Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/caf50383-7d04-47c8-aaeb-f7e766937731/0/3130332e3135302e33322e302f32332d3234203d3e20313430333930.roa
File:                     3130332e3135302e33322e302f32332d3234203d3e20313430333930.roa (raw, json)
Hash identifier:          4gi3J8FjPJTNq/5daFRZnZCK3lpxCNHJRNdMzqPgZFU=
Subject key identifier:   E3:57:97:F0:ED:6F:71:41:FB:61:8A:9B:B9:45:B8:EB:27:BC:2C:61
Certificate issuer:       /CN=034E0FA5B6C1B4E1564924CEE0DCB6A16352DFF9
Certificate serial:       69D891A5DF95420A28B944FFF804E4ECA2858187
Authority key identifier: 03:4E:0F:A5:B6:C1:B4:E1:56:49:24:CE:E0:DC:B6:A1:63:52:DF:F9
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/034E0FA5B6C1B4E1564924CEE0DCB6A16352DFF9.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/caf50383-7d04-47c8-aaeb-f7e766937731/0/3130332e3135302e33322e302f32332d3234203d3e20313430333930.roa
Signing time:             Mon 09 Mar 2026 20:00:02 +0000
ROA not before:           Mon 09 Mar 2026 19:55:02 +0000
ROA not after:            Mon 08 Mar 2027 20:00:02 +0000
asID:                     140390
IP address blocks:        103.150.32.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/caf50383-7d04-47c8-aaeb-f7e766937731/0/034E0FA5B6C1B4E1564924CEE0DCB6A16352DFF9.crl
                          rsync://repo-rpki.idnic.net/repo/caf50383-7d04-47c8-aaeb-f7e766937731/0/034E0FA5B6C1B4E1564924CEE0DCB6A16352DFF9.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/034E0FA5B6C1B4E1564924CEE0DCB6A16352DFF9.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 28 Mar 2026 17:39:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:d8:91:a5:df:95:42:0a:28:b9:44:ff:f8:04:e4:ec:a2:85:81:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=034E0FA5B6C1B4E1564924CEE0DCB6A16352DFF9
        Validity
            Not Before: Mar  9 19:55:02 2026 GMT
            Not After : Mar  8 20:00:02 2027 GMT
        Subject: CN=E35797F0ED6F7141FB618A9BB945B8EB27BC2C61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:85:3e:e1:ae:37:2c:82:40:47:a8:be:fe:e2:
                    99:72:1b:b8:39:f4:34:67:7a:45:7f:af:4a:12:1f:
                    4e:25:e3:3f:7d:d9:15:1c:03:b1:32:ae:a6:de:a3:
                    54:70:e8:c8:2e:79:40:5f:45:56:29:39:95:41:f0:
                    f2:1d:de:2d:8b:ed:9a:89:58:5e:1f:cb:93:2d:b0:
                    57:a2:40:ec:ad:b0:1c:c6:e2:76:ff:c2:37:ab:ab:
                    77:bc:39:b2:98:41:bb:9c:d7:39:93:1c:37:84:8b:
                    63:a7:e0:82:8b:ae:f6:90:e6:39:a1:49:40:c3:0b:
                    3b:9b:32:a6:c3:62:eb:91:c6:da:a6:6d:32:66:62:
                    1c:8c:db:c6:42:9e:9b:b7:2f:54:6c:0d:f6:bd:94:
                    b2:ab:ef:69:23:8c:7f:a1:81:9a:fb:3d:09:a7:af:
                    ae:4d:37:76:69:08:e2:70:b5:e9:a7:d4:e0:0b:42:
                    5d:83:80:63:be:d9:c4:ec:5a:5d:a1:c8:8a:ac:ae:
                    19:4c:64:df:8d:f7:6a:12:59:2d:5d:e0:da:d4:0b:
                    0c:1a:80:fb:de:14:6b:97:f0:24:5d:bf:a0:9a:a1:
                    46:eb:28:1f:94:e2:dc:49:cd:7a:1a:b5:34:68:39:
                    74:c1:89:0d:b4:8d:6c:f0:ea:6b:fd:61:46:bb:8b:
                    f5:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:57:97:F0:ED:6F:71:41:FB:61:8A:9B:B9:45:B8:EB:27:BC:2C:61
            X509v3 Authority Key Identifier:
                keyid:03:4E:0F:A5:B6:C1:B4:E1:56:49:24:CE:E0:DC:B6:A1:63:52:DF:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/caf50383-7d04-47c8-aaeb-f7e766937731/0/034E0FA5B6C1B4E1564924CEE0DCB6A16352DFF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/034E0FA5B6C1B4E1564924CEE0DCB6A16352DFF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/caf50383-7d04-47c8-aaeb-f7e766937731/0/3130332e3135302e33322e302f32332d3234203d3e20313430333930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.150.32.0/23

    Signature Algorithm: sha256WithRSAEncryption
         68:75:8a:45:46:76:04:a9:94:a8:12:12:fb:17:d3:06:e6:89:
         f7:43:26:73:bb:35:03:da:d2:59:0f:35:99:83:ed:8e:97:8c:
         61:f9:e0:2d:eb:65:7f:c1:34:df:28:d6:3e:3f:cc:3e:8f:e5:
         08:87:2f:7f:c6:57:ec:a4:b3:c9:5a:aa:01:6d:c0:80:19:d5:
         a4:69:7f:32:75:78:b6:d2:5c:43:b9:ff:2c:4e:10:88:28:cb:
         d5:d3:e4:d3:13:5b:e1:c1:39:c0:08:81:22:56:1f:01:2b:b2:
         df:e3:20:c1:6a:86:29:8e:b4:b4:5c:87:f5:00:25:42:5b:5f:
         15:4f:54:99:5d:f3:86:69:96:58:a1:07:6f:7e:e3:b9:88:ba:
         1d:27:cd:39:96:8e:15:e6:c0:1a:12:b3:4b:77:16:61:38:49:
         d5:ac:65:d8:c0:ba:e6:f1:83:5a:5c:e8:48:ff:99:3d:6f:9d:
         ca:bd:93:f3:c6:50:79:0d:98:d6:06:c3:10:a4:b6:f6:9d:96:
         26:d8:4a:ee:47:77:48:f1:22:0a:87:1d:83:39:fb:18:08:6b:
         1a:6f:66:6c:39:22:89:2e:25:3b:e9:0a:33:09:60:9e:0f:0e:
         a3:27:b9:24:ae:e6:07:3f:e7:c9:f9:a4:91:d6:2f:df:49:a7:
         d0:57:70:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:20:04 2026 by rpki-client