Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/3130332e352e35302e302f32342d3234203d3e203538333831.roa
File:                     3130332e352e35302e302f32342d3234203d3e203538333831.roa (raw, json)
Hash identifier:          twcuhPimgN61YsKukKpiR5ZA50pVAb8Xf9OqbYaf4Xk=
Subject key identifier:   2A:2E:F1:BD:12:E0:DD:08:5D:92:89:7C:57:02:83:88:C5:DC:83:1D
Certificate issuer:       /CN=E5A907C4EC6DA6D9342613280CCAF26E98DBEB98
Certificate serial:       26162DC187EDD9B8F059204321B3510FE94F91EC
Authority key identifier: E5:A9:07:C4:EC:6D:A6:D9:34:26:13:28:0C:CA:F2:6E:98:DB:EB:98
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/3130332e352e35302e302f32342d3234203d3e203538333831.roa
Signing time:             Wed 04 Mar 2026 17:00:04 +0000
ROA not before:           Wed 04 Mar 2026 16:55:04 +0000
ROA not after:            Wed 03 Mar 2027 17:00:04 +0000
asID:                     58381
IP address blocks:        103.5.50.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.crl
                          rsync://repo-rpki.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Mar 2026 03:25:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:16:2d:c1:87:ed:d9:b8:f0:59:20:43:21:b3:51:0f:e9:4f:91:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5A907C4EC6DA6D9342613280CCAF26E98DBEB98
        Validity
            Not Before: Mar  4 16:55:04 2026 GMT
            Not After : Mar  3 17:00:04 2027 GMT
        Subject: CN=2A2EF1BD12E0DD085D92897C57028388C5DC831D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:3b:ef:1b:3f:37:74:d2:1f:12:97:2a:4a:60:
                    35:23:b2:32:61:cd:c5:2e:77:04:6b:21:52:38:38:
                    c8:01:e4:c3:75:e6:16:c1:56:af:f2:ef:cd:86:5e:
                    d8:74:e1:73:67:71:1f:c3:22:e9:27:ed:6c:e9:e3:
                    4c:4b:70:e8:7f:1d:f5:2c:93:f5:c3:da:c0:7b:fe:
                    c3:1f:5e:e7:c4:5f:c1:79:e7:cf:bc:9a:28:cf:b7:
                    67:76:2f:bb:c9:c5:93:37:c4:7e:6f:e0:cd:35:40:
                    14:d2:97:2a:2a:27:bf:22:da:a1:34:df:39:75:a6:
                    25:2b:69:ad:22:b6:72:06:4b:7a:0c:39:e3:85:9f:
                    7f:cd:e8:6f:da:ca:9b:d7:56:a6:52:d6:ca:58:db:
                    9c:5d:7e:5f:f4:ee:fe:9b:94:81:46:39:72:d4:22:
                    02:6f:54:80:13:15:f4:91:72:64:9a:5c:31:78:03:
                    9f:b0:da:d3:5a:a9:b5:05:68:b3:89:59:0a:9e:98:
                    78:45:ff:08:7e:6e:be:f6:d7:33:2a:80:92:4a:ff:
                    5e:2e:40:08:1a:64:2e:05:0f:f4:db:d5:85:b3:a1:
                    51:87:06:1b:35:28:0f:4c:17:21:5a:53:6c:b4:67:
                    bb:e0:f1:22:11:7e:13:70:13:40:89:bf:f7:bf:09:
                    41:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:2E:F1:BD:12:E0:DD:08:5D:92:89:7C:57:02:83:88:C5:DC:83:1D
            X509v3 Authority Key Identifier:
                keyid:E5:A9:07:C4:EC:6D:A6:D9:34:26:13:28:0C:CA:F2:6E:98:DB:EB:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/3130332e352e35302e302f32342d3234203d3e203538333831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.5.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:b0:9f:ab:42:33:67:29:84:04:0b:f2:7c:7d:33:b7:bb:2c:
         93:0f:14:5b:47:9d:27:0e:52:b4:b9:af:89:66:5b:f2:36:53:
         ad:cb:97:c7:3c:f9:dc:1c:18:95:3d:cc:0b:39:66:38:5a:6d:
         8a:a7:19:f9:ea:50:aa:bc:a7:aa:5b:c1:3c:42:13:b6:cb:df:
         55:c8:9c:08:cf:27:e4:4a:4a:76:74:0b:49:a0:a6:f6:df:d5:
         8d:4b:39:ac:eb:f9:17:0d:8f:c2:54:d2:8d:46:99:90:04:d2:
         55:8e:c7:e5:21:a3:3e:52:15:ff:ad:92:d6:16:76:c8:07:0d:
         f9:c1:31:88:3f:aa:20:ab:86:bc:fa:cb:0f:f2:91:c0:8b:f2:
         9f:d6:fa:8e:e9:0b:c2:29:a2:92:a8:c4:fa:fb:25:bf:8a:0f:
         8a:f4:cd:21:0a:29:7e:d0:a6:66:d3:15:20:e2:99:7a:c3:3f:
         65:69:ce:02:88:28:32:8b:73:01:4a:dd:75:58:dd:fe:99:bf:
         d9:91:e7:c7:f1:94:f4:d1:8f:73:97:c0:f1:b7:5d:ca:eb:44:
         23:b5:8f:39:d0:51:22:6e:15:6b:67:35:71:93:0f:d1:57:43:
         4c:3c:cd:c8:bd:46:b1:26:3f:33:43:2f:38:65:24:15:0e:26:
         a1:2d:12:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 10:37:27 2026 by rpki-client