Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/401c4d61-dcef-4a20-bd4c-a282a37aa69e/0/3130332e3136342e3135302e302f32332d3233203d3e20313431393039.roa
File:                     3130332e3136342e3135302e302f32332d3233203d3e20313431393039.roa (raw, json)
Hash identifier:          ooHKZSV1Ovcs3Fa7Lr6Xldk2Fnw1zgyPobWB4Cwlr44=
Subject key identifier:   86:0D:EA:93:83:5D:72:B3:04:CF:B4:3E:69:FC:AC:B6:8F:0C:9B:11
Certificate issuer:       /CN=26C01247693F68CFDA1F8CB6B88F7A3700D30001
Certificate serial:       5F3DFBCF11DBD16A96471693E5530B39861440A8
Authority key identifier: 26:C0:12:47:69:3F:68:CF:DA:1F:8C:B6:B8:8F:7A:37:00:D3:00:01
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26C01247693F68CFDA1F8CB6B88F7A3700D30001.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/401c4d61-dcef-4a20-bd4c-a282a37aa69e/0/3130332e3136342e3135302e302f32332d3233203d3e20313431393039.roa
Signing time:             Fri 10 Oct 2025 11:00:02 +0000
ROA not before:           Fri 10 Oct 2025 10:55:02 +0000
ROA not after:            Fri 09 Oct 2026 11:00:02 +0000
asID:                     141909
IP address blocks:        103.164.150.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/401c4d61-dcef-4a20-bd4c-a282a37aa69e/0/26C01247693F68CFDA1F8CB6B88F7A3700D30001.crl
                          rsync://repo-rpki.idnic.net/repo/401c4d61-dcef-4a20-bd4c-a282a37aa69e/0/26C01247693F68CFDA1F8CB6B88F7A3700D30001.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26C01247693F68CFDA1F8CB6B88F7A3700D30001.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Oct 2025 03:58:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:3d:fb:cf:11:db:d1:6a:96:47:16:93:e5:53:0b:39:86:14:40:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26C01247693F68CFDA1F8CB6B88F7A3700D30001
        Validity
            Not Before: Oct 10 10:55:02 2025 GMT
            Not After : Oct  9 11:00:02 2026 GMT
        Subject: CN=860DEA93835D72B304CFB43E69FCACB68F0C9B11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:b7:7e:c7:8b:b6:d6:4a:63:1d:29:f7:f0:91:
                    d2:34:6a:51:ba:c6:39:39:2e:31:3f:fd:43:3d:0e:
                    9c:cd:85:b1:9f:55:c8:4b:d3:5f:de:f7:da:72:46:
                    31:ee:e9:99:fb:be:83:80:a5:06:46:26:ed:db:21:
                    cd:0d:d4:8d:9a:64:f3:d9:07:52:7c:b0:bd:1e:ae:
                    a0:dd:6f:1e:a8:7a:ac:d7:e6:e3:54:9f:8e:c6:0b:
                    dd:13:15:78:62:6a:d0:78:b2:8d:ac:f6:6f:33:a3:
                    94:cf:0f:3a:5d:78:c8:6b:d9:17:3b:37:24:42:b0:
                    e5:12:1f:48:0f:fe:d3:cc:64:0a:55:7c:a3:c6:05:
                    f4:6c:a0:8f:37:4f:84:ce:5b:3b:f6:56:3f:a7:bf:
                    60:83:ce:e3:c0:c0:78:99:cd:1b:6b:f6:4e:a7:3b:
                    2a:e1:11:c5:75:09:49:74:7d:c9:98:9b:20:9d:c0:
                    40:a9:15:8d:5b:54:27:0a:32:2c:dd:94:55:4f:2f:
                    41:7d:ae:8f:d1:62:08:91:14:aa:c1:2d:00:45:1f:
                    b0:bd:f0:9e:c3:f6:d8:7e:d2:29:18:d1:5c:fd:54:
                    41:cb:24:3e:5a:5d:33:48:7b:e9:e7:49:38:18:32:
                    bd:49:63:a4:1a:f9:6b:63:fa:35:2e:21:9e:75:0a:
                    b1:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:0D:EA:93:83:5D:72:B3:04:CF:B4:3E:69:FC:AC:B6:8F:0C:9B:11
            X509v3 Authority Key Identifier:
                keyid:26:C0:12:47:69:3F:68:CF:DA:1F:8C:B6:B8:8F:7A:37:00:D3:00:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/401c4d61-dcef-4a20-bd4c-a282a37aa69e/0/26C01247693F68CFDA1F8CB6B88F7A3700D30001.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26C01247693F68CFDA1F8CB6B88F7A3700D30001.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/401c4d61-dcef-4a20-bd4c-a282a37aa69e/0/3130332e3136342e3135302e302f32332d3233203d3e20313431393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.164.150.0/23

    Signature Algorithm: sha256WithRSAEncryption
         87:61:00:4d:b6:3b:39:dd:67:00:c6:69:15:1f:32:62:3a:cc:
         1f:c4:eb:6b:5e:bf:97:8d:fd:12:3f:d6:2b:f6:e7:1a:c9:81:
         2b:35:69:c2:d4:15:e2:e2:b6:9c:45:03:43:8d:db:57:fd:a5:
         85:61:76:d6:ae:2f:a0:a0:34:9a:bc:9e:7b:ab:9b:c2:a9:2f:
         d0:fc:4f:d9:5b:28:b5:e3:b3:be:2d:14:fc:44:08:b1:d2:a8:
         c5:9b:9b:ba:28:be:8e:81:30:94:54:5c:6c:b3:af:39:f8:22:
         7a:2c:fe:a3:c7:f4:a5:0c:3b:d3:8d:6c:6a:13:e9:34:61:bb:
         da:17:9e:2e:4f:3f:6e:d7:19:73:37:df:33:25:0a:f0:ac:4d:
         6b:f4:ff:95:ae:65:41:c7:ca:9a:37:a4:a8:85:0c:f4:ed:6d:
         f9:62:0b:6e:15:67:1e:51:6f:17:f2:b0:3a:a5:05:55:75:37:
         5f:36:30:8f:0b:e6:8c:7e:d5:1c:c1:44:56:d1:0d:8e:f0:52:
         c1:7a:4b:1e:ae:d2:f9:9b:cf:2e:25:b6:2d:cc:db:56:23:bc:
         88:49:02:dc:1e:03:e4:5f:4a:30:f3:2c:64:9a:7f:ff:af:3d:
         f2:ff:79:8f:db:3f:2a:9f:6c:d9:d2:d7:63:cd:65:d7:a5:bc:
         01:c1:ee:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 01:42:43 2025 by rpki-client