Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/d93674a6-114f-4bb5-85bb-cbb67db2a955/0/3130332e3133382e36392e302f32342d3234203d3e20313338383432.roa
File:                     3130332e3133382e36392e302f32342d3234203d3e20313338383432.roa (raw, json)
Hash identifier:          3Wg0mB5oHwLpsEMqAQx7as9h65XA7qZSRMYaxMWHy8s=
Subject key identifier:   30:AB:2D:BC:33:E8:67:91:B8:83:59:39:28:57:9A:6B:C9:D1:21:95
Certificate issuer:       /CN=251859FA726E84EB8EF1585C6B1F3D925581A938
Certificate serial:       1C09079A3B043697DCF9F7BC7BF983EE9E99F92A
Authority key identifier: 25:18:59:FA:72:6E:84:EB:8E:F1:58:5C:6B:1F:3D:92:55:81:A9:38
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/251859FA726E84EB8EF1585C6B1F3D925581A938.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d93674a6-114f-4bb5-85bb-cbb67db2a955/0/3130332e3133382e36392e302f32342d3234203d3e20313338383432.roa
Signing time:             Tue 07 Apr 2026 14:00:01 +0000
ROA not before:           Tue 07 Apr 2026 13:55:01 +0000
ROA not after:            Tue 06 Apr 2027 14:00:01 +0000
asID:                     138842
IP address blocks:        103.138.69.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d93674a6-114f-4bb5-85bb-cbb67db2a955/0/251859FA726E84EB8EF1585C6B1F3D925581A938.crl
                          rsync://repo-rpki.idnic.net/repo/d93674a6-114f-4bb5-85bb-cbb67db2a955/0/251859FA726E84EB8EF1585C6B1F3D925581A938.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/251859FA726E84EB8EF1585C6B1F3D925581A938.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 19 Apr 2026 17:44:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:09:07:9a:3b:04:36:97:dc:f9:f7:bc:7b:f9:83:ee:9e:99:f9:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=251859FA726E84EB8EF1585C6B1F3D925581A938
        Validity
            Not Before: Apr  7 13:55:01 2026 GMT
            Not After : Apr  6 14:00:01 2027 GMT
        Subject: CN=30AB2DBC33E86791B883593928579A6BC9D12195
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:db:f5:2d:39:97:44:dd:c4:b9:f2:be:98:bc:
                    ae:28:e0:30:2c:54:0e:71:aa:53:63:4f:d3:34:72:
                    43:ae:e3:12:59:cc:1c:b6:e3:a1:2c:a6:ea:e2:05:
                    56:be:ad:9c:b1:2f:80:9c:17:ed:3d:78:d7:8e:35:
                    1e:42:03:3c:f1:b3:88:3b:3e:87:e1:83:bb:83:26:
                    5b:5c:5a:e3:52:ad:e8:07:32:fe:da:22:f8:5d:dc:
                    b4:b2:ae:00:f6:cb:0c:f5:0b:6a:b3:40:c3:6f:3c:
                    c6:54:54:bf:0b:86:29:1a:db:d7:c1:98:d1:95:99:
                    f0:8b:db:43:a1:16:a3:c6:96:cb:e5:e4:47:03:60:
                    cf:5e:a0:b6:2a:e1:70:ea:0d:70:bc:4c:cf:2a:ce:
                    59:b5:54:5d:7d:d5:3e:d5:a9:25:6a:2b:be:bd:53:
                    7f:9e:2c:7d:b2:76:af:34:f4:13:7b:89:e9:47:40:
                    62:68:88:0e:a4:5d:22:64:3f:75:7d:ee:8f:ce:b8:
                    3a:96:05:76:1a:c3:03:88:ae:08:67:44:e0:f0:90:
                    f2:32:47:1b:a5:fb:3f:29:e4:3c:d7:73:f8:3f:13:
                    b9:00:39:81:17:93:63:d5:82:96:8c:25:62:97:14:
                    ce:99:a8:d6:9b:56:58:2b:bb:2c:b9:79:ef:e0:46:
                    6f:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:AB:2D:BC:33:E8:67:91:B8:83:59:39:28:57:9A:6B:C9:D1:21:95
            X509v3 Authority Key Identifier:
                keyid:25:18:59:FA:72:6E:84:EB:8E:F1:58:5C:6B:1F:3D:92:55:81:A9:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d93674a6-114f-4bb5-85bb-cbb67db2a955/0/251859FA726E84EB8EF1585C6B1F3D925581A938.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/251859FA726E84EB8EF1585C6B1F3D925581A938.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d93674a6-114f-4bb5-85bb-cbb67db2a955/0/3130332e3133382e36392e302f32342d3234203d3e20313338383432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.138.69.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:26:05:1f:82:91:46:f4:51:5c:ca:1c:3c:55:a4:7d:50:41:
         74:08:af:ed:eb:6c:c5:49:c9:10:05:05:4f:e5:d0:5b:98:e6:
         c7:98:eb:9c:31:b7:a5:b8:c7:d1:56:56:d4:2f:7c:06:91:f6:
         5a:2d:72:40:5c:ea:7e:86:6d:cc:dd:1e:36:ef:7c:b5:18:77:
         f5:e2:36:06:8e:f3:89:0e:a2:e4:05:26:cc:17:f6:33:36:23:
         20:a4:2a:60:d9:8f:e1:30:18:7d:0d:37:73:56:f6:31:f9:b6:
         ec:70:72:15:a8:4b:c4:53:7a:d4:ea:1a:ba:6d:4e:94:66:a6:
         42:52:89:0a:bb:9d:42:c0:61:db:49:46:99:14:d8:bf:09:70:
         6a:48:3d:f3:22:6b:cd:96:c3:45:fd:73:f0:64:06:eb:ba:90:
         93:cf:34:86:05:f5:e3:d4:1c:14:6a:a4:83:ac:44:e7:f2:a9:
         73:fd:16:23:8f:74:ab:9c:4d:1a:67:0b:3c:83:70:3c:c7:2b:
         47:f9:f7:5e:77:53:e1:7b:93:5b:67:62:4e:99:f6:46:1a:a2:
         c8:e0:e2:69:28:02:3f:fe:5f:f6:30:2b:96:5d:79:8f:35:c3:
         39:30:fb:cc:f6:e6:c6:55:2d:0a:78:f3:be:ce:fb:12:2c:ff:
         0b:03:20:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:42:36 2026 by rpki-client