Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/3130332e3132342e3234362e302f32342d3234203d3e20313338303930.roa
File:                     3130332e3132342e3234362e302f32342d3234203d3e20313338303930.roa (raw, json)
Hash identifier:          b6oWETPAdWSTs2U94m5Fni4xEj1CKc77e+9vDwX4m1k=
Subject key identifier:   D1:5E:51:11:94:52:C3:B7:B1:87:25:E1:09:3E:D2:23:87:45:41:37
Certificate issuer:       /CN=9D25181C9096851A77EB95DA55649E08E3B7941B
Certificate serial:       5BDA3F431C42915ED99B217F950C27287BB7B3E2
Authority key identifier: 9D:25:18:1C:90:96:85:1A:77:EB:95:DA:55:64:9E:08:E3:B7:94:1B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9D25181C9096851A77EB95DA55649E08E3B7941B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/3130332e3132342e3234362e302f32342d3234203d3e20313338303930.roa
Signing time:             Thu 05 Mar 2026 02:00:00 +0000
ROA not before:           Thu 05 Mar 2026 01:55:00 +0000
ROA not after:            Thu 04 Mar 2027 02:00:00 +0000
asID:                     138090
IP address blocks:        103.124.246.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/9D25181C9096851A77EB95DA55649E08E3B7941B.crl
                          rsync://repo-rpki.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/9D25181C9096851A77EB95DA55649E08E3B7941B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9D25181C9096851A77EB95DA55649E08E3B7941B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 28 Mar 2026 13:36:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:da:3f:43:1c:42:91:5e:d9:9b:21:7f:95:0c:27:28:7b:b7:b3:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9D25181C9096851A77EB95DA55649E08E3B7941B
        Validity
            Not Before: Mar  5 01:55:00 2026 GMT
            Not After : Mar  4 02:00:00 2027 GMT
        Subject: CN=D15E51119452C3B7B18725E1093ED22387454137
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:3d:e9:56:c9:62:16:e8:81:c2:8b:fd:22:6e:
                    4b:cf:27:4d:86:de:eb:84:74:89:c1:79:b3:5a:15:
                    74:15:83:84:6c:fd:f5:9f:c0:86:e3:2d:4b:14:74:
                    31:ab:6a:49:d6:57:5a:b2:34:4a:ef:6e:93:4e:9b:
                    ca:a3:32:b6:8f:9b:92:51:83:07:fa:65:59:93:4d:
                    cd:5b:70:d2:ec:34:96:d0:51:c8:62:40:37:af:99:
                    5a:a5:23:88:c0:a9:70:80:76:58:ce:66:7d:da:09:
                    87:8b:30:47:99:c9:50:ec:74:b7:ec:37:50:da:f4:
                    23:5a:e1:e3:e3:24:d4:c4:62:f2:15:f9:e5:94:df:
                    e6:cb:db:72:9b:24:1d:fe:e2:8b:bd:65:66:ce:9d:
                    c8:be:0b:4c:8a:dc:2e:ee:58:dd:ae:46:fe:c2:23:
                    82:be:41:b8:3d:63:45:ce:46:07:e1:cb:7c:f7:41:
                    a3:79:ca:1b:7a:6e:b5:f6:8c:8e:19:e4:d9:32:49:
                    8f:fe:0f:21:9d:90:5d:3c:15:7d:8d:47:77:1c:08:
                    d5:5c:70:4a:f5:ef:e6:e1:0d:d6:83:e7:c8:2d:0b:
                    c9:9c:42:3c:de:19:36:38:4b:74:60:2c:6b:39:94:
                    2a:e4:ef:4e:43:4b:32:4c:fb:41:f4:32:40:b5:ff:
                    37:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:5E:51:11:94:52:C3:B7:B1:87:25:E1:09:3E:D2:23:87:45:41:37
            X509v3 Authority Key Identifier:
                keyid:9D:25:18:1C:90:96:85:1A:77:EB:95:DA:55:64:9E:08:E3:B7:94:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/9D25181C9096851A77EB95DA55649E08E3B7941B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9D25181C9096851A77EB95DA55649E08E3B7941B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/3130332e3132342e3234362e302f32342d3234203d3e20313338303930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.124.246.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:d7:7c:c4:d6:7e:dd:ed:27:70:25:70:ec:4d:61:36:20:8d:
         8e:ca:fb:46:14:94:17:df:95:d4:f7:b9:f7:26:27:2f:53:95:
         2a:30:1c:9c:1f:4d:fe:f3:46:b5:d2:4d:15:c7:e2:e5:bd:09:
         9b:f7:34:fd:c6:5b:c9:98:7d:66:9d:38:c8:60:93:59:c7:22:
         80:c1:12:22:cd:01:cb:62:cc:5d:9e:dc:c9:e4:11:97:72:39:
         aa:53:47:f2:cb:90:68:4f:ac:d0:50:b5:55:1b:87:d4:8c:9d:
         b6:fe:06:97:8c:6b:61:77:cb:99:4b:c3:f9:3c:83:8c:66:c9:
         8d:22:ab:6c:66:e9:77:c3:27:c3:d2:4d:62:1d:fc:23:4d:58:
         74:10:d3:8c:e2:b7:62:ca:4e:ce:8e:da:cd:cf:79:f0:5e:6f:
         15:4a:79:86:a9:92:2b:2b:27:b1:10:44:60:31:ed:b3:43:ce:
         b9:f8:fe:21:5d:3c:0b:a1:fe:4a:2d:f5:2d:3d:2f:59:3f:f0:
         9f:a8:62:9a:b6:24:96:8f:b0:2e:dc:4a:4a:ee:37:61:a7:cb:
         d1:cf:93:ca:75:1a:79:54:80:d4:e7:de:a2:49:71:e2:bb:b6:
         e3:37:18:65:18:6a:b8:09:11:49:49:bd:1e:fb:9c:5d:11:cf:
         74:19:5b:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 02:16:11 2026 by rpki-client