Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/f54ddc65-61c1-49e1-a895-3c03f587a27b/0/3130332e3138332e35362e302f32332d3234203d3e20313439343035.roa
File:                     3130332e3138332e35362e302f32332d3234203d3e20313439343035.roa (raw, json)
Hash identifier:          /qS4OWq8Vl/sf0oNwWG67t4bVX5WP+9ilILYkU8W3VI=
Subject key identifier:   18:28:8C:2B:2C:7A:7F:DE:39:3F:BF:59:DB:02:24:8B:98:CF:7E:33
Certificate issuer:       /CN=2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C
Certificate serial:       45A793BBFD978D589D1579B7E7A01C7BA3326AB8
Authority key identifier: 28:63:C0:F5:0E:0E:E5:0D:A8:CD:FB:2E:F1:2D:4B:58:11:B1:66:6C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f54ddc65-61c1-49e1-a895-3c03f587a27b/0/3130332e3138332e35362e302f32332d3234203d3e20313439343035.roa
Signing time:             Thu 02 Apr 2026 06:54:25 +0000
ROA not before:           Thu 02 Apr 2026 06:49:25 +0000
ROA not after:            Thu 01 Apr 2027 06:54:25 +0000
asID:                     149405
IP address blocks:        103.183.56.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/f54ddc65-61c1-49e1-a895-3c03f587a27b/0/2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.crl
                          rsync://repo-rpki.idnic.net/repo/f54ddc65-61c1-49e1-a895-3c03f587a27b/0/2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 21 Apr 2026 18:15:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:a7:93:bb:fd:97:8d:58:9d:15:79:b7:e7:a0:1c:7b:a3:32:6a:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C
        Validity
            Not Before: Apr  2 06:49:25 2026 GMT
            Not After : Apr  1 06:54:25 2027 GMT
        Subject: CN=18288C2B2C7A7FDE393FBF59DB02248B98CF7E33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:8f:e4:eb:44:39:bd:35:d7:55:a4:df:f0:d0:
                    8c:d7:19:1d:39:f4:37:50:ae:60:e3:31:a0:00:b3:
                    08:02:55:56:9d:e9:04:2a:f9:2e:0d:2e:ce:da:d2:
                    82:cc:20:f0:87:a2:dc:6f:d8:96:cf:45:82:b4:98:
                    33:0b:bd:e8:0a:2b:ec:12:60:a5:54:f6:fc:14:d1:
                    9c:7f:4e:3b:60:7e:64:8a:0e:e5:be:ca:38:f8:c3:
                    29:dc:24:8d:c8:34:14:ab:e7:0e:b0:98:3c:c9:ca:
                    0a:04:b1:f0:f6:93:d9:a2:ee:ae:5c:a6:e4:91:18:
                    10:5f:fa:a1:a7:e2:50:34:e1:53:c9:8c:53:f6:68:
                    a6:fa:62:92:ef:9d:c6:fd:c8:55:57:8c:0b:32:fd:
                    0b:7c:36:cd:02:c3:ea:84:24:65:0d:18:d4:4f:80:
                    f4:1c:57:20:aa:ea:11:c2:1d:d9:ef:11:fa:a5:2f:
                    a8:7a:d1:b2:69:ec:87:2e:92:c5:95:06:10:d7:04:
                    5f:e1:e3:c5:69:8e:7b:a4:ab:a0:4c:5b:79:c2:97:
                    68:4d:fd:6d:06:3e:61:48:c5:ee:9d:1b:6e:95:ff:
                    4a:42:a0:12:30:c7:59:18:15:7c:be:74:f8:b0:be:
                    ba:6b:84:44:9c:23:fe:f3:ec:0c:a6:9b:22:05:84:
                    22:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:28:8C:2B:2C:7A:7F:DE:39:3F:BF:59:DB:02:24:8B:98:CF:7E:33
            X509v3 Authority Key Identifier:
                keyid:28:63:C0:F5:0E:0E:E5:0D:A8:CD:FB:2E:F1:2D:4B:58:11:B1:66:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f54ddc65-61c1-49e1-a895-3c03f587a27b/0/2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f54ddc65-61c1-49e1-a895-3c03f587a27b/0/3130332e3138332e35362e302f32332d3234203d3e20313439343035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.183.56.0/23

    Signature Algorithm: sha256WithRSAEncryption
         18:6a:39:71:93:f9:e4:37:03:f6:a9:0a:7c:b3:37:92:62:c3:
         3c:f4:f7:b7:73:8b:fb:36:23:36:8e:fd:fe:e7:43:ab:b6:6d:
         a3:54:be:90:77:b9:19:61:3d:ec:2a:1f:f6:25:ef:d1:76:a5:
         61:d2:b4:12:ed:5b:66:92:1a:1f:73:1b:34:98:4c:23:1c:f2:
         6e:90:ad:9b:54:07:0a:3b:8e:e4:8a:de:df:ac:bc:bc:64:bd:
         9c:89:41:19:04:e5:d1:58:33:47:f9:8e:2a:00:b8:44:d2:53:
         60:30:ee:44:8a:44:c0:d9:6d:92:2a:04:a9:b0:d6:b1:f0:23:
         2c:2d:95:81:29:c6:a6:e4:e7:f4:a8:99:09:11:27:28:1f:23:
         9d:f0:a4:05:18:c6:1f:f5:4b:60:44:35:e2:4e:b5:06:50:62:
         36:b9:04:de:d6:91:15:39:f7:6d:82:14:ed:c8:6e:6b:78:c4:
         c6:ad:5b:18:fd:64:93:2d:08:d1:ab:7d:a6:fa:bb:69:b8:f6:
         1a:ad:6d:b9:b8:48:94:25:83:16:f5:fd:63:e6:e3:5e:89:15:
         f2:55:11:14:85:a8:5f:e1:30:83:09:73:3d:f2:34:c6:5f:62:
         bf:3c:89:7f:00:e3:bd:b4:79:ef:2c:b5:da:07:65:12:58:cd:
         b6:a2:8f:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:45:23 2026 by rpki-client