Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/d9093ad6-b115-4f10-88d7-6e57dcfd3223/0/3130332e3136362e33302e302f32342d3234203d3e20313431393430.roa
File:                     3130332e3136362e33302e302f32342d3234203d3e20313431393430.roa (raw, json)
Hash identifier:          GQfq9Jgh4YCNVXzNyqjJq4E3X1BoA8BlDAILDcTNZFw=
Subject key identifier:   3C:7C:5E:BB:15:7B:FC:31:43:0A:24:D5:EF:DF:0D:4F:27:50:C8:66
Certificate issuer:       /CN=4F50242149BE32942675690F53BF8FE81E99F74D
Certificate serial:       45293977970F5429719DB46DB686F35C3BD04DB8
Authority key identifier: 4F:50:24:21:49:BE:32:94:26:75:69:0F:53:BF:8F:E8:1E:99:F7:4D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F50242149BE32942675690F53BF8FE81E99F74D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d9093ad6-b115-4f10-88d7-6e57dcfd3223/0/3130332e3136362e33302e302f32342d3234203d3e20313431393430.roa
Signing time:             Wed 04 Mar 2026 11:00:02 +0000
ROA not before:           Wed 04 Mar 2026 10:55:02 +0000
ROA not after:            Wed 03 Mar 2027 11:00:02 +0000
asID:                     141940
IP address blocks:        103.166.30.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d9093ad6-b115-4f10-88d7-6e57dcfd3223/0/4F50242149BE32942675690F53BF8FE81E99F74D.crl
                          rsync://repo-rpki.idnic.net/repo/d9093ad6-b115-4f10-88d7-6e57dcfd3223/0/4F50242149BE32942675690F53BF8FE81E99F74D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F50242149BE32942675690F53BF8FE81E99F74D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 27 Mar 2026 22:29:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:29:39:77:97:0f:54:29:71:9d:b4:6d:b6:86:f3:5c:3b:d0:4d:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F50242149BE32942675690F53BF8FE81E99F74D
        Validity
            Not Before: Mar  4 10:55:02 2026 GMT
            Not After : Mar  3 11:00:02 2027 GMT
        Subject: CN=3C7C5EBB157BFC31430A24D5EFDF0D4F2750C866
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:67:ac:96:9e:67:a8:15:16:23:64:5d:18:4c:
                    04:f5:8a:ab:dd:26:90:77:bf:21:a1:51:eb:fa:42:
                    bc:a9:33:d6:74:e4:94:17:e6:16:4e:9a:4a:3f:b9:
                    f0:af:99:e6:dc:a7:c9:a9:af:fd:25:9f:26:cc:c7:
                    9c:ab:d5:cb:83:85:f0:5c:8d:7e:87:51:9e:25:e6:
                    6a:be:20:e7:3a:46:29:cf:fd:47:a1:79:e1:2d:ba:
                    01:90:e3:45:90:98:42:1a:5d:c2:3c:91:df:23:2b:
                    da:6b:6a:6f:ad:5e:33:47:fe:a8:00:80:6f:56:35:
                    e1:92:fb:35:8e:84:9b:53:b8:2d:66:b2:24:24:d0:
                    ad:4e:71:44:1c:0f:09:24:3e:ad:5c:6d:a7:d6:18:
                    c1:2e:1d:6a:53:5b:7c:e0:26:e1:2c:3f:65:f5:51:
                    29:b8:5d:cf:73:b5:37:ba:89:16:9e:45:b4:ad:d2:
                    0e:9b:d0:08:d8:41:4f:bf:c7:20:bb:75:de:3b:12:
                    7d:46:e0:4e:d8:7f:2c:64:b4:a5:c3:50:f8:45:4d:
                    55:06:e9:d5:f1:48:dd:8c:13:ef:22:85:f9:73:fc:
                    da:c5:ed:55:f0:b6:42:7d:0d:99:b2:43:85:92:f5:
                    7e:e1:e3:10:de:5b:ec:20:c6:bd:99:90:f8:f2:3e:
                    7b:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:7C:5E:BB:15:7B:FC:31:43:0A:24:D5:EF:DF:0D:4F:27:50:C8:66
            X509v3 Authority Key Identifier:
                keyid:4F:50:24:21:49:BE:32:94:26:75:69:0F:53:BF:8F:E8:1E:99:F7:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d9093ad6-b115-4f10-88d7-6e57dcfd3223/0/4F50242149BE32942675690F53BF8FE81E99F74D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F50242149BE32942675690F53BF8FE81E99F74D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d9093ad6-b115-4f10-88d7-6e57dcfd3223/0/3130332e3136362e33302e302f32342d3234203d3e20313431393430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.166.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:c3:a5:00:1b:59:f6:79:9e:38:6e:57:c6:9b:15:f1:6b:3f:
         fb:4f:26:0b:e7:b7:ba:7e:44:2a:40:ab:c0:80:97:6f:3e:8e:
         1d:a2:96:75:b3:75:dc:22:7d:72:ee:98:dc:68:df:9e:01:ce:
         3a:9f:87:b9:d5:15:51:23:79:96:67:33:6d:59:77:af:8e:2f:
         24:db:dd:51:27:7d:3a:80:ee:8c:05:ce:b6:94:46:3c:83:05:
         18:8d:68:91:4f:c9:61:a6:45:1a:c2:9c:f0:fe:a8:83:bb:41:
         62:f3:b1:d2:e5:a5:55:7e:be:1d:c2:72:fd:a4:be:05:97:d1:
         50:de:d2:51:9b:6a:df:2f:be:bf:48:e9:72:7b:23:5f:59:8a:
         71:c5:07:63:ba:a2:e4:79:23:6b:54:b9:df:3c:0f:9a:ef:34:
         9f:25:21:3b:1b:02:9a:67:41:fc:76:4f:af:19:58:d0:b2:c4:
         40:ba:65:fc:de:00:2e:fc:85:d7:f0:7f:0f:e6:5e:dc:13:c2:
         cb:66:74:5b:6b:15:27:5a:90:53:b3:82:05:12:a0:d4:78:a8:
         80:da:91:d5:a8:23:46:1c:cd:09:0c:08:66:55:c2:93:d1:89:
         b7:3a:25:b4:5b:bb:08:33:d3:04:c0:dd:be:5a:97:e1:75:95:
         dc:35:60:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:17:52 2026 by rpki-client