Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e6f75021-8368-4481-9269-5980d6f7295e/0/3130332e33312e3131382e302f32342d3234203d3e20313530323633.roa
File:                     3130332e33312e3131382e302f32342d3234203d3e20313530323633.roa (raw, json)
Hash identifier:          K+lMNOPbaTPtC+BN5yt1i5n+83ok12jHIPg+zvMK6vA=
Subject key identifier:   55:A2:FC:29:56:5D:9B:A0:14:04:E7:4A:77:E7:50:D0:28:32:82:98
Certificate issuer:       /CN=BDB1195D404F153801E5124B65F15BD6EA02C52F
Certificate serial:       4F8445644B03BE2502244D9FABE824D264466FD9
Authority key identifier: BD:B1:19:5D:40:4F:15:38:01:E5:12:4B:65:F1:5B:D6:EA:02:C5:2F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BDB1195D404F153801E5124B65F15BD6EA02C52F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e6f75021-8368-4481-9269-5980d6f7295e/0/3130332e33312e3131382e302f32342d3234203d3e20313530323633.roa
Signing time:             Fri 17 Apr 2026 04:03:27 +0000
ROA not before:           Fri 17 Apr 2026 03:58:27 +0000
ROA not after:            Fri 16 Apr 2027 04:03:27 +0000
asID:                     150263
IP address blocks:        103.31.118.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e6f75021-8368-4481-9269-5980d6f7295e/0/BDB1195D404F153801E5124B65F15BD6EA02C52F.crl
                          rsync://repo-rpki.idnic.net/repo/e6f75021-8368-4481-9269-5980d6f7295e/0/BDB1195D404F153801E5124B65F15BD6EA02C52F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BDB1195D404F153801E5124B65F15BD6EA02C52F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 20 Apr 2026 06:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:84:45:64:4b:03:be:25:02:24:4d:9f:ab:e8:24:d2:64:46:6f:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BDB1195D404F153801E5124B65F15BD6EA02C52F
        Validity
            Not Before: Apr 17 03:58:27 2026 GMT
            Not After : Apr 16 04:03:27 2027 GMT
        Subject: CN=55A2FC29565D9BA01404E74A77E750D028328298
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:88:d2:20:06:b3:af:0b:5b:22:7b:7c:68:1d:
                    9a:c0:ca:fc:62:48:59:4c:77:0c:d5:df:b5:fe:35:
                    10:86:68:3d:ba:6b:cb:5d:42:b5:a3:0b:36:e0:6b:
                    8c:aa:09:26:11:fa:11:9e:7c:20:90:1c:8d:8f:89:
                    19:98:fe:2d:85:74:77:0d:80:2b:a0:a0:a9:83:be:
                    30:83:2d:42:7d:7a:bf:fb:1c:13:98:05:78:b0:f3:
                    64:d1:3d:9a:35:42:a7:05:5b:96:97:42:ed:d9:ab:
                    21:8e:94:34:bf:e7:a4:4b:ec:3f:93:53:18:52:ec:
                    f7:05:dd:f3:7d:d3:65:48:ad:a2:da:e5:6b:8d:ca:
                    d8:4f:42:2b:17:3b:fa:c0:07:db:48:d7:ca:15:14:
                    20:6e:2d:f8:98:dd:f2:09:d2:64:38:58:9f:31:9f:
                    c2:9b:8d:05:01:97:ed:26:19:cb:c7:cf:bd:09:00:
                    73:77:ba:8a:5d:65:55:85:14:c7:ed:33:7f:8c:d9:
                    14:a4:4c:d4:02:5d:92:86:11:d4:d6:98:f0:d6:73:
                    4f:a6:ae:1c:6b:3d:9c:0c:c5:00:c1:3a:e0:c8:bd:
                    96:4a:c6:13:87:91:94:8c:8a:83:ee:1a:ff:12:50:
                    2e:ef:49:e2:5f:7c:75:4a:07:d1:ff:df:77:f6:1c:
                    55:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:A2:FC:29:56:5D:9B:A0:14:04:E7:4A:77:E7:50:D0:28:32:82:98
            X509v3 Authority Key Identifier:
                keyid:BD:B1:19:5D:40:4F:15:38:01:E5:12:4B:65:F1:5B:D6:EA:02:C5:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e6f75021-8368-4481-9269-5980d6f7295e/0/BDB1195D404F153801E5124B65F15BD6EA02C52F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BDB1195D404F153801E5124B65F15BD6EA02C52F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e6f75021-8368-4481-9269-5980d6f7295e/0/3130332e33312e3131382e302f32342d3234203d3e20313530323633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.31.118.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:92:1b:f7:87:21:6d:04:ee:24:26:27:6f:66:a8:15:17:58:
         e7:04:b9:8a:7a:b2:2e:1c:7a:4c:70:45:42:f1:ef:1a:e8:cd:
         03:ea:e6:52:55:f2:d5:c3:00:a3:48:ae:f2:3c:9d:c7:44:c1:
         f3:9b:1a:0e:3b:1c:1b:a5:9a:a4:d6:8f:46:a9:b3:21:b1:b6:
         10:31:e4:94:69:31:69:08:2d:e9:0a:f8:45:05:97:1c:7e:10:
         d2:2d:ff:2f:40:82:b1:71:c8:6a:2d:0b:35:87:8a:a2:e6:96:
         cf:79:44:34:6c:ab:c3:48:32:d7:86:3f:50:32:28:c6:e6:43:
         e8:5d:a2:30:b7:d2:94:b0:93:4d:20:9a:30:aa:4c:bd:64:d6:
         80:44:e2:30:c6:98:1f:e2:9e:2f:67:dc:8f:39:39:65:4f:31:
         ff:a8:a6:b6:a6:1f:fb:82:28:81:13:d4:b5:bc:38:88:a8:f8:
         d0:9f:c1:6d:4c:16:eb:e0:78:84:98:f3:25:0f:49:2b:6b:b3:
         0e:7f:30:78:75:ed:be:04:de:e5:a1:d6:7e:57:f5:ee:cb:be:
         87:02:9d:c4:35:b2:c5:0a:45:02:69:26:58:e9:3e:69:14:c9:
         34:f5:75:4b:ae:00:27:2d:b2:69:11:09:c3:e0:1e:eb:85:12:
         76:90:c4:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:13:50 2026 by rpki-client