Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/59a74ac9-8fa5-439b-8f21-08f284677aa3/0/3130332e3138392e302e302f32342d3234203d3e20313439383830.roa
File:                     3130332e3138392e302e302f32342d3234203d3e20313439383830.roa (raw, json)
Hash identifier:          Uiwt0idwyNoHB6hbHTLTPXK+NKIuun2Gs6eiB4RgV7E=
Subject key identifier:   EC:5B:1C:F9:5A:AC:52:09:B5:09:C4:5A:6A:AB:75:6B:A2:B4:C9:DF
Certificate issuer:       /CN=26D5C063BEB580B38F28F3CC16B958634FF7A48B
Certificate serial:       1F3A397A7ADFC21716C6C6EE357085C98DCB288D
Authority key identifier: 26:D5:C0:63:BE:B5:80:B3:8F:28:F3:CC:16:B9:58:63:4F:F7:A4:8B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26D5C063BEB580B38F28F3CC16B958634FF7A48B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/59a74ac9-8fa5-439b-8f21-08f284677aa3/0/3130332e3138392e302e302f32342d3234203d3e20313439383830.roa
Signing time:             Thu 12 Mar 2026 13:00:02 +0000
ROA not before:           Thu 12 Mar 2026 12:55:02 +0000
ROA not after:            Thu 11 Mar 2027 13:00:02 +0000
asID:                     149880
IP address blocks:        103.189.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/59a74ac9-8fa5-439b-8f21-08f284677aa3/0/26D5C063BEB580B38F28F3CC16B958634FF7A48B.crl
                          rsync://repo-rpki.idnic.net/repo/59a74ac9-8fa5-439b-8f21-08f284677aa3/0/26D5C063BEB580B38F28F3CC16B958634FF7A48B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26D5C063BEB580B38F28F3CC16B958634FF7A48B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 29 Mar 2026 12:34:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:3a:39:7a:7a:df:c2:17:16:c6:c6:ee:35:70:85:c9:8d:cb:28:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26D5C063BEB580B38F28F3CC16B958634FF7A48B
        Validity
            Not Before: Mar 12 12:55:02 2026 GMT
            Not After : Mar 11 13:00:02 2027 GMT
        Subject: CN=EC5B1CF95AAC5209B509C45A6AAB756BA2B4C9DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:a2:c0:85:c1:b2:86:ed:dc:a3:5d:97:66:f8:
                    0e:bd:e1:03:aa:51:3e:fa:b7:06:14:9d:90:43:1b:
                    13:50:06:86:86:0e:d8:61:88:d4:6f:30:87:de:86:
                    32:c8:77:ec:a0:c0:35:00:36:ab:1a:de:d1:b5:16:
                    e2:96:9e:43:0c:df:62:8b:1c:5d:05:a1:47:3d:3c:
                    1f:1d:4c:fe:a1:a7:f6:ac:f5:0b:38:17:a4:a3:11:
                    cf:aa:9f:c9:35:3d:00:ed:67:9f:b8:1a:52:34:c8:
                    c3:3d:a1:fd:b7:82:61:af:6c:e8:e1:e2:59:b2:51:
                    08:dc:2c:21:84:00:1d:27:07:14:12:e1:44:73:19:
                    40:41:14:a3:55:94:e1:dd:55:a8:cf:2a:7a:56:46:
                    33:9f:fa:a7:c5:9a:6a:b1:70:9c:09:d2:af:93:bf:
                    e5:10:bd:48:2c:f6:59:3c:e1:57:2f:be:80:b4:4c:
                    4b:65:6e:b0:aa:51:c3:07:a4:e4:ea:f8:9b:b9:e5:
                    a5:1c:97:76:70:3f:69:42:66:75:82:86:59:fb:00:
                    ee:38:ed:d7:49:f7:24:64:53:97:f4:cd:82:92:47:
                    77:c4:52:67:96:4e:0e:b6:39:29:89:e1:16:1c:3b:
                    7d:17:b5:1c:97:14:8e:da:fb:16:dc:5f:b2:21:f9:
                    8d:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:5B:1C:F9:5A:AC:52:09:B5:09:C4:5A:6A:AB:75:6B:A2:B4:C9:DF
            X509v3 Authority Key Identifier:
                keyid:26:D5:C0:63:BE:B5:80:B3:8F:28:F3:CC:16:B9:58:63:4F:F7:A4:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/59a74ac9-8fa5-439b-8f21-08f284677aa3/0/26D5C063BEB580B38F28F3CC16B958634FF7A48B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26D5C063BEB580B38F28F3CC16B958634FF7A48B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/59a74ac9-8fa5-439b-8f21-08f284677aa3/0/3130332e3138392e302e302f32342d3234203d3e20313439383830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.189.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:4c:2a:00:e6:63:59:82:46:85:16:c4:bf:12:cf:3a:88:88:
         fa:f6:5f:7e:34:f9:6a:a5:67:f3:03:67:d9:8b:38:eb:a9:44:
         13:e0:f5:92:81:e3:8d:bb:24:12:12:6e:7d:89:b8:ce:e5:84:
         d7:e5:2a:05:1d:59:e7:82:62:bd:9a:dd:3c:8a:31:02:88:c7:
         42:50:53:6a:93:c8:e4:e6:a8:c7:1c:6e:8a:d2:65:6b:db:73:
         58:0f:bc:48:03:b8:b1:f9:74:b1:8e:41:ab:3c:07:cd:2e:0c:
         a7:ec:a1:9e:0c:3d:2e:5a:3d:fe:c5:71:f2:32:52:d7:76:41:
         dc:4f:e9:fd:10:58:f1:a7:ef:85:65:b0:53:53:7b:b9:ec:61:
         b4:6f:52:36:ec:6c:67:17:91:45:54:34:ef:f0:e0:b9:c0:ae:
         02:00:3f:61:43:65:87:ad:0e:3b:de:f7:f7:df:60:d6:f5:11:
         f3:c8:00:88:5d:8e:fb:87:48:4e:b7:fa:cf:83:a7:5b:16:86:
         d1:89:50:e0:e5:24:d9:16:6b:c5:4f:a4:67:91:c5:9f:6e:fa:
         0b:f4:a5:80:3c:f3:9c:75:27:98:33:10:56:27:5e:15:d7:8b:
         b3:e7:cc:30:54:8e:94:4f:b1:4e:21:c1:b8:8d:2e:a9:0a:98:
         f0:3f:42:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:36:44 2026 by rpki-client