Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/ac45c22c-275b-4295-b453-60a783b9c42a/0/3130332e3133362e342e302f32322d3234203d3e203338333230.roa
File:                     3130332e3133362e342e302f32322d3234203d3e203338333230.roa (raw, json)
Hash identifier:          o9HU0CrVTQycJgLZz8HUkkMxGbR9NaWzzFPR3fhFim4=
Subject key identifier:   C6:8B:83:FE:E2:46:27:6F:05:AB:42:BF:24:55:F3:04:26:85:3D:01
Certificate issuer:       /CN=1F56B4FADE1163027086547FBCB424EDF45191FD
Certificate serial:       169571F540425E32CD6EFD19DC3A65DBBE8B8A
Authority key identifier: 1F:56:B4:FA:DE:11:63:02:70:86:54:7F:BC:B4:24:ED:F4:51:91:FD
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F56B4FADE1163027086547FBCB424EDF45191FD.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ac45c22c-275b-4295-b453-60a783b9c42a/0/3130332e3133362e342e302f32322d3234203d3e203338333230.roa
Signing time:             Thu 19 Mar 2026 03:02:43 +0000
ROA not before:           Thu 19 Mar 2026 02:57:43 +0000
ROA not after:            Thu 18 Mar 2027 03:02:43 +0000
asID:                     38320
IP address blocks:        103.136.4.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ac45c22c-275b-4295-b453-60a783b9c42a/0/1F56B4FADE1163027086547FBCB424EDF45191FD.crl
                          rsync://repo-rpki.idnic.net/repo/ac45c22c-275b-4295-b453-60a783b9c42a/0/1F56B4FADE1163027086547FBCB424EDF45191FD.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F56B4FADE1163027086547FBCB424EDF45191FD.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 28 Mar 2026 17:30:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:95:71:f5:40:42:5e:32:cd:6e:fd:19:dc:3a:65:db:be:8b:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F56B4FADE1163027086547FBCB424EDF45191FD
        Validity
            Not Before: Mar 19 02:57:43 2026 GMT
            Not After : Mar 18 03:02:43 2027 GMT
        Subject: CN=C68B83FEE246276F05AB42BF2455F30426853D01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:c6:30:6d:f0:43:bb:4a:38:01:92:57:e3:f0:
                    92:51:2a:69:01:fe:51:07:7f:38:cf:ef:c9:6d:a4:
                    b6:d1:04:01:aa:f3:a1:d6:cc:cd:54:15:52:35:63:
                    78:96:35:bd:af:f0:d5:b8:6e:9d:14:c2:73:f2:da:
                    84:07:dc:a3:07:b0:9c:f5:ce:21:af:1c:5d:eb:a8:
                    60:cf:3b:15:6d:59:0f:fc:0b:87:25:c0:15:90:e2:
                    3a:31:a8:f2:83:6b:48:e1:23:c5:8b:17:28:0d:3f:
                    63:e7:a9:2e:8d:51:dc:9a:1d:7c:d3:23:b9:0b:05:
                    75:dd:db:18:db:14:fa:3d:a2:df:f0:02:50:f0:61:
                    af:e3:b1:2b:a6:0c:ef:15:77:9c:7c:14:7c:13:04:
                    44:5e:9c:4f:f0:09:9b:69:54:84:e1:4b:02:a1:df:
                    0d:70:1f:b1:30:ec:95:59:62:16:38:f4:a7:27:8b:
                    90:b7:12:9f:7e:9b:0b:f3:45:5d:52:99:65:a6:91:
                    61:52:76:84:0b:22:0b:6e:43:ba:72:80:34:d1:96:
                    15:0e:75:d4:bd:c2:fa:bf:20:19:ca:7f:de:03:41:
                    c6:53:e3:9a:4c:41:82:b0:1f:b4:ec:79:d8:69:14:
                    44:75:a4:ec:e8:ee:d7:cb:24:b3:7b:18:70:09:34:
                    8f:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:8B:83:FE:E2:46:27:6F:05:AB:42:BF:24:55:F3:04:26:85:3D:01
            X509v3 Authority Key Identifier:
                keyid:1F:56:B4:FA:DE:11:63:02:70:86:54:7F:BC:B4:24:ED:F4:51:91:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ac45c22c-275b-4295-b453-60a783b9c42a/0/1F56B4FADE1163027086547FBCB424EDF45191FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F56B4FADE1163027086547FBCB424EDF45191FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ac45c22c-275b-4295-b453-60a783b9c42a/0/3130332e3133362e342e302f32322d3234203d3e203338333230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.136.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         e8:46:e9:01:1d:82:27:1e:f1:69:ca:ce:50:0c:05:15:51:00:
         8a:92:b2:05:09:b7:1c:ab:bf:9e:a7:a3:df:2e:5d:65:82:16:
         4a:88:0c:f5:f1:65:90:08:82:59:f0:66:41:47:c4:dc:bc:4c:
         7e:95:9a:3f:d4:83:86:14:45:b9:c7:85:58:a7:9f:b0:40:22:
         a1:de:f8:1e:24:21:ba:4c:ba:4d:cc:0b:59:4d:53:fb:ec:d5:
         5d:bc:73:c5:3b:1e:93:bd:1d:b0:5b:b1:48:61:3b:f5:cb:a5:
         89:26:60:a6:f7:a3:36:39:56:7e:c1:ef:15:21:0e:31:23:d1:
         d8:0f:1c:c3:df:39:7c:11:cb:41:ae:41:98:9b:f9:a5:8a:eb:
         d9:19:20:45:ab:f2:0a:39:f2:77:6f:e4:d5:00:d3:1f:11:82:
         b4:bb:39:97:b3:7b:a5:0f:4f:48:60:f1:8e:22:78:9f:ac:16:
         1b:86:6b:47:08:eb:06:7c:2a:02:8b:88:e0:f0:09:1f:c4:b2:
         8f:72:51:82:c4:eb:82:e6:9b:b3:a0:26:62:30:02:2d:a2:71:
         81:eb:9e:f4:9e:e2:d1:48:5a:62:cc:98:2c:a4:c4:81:b8:cd:
         2c:8a:99:e4:9c:2b:ed:43:b0:3d:e7:c3:16:be:91:ae:9e:ff:
         ca:bd:79:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:47:57 2026 by rpki-client