Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/45260641-bce2-445c-9de5-370a787f9530/0/3130332e3136392e3139382e302f32342d3234203d3e20313432333531.roa
File:                     3130332e3136392e3139382e302f32342d3234203d3e20313432333531.roa (raw, json)
Hash identifier:          rmXEqbAIBdqZ1QZkCeZrtaGpb9Ot072xdIfEgSdR3Yo=
Subject key identifier:   05:C8:8C:B4:1C:FF:88:90:AC:ED:1F:EF:54:B5:F1:2C:7B:68:15:95
Certificate issuer:       /CN=D7286D5F5B9ADD4CC166AD32519692F0C8902B29
Certificate serial:       09E7FCD0CE58075B131BE6C91EC865785494A482
Authority key identifier: D7:28:6D:5F:5B:9A:DD:4C:C1:66:AD:32:51:96:92:F0:C8:90:2B:29
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7286D5F5B9ADD4CC166AD32519692F0C8902B29.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/45260641-bce2-445c-9de5-370a787f9530/0/3130332e3136392e3139382e302f32342d3234203d3e20313432333531.roa
Signing time:             Wed 04 Mar 2026 09:02:05 +0000
ROA not before:           Wed 04 Mar 2026 08:57:05 +0000
ROA not after:            Wed 03 Mar 2027 09:02:05 +0000
asID:                     142351
IP address blocks:        103.169.198.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/45260641-bce2-445c-9de5-370a787f9530/0/D7286D5F5B9ADD4CC166AD32519692F0C8902B29.crl
                          rsync://repo-rpki.idnic.net/repo/45260641-bce2-445c-9de5-370a787f9530/0/D7286D5F5B9ADD4CC166AD32519692F0C8902B29.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7286D5F5B9ADD4CC166AD32519692F0C8902B29.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 29 Mar 2026 20:14:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:e7:fc:d0:ce:58:07:5b:13:1b:e6:c9:1e:c8:65:78:54:94:a4:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7286D5F5B9ADD4CC166AD32519692F0C8902B29
        Validity
            Not Before: Mar  4 08:57:05 2026 GMT
            Not After : Mar  3 09:02:05 2027 GMT
        Subject: CN=05C88CB41CFF8890ACED1FEF54B5F12C7B681595
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:1e:74:2e:fe:a5:44:83:a1:98:ef:81:0a:0e:
                    29:5b:bc:ad:76:13:6d:70:fb:d2:a8:06:62:1b:72:
                    d2:82:fc:54:c5:92:47:8f:a8:be:a2:37:3b:e6:51:
                    34:b1:b5:5a:d8:36:ae:5f:d0:ce:ec:98:52:7f:58:
                    7f:39:76:8c:4f:8b:94:09:37:c5:61:cd:93:50:77:
                    88:5a:b1:30:5f:be:f6:6e:19:9d:f3:2a:d9:52:d4:
                    c6:e4:ac:85:d8:43:fd:1d:73:40:19:b4:06:d0:b7:
                    7d:78:a8:40:9c:d1:23:93:7c:3c:aa:16:94:dc:54:
                    6a:70:e9:f3:18:23:eb:42:8e:1d:91:3f:63:96:72:
                    a3:b9:00:24:5b:d8:1d:9e:94:ae:e2:d7:2f:99:4c:
                    bb:e7:f3:93:b6:48:26:2e:d3:35:11:1c:67:38:69:
                    4a:3f:33:be:d4:c0:14:15:00:2e:11:7f:63:af:f9:
                    be:27:cf:95:e1:3f:56:ec:b4:8b:1b:1e:8f:50:71:
                    30:90:bc:0a:a1:86:09:7c:42:e9:6c:85:f3:ce:2d:
                    78:ba:86:b3:96:a8:de:9b:99:46:d7:b3:54:e6:6d:
                    15:01:5a:33:ef:dc:05:8d:7a:16:93:f7:88:2c:2a:
                    9a:4c:47:cb:40:34:4d:7c:10:a5:b6:d1:c3:88:3a:
                    4f:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:C8:8C:B4:1C:FF:88:90:AC:ED:1F:EF:54:B5:F1:2C:7B:68:15:95
            X509v3 Authority Key Identifier:
                keyid:D7:28:6D:5F:5B:9A:DD:4C:C1:66:AD:32:51:96:92:F0:C8:90:2B:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/45260641-bce2-445c-9de5-370a787f9530/0/D7286D5F5B9ADD4CC166AD32519692F0C8902B29.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7286D5F5B9ADD4CC166AD32519692F0C8902B29.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/45260641-bce2-445c-9de5-370a787f9530/0/3130332e3136392e3139382e302f32342d3234203d3e20313432333531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.169.198.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:6c:33:ca:8c:9a:68:02:3e:b8:91:45:f9:e7:d8:d7:5f:04:
         8f:d7:17:60:07:cf:01:76:01:0e:3f:af:87:b6:3a:07:db:a0:
         a9:d9:1e:fb:71:84:9a:67:4a:9c:6e:1b:6e:72:15:cb:3c:9f:
         de:a7:0f:52:7f:c2:b1:c7:6d:59:c6:5a:a1:10:17:6f:56:2b:
         f8:e9:e0:ec:c5:4b:10:2f:69:24:58:98:b0:73:14:c0:b7:02:
         a1:8c:ee:be:60:ab:50:d9:d8:84:ed:29:af:3c:a7:72:c1:c6:
         ab:a9:d2:77:b4:f1:cc:a6:57:92:70:e6:3a:ac:20:1b:ce:4b:
         8d:1f:bf:ae:47:a1:a3:33:82:2b:80:76:70:1f:99:07:92:0e:
         6e:4d:b8:e5:7f:b7:c8:7c:ef:66:fc:fb:1f:d8:bc:e2:ca:47:
         f4:1b:6b:0b:1a:2c:5b:cd:6c:f3:27:90:63:d2:b7:21:96:4f:
         d5:84:f4:91:ca:a6:ee:c2:40:e4:b5:c4:b7:a1:96:89:04:c9:
         d0:b1:ee:2d:d8:f8:0b:e9:b1:88:be:c5:51:18:c2:34:86:92:
         84:63:5d:1e:0e:fb:8a:d5:6a:86:38:f2:d5:b9:0a:22:ab:7a:
         e0:cf:27:c9:3c:58:cf:45:9b:c7:be:93:99:24:b5:ad:c4:e2:
         62:27:19:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:41:05 2026 by rpki-client