Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/f8fca42f-836a-40ec-a76f-b604711f3364/0/3130332e35382e3134362e302f32342d3234203d3e20313333383335.roa
File:                     3130332e35382e3134362e302f32342d3234203d3e20313333383335.roa (raw, json)
Hash identifier:          3bDrh/IvfptxL/qV6/N3HPmQvkUVCcqGv4fLMe3ZeVc=
Subject key identifier:   61:FB:07:96:41:19:4F:B9:53:C7:5B:86:96:93:54:06:7E:1D:71:DD
Certificate issuer:       /CN=BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641
Certificate serial:       097F263148EEB5959F40F98655441279CE5EE618
Authority key identifier: BE:A8:C6:D5:F4:B4:24:A9:EA:BF:C2:F6:8F:71:B0:50:5B:7E:36:41
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f8fca42f-836a-40ec-a76f-b604711f3364/0/3130332e35382e3134362e302f32342d3234203d3e20313333383335.roa
Signing time:             Thu 02 Apr 2026 06:02:45 +0000
ROA not before:           Thu 02 Apr 2026 05:57:45 +0000
ROA not after:            Thu 01 Apr 2027 06:02:45 +0000
asID:                     133835
IP address blocks:        103.58.146.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/f8fca42f-836a-40ec-a76f-b604711f3364/0/BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641.crl
                          rsync://repo-rpki.idnic.net/repo/f8fca42f-836a-40ec-a76f-b604711f3364/0/BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 21 Apr 2026 08:05:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:7f:26:31:48:ee:b5:95:9f:40:f9:86:55:44:12:79:ce:5e:e6:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641
        Validity
            Not Before: Apr  2 05:57:45 2026 GMT
            Not After : Apr  1 06:02:45 2027 GMT
        Subject: CN=61FB079641194FB953C75B86969354067E1D71DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:44:3a:2c:25:9a:16:8a:6f:e9:9a:09:3a:1d:
                    b1:28:4d:2a:d4:2e:7d:21:d8:d0:6a:d5:70:9f:10:
                    0e:64:e2:ee:db:f6:aa:75:ba:df:ac:12:2b:21:2b:
                    47:37:eb:a5:15:98:44:88:f4:aa:42:c5:9a:db:3f:
                    b2:05:77:6b:a8:e7:30:17:ce:e2:31:4f:96:a8:17:
                    e7:c1:a5:ba:b8:ff:06:fd:cc:e3:6c:b5:87:37:79:
                    79:65:77:0b:0c:c0:15:9a:99:49:27:bf:2a:3e:16:
                    6a:12:74:0e:0a:2e:98:14:b8:2a:f0:ea:1f:d5:46:
                    f0:a2:47:f3:2e:8d:67:f1:ba:5c:ba:75:19:8f:ac:
                    b3:ca:2c:e2:a7:4e:e2:e4:2b:f7:c8:66:2f:8a:7d:
                    7a:73:36:eb:f9:db:e4:e0:a4:b4:a2:bb:99:3f:f6:
                    d5:ea:f0:46:dc:f0:a8:00:70:d7:2f:1b:a6:93:36:
                    74:5c:b0:41:c4:13:98:7d:4f:ef:ed:c1:65:e3:34:
                    14:4e:96:7e:ed:94:d3:8e:5c:dc:ef:b1:f8:24:68:
                    01:72:67:99:81:01:eb:e3:78:0c:86:54:ee:c9:df:
                    63:f0:a2:32:df:31:ac:cf:24:35:7c:47:0c:b4:ed:
                    25:de:f8:c9:ea:2e:de:21:2d:93:c3:a1:7d:36:79:
                    47:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:FB:07:96:41:19:4F:B9:53:C7:5B:86:96:93:54:06:7E:1D:71:DD
            X509v3 Authority Key Identifier:
                keyid:BE:A8:C6:D5:F4:B4:24:A9:EA:BF:C2:F6:8F:71:B0:50:5B:7E:36:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f8fca42f-836a-40ec-a76f-b604711f3364/0/BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f8fca42f-836a-40ec-a76f-b604711f3364/0/3130332e35382e3134362e302f32342d3234203d3e20313333383335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.58.146.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:5e:b1:ce:17:e5:5f:ad:0e:40:60:ac:bd:51:8b:71:57:d8:
         f1:d9:91:6f:7b:18:b8:f2:c8:ff:23:19:ee:7d:f7:41:b0:5e:
         8e:e0:b2:1e:8a:cf:c7:5b:c0:ac:9a:13:f6:6a:d7:6c:be:dd:
         86:72:44:20:7a:11:f2:42:60:c4:cf:6b:79:a8:66:25:14:a2:
         dd:28:ec:ff:20:b4:7b:d1:29:b8:79:85:24:78:9c:3b:02:a7:
         59:86:16:19:a2:8e:02:53:d9:60:41:e8:9b:8e:67:54:85:6f:
         af:d7:6f:8a:b9:30:83:f4:72:9c:46:77:b9:d8:50:0d:75:77:
         8e:8f:1c:b5:3d:ed:66:e6:22:86:5f:40:26:3e:a0:a5:0b:d6:
         6e:7e:f8:87:22:01:33:35:30:79:ef:e8:13:8b:60:10:b7:80:
         7a:84:af:8d:60:56:b5:c6:a4:00:b9:8d:24:45:16:3b:0b:98:
         14:51:92:39:2a:2f:95:77:61:d1:b5:81:ab:46:c8:dc:6d:32:
         8e:a7:3c:83:10:25:03:e7:ee:3e:03:5d:22:ce:a9:f4:f3:95:
         61:83:00:1a:16:42:d9:47:40:17:52:c4:0b:1c:e0:5a:b7:3a:
         f3:07:b7:9b:d2:56:8f:77:ed:93:e2:80:3b:be:68:39:3f:7a:
         53:b2:62:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 14:24:07 2026 by rpki-client