Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/1831eeb4-f357-45a7-9265-428b007a0270/0/3130332e3138392e3230372e302f32342d3234203d3e2039333431.roa
File:                     3130332e3138392e3230372e302f32342d3234203d3e2039333431.roa (raw, json)
Hash identifier:          /OiaatiAFJjYmCuKDfs8T2psl4m0IWHb+mxkKWe3Vd0=
Subject key identifier:   6A:03:5D:16:36:E5:FE:8F:37:03:2C:39:77:6E:9C:B6:F1:53:57:DE
Certificate issuer:       /CN=69945C3869B3E429D4B0AECEDF9999EA5DAEE429
Certificate serial:       09CA9BCEAC96A4765CE3D35AE6CB498B84675518
Authority key identifier: 69:94:5C:38:69:B3:E4:29:D4:B0:AE:CE:DF:99:99:EA:5D:AE:E4:29
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69945C3869B3E429D4B0AECEDF9999EA5DAEE429.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/1831eeb4-f357-45a7-9265-428b007a0270/0/3130332e3138392e3230372e302f32342d3234203d3e2039333431.roa
Signing time:             Wed 04 Mar 2026 07:00:00 +0000
ROA not before:           Wed 04 Mar 2026 06:55:00 +0000
ROA not after:            Wed 03 Mar 2027 07:00:00 +0000
asID:                     9341
IP address blocks:        103.189.207.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/1831eeb4-f357-45a7-9265-428b007a0270/0/69945C3869B3E429D4B0AECEDF9999EA5DAEE429.crl
                          rsync://repo-rpki.idnic.net/repo/1831eeb4-f357-45a7-9265-428b007a0270/0/69945C3869B3E429D4B0AECEDF9999EA5DAEE429.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69945C3869B3E429D4B0AECEDF9999EA5DAEE429.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 23 Mar 2026 08:47:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:ca:9b:ce:ac:96:a4:76:5c:e3:d3:5a:e6:cb:49:8b:84:67:55:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69945C3869B3E429D4B0AECEDF9999EA5DAEE429
        Validity
            Not Before: Mar  4 06:55:00 2026 GMT
            Not After : Mar  3 07:00:00 2027 GMT
        Subject: CN=6A035D1636E5FE8F37032C39776E9CB6F15357DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:a8:5b:44:16:cd:82:f3:14:f7:db:49:2d:8a:
                    63:e8:88:72:e4:20:d7:8a:7a:80:b0:72:a0:44:0c:
                    95:34:0a:43:78:cc:19:2b:e0:5c:84:f9:65:24:9b:
                    16:96:5d:fd:d9:58:33:1a:dc:ae:23:0e:26:c0:75:
                    8c:b2:dc:bb:f9:ed:4a:a2:e1:6e:ab:79:9d:ef:da:
                    b8:d5:15:d6:77:06:81:a9:79:55:05:a5:99:fe:f3:
                    ee:2a:50:4b:5d:33:27:ae:ec:17:f5:e4:30:00:8d:
                    d0:96:77:b5:82:d5:ab:d4:41:d3:3d:33:12:7d:c5:
                    28:6b:d3:66:67:df:4f:76:0b:45:26:b0:ed:98:9e:
                    96:38:29:a3:a1:ab:b1:0a:a6:aa:51:34:e3:e9:3a:
                    81:3a:bb:06:56:b0:12:c5:1a:a5:eb:1f:ec:11:52:
                    3e:17:cf:3e:27:1d:17:b5:1f:4f:61:64:5c:ec:ee:
                    12:0f:b7:5c:f1:17:21:5a:28:a3:e2:85:9b:ce:e0:
                    09:8e:06:f6:90:83:54:af:9a:58:02:f2:22:77:dd:
                    5d:8e:70:a1:2a:b3:c3:7d:76:fe:db:9d:05:3c:97:
                    de:5e:66:39:95:7f:74:58:81:6f:b1:b9:7b:2d:4d:
                    0b:7f:5a:54:f6:ce:06:4f:6b:0a:5d:d2:e8:98:be:
                    9d:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:03:5D:16:36:E5:FE:8F:37:03:2C:39:77:6E:9C:B6:F1:53:57:DE
            X509v3 Authority Key Identifier:
                keyid:69:94:5C:38:69:B3:E4:29:D4:B0:AE:CE:DF:99:99:EA:5D:AE:E4:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/1831eeb4-f357-45a7-9265-428b007a0270/0/69945C3869B3E429D4B0AECEDF9999EA5DAEE429.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69945C3869B3E429D4B0AECEDF9999EA5DAEE429.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1831eeb4-f357-45a7-9265-428b007a0270/0/3130332e3138392e3230372e302f32342d3234203d3e2039333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.189.207.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:e0:75:3e:48:d8:ee:25:b4:fa:cc:4e:5b:da:e7:a7:a0:17:
         25:af:0b:6a:34:46:82:f1:ed:14:64:a2:fe:85:91:39:5b:42:
         f5:cf:24:39:38:49:61:58:51:67:4b:5c:e1:5c:cb:e7:c3:bb:
         5e:9c:a6:37:12:29:2b:8d:28:ea:85:7d:1e:94:51:15:0a:4d:
         94:0f:02:a9:84:16:42:83:62:a4:35:fe:a3:87:66:e0:29:52:
         3a:48:96:e9:f9:a1:c0:7d:bb:75:d3:cb:88:04:0f:95:9d:c8:
         fc:b3:66:d5:c5:74:cb:16:9b:43:eb:2d:c7:b6:0d:6a:f4:cc:
         72:7c:5b:b8:45:54:00:fe:80:a7:71:4e:31:86:10:c4:b7:9d:
         44:d8:57:ae:eb:8f:31:ab:60:4d:c5:45:15:d9:ca:e9:91:9d:
         05:f4:ef:4a:76:8a:0d:cb:a2:60:b4:9e:40:4a:73:52:0b:48:
         ce:33:37:fb:22:97:b5:77:49:85:07:c2:74:b6:db:93:94:a4:
         03:62:09:08:24:35:22:bf:c1:1f:ac:fd:80:d0:62:eb:c3:96:
         d4:7a:f5:cd:07:b0:62:ae:96:9e:61:01:e4:e5:64:48:bd:de:
         af:a0:c7:d7:e4:9f:e2:d0:eb:61:a4:66:1d:7b:08:b5:1b:9c:
         c5:d8:23:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 20 10:58:42 2026 by rpki-client