C79771B700FF18F0747E7AFF913089
Authority key identifier: 65:92:45:97:73:B9:BF:90:E8:92:EF:4D:E9:36:1A:99:14:82:80:9F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6592459773B9BF90E892EF4DE9361A991482809F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a878c062-b092-4025-9b68-bfeb9b65a5a0/0/3130332e3231312e3130362e302f32342d3234203d3e20313530393938.roa
Signing time:             Fri 10 Apr 2026 05:03:20 +0000
ROA not before:           Fri 10 Apr 2026 04:58:20 +0000
ROA not after:            Fri 09 Apr 2027 05:03:20 +0000
asID:                     150998
IP address blocks:        103.211.106.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a878c062-b092-4025-9b68-bfeb9b65a5a0/0/6592459773B9BF90E892EF4DE9361A991482809F.crl
                          rsync://repo-rpki.idnic.net/repo/a878c062-b092-4025-9b68-bfeb9b65a5a0/0/6592459773B9BF90E892EF4DE9361A991482809F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6592459773B9BF90E892EF4DE9361A991482809F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 20 Apr 2026 10:50:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:61:ac:62:c2:c7:97:71:b7:00:ff:18:f0:74:7e:7a:ff:91:30:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6592459773B9BF90E892EF4DE9361A991482809F
        Validity
            Not Before: Apr 10 04:58:20 2026 GMT
            Not After : Apr  9 05:03:20 2027 GMT
        Subject: CN=A3FD900127917B5195A141ECD31D3D2D5D58E5E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:dc:a9:a8:2a:ac:dc:56:fd:22:5e:17:7f:18:
                    e9:03:27:ee:37:e3:01:49:05:63:84:9a:8a:6e:1e:
                    bf:c4:2e:74:98:73:04:5b:d9:a7:13:f0:8a:ae:93:
                    01:13:7b:17:69:9d:a6:5d:30:fc:42:ec:0f:11:97:
                    3c:41:dc:e2:ac:21:16:e5:b4:68:6c:41:99:a4:9c:
                    16:00:42:f2:b6:57:20:b3:79:2d:ff:0e:88:30:37:
                    39:74:a8:50:f0:23:65:31:ff:6c:31:09:3f:ef:12:
                    38:fd:c0:c0:fa:c1:77:af:99:c4:9e:69:76:2e:ef:
                    58:4c:5b:82:cb:49:5a:4f:2b:72:b6:6a:f6:96:7a:
                    5c:43:28:6a:54:ae:24:6c:bb:09:d6:05:ca:01:d5:
                    69:76:b6:97:4d:ea:a5:28:99:58:0a:b2:de:ee:27:
                    de:76:fc:32:03:ea:cf:f2:42:76:8a:fc:ac:b5:96:
                    0a:0a:ce:36:cb:09:91:07:56:7d:f0:bf:e4:ce:e2:
                    25:81:63:b2:70:d3:07:0a:8e:2f:01:04:6f:9b:b6:
                    63:a5:9d:2c:05:db:a4:87:cd:05:30:05:45:a1:2f:
                    43:03:4b:8a:32:52:26:fb:f5:d7:05:95:39:43:08:
                    aa:3a:7b:2f:38:87:94:e9:62:85:3f:1b:5c:25:26:
                    2d:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:FD:90:01:27:91:7B:51:95:A1:41:EC:D3:1D:3D:2D:5D:58:E5:E2
            X509v3 Authority Key Identifier:
                keyid:65:92:45:97:73:B9:BF:90:E8:92:EF:4D:E9:36:1A:99:14:82:80:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a878c062-b092-4025-9b68-bfeb9b65a5a0/0/6592459773B9BF90E892EF4DE9361A991482809F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6592459773B9BF90E892EF4DE9361A991482809F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a878c062-b092-4025-9b68-bfeb9b65a5a0/0/3130332e3231312e3130362e302f32342d3234203d3e20313530393938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.211.106.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:75:cb:13:a8:24:53:11:74:65:a2:95:de:8c:5d:46:46:ba:
         ad:99:f2:eb:4c:e9:52:79:b8:87:45:8e:6d:18:0d:16:55:19:
         0a:63:0c:f9:b5:41:47:41:f1:6c:fa:87:e2:7b:be:93:1b:90:
         07:26:5b:38:e7:f4:69:c7:d0:eb:66:af:aa:11:58:d2:fa:b0:
         d8:98:2b:78:ac:eb:a8:36:47:2b:d0:89:39:5a:91:16:99:d4:
         3b:df:d6:55:7e:ee:d1:00:26:13:56:de:49:7f:99:ec:a1:c4:
         ad:dd:ce:93:ab:27:0c:20:45:31:0b:3f:58:c9:e9:4a:66:2d:
         d1:ac:7a:be:36:e5:ff:ca:73:02:0f:18:2f:1a:1a:e2:60:49:
         d6:6b:8b:d0:02:bc:97:ea:9f:0d:9c:ce:c0:de:68:08:30:19:
         30:71:5c:13:46:c0:b2:ea:f4:08:95:46:e4:fe:b9:ac:00:e7:
         3f:14:0e:41:7f:95:39:3d:01:24:e4:2c:5c:ca:7e:d9:a2:cd:
         d7:b2:ca:1e:04:a1:62:14:55:13:7b:94:20:ce:3e:21:e6:12:
         72:8e:5a:d0:cf:e3:f5:e6:5f:8c:f6:63:74:33:9d:4e:b6:14:
         c8:ed:0f:da:ef:eb:0e:76:8e:72:e3:99:30:77:05:d8:5b:63:
         6e:9f:6b:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:18:21 2026 by rpki-client