Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/3130332e3135342e3137392e302f32342d3234203d3e20313331373035.roa
File:                     3130332e3135342e3137392e302f32342d3234203d3e20313331373035.roa (raw, json)
Hash identifier:          Iuld+CayAuiyUbfcBqEb7SFSDGgwxHfqE3ICBoz43Vs=
Subject key identifier:   55:F5:75:C8:71:74:5B:D4:10:41:B5:44:78:0F:1F:C5:B4:77:38:2A
Certificate issuer:       /CN=0A8E8E063785238467D4AD1F507CC97B30DBB959
Certificate serial:       79AE908DBA94B49C55682E44A6CDD98ED5ACB515
Authority key identifier: 0A:8E:8E:06:37:85:23:84:67:D4:AD:1F:50:7C:C9:7B:30:DB:B9:59
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A8E8E063785238467D4AD1F507CC97B30DBB959.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/3130332e3135342e3137392e302f32342d3234203d3e20313331373035.roa
Signing time:             Fri 17 Apr 2026 08:00:37 +0000
ROA not before:           Fri 17 Apr 2026 07:55:37 +0000
ROA not after:            Fri 16 Apr 2027 08:00:37 +0000
asID:                     131705
IP address blocks:        103.154.179.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/0A8E8E063785238467D4AD1F507CC97B30DBB959.crl
                          rsync://repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/0A8E8E063785238467D4AD1F507CC97B30DBB959.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A8E8E063785238467D4AD1F507CC97B30DBB959.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 20 Apr 2026 10:11:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:ae:90:8d:ba:94:b4:9c:55:68:2e:44:a6:cd:d9:8e:d5:ac:b5:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A8E8E063785238467D4AD1F507CC97B30DBB959
        Validity
            Not Before: Apr 17 07:55:37 2026 GMT
            Not After : Apr 16 08:00:37 2027 GMT
        Subject: CN=55F575C871745BD41041B544780F1FC5B477382A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:08:bb:d5:ec:2e:5a:85:30:c6:37:42:74:9f:
                    50:12:ab:22:d1:b1:63:6a:c0:27:3d:b7:6f:d1:43:
                    20:7d:cf:d8:40:5b:76:4e:a9:b4:7f:a9:4a:7c:8a:
                    d4:ee:e4:ba:43:00:c1:b3:c9:c5:90:c6:2b:d0:7b:
                    4c:ec:cc:a4:20:ac:48:7d:48:d8:15:11:39:72:e4:
                    4d:97:41:9a:bc:4d:f2:4a:bd:2f:0a:eb:22:9c:c5:
                    09:90:51:66:7a:f6:3d:e3:66:68:11:10:be:95:e3:
                    f3:e5:fe:38:bd:93:5b:e8:0d:c5:3a:19:d8:7c:d0:
                    98:9f:b4:3c:d7:fa:7f:be:b5:2c:7f:af:96:ed:a3:
                    00:4a:b6:e6:a4:17:26:2b:9e:a1:16:e0:8d:4f:d1:
                    3f:c8:41:24:60:71:dc:0f:dc:87:01:a0:e8:1b:df:
                    8c:19:91:02:34:91:90:17:f7:8d:07:fa:83:79:e5:
                    ef:cb:73:fa:98:6b:12:33:0c:2a:dd:67:e2:1e:55:
                    99:aa:bd:7a:50:16:fc:88:ea:d2:f6:b5:bf:95:f9:
                    bb:6f:32:bf:ea:c7:71:60:75:ae:39:6c:96:26:d4:
                    db:12:c5:61:60:61:f8:dd:92:be:60:4a:59:73:7b:
                    b2:76:af:c8:a1:a1:70:e1:ab:9e:40:df:b6:89:c1:
                    91:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:F5:75:C8:71:74:5B:D4:10:41:B5:44:78:0F:1F:C5:B4:77:38:2A
            X509v3 Authority Key Identifier:
                keyid:0A:8E:8E:06:37:85:23:84:67:D4:AD:1F:50:7C:C9:7B:30:DB:B9:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/0A8E8E063785238467D4AD1F507CC97B30DBB959.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A8E8E063785238467D4AD1F507CC97B30DBB959.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/3130332e3135342e3137392e302f32342d3234203d3e20313331373035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.154.179.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:bd:1f:67:92:1e:6f:1f:36:3c:a8:67:d7:92:d6:35:a8:66:
         4d:5b:7a:39:e2:6b:99:e3:cb:0e:d0:96:ec:7b:e7:10:38:8e:
         c0:89:42:9b:92:63:06:4f:07:9d:3a:95:4f:fc:30:00:4e:cb:
         82:de:88:10:79:67:83:cb:77:ee:0d:53:9d:a7:03:66:53:9c:
         58:2b:82:0e:e9:05:92:26:6c:fd:8f:23:52:08:7a:87:9d:3e:
         74:fd:ff:72:d3:f1:1b:15:79:12:b0:b9:58:ca:dd:14:e2:b3:
         9b:82:7f:48:b5:26:42:ba:8d:d6:f9:58:6c:16:05:04:c9:b1:
         15:54:47:e9:72:64:50:34:2a:ab:64:a0:43:c8:c6:1b:d9:03:
         12:ad:d2:17:be:78:cc:6d:0d:f5:9a:89:34:69:3a:e3:82:97:
         61:a5:ab:f9:9b:b2:ee:58:ed:2b:a2:07:d5:ce:ff:cf:b9:ed:
         c6:43:ab:c6:74:63:09:73:3a:73:6f:bc:9e:18:c8:fb:e8:0f:
         a9:2f:48:8f:4b:8b:9b:0d:12:93:3a:17:ad:4b:d8:85:ed:75:
         0e:61:2a:5f:88:e5:db:17:80:b8:f2:f4:38:76:78:84:03:2f:
         c0:27:5a:56:8b:34:cd:37:fa:62:3e:db:e5:67:21:6f:a3:ad:
         af:ac:f4:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:44:07 2026 by rpki-client