Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/d36ab04d-68c7-4249-b109-46b28cf803f3/0/3130332e3130372e3137372e302f32342d3234203d3e20313530393434.roa
File:                     3130332e3130372e3137372e302f32342d3234203d3e20313530393434.roa (raw, json)
Hash identifier:          beCtemM4s/SA3SfDRr9e13l9xGpis0BmdDGhxecgHkk=
Subject key identifier:   EE:90:54:42:63:23:0F:91:A2:3F:DC:9F:FB:4B:04:79:F1:FA:D6:EE
Certificate issuer:       /CN=1D4A7562F096F3F753E388C14594BA75AE09E7F3
Certificate serial:       337481C8BB8A3F005FAB0F0DA06954C8668DB73F
Authority key identifier: 1D:4A:75:62:F0:96:F3:F7:53:E3:88:C1:45:94:BA:75:AE:09:E7:F3
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D4A7562F096F3F753E388C14594BA75AE09E7F3.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d36ab04d-68c7-4249-b109-46b28cf803f3/0/3130332e3130372e3137372e302f32342d3234203d3e20313530393434.roa
Signing time:             Tue 10 Mar 2026 02:00:03 +0000
ROA not before:           Tue 10 Mar 2026 01:55:03 +0000
ROA not after:            Tue 09 Mar 2027 02:00:03 +0000
asID:                     150944
IP address blocks:        103.107.177.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d36ab04d-68c7-4249-b109-46b28cf803f3/0/1D4A7562F096F3F753E388C14594BA75AE09E7F3.crl
                          rsync://repo-rpki.idnic.net/repo/d36ab04d-68c7-4249-b109-46b28cf803f3/0/1D4A7562F096F3F753E388C14594BA75AE09E7F3.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D4A7562F096F3F753E388C14594BA75AE09E7F3.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 28 Mar 2026 13:29:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:74:81:c8:bb:8a:3f:00:5f:ab:0f:0d:a0:69:54:c8:66:8d:b7:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1D4A7562F096F3F753E388C14594BA75AE09E7F3
        Validity
            Not Before: Mar 10 01:55:03 2026 GMT
            Not After : Mar  9 02:00:03 2027 GMT
        Subject: CN=EE90544263230F91A23FDC9FFB4B0479F1FAD6EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:34:57:11:bc:f1:68:11:aa:37:29:c1:b8:12:
                    cf:65:37:0d:dc:14:74:0d:b8:f8:f6:46:83:c3:f1:
                    b8:8a:34:ea:1c:36:8c:38:2e:88:d1:2d:54:b4:65:
                    d9:4c:93:a0:73:d3:73:d3:0f:b3:9b:ae:1a:dd:3d:
                    8d:be:36:ce:23:bc:2c:bf:da:1a:0e:7e:a5:bc:bb:
                    15:f5:04:96:5f:c8:9e:1f:df:68:3d:fa:63:c8:95:
                    52:96:1b:08:64:7f:fa:c1:2b:c6:5c:c2:b5:16:20:
                    f7:10:3a:fd:9b:a3:e5:ee:38:df:57:d3:1c:d2:e2:
                    fb:92:e0:4a:05:d7:0e:90:bd:88:d4:47:bb:8f:e0:
                    78:a1:18:0e:ae:f3:d3:d1:67:a0:18:16:9b:84:47:
                    59:da:8c:09:53:5d:01:18:5a:03:d6:d3:01:81:fe:
                    80:93:4c:a5:5a:85:01:dd:1b:97:32:11:ae:41:d6:
                    ee:05:14:d4:c1:b5:dd:62:37:60:c5:d1:16:bd:e1:
                    cc:c4:eb:d7:95:e3:5e:e3:2a:b4:87:07:cd:a4:6b:
                    08:ab:8f:06:cc:1d:b5:d8:b7:61:dd:7b:75:52:d1:
                    48:a9:bf:0a:75:40:b0:9b:e6:fb:f1:d4:cc:b5:81:
                    35:80:6d:a6:ad:24:94:69:8e:ff:a9:06:ce:a6:cf:
                    92:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:90:54:42:63:23:0F:91:A2:3F:DC:9F:FB:4B:04:79:F1:FA:D6:EE
            X509v3 Authority Key Identifier:
                keyid:1D:4A:75:62:F0:96:F3:F7:53:E3:88:C1:45:94:BA:75:AE:09:E7:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d36ab04d-68c7-4249-b109-46b28cf803f3/0/1D4A7562F096F3F753E388C14594BA75AE09E7F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D4A7562F096F3F753E388C14594BA75AE09E7F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d36ab04d-68c7-4249-b109-46b28cf803f3/0/3130332e3130372e3137372e302f32342d3234203d3e20313530393434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.107.177.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:fe:21:86:70:66:83:51:de:73:44:13:58:d9:88:43:6a:98:
         8d:02:c5:89:61:52:4f:80:00:7e:61:9b:60:65:3e:08:33:6a:
         c9:85:cd:9b:9d:c6:a8:a7:20:ae:c2:6a:0f:86:5b:42:95:01:
         e5:61:fc:f7:87:71:1c:b7:b6:39:c9:e7:0a:8a:00:f3:8a:d2:
         38:40:1b:22:fb:0d:9c:82:44:d9:10:1b:b8:f5:11:f7:de:2c:
         b4:11:45:4c:3f:26:a2:ef:67:3d:a3:6a:72:85:30:62:17:9f:
         a6:62:af:4b:0b:29:62:5d:99:96:0e:c5:ff:9a:34:03:da:a0:
         ad:2b:d1:4f:07:d8:93:89:35:82:eb:86:f1:25:6e:bf:9a:dc:
         68:e6:19:5d:8f:54:c4:9f:ec:28:85:8c:60:70:01:2e:ec:2a:
         38:35:2e:9b:5c:8f:65:42:a3:c9:39:87:5e:70:b8:49:83:bb:
         98:cf:97:5e:d0:c9:86:67:72:80:ed:e1:99:3f:28:e8:d4:49:
         76:73:fd:26:a6:39:32:6e:82:74:50:82:e5:fc:4b:55:f3:c0:
         6d:16:d7:de:f8:d4:f4:c5:e3:3c:7d:56:4a:3a:fe:89:1b:13:
         0a:a5:78:d8:af:20:66:b2:ad:39:58:cb:87:b7:fa:4c:67:b4:
         ad:0e:52:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:12:51 2026 by rpki-client