Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c30c8f86-bcd5-4b7a-a9b1-465ef0c9f87a/0/3130332e3230352e35362e302f32332d3233203d3e20313334363339.roa
File:                     3130332e3230352e35362e302f32332d3233203d3e20313334363339.roa (raw, json)
Hash identifier:          oUmyAqWBCyYKBofz2DnTh0nCs+4QdNXeqAbkeSKTtJc=
Subject key identifier:   B3:95:D0:AD:BB:79:2F:B4:BC:2A:6B:06:16:45:89:A5:A2:4E:2A:B1
Certificate issuer:       /CN=15B96A3BCE4C10C17F4BDB7700A33F886ACD8717
Certificate serial:       0BE3500C61D758AD15695872D97DED07D3CA8541
Authority key identifier: 15:B9:6A:3B:CE:4C:10:C1:7F:4B:DB:77:00:A3:3F:88:6A:CD:87:17
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/15B96A3BCE4C10C17F4BDB7700A33F886ACD8717.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c30c8f86-bcd5-4b7a-a9b1-465ef0c9f87a/0/3130332e3230352e35362e302f32332d3233203d3e20313334363339.roa
Signing time:             Thu 12 Mar 2026 15:00:01 +0000
ROA not before:           Thu 12 Mar 2026 14:55:01 +0000
ROA not after:            Thu 11 Mar 2027 15:00:01 +0000
asID:                     134639
IP address blocks:        103.205.56.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c30c8f86-bcd5-4b7a-a9b1-465ef0c9f87a/0/15B96A3BCE4C10C17F4BDB7700A33F886ACD8717.crl
                          rsync://repo-rpki.idnic.net/repo/c30c8f86-bcd5-4b7a-a9b1-465ef0c9f87a/0/15B96A3BCE4C10C17F4BDB7700A33F886ACD8717.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/15B96A3BCE4C10C17F4BDB7700A33F886ACD8717.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 28 Mar 2026 03:39:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:e3:50:0c:61:d7:58:ad:15:69:58:72:d9:7d:ed:07:d3:ca:85:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15B96A3BCE4C10C17F4BDB7700A33F886ACD8717
        Validity
            Not Before: Mar 12 14:55:01 2026 GMT
            Not After : Mar 11 15:00:01 2027 GMT
        Subject: CN=B395D0ADBB792FB4BC2A6B06164589A5A24E2AB1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:9d:f4:8f:e5:e7:96:63:7e:c1:72:1a:8d:a2:
                    58:8b:54:31:f7:d9:81:78:9b:f8:6c:dc:8d:5d:b3:
                    c1:8d:da:4b:39:80:14:51:a8:3d:3d:b2:76:ba:cf:
                    c0:61:fe:c1:f1:18:31:a3:f3:23:c2:61:e8:6c:62:
                    27:3f:cc:58:9e:22:2f:bb:24:1d:06:25:74:16:f5:
                    28:dc:26:63:f5:9a:ee:00:02:11:a2:bc:a3:9c:d0:
                    47:b9:f8:12:fa:70:5e:85:3c:a1:60:88:2e:e3:e6:
                    cb:ed:55:50:97:3d:03:0f:48:35:41:39:41:f2:92:
                    75:f9:17:7e:16:68:cd:f1:44:f7:de:ee:a0:ee:2e:
                    97:43:8f:40:5d:ff:20:fb:09:ea:b3:ad:c8:b6:29:
                    f8:29:29:f6:db:e4:e6:d0:aa:5b:17:00:85:f4:07:
                    b3:c0:a0:3a:b4:33:f0:a2:f8:30:d7:72:4c:28:62:
                    9c:0e:68:28:b6:f9:40:ca:f8:80:c1:a0:b8:73:5c:
                    cb:86:b8:b3:56:19:b3:1b:09:c8:4f:f8:04:6e:34:
                    41:02:af:1b:20:59:eb:ea:43:c3:19:eb:d0:14:f5:
                    f1:36:93:be:67:0c:dc:ff:cb:b7:14:e6:41:cd:93:
                    07:95:75:c8:b8:d3:0b:10:af:1a:21:d9:c1:d8:c6:
                    6c:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:95:D0:AD:BB:79:2F:B4:BC:2A:6B:06:16:45:89:A5:A2:4E:2A:B1
            X509v3 Authority Key Identifier:
                keyid:15:B9:6A:3B:CE:4C:10:C1:7F:4B:DB:77:00:A3:3F:88:6A:CD:87:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c30c8f86-bcd5-4b7a-a9b1-465ef0c9f87a/0/15B96A3BCE4C10C17F4BDB7700A33F886ACD8717.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/15B96A3BCE4C10C17F4BDB7700A33F886ACD8717.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c30c8f86-bcd5-4b7a-a9b1-465ef0c9f87a/0/3130332e3230352e35362e302f32332d3233203d3e20313334363339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.205.56.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2d:75:4b:09:34:78:ec:7d:18:5e:f0:36:76:31:58:f6:fd:da:
         73:0c:9a:52:fe:cf:c4:b0:c8:a7:c3:e0:49:7b:c0:c8:fb:86:
         d6:3d:34:67:8f:bc:1d:63:65:e0:46:45:a9:82:d7:80:55:b8:
         d1:87:2a:ee:82:27:0c:71:30:7e:1c:01:b4:9d:f3:0c:c7:73:
         c4:37:33:a0:f2:d7:2e:75:96:80:45:f8:e6:fd:c2:7f:10:3b:
         e1:51:03:00:7f:4b:0d:9a:51:70:96:8d:c8:f3:02:56:6e:a0:
         1c:c0:50:41:37:98:49:6d:fc:ae:10:85:92:3c:a3:d3:16:02:
         03:13:da:c0:a6:0b:37:74:69:1c:47:e4:66:d5:ca:b2:2d:20:
         00:25:02:53:2f:10:9c:ca:57:70:83:0a:9a:e8:e8:dc:69:94:
         bc:23:73:9d:b6:5c:b1:61:f7:d8:54:ba:a8:66:f2:25:23:9b:
         54:f0:a1:98:06:cb:9f:16:e6:01:d9:a9:b1:35:9d:99:43:ae:
         7d:02:5e:fe:b9:93:89:00:0a:47:a6:d6:f9:e9:7a:09:db:17:
         da:9e:a0:82:a2:89:ea:cf:6d:fb:b6:3b:89:a5:41:90:14:fb:
         dc:2f:96:36:cb:7e:db:02:30:d1:0d:6d:0c:c2:29:dd:be:a0:
         18:e7:c1:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 00:04:43 2026 by rpki-client