Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/021f999b-abce-4fa9-8e79-93b9c5e454e1/0/3130332e3139302e34362e302f32342d3234203d3e2039333431.roa
File:                     3130332e3139302e34362e302f32342d3234203d3e2039333431.roa (raw, json)
Hash identifier:          EGwoINQVOI9gFtFuDWwGL5rRPIo++Hddw3luUUPg8Qw=
Subject key identifier:   B5:BE:AE:D3:58:38:B4:30:46:A0:C4:CF:11:D9:78:91:A4:FD:E0:BB
Certificate issuer:       /CN=5C7240CA135C93835F95A8E1F3526942D3214EC2
Certificate serial:       6055049E07A8D6A1270B7DC4C252BCECE6D605FC
Authority key identifier: 5C:72:40:CA:13:5C:93:83:5F:95:A8:E1:F3:52:69:42:D3:21:4E:C2
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C7240CA135C93835F95A8E1F3526942D3214EC2.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/021f999b-abce-4fa9-8e79-93b9c5e454e1/0/3130332e3139302e34362e302f32342d3234203d3e2039333431.roa
Signing time:             Wed 11 Mar 2026 06:00:00 +0000
ROA not before:           Wed 11 Mar 2026 05:55:00 +0000
ROA not after:            Wed 10 Mar 2027 06:00:00 +0000
asID:                     9341
IP address blocks:        103.190.46.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/021f999b-abce-4fa9-8e79-93b9c5e454e1/0/5C7240CA135C93835F95A8E1F3526942D3214EC2.crl
                          rsync://repo-rpki.idnic.net/repo/021f999b-abce-4fa9-8e79-93b9c5e454e1/0/5C7240CA135C93835F95A8E1F3526942D3214EC2.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C7240CA135C93835F95A8E1F3526942D3214EC2.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 23 Mar 2026 06:41:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:55:04:9e:07:a8:d6:a1:27:0b:7d:c4:c2:52:bc:ec:e6:d6:05:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5C7240CA135C93835F95A8E1F3526942D3214EC2
        Validity
            Not Before: Mar 11 05:55:00 2026 GMT
            Not After : Mar 10 06:00:00 2027 GMT
        Subject: CN=B5BEAED35838B43046A0C4CF11D97891A4FDE0BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:18:35:56:f5:4e:fd:af:b7:b8:4d:2c:39:db:
                    e3:9e:7a:b5:f5:99:c0:ac:5c:80:a5:ef:20:e8:f0:
                    87:11:bf:f3:fe:a6:95:d2:79:ff:7a:e8:7c:a5:01:
                    e2:7c:d9:a4:a3:0b:7b:ef:d7:c7:b0:22:37:0b:3f:
                    8f:82:58:80:28:1d:ca:d0:6f:7e:f2:88:fa:fa:cf:
                    a6:5a:42:a9:17:40:aa:fb:d7:5c:7a:21:1c:7d:28:
                    21:43:4d:2b:52:47:e6:7a:24:2f:bd:1e:2b:f9:af:
                    05:b8:36:17:63:53:9a:9f:71:31:0f:8a:19:97:24:
                    7d:99:06:12:bf:74:29:91:ff:b6:74:8e:66:08:4b:
                    34:09:d4:cb:65:0c:2b:45:fc:bd:22:87:5c:38:23:
                    b9:e7:64:c5:72:26:e1:39:f6:4c:18:92:34:e6:05:
                    c6:85:f4:df:9d:35:8b:c6:0b:7f:18:66:7a:29:05:
                    50:17:ee:3b:2f:7f:87:a4:85:8c:60:de:e7:be:ec:
                    1c:ae:68:b2:57:29:d7:d5:3e:54:9f:7b:27:7b:cd:
                    c2:4c:fe:4b:86:b9:f0:b2:91:af:7e:70:c5:08:b0:
                    41:d1:39:e3:e0:8a:11:93:89:54:ae:8b:22:44:fc:
                    45:63:04:f2:e5:55:10:40:53:9b:75:7b:87:5e:57:
                    0b:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:BE:AE:D3:58:38:B4:30:46:A0:C4:CF:11:D9:78:91:A4:FD:E0:BB
            X509v3 Authority Key Identifier:
                keyid:5C:72:40:CA:13:5C:93:83:5F:95:A8:E1:F3:52:69:42:D3:21:4E:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/021f999b-abce-4fa9-8e79-93b9c5e454e1/0/5C7240CA135C93835F95A8E1F3526942D3214EC2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C7240CA135C93835F95A8E1F3526942D3214EC2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/021f999b-abce-4fa9-8e79-93b9c5e454e1/0/3130332e3139302e34362e302f32342d3234203d3e2039333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.190.46.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:2b:d8:d1:73:5b:ee:97:26:a9:75:59:94:93:99:bf:d7:21:
         6b:f6:1d:21:d2:fc:fb:47:c4:22:e0:0a:39:2f:9c:b9:2c:8b:
         98:05:ca:28:64:05:5e:29:98:35:5a:61:96:2c:3a:8b:4c:d0:
         6b:51:8e:ec:b9:8d:cb:09:de:42:54:6f:67:e3:7d:aa:c9:7b:
         b4:70:1b:c3:46:95:8a:b8:85:d4:06:c2:6d:e3:56:fd:45:59:
         de:ff:31:7e:97:81:99:80:1c:9f:4c:1b:c9:50:d7:ca:b5:b2:
         7c:d3:02:0b:35:28:c4:19:b0:c5:76:ee:77:9a:49:11:00:e3:
         25:6a:4e:8c:01:51:bc:d8:03:d1:61:ce:04:e5:6c:38:4f:43:
         6b:61:e9:45:53:8f:68:c0:43:94:2b:02:ad:74:10:a1:f9:4a:
         4e:67:bb:61:d0:ec:80:f3:e0:df:be:a9:07:62:10:19:23:da:
         8c:39:31:31:69:a8:d0:1c:f2:4d:a2:40:d1:e1:57:5f:80:67:
         d5:de:22:6f:14:e0:93:16:b3:2a:cd:00:02:95:65:87:f9:67:
         ed:29:af:c7:f9:d3:18:a5:85:74:ce:02:7f:a3:16:03:d2:0b:
         7d:b7:2c:2b:8f:05:3d:06:e0:69:02:9a:09:7e:c7:e1:d7:2c:
         be:53:8f:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 20 10:57:11 2026 by rpki-client