Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/5e61f86e-07f0-4c60-adc0-fc68816ac866/0/3130332e35352e3231362e302f32342d3234203d3e20313333383234.roa
File:                     3130332e35352e3231362e302f32342d3234203d3e20313333383234.roa (raw, json)
Hash identifier:          kxgspDzYS/DkH6ZTyH3CIKOfMPet4y8hTk8yqtZ6GPI=
Subject key identifier:   9F:45:DA:7F:FC:AA:D3:00:BB:B4:CA:65:2B:D5:BE:59:F7:27:9C:F3
Certificate issuer:       /CN=9A25028550A48EFF7C98BF816A8488BE884E6B4A
Certificate serial:       10BC8B82F383B6BE520A78DBEB1C7E75C933689C
Authority key identifier: 9A:25:02:85:50:A4:8E:FF:7C:98:BF:81:6A:84:88:BE:88:4E:6B:4A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A25028550A48EFF7C98BF816A8488BE884E6B4A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5e61f86e-07f0-4c60-adc0-fc68816ac866/0/3130332e35352e3231362e302f32342d3234203d3e20313333383234.roa
Signing time:             Sun 15 Mar 2026 06:00:00 +0000
ROA not before:           Sun 15 Mar 2026 05:55:00 +0000
ROA not after:            Sun 14 Mar 2027 06:00:00 +0000
asID:                     133824
IP address blocks:        103.55.216.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/5e61f86e-07f0-4c60-adc0-fc68816ac866/0/9A25028550A48EFF7C98BF816A8488BE884E6B4A.crl
                          rsync://repo-rpki.idnic.net/repo/5e61f86e-07f0-4c60-adc0-fc68816ac866/0/9A25028550A48EFF7C98BF816A8488BE884E6B4A.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A25028550A48EFF7C98BF816A8488BE884E6B4A.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 29 Mar 2026 02:02:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:bc:8b:82:f3:83:b6:be:52:0a:78:db:eb:1c:7e:75:c9:33:68:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A25028550A48EFF7C98BF816A8488BE884E6B4A
        Validity
            Not Before: Mar 15 05:55:00 2026 GMT
            Not After : Mar 14 06:00:00 2027 GMT
        Subject: CN=9F45DA7FFCAAD300BBB4CA652BD5BE59F7279CF3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:7d:10:08:01:a1:eb:a4:b2:6e:c0:25:3a:5a:
                    4b:03:10:12:26:0f:55:5d:03:44:5c:59:54:48:28:
                    05:9c:1b:7c:ef:0b:f2:36:0c:0d:e6:8f:f4:ae:68:
                    2e:c1:0d:67:4b:40:16:17:00:b2:71:7e:0f:25:99:
                    6e:5e:54:df:05:1f:2a:9f:6e:4a:ae:c3:4d:ff:f0:
                    54:2e:a7:15:3f:00:bf:6d:bf:22:ce:5e:cf:9a:c5:
                    7d:34:c1:5d:87:de:8b:11:0d:1e:60:72:41:62:28:
                    a8:67:ac:07:cd:78:ae:a2:30:62:c4:f3:aa:ee:34:
                    26:c2:3d:14:39:9a:f0:f0:22:d3:2c:e1:2d:d7:17:
                    b7:bb:8e:6c:e4:92:2b:cf:4b:b4:7d:e3:f6:ab:24:
                    f0:80:62:a7:d6:cb:71:74:61:9d:ab:50:61:a0:d8:
                    27:8d:16:7b:82:e8:50:c8:90:60:0b:a2:2a:ba:84:
                    3f:b6:ff:15:2e:42:8b:b1:8f:54:eb:d6:d6:1d:97:
                    81:d9:3a:bb:98:ae:57:31:e9:7a:6b:58:c0:0d:e6:
                    38:7f:e6:d7:71:02:56:04:5c:09:ec:82:6f:61:40:
                    b8:72:88:24:ae:6a:b5:45:91:d8:31:a4:c7:95:39:
                    59:7b:8c:4e:3f:19:17:3b:41:86:cc:b7:25:7c:10:
                    1e:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:45:DA:7F:FC:AA:D3:00:BB:B4:CA:65:2B:D5:BE:59:F7:27:9C:F3
            X509v3 Authority Key Identifier:
                keyid:9A:25:02:85:50:A4:8E:FF:7C:98:BF:81:6A:84:88:BE:88:4E:6B:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5e61f86e-07f0-4c60-adc0-fc68816ac866/0/9A25028550A48EFF7C98BF816A8488BE884E6B4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A25028550A48EFF7C98BF816A8488BE884E6B4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5e61f86e-07f0-4c60-adc0-fc68816ac866/0/3130332e35352e3231362e302f32342d3234203d3e20313333383234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.55.216.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:3e:73:d8:43:95:c4:69:ed:4c:b1:5e:16:c5:d6:41:23:69:
         6e:d4:e9:58:62:8f:6b:71:68:f4:71:bb:dd:8d:07:7c:07:c7:
         76:e5:1d:e0:0f:40:50:40:8a:32:d6:78:b4:5c:dc:4c:a1:d5:
         c5:e8:42:cc:6c:0d:33:34:97:df:ff:d7:4f:e0:6b:f9:bd:13:
         02:2c:2c:d6:ad:b7:34:b3:ab:bb:34:ed:7b:18:05:8c:79:36:
         03:9c:27:59:32:b0:a9:81:9b:02:01:ea:4f:46:8f:e7:9f:ac:
         b5:77:20:f6:73:bf:cd:b2:ff:90:9f:c8:b4:3c:c7:83:c5:26:
         7a:ed:26:a3:34:c2:04:e5:75:dc:b2:3a:31:7d:24:56:b1:f6:
         b0:67:15:09:d7:0f:48:72:3c:d5:62:3f:7c:cf:02:1e:1d:27:
         99:03:65:a3:17:3e:35:a2:0e:b4:0f:0c:cf:3f:cf:56:c8:29:
         19:5e:0d:29:12:e0:c4:b4:6f:7a:8b:91:f3:22:2b:a0:6c:15:
         27:b5:5b:f6:0c:37:25:f9:05:bd:d0:98:43:54:69:d1:8f:9f:
         50:86:eb:e1:20:2e:07:32:99:2d:97:ff:9c:49:ce:1d:56:cb:
         36:7e:35:ab:e9:b2:82:ed:e3:40:18:ab:3c:ef:78:a5:65:70:
         3e:4c:fa:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 04:17:09 2026 by rpki-client