Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/8ab3c03d-2e2e-4897-869b-21ce48601619/0/3130332e3136322e3135332e302f32342d3234203d3e20313431363630.roa
File:                     3130332e3136322e3135332e302f32342d3234203d3e20313431363630.roa (raw, json)
Hash identifier:          qoBpMRmpRtbQKjYwfY3kpPKBcu0qLy5Xmpu8A4tgZ7k=
Subject key identifier:   80:E6:43:81:DA:75:74:F3:CB:DA:D3:75:0E:D8:2D:D9:6F:6C:78:09
Certificate issuer:       /CN=83906AB18A49EC17ADD841F2072FDC55E0EC22F6
Certificate serial:       44F7D165F3011E00166CB9409CA4139E607E68FA
Authority key identifier: 83:90:6A:B1:8A:49:EC:17:AD:D8:41:F2:07:2F:DC:55:E0:EC:22:F6
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/83906AB18A49EC17ADD841F2072FDC55E0EC22F6.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8ab3c03d-2e2e-4897-869b-21ce48601619/0/3130332e3136322e3135332e302f32342d3234203d3e20313431363630.roa
Signing time:             Tue 10 Mar 2026 06:00:02 +0000
ROA not before:           Tue 10 Mar 2026 05:55:02 +0000
ROA not after:            Tue 09 Mar 2027 06:00:02 +0000
asID:                     141660
IP address blocks:        103.162.153.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8ab3c03d-2e2e-4897-869b-21ce48601619/0/83906AB18A49EC17ADD841F2072FDC55E0EC22F6.crl
                          rsync://repo-rpki.idnic.net/repo/8ab3c03d-2e2e-4897-869b-21ce48601619/0/83906AB18A49EC17ADD841F2072FDC55E0EC22F6.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/83906AB18A49EC17ADD841F2072FDC55E0EC22F6.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 27 Mar 2026 18:47:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:f7:d1:65:f3:01:1e:00:16:6c:b9:40:9c:a4:13:9e:60:7e:68:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83906AB18A49EC17ADD841F2072FDC55E0EC22F6
        Validity
            Not Before: Mar 10 05:55:02 2026 GMT
            Not After : Mar  9 06:00:02 2027 GMT
        Subject: CN=80E64381DA7574F3CBDAD3750ED82DD96F6C7809
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:0a:bf:94:b3:f9:2d:d7:2a:9e:1e:27:7b:07:
                    0d:66:e0:0b:e1:dd:5e:79:14:8c:13:7e:06:13:93:
                    53:ab:99:b4:4e:e7:9f:b7:23:d7:ff:f3:c2:88:94:
                    01:25:3e:ad:81:15:53:ff:8b:4b:d9:65:1f:2f:c7:
                    95:ca:ee:43:1c:17:5d:9a:5e:e0:44:b5:c7:c8:40:
                    0e:c1:cf:19:13:2d:59:d8:55:75:31:c4:fa:43:86:
                    f1:7b:83:b6:89:b0:fb:d6:47:c0:d9:8c:56:83:7e:
                    e4:3c:bc:fd:cd:76:80:68:69:c5:15:70:b7:5f:43:
                    8d:9c:c9:96:b4:e5:c1:2e:02:f7:7b:cb:48:da:5c:
                    b5:a5:93:08:c3:df:56:8c:c1:c0:c7:fc:5d:c6:f8:
                    06:21:3b:52:23:64:67:8a:97:c7:2b:0d:e4:5e:4c:
                    de:e9:19:b6:55:9f:c9:0c:f9:7f:1e:a1:a9:5b:a2:
                    03:e0:5c:9b:05:ae:63:74:71:0b:b7:f7:f9:ac:e3:
                    62:29:d4:89:6e:de:ea:36:c8:fa:97:da:6f:ac:0b:
                    ac:d6:bb:68:3c:56:e2:df:83:45:39:48:19:25:24:
                    49:9a:34:19:40:35:44:75:cf:19:60:e3:5a:31:e8:
                    5e:e2:79:40:32:9e:ac:c6:f8:97:ee:de:59:cb:f0:
                    5a:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:E6:43:81:DA:75:74:F3:CB:DA:D3:75:0E:D8:2D:D9:6F:6C:78:09
            X509v3 Authority Key Identifier:
                keyid:83:90:6A:B1:8A:49:EC:17:AD:D8:41:F2:07:2F:DC:55:E0:EC:22:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8ab3c03d-2e2e-4897-869b-21ce48601619/0/83906AB18A49EC17ADD841F2072FDC55E0EC22F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/83906AB18A49EC17ADD841F2072FDC55E0EC22F6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8ab3c03d-2e2e-4897-869b-21ce48601619/0/3130332e3136322e3135332e302f32342d3234203d3e20313431363630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.162.153.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:c8:cd:3d:b5:c9:38:43:43:43:c4:3a:59:71:c8:8f:2d:59:
         28:a4:61:ff:37:e5:47:eb:36:24:69:03:07:d3:6b:ff:2f:8d:
         a8:51:57:54:ec:94:07:57:a6:52:3a:e6:43:7f:97:bc:b6:61:
         de:b4:d0:8d:57:b2:2a:3b:4d:6a:f0:d1:35:9a:0f:b7:bd:b2:
         69:f0:f6:5b:52:41:6d:6a:a1:e6:4b:5d:21:b6:73:7e:8f:6e:
         61:e0:21:a2:55:52:f4:bc:e4:c7:b7:c3:22:99:5b:9c:af:f5:
         55:b2:06:56:25:59:a4:e8:b0:2d:e2:2c:90:34:fb:38:4d:7c:
         e0:bc:ca:29:28:12:8a:63:58:7b:dd:ed:58:f2:34:b4:a3:8c:
         de:ec:e1:cf:81:89:6c:4f:c5:79:84:39:b5:32:6a:d4:42:4b:
         a3:b0:95:f8:15:3e:f0:83:b3:b0:24:75:aa:75:96:57:fd:d2:
         5c:aa:89:9b:ac:f6:6e:e7:10:58:9b:be:6f:70:52:e7:74:f2:
         46:d5:96:08:41:1b:d4:29:c4:35:6a:86:b2:78:ad:60:09:2a:
         ab:b3:cd:58:3d:ef:ff:e3:65:d1:25:02:f0:f8:b3:c5:4b:59:
         12:d0:59:cc:6d:02:85:aa:ea:9a:ba:84:14:59:04:f9:ae:2f:
         a8:fa:7e:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:11:20 2026 by rpki-client