Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e7a3e90a-033a-4c8d-9077-0daf8050fa8b/0/3130332e3137322e33342e302f32332d3234203d3e203538383231.roa
File:                     3130332e3137322e33342e302f32332d3234203d3e203538383231.roa (raw, json)
Hash identifier:          ScswL9bUHxklIocgroijXKfEDJTzVxzTBZjvmh8mZng=
Subject key identifier:   8D:2C:B2:BA:FE:49:B7:3C:95:0D:3D:04:7D:B8:BE:81:D7:DB:83:FB
Certificate issuer:       /CN=5562ED3E2B75AA4CE36165EE02F7696CCB8045E1
Certificate serial:       1621DA6D6CCEBFD8D30DA11C652B310BF87E5DB8
Authority key identifier: 55:62:ED:3E:2B:75:AA:4C:E3:61:65:EE:02:F7:69:6C:CB:80:45:E1
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5562ED3E2B75AA4CE36165EE02F7696CCB8045E1.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e7a3e90a-033a-4c8d-9077-0daf8050fa8b/0/3130332e3137322e33342e302f32332d3234203d3e203538383231.roa
Signing time:             Fri 03 Apr 2026 03:00:01 +0000
ROA not before:           Fri 03 Apr 2026 02:55:01 +0000
ROA not after:            Fri 02 Apr 2027 03:00:01 +0000
asID:                     58821
IP address blocks:        103.172.34.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e7a3e90a-033a-4c8d-9077-0daf8050fa8b/0/5562ED3E2B75AA4CE36165EE02F7696CCB8045E1.crl
                          rsync://repo-rpki.idnic.net/repo/e7a3e90a-033a-4c8d-9077-0daf8050fa8b/0/5562ED3E2B75AA4CE36165EE02F7696CCB8045E1.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5562ED3E2B75AA4CE36165EE02F7696CCB8045E1.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 20 Apr 2026 07:12:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:21:da:6d:6c:ce:bf:d8:d3:0d:a1:1c:65:2b:31:0b:f8:7e:5d:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5562ED3E2B75AA4CE36165EE02F7696CCB8045E1
        Validity
            Not Before: Apr  3 02:55:01 2026 GMT
            Not After : Apr  2 03:00:01 2027 GMT
        Subject: CN=8D2CB2BAFE49B73C950D3D047DB8BE81D7DB83FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:d8:61:50:79:84:b2:b5:ce:a6:1a:c7:9b:7d:
                    e8:2c:08:84:d5:2b:14:5e:b6:5d:32:c9:16:6e:5f:
                    81:8c:0d:1a:94:5c:2c:88:df:47:c4:a7:a1:8e:36:
                    20:b0:f1:59:0c:36:f9:f5:99:bf:fb:95:f6:d2:b5:
                    bd:92:9c:51:06:b1:10:58:1e:29:aa:9a:96:70:1f:
                    b6:38:45:be:6f:64:b9:9a:69:fc:e4:20:49:82:f8:
                    f0:f0:91:5c:72:8c:62:6b:53:1f:3d:71:55:77:d0:
                    e6:d2:9a:5f:cd:20:ee:69:95:10:c7:29:fa:29:75:
                    88:91:70:89:72:e7:6a:de:3c:11:2e:f8:27:16:91:
                    c9:6a:52:3b:0f:03:a1:f5:45:4d:1a:40:8c:98:96:
                    cf:03:73:04:bd:10:13:65:f0:21:a8:43:b0:12:2b:
                    0c:eb:ff:1a:b2:fa:fd:cf:b3:26:fd:73:6a:5e:2b:
                    6b:36:c0:d2:89:98:d2:52:6b:6a:68:ee:97:c4:8c:
                    b1:d9:d5:9c:6a:11:e5:ce:b0:32:31:3d:8f:07:a3:
                    cd:56:66:41:b0:c8:5d:77:11:9d:46:97:4b:1d:fd:
                    e6:12:52:40:4d:b7:e6:4b:b6:51:36:bc:22:3f:85:
                    51:e2:f3:13:f9:80:ee:5a:4d:36:91:09:3f:8a:e5:
                    4b:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:2C:B2:BA:FE:49:B7:3C:95:0D:3D:04:7D:B8:BE:81:D7:DB:83:FB
            X509v3 Authority Key Identifier:
                keyid:55:62:ED:3E:2B:75:AA:4C:E3:61:65:EE:02:F7:69:6C:CB:80:45:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e7a3e90a-033a-4c8d-9077-0daf8050fa8b/0/5562ED3E2B75AA4CE36165EE02F7696CCB8045E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5562ED3E2B75AA4CE36165EE02F7696CCB8045E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e7a3e90a-033a-4c8d-9077-0daf8050fa8b/0/3130332e3137322e33342e302f32332d3234203d3e203538383231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.172.34.0/23

    Signature Algorithm: sha256WithRSAEncryption
         08:fd:f0:4b:c8:85:55:0f:dd:a2:53:15:28:5f:31:a3:3e:3c:
         f6:67:39:25:20:6e:ff:45:fe:ba:ec:07:cc:39:07:ec:d5:94:
         de:99:b1:f7:24:e3:72:26:e7:af:e6:ef:2e:b1:6c:04:34:63:
         69:c9:2f:a6:7c:e3:d2:ef:dd:f2:e8:bb:44:09:f9:50:ad:81:
         cb:fa:e5:ac:25:af:73:54:c1:d9:2b:22:ef:28:d4:ce:b3:5b:
         d4:5b:ab:4e:ac:2c:75:91:27:03:80:a7:a0:d7:ac:6e:76:3f:
         fd:2c:f0:d4:f0:ac:0e:82:fc:77:3d:2c:4f:65:4c:22:4c:94:
         02:a4:59:b4:bb:92:be:54:7c:a2:3a:a5:0b:a8:e5:0f:f6:a6:
         d5:9c:c8:59:24:e3:69:03:ee:b5:2f:e3:f2:11:64:e3:cf:4c:
         f6:0c:54:8c:bb:86:3c:0a:ad:a4:07:e0:2e:71:60:fb:da:9a:
         12:7d:cf:ee:46:b4:8f:5a:00:b6:ef:28:78:1c:9d:46:00:28:
         15:ac:a6:61:93:a5:3a:31:cd:8c:3e:54:53:15:65:6c:72:84:
         10:30:eb:75:ce:26:fa:a3:ab:7f:13:e6:b5:2e:31:f0:82:fb:
         d2:8d:04:dd:81:64:f7:68:4c:b3:04:7f:ab:12:b5:4c:ec:e3:
         cb:05:59:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:47:12 2026 by rpki-client