Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a878c062-b092-4025-9b68-bfeb9b65a5a0/0/3130332e3231312e3130372e302f32342d3234203d3e20313530393938.roa
File:                     3130332e3231312e3130372e302f32342d3234203d3e20313530393938.roa (raw, json)
Hash identifier:          4/T26CsUnMVIILHvHwHwYLNydEhEZf+Mult+x/QdxIM=
Subject key identifier:   AE:72:31:A4:41:AA:CB:42:81:96:05:11:45:D9:0C:81:D2:30:82:5F
Certificate issuer:       /CN=6592459773B9BF90E892EF4DE9361A991482809F
Certificate serial:       148658A89D61923A4A47B72802378386AEFC56C8
Authority key identifier: 65:92:45:97:73:B9:BF:90:E8:92:EF:4D:E9:36:1A:99:14:82:80:9F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6592459773B9BF90E892EF4DE9361A991482809F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a878c062-b092-4025-9b68-bfeb9b65a5a0/0/3130332e3231312e3130372e302f32342d3234203d3e20313530393938.roa
Signing time:             Fri 10 Apr 2026 05:03:20 +0000
ROA not before:           Fri 10 Apr 2026 04:58:20 +0000
ROA not after:            Fri 09 Apr 2027 05:03:20 +0000
asID:                     150998
IP address blocks:        103.211.107.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a878c062-b092-4025-9b68-bfeb9b65a5a0/0/6592459773B9BF90E892EF4DE9361A991482809F.crl
                          rsync://repo-rpki.idnic.net/repo/a878c062-b092-4025-9b68-bfeb9b65a5a0/0/6592459773B9BF90E892EF4DE9361A991482809F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6592459773B9BF90E892EF4DE9361A991482809F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 20 Apr 2026 10:50:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:86:58:a8:9d:61:92:3a:4a:47:b7:28:02:37:83:86:ae:fc:56:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6592459773B9BF90E892EF4DE9361A991482809F
        Validity
            Not Before: Apr 10 04:58:20 2026 GMT
            Not After : Apr  9 05:03:20 2027 GMT
        Subject: CN=AE7231A441AACB428196051145D90C81D230825F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:75:39:b2:3a:17:ab:8f:4c:79:d8:6c:f5:f8:
                    26:70:13:56:2d:c8:60:2f:9f:c3:72:46:91:4f:12:
                    85:3d:b6:f2:2b:13:fe:18:35:e6:51:98:1e:4d:f4:
                    e4:78:95:fd:75:95:71:85:3c:d1:af:62:55:c3:66:
                    8e:c4:03:b8:58:49:4b:c7:84:8b:49:37:96:92:03:
                    ab:25:9e:6d:0a:9b:8a:b4:c6:d4:99:af:cc:50:05:
                    83:01:7c:75:6f:c8:7a:fc:93:d1:21:86:eb:6e:ce:
                    1b:39:c8:99:a5:30:b6:09:10:8b:a9:e0:58:20:d4:
                    3f:32:7c:24:0f:f9:17:26:8d:49:a4:7f:40:73:d7:
                    cb:bb:e6:6a:6f:54:bc:fd:4a:73:e1:84:cc:72:f8:
                    f2:26:6c:21:0e:6b:36:fa:8a:d9:f2:f1:a0:3f:d6:
                    33:3d:6a:a5:28:50:bf:2e:af:82:c5:20:54:31:8d:
                    18:71:ec:c4:f7:db:c5:d7:ef:72:63:38:7b:27:04:
                    0a:9f:55:7c:eb:39:41:66:04:d3:3b:4b:96:d3:74:
                    7a:21:59:a8:b6:94:b7:22:7f:7c:0a:e0:9b:43:3e:
                    a3:5a:fb:c7:69:fd:1e:20:ad:84:bb:2f:db:4b:d3:
                    63:de:5f:c6:d3:6e:32:6c:2c:c3:0b:d8:09:94:01:
                    6d:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:72:31:A4:41:AA:CB:42:81:96:05:11:45:D9:0C:81:D2:30:82:5F
            X509v3 Authority Key Identifier:
                keyid:65:92:45:97:73:B9:BF:90:E8:92:EF:4D:E9:36:1A:99:14:82:80:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a878c062-b092-4025-9b68-bfeb9b65a5a0/0/6592459773B9BF90E892EF4DE9361A991482809F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6592459773B9BF90E892EF4DE9361A991482809F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a878c062-b092-4025-9b68-bfeb9b65a5a0/0/3130332e3231312e3130372e302f32342d3234203d3e20313530393938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.211.107.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:14:6a:4e:69:b3:35:53:1b:f4:29:df:8d:11:d8:c7:61:2c:
         8f:fa:35:46:9b:a5:32:6d:63:63:d5:b5:a5:78:55:61:62:7e:
         43:06:31:4b:09:70:a8:b9:a6:7a:90:ff:df:08:1f:61:11:63:
         33:6e:fe:94:67:3a:40:91:8d:4f:38:ab:a0:3f:2f:d3:04:8e:
         3e:32:b9:64:9b:77:c3:ee:dc:11:13:06:43:07:ec:9e:33:01:
         47:9f:9e:ca:0f:28:e9:ec:03:19:f6:59:15:c9:0b:32:97:3d:
         81:48:bd:b2:b3:3f:cd:ce:d4:80:5d:f6:a7:ca:05:44:3e:ac:
         19:43:6b:2c:95:58:aa:8f:94:0c:5d:b4:44:51:ca:b9:b8:3f:
         d2:85:1d:c7:54:af:35:02:3f:ec:f8:6b:94:c7:3d:44:4e:af:
         cb:68:af:ff:03:31:db:01:ee:38:31:3a:6f:6e:39:7a:88:92:
         bd:15:f1:bb:c5:3f:8a:76:0b:a2:7f:9d:1f:09:13:35:68:c2:
         54:8a:d3:ae:5f:ba:4e:c3:aa:9d:1e:3d:76:f3:20:7d:9d:54:
         a8:ca:70:ab:ad:29:92:f1:21:3e:85:21:9b:a8:9c:cf:ed:e0:
         25:98:f9:86:05:21:18:8c:93:1d:0b:ee:95:ee:44:12:60:de:
         d1:08:93:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:17:20 2026 by rpki-client