Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c6bec8e9-6568-478d-bd26-f6e777875511/0/3130332e32312e36342e302f32332d3233203d3e20313530393832.roa
File:                     3130332e32312e36342e302f32332d3233203d3e20313530393832.roa (raw, json)
Hash identifier:          gwbJnPHpSeHg+TMGbvaYpRRpr3Bq8iLm10t802UwTG4=
Subject key identifier:   BA:1F:4F:D0:76:F8:54:EC:7B:32:DB:80:FF:76:14:62:AE:91:5C:0C
Certificate issuer:       /CN=D456F5EAD8D734455DAEF896A9055409FF4A078F
Certificate serial:       45283A5EABEFC4B4027A4140A6100BE50593E89D
Authority key identifier: D4:56:F5:EA:D8:D7:34:45:5D:AE:F8:96:A9:05:54:09:FF:4A:07:8F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D456F5EAD8D734455DAEF896A9055409FF4A078F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c6bec8e9-6568-478d-bd26-f6e777875511/0/3130332e32312e36342e302f32332d3233203d3e20313530393832.roa
Signing time:             Fri 20 Feb 2026 07:00:00 +0000
ROA not before:           Fri 20 Feb 2026 06:55:00 +0000
ROA not after:            Fri 19 Feb 2027 07:00:00 +0000
asID:                     150982
IP address blocks:        103.21.64.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c6bec8e9-6568-478d-bd26-f6e777875511/0/D456F5EAD8D734455DAEF896A9055409FF4A078F.crl
                          rsync://repo-rpki.idnic.net/repo/c6bec8e9-6568-478d-bd26-f6e777875511/0/D456F5EAD8D734455DAEF896A9055409FF4A078F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D456F5EAD8D734455DAEF896A9055409FF4A078F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Mar 2026 06:31:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:28:3a:5e:ab:ef:c4:b4:02:7a:41:40:a6:10:0b:e5:05:93:e8:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D456F5EAD8D734455DAEF896A9055409FF4A078F
        Validity
            Not Before: Feb 20 06:55:00 2026 GMT
            Not After : Feb 19 07:00:00 2027 GMT
        Subject: CN=BA1F4FD076F854EC7B32DB80FF761462AE915C0C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:97:e4:a1:17:00:42:b4:fb:78:a8:0c:4c:c4:
                    3d:d7:b9:52:44:e7:64:47:8b:5c:1e:07:53:b4:ca:
                    84:4d:5f:39:9a:84:6e:a6:ee:bf:f3:d1:bd:31:bd:
                    54:ed:f3:17:dd:0a:aa:45:cd:63:95:bd:90:9e:10:
                    7b:9e:93:61:47:7c:e7:6b:5d:08:9a:f2:ad:b6:a0:
                    f9:f1:22:dc:27:03:8d:88:89:81:a6:03:d7:d7:50:
                    21:39:94:24:4f:57:60:98:3d:77:aa:84:12:58:ee:
                    2e:b3:4f:79:9a:28:ae:a3:86:4b:f2:86:ee:16:90:
                    b9:17:e3:c9:df:6c:83:0f:01:83:73:b5:9c:a3:df:
                    66:c2:89:41:7f:0e:70:45:a4:19:37:be:91:6e:8c:
                    60:0d:f3:cc:79:c4:1f:3d:79:fc:1a:72:a9:95:cf:
                    be:a5:68:64:f3:1e:d8:73:fa:37:79:46:72:a2:dd:
                    06:c2:80:b2:9a:27:d2:74:50:96:0c:6e:12:b7:24:
                    1e:7b:42:81:74:78:95:67:ab:ae:24:a8:ff:b5:95:
                    2d:00:a5:ae:4e:e0:fd:b6:7f:7e:e2:95:df:7e:6b:
                    e9:44:7d:88:49:7a:be:1f:22:b6:b4:ad:8b:df:22:
                    3c:52:a8:70:c9:f0:ac:40:91:1d:4e:00:4d:5f:e2:
                    f0:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:1F:4F:D0:76:F8:54:EC:7B:32:DB:80:FF:76:14:62:AE:91:5C:0C
            X509v3 Authority Key Identifier:
                keyid:D4:56:F5:EA:D8:D7:34:45:5D:AE:F8:96:A9:05:54:09:FF:4A:07:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c6bec8e9-6568-478d-bd26-f6e777875511/0/D456F5EAD8D734455DAEF896A9055409FF4A078F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D456F5EAD8D734455DAEF896A9055409FF4A078F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c6bec8e9-6568-478d-bd26-f6e777875511/0/3130332e32312e36342e302f32332d3233203d3e20313530393832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.21.64.0/23

    Signature Algorithm: sha256WithRSAEncryption
         98:84:98:ef:ee:be:91:79:62:3d:52:b0:fd:04:cc:ee:9d:27:
         b4:a4:c9:5d:9a:ce:a2:3b:34:53:0d:40:65:d5:c9:24:2c:4d:
         12:93:35:eb:94:00:57:46:71:99:8a:a3:08:42:29:5a:8d:d3:
         51:ef:d2:cf:74:17:9b:77:28:e1:5c:7a:fc:42:20:8a:71:c5:
         80:8a:c8:34:4f:7b:d5:5d:49:d9:8f:71:a5:6a:59:a3:5f:c5:
         cd:02:2c:2b:46:40:31:cb:62:48:eb:80:0d:ca:20:97:9e:c2:
         8f:31:75:d5:d0:b3:89:67:89:cf:ff:88:10:f5:c3:ad:a4:56:
         57:3f:a8:9a:13:80:12:31:74:52:7e:62:cc:a2:c3:14:c9:dd:
         78:09:d3:51:0a:4a:5c:3e:84:bd:2c:e9:77:17:75:3a:07:8d:
         a0:b0:7b:a9:2d:b6:9e:52:e0:07:99:55:8d:46:cb:a0:5f:71:
         26:ac:8b:4c:82:6f:93:36:2d:96:68:1e:be:c7:4f:cf:82:49:
         1a:cb:90:88:c6:f1:8c:67:ee:bd:d9:e2:0d:4a:fe:7f:d4:59:
         1b:8a:ae:2c:85:6a:89:32:57:3a:d0:89:5e:fa:1f:51:9d:09:
         08:d9:e9:7c:2c:23:ef:91:9e:43:2b:7f:1a:47:b5:bd:af:49:
         94:6a:7d:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 23:41:47 2026 by rpki-client