Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/fe330633-a7d1-4d0a-a1cc-b6c3eedfbc17/0/3130332e35342e3136382e302f32332d3233203d3e20313530343833.roa
File:                     3130332e35342e3136382e302f32332d3233203d3e20313530343833.roa (raw, json)
Hash identifier:          dCtNGhc0fgrwOVXQbaIlIm3GSMbj9L0gf3wDjj9oeYw=
Subject key identifier:   93:BD:36:0C:94:62:00:FE:EF:30:77:82:A8:FB:DA:C2:4F:B6:58:80
Certificate issuer:       /CN=F1F25C19AB419E370912452242B8B55038581157
Certificate serial:       3E958C12BA85768E49C0663CAB8DBFC08A7F2B4A
Authority key identifier: F1:F2:5C:19:AB:41:9E:37:09:12:45:22:42:B8:B5:50:38:58:11:57
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1F25C19AB419E370912452242B8B55038581157.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/fe330633-a7d1-4d0a-a1cc-b6c3eedfbc17/0/3130332e35342e3136382e302f32332d3233203d3e20313530343833.roa
Signing time:             Fri 13 Feb 2026 06:00:36 +0000
ROA not before:           Fri 13 Feb 2026 05:55:36 +0000
ROA not after:            Fri 12 Feb 2027 06:00:36 +0000
asID:                     150483
IP address blocks:        103.54.168.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/fe330633-a7d1-4d0a-a1cc-b6c3eedfbc17/0/F1F25C19AB419E370912452242B8B55038581157.crl
                          rsync://repo-rpki.idnic.net/repo/fe330633-a7d1-4d0a-a1cc-b6c3eedfbc17/0/F1F25C19AB419E370912452242B8B55038581157.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1F25C19AB419E370912452242B8B55038581157.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Mar 2026 10:55:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:95:8c:12:ba:85:76:8e:49:c0:66:3c:ab:8d:bf:c0:8a:7f:2b:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F1F25C19AB419E370912452242B8B55038581157
        Validity
            Not Before: Feb 13 05:55:36 2026 GMT
            Not After : Feb 12 06:00:36 2027 GMT
        Subject: CN=93BD360C946200FEEF307782A8FBDAC24FB65880
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:cd:3b:c7:59:55:36:c5:47:fd:34:24:8f:d3:
                    5f:e7:3d:7f:2a:0e:fa:45:9c:78:95:eb:02:fd:02:
                    f9:00:94:5b:32:2f:c8:cc:7e:a2:63:60:52:1d:f2:
                    4d:6d:5d:e4:59:54:1f:fc:3e:92:22:b1:71:fb:4f:
                    c0:51:59:43:91:fe:6a:aa:9b:92:92:da:40:c3:47:
                    49:81:d4:60:0a:7e:fe:db:5c:f8:e6:f4:ab:cb:54:
                    70:ea:c3:c2:f2:6a:91:dc:9e:b8:f4:31:55:0e:4f:
                    8b:c9:a3:05:90:57:76:aa:76:f3:20:41:e6:ca:5d:
                    ce:57:f4:fe:bc:97:94:c0:a6:3a:7b:00:b1:4c:5f:
                    2e:45:b3:4c:4e:11:fb:7f:db:1b:5f:84:13:62:70:
                    79:08:f6:73:cd:c9:45:e4:44:ef:1b:04:b7:2b:31:
                    03:ad:a6:ff:49:bc:97:61:f1:b3:82:a3:a7:2c:fe:
                    d7:6e:45:83:c7:56:d1:a1:13:11:36:bd:f0:7c:41:
                    05:4d:8c:f4:8e:04:91:93:26:a6:6f:7f:e6:e7:67:
                    9a:75:97:5d:8d:98:bf:1b:f0:22:2d:59:30:d7:c1:
                    59:a9:92:a6:51:9a:ca:3a:01:be:fa:f6:28:3c:0f:
                    2c:27:af:33:47:77:7a:f6:62:8a:39:5b:49:15:1d:
                    1c:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:BD:36:0C:94:62:00:FE:EF:30:77:82:A8:FB:DA:C2:4F:B6:58:80
            X509v3 Authority Key Identifier:
                keyid:F1:F2:5C:19:AB:41:9E:37:09:12:45:22:42:B8:B5:50:38:58:11:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/fe330633-a7d1-4d0a-a1cc-b6c3eedfbc17/0/F1F25C19AB419E370912452242B8B55038581157.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1F25C19AB419E370912452242B8B55038581157.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fe330633-a7d1-4d0a-a1cc-b6c3eedfbc17/0/3130332e35342e3136382e302f32332d3233203d3e20313530343833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.54.168.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4d:ae:a9:86:3e:e6:6b:ef:f5:72:f5:1c:06:76:00:bb:29:de:
         43:4f:fa:56:c5:f9:3c:54:49:80:ed:87:33:1b:8d:ed:1a:37:
         ae:01:44:9d:74:21:77:2e:a2:e3:a2:75:45:d1:9c:14:d2:d0:
         05:21:ea:82:69:56:52:53:4b:1b:b1:73:3e:20:b5:a8:71:ea:
         2e:e5:48:7e:83:2f:1a:e7:28:74:52:8c:04:76:ea:52:7d:17:
         17:2d:ee:95:0c:00:5c:d7:c7:b9:bf:ca:67:a2:38:19:46:b1:
         cd:97:01:3c:43:7d:47:c0:d4:02:dc:e1:23:08:f6:0e:92:c1:
         ac:46:38:0f:4a:8f:ce:e4:f4:c9:15:f5:72:60:cf:68:97:76:
         48:32:fe:a6:71:2f:88:5b:9c:51:12:81:06:3e:a7:56:2a:d3:
         21:b7:25:0b:e9:53:fd:86:bf:0d:0b:63:19:aa:61:a6:f6:91:
         81:68:7d:ca:4e:2c:d3:91:83:86:79:82:2b:4f:6e:d5:8d:f7:
         61:69:76:2b:db:6b:71:41:c7:e6:d9:21:cc:f7:ac:df:59:24:
         cf:94:0f:cd:b5:12:53:3e:79:e6:1b:5f:1c:76:6c:39:31:f2:
         1d:29:74:4d:1a:fc:7b:24:c8:66:6c:68:41:6e:e5:55:17:42:
         3b:18:1d:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 00:41:04 2026 by rpki-client