Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/3130332e32302e39302e302f32342d3234203d3e203538333831.roa
File:                     3130332e32302e39302e302f32342d3234203d3e203538333831.roa (raw, json)
Hash identifier:          ZCDeDW5e4bvoXPvLxe3JXfhMdTbpbaiaIpNkg+zIZ0Y=
Subject key identifier:   2D:0B:BA:1B:C5:AA:DA:B2:A8:9F:28:0F:99:F0:4C:1B:51:C5:23:0B
Certificate issuer:       /CN=E5A907C4EC6DA6D9342613280CCAF26E98DBEB98
Certificate serial:       46C22B1F7B55F9CF2CA9013A3AE985DAD09C03E6
Authority key identifier: E5:A9:07:C4:EC:6D:A6:D9:34:26:13:28:0C:CA:F2:6E:98:DB:EB:98
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/3130332e32302e39302e302f32342d3234203d3e203538333831.roa
Signing time:             Wed 04 Mar 2026 17:00:03 +0000
ROA not before:           Wed 04 Mar 2026 16:55:03 +0000
ROA not after:            Wed 03 Mar 2027 17:00:03 +0000
asID:                     58381
IP address blocks:        103.20.90.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.crl
                          rsync://repo-rpki.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Mar 2026 03:25:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:c2:2b:1f:7b:55:f9:cf:2c:a9:01:3a:3a:e9:85:da:d0:9c:03:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5A907C4EC6DA6D9342613280CCAF26E98DBEB98
        Validity
            Not Before: Mar  4 16:55:03 2026 GMT
            Not After : Mar  3 17:00:03 2027 GMT
        Subject: CN=2D0BBA1BC5AADAB2A89F280F99F04C1B51C5230B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:ad:a2:aa:10:fb:e5:d5:c8:5c:54:bf:d0:8f:
                    e3:85:6d:c9:ae:f8:74:80:03:65:f3:c7:36:0d:a6:
                    8a:ee:0f:92:6f:68:ee:ef:3e:53:ef:2f:b4:4c:e7:
                    28:ff:c1:66:3b:77:cd:0c:5e:cc:4c:07:33:a2:23:
                    5c:36:fc:86:24:8b:6a:f1:62:03:e5:6a:2b:6c:f0:
                    27:8e:9c:96:7d:ac:ea:0b:ac:7e:7d:d5:36:98:79:
                    dc:8c:e1:7c:d2:dc:ff:50:b1:d3:b3:04:b2:cc:2e:
                    5b:f8:b2:32:69:40:27:8a:7c:a4:77:f0:77:50:55:
                    47:38:77:be:64:13:42:ea:df:ba:2c:11:42:98:d8:
                    ae:20:c9:6e:2a:48:91:56:46:79:45:a6:72:3e:e8:
                    55:34:54:da:ae:e5:bd:cd:83:8d:62:c5:87:43:79:
                    d1:9d:73:e2:87:32:e0:12:c2:7a:5a:4f:c6:dd:78:
                    e3:39:6d:b1:20:99:b6:de:41:cb:4e:b9:8f:f4:6e:
                    24:67:48:4f:c0:ac:a6:21:18:27:22:3f:cf:f6:21:
                    ff:3e:f9:23:41:9a:e5:f1:29:76:d3:05:01:a8:dd:
                    f3:6e:56:d3:43:a1:71:12:18:ac:25:f3:1e:cd:97:
                    32:84:45:d3:f5:a0:cc:3f:a6:0e:12:cf:37:e7:71:
                    84:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:0B:BA:1B:C5:AA:DA:B2:A8:9F:28:0F:99:F0:4C:1B:51:C5:23:0B
            X509v3 Authority Key Identifier:
                keyid:E5:A9:07:C4:EC:6D:A6:D9:34:26:13:28:0C:CA:F2:6E:98:DB:EB:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/3130332e32302e39302e302f32342d3234203d3e203538333831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.20.90.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:34:65:2c:56:40:22:75:99:ef:4d:0b:77:1b:31:7b:0a:f7:
         fc:10:62:ed:d9:1e:19:ea:f2:00:77:7c:32:76:64:e4:a2:ee:
         9a:3c:f9:55:22:49:3f:e2:93:9b:55:e8:f1:7b:10:2e:5b:ba:
         72:1d:d4:e3:06:b7:2f:6d:8c:11:3b:94:24:6a:0f:60:03:c3:
         62:38:70:9c:9f:fe:7d:19:67:e8:5d:73:00:eb:fc:92:c4:4c:
         9c:27:3b:ac:d8:5d:c0:d9:40:83:16:b7:1a:ec:1a:7e:bd:8f:
         d2:76:18:53:97:a6:d3:7b:11:2b:d8:d6:0e:3a:df:21:6e:fc:
         07:84:04:96:f6:94:51:56:64:f0:a4:5a:1b:df:e8:e9:c8:e2:
         5d:d0:49:83:8d:67:9a:ad:92:09:c9:a6:ea:75:07:87:be:73:
         54:c6:f4:d9:59:78:cf:a7:56:88:81:da:f5:55:10:af:16:b4:
         55:29:8b:d2:4c:1d:fa:0c:4a:e9:c2:3f:b6:a3:34:ca:2d:85:
         3d:90:eb:81:e9:b6:d9:5d:39:aa:8d:0a:07:8b:a5:05:a2:aa:
         b0:c1:7b:9c:a9:d8:1d:60:23:3f:1a:48:f4:75:b8:fa:f9:52:
         31:e8:86:26:62:f7:4e:dc:47:8c:e1:dc:10:6c:87:d4:59:44:
         2f:9d:5d:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 10:38:01 2026 by rpki-client