Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/3130332e3135382e32362e302f32342d3234203d3e20313431363735.roa
File:                     3130332e3135382e32362e302f32342d3234203d3e20313431363735.roa (raw, json)
Hash identifier:          R+4ofBcwSyTe84XGWAH/VXGrbEs8rkXJ1xMlhzrX02U=
Subject key identifier:   DF:ED:1B:05:4C:70:E6:18:6E:A4:03:65:D0:04:10:F5:75:F5:EE:2C
Certificate issuer:       /CN=1952B074D19D5AB562D7EE537AD3059EA097353B
Certificate serial:       11292E2F1E9A5631B238A85477EDBBB56EE75AFF
Authority key identifier: 19:52:B0:74:D1:9D:5A:B5:62:D7:EE:53:7A:D3:05:9E:A0:97:35:3B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1952B074D19D5AB562D7EE537AD3059EA097353B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/3130332e3135382e32362e302f32342d3234203d3e20313431363735.roa
Signing time:             Thu 16 Apr 2026 03:00:01 +0000
ROA not before:           Thu 16 Apr 2026 02:55:01 +0000
ROA not after:            Thu 15 Apr 2027 03:00:01 +0000
asID:                     141675
IP address blocks:        103.158.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/1952B074D19D5AB562D7EE537AD3059EA097353B.crl
                          rsync://repo-rpki.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/1952B074D19D5AB562D7EE537AD3059EA097353B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1952B074D19D5AB562D7EE537AD3059EA097353B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 21 Apr 2026 12:15:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:29:2e:2f:1e:9a:56:31:b2:38:a8:54:77:ed:bb:b5:6e:e7:5a:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1952B074D19D5AB562D7EE537AD3059EA097353B
        Validity
            Not Before: Apr 16 02:55:01 2026 GMT
            Not After : Apr 15 03:00:01 2027 GMT
        Subject: CN=DFED1B054C70E6186EA40365D00410F575F5EE2C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:26:91:af:85:76:c3:bf:f9:19:05:d1:f1:99:
                    98:b5:ec:d9:63:20:1e:99:20:08:28:7f:40:37:4d:
                    ba:93:38:cc:8b:d5:3d:7f:36:b0:c7:42:a6:b2:8e:
                    09:13:60:6d:ff:21:bf:81:08:b3:08:8e:e7:e4:ef:
                    c4:e3:94:8e:c0:0c:cb:96:69:c9:6b:ef:62:6b:6f:
                    16:71:c6:1b:05:91:aa:9e:63:5a:e7:76:05:78:0c:
                    47:0b:2a:35:11:bb:62:9e:2d:49:a4:ff:7a:6c:ee:
                    aa:27:49:1c:15:a0:19:e8:30:ee:1a:fb:75:e7:53:
                    5d:2f:21:a5:a1:1c:25:05:ab:3d:ce:61:55:9b:a5:
                    d0:3b:55:03:27:de:67:e7:25:8f:13:3b:c0:7d:2e:
                    5e:ef:fe:24:68:9a:1f:a8:6d:fb:a3:a5:e0:5b:49:
                    29:d5:3c:a7:72:d0:e1:ea:5f:d1:82:d6:f3:76:4a:
                    9c:dd:9e:f0:b5:d5:b5:cc:77:10:69:85:52:e5:32:
                    5c:81:46:78:21:89:73:db:b2:d6:43:ba:8d:d2:61:
                    24:b0:a7:40:7f:97:47:3d:28:09:5f:d2:18:ce:77:
                    c8:ef:c0:dd:04:3e:c6:d4:50:f7:fa:c2:3d:25:1a:
                    03:d5:d4:e1:61:0e:2b:74:b9:43:aa:47:33:9c:b6:
                    53:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:ED:1B:05:4C:70:E6:18:6E:A4:03:65:D0:04:10:F5:75:F5:EE:2C
            X509v3 Authority Key Identifier:
                keyid:19:52:B0:74:D1:9D:5A:B5:62:D7:EE:53:7A:D3:05:9E:A0:97:35:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/1952B074D19D5AB562D7EE537AD3059EA097353B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1952B074D19D5AB562D7EE537AD3059EA097353B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/3130332e3135382e32362e302f32342d3234203d3e20313431363735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.158.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:e1:7e:2b:66:bc:8d:36:81:fd:5e:e9:41:41:d8:f0:cb:55:
         59:4a:9b:b0:10:24:93:b0:ee:9e:85:a5:ac:a2:dd:8f:18:f4:
         02:a5:6b:2d:c0:b3:1c:ce:8c:34:58:87:a5:a3:e8:61:d0:1c:
         ed:00:9e:a7:a6:39:31:5f:06:cc:be:92:fa:ff:35:69:49:2c:
         be:9a:ce:2b:c5:8e:f9:6b:4d:ed:87:5a:03:cf:68:c4:d6:a3:
         35:7e:07:8a:84:2b:61:bc:6a:db:80:08:4e:ec:d8:0b:22:46:
         2a:14:09:7f:01:b6:2a:76:6f:dc:f9:9d:f1:b2:59:99:b3:39:
         d6:4f:25:32:83:69:54:4c:b5:5d:c1:9a:12:2b:6d:9b:ba:95:
         68:73:67:41:a6:99:4c:da:2d:5a:b0:71:a9:93:ab:fb:71:3d:
         88:19:30:8e:87:34:ec:0a:84:01:5a:8e:7e:2e:d4:49:52:f3:
         65:7c:94:35:1f:91:88:74:ff:e1:e3:b3:bc:ad:e9:fe:f9:ad:
         34:f3:d0:82:ae:f2:6e:09:f7:1d:b7:a2:e9:49:97:55:75:b9:
         f1:95:32:5b:4e:30:da:d3:bf:25:80:16:73:1d:6f:87:34:52:
         2a:4a:0a:40:22:4e:05:4b:6c:d2:be:87:2f:a5:b2:5d:4a:74:
         8f:1a:ea:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:55:21 2026 by rpki-client