Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/b0d914ef-0b1f-490b-808d-a27b83ff9a3e/0/3130332e3138342e31382e302f32332d3233203d3e20313439363735.roa
File:                     3130332e3138342e31382e302f32332d3233203d3e20313439363735.roa (raw, json)
Hash identifier:          LeeGwZNg1xeTEHyLpyP7xbBZEKxpkxbvCL0BfojuuRU=
Subject key identifier:   1D:02:07:63:14:20:19:52:06:09:23:72:8E:CA:2B:80:A9:10:AF:3A
Certificate issuer:       /CN=5A40FD19E2DD5380CB6E502F16DB222F9089552B
Certificate serial:       723DA987E6030166AD1D11BF0BA7C13A2E707302
Authority key identifier: 5A:40:FD:19:E2:DD:53:80:CB:6E:50:2F:16:DB:22:2F:90:89:55:2B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5A40FD19E2DD5380CB6E502F16DB222F9089552B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/b0d914ef-0b1f-490b-808d-a27b83ff9a3e/0/3130332e3138342e31382e302f32332d3233203d3e20313439363735.roa
Signing time:             Tue 10 Mar 2026 10:00:03 +0000
ROA not before:           Tue 10 Mar 2026 09:55:03 +0000
ROA not after:            Tue 09 Mar 2027 10:00:03 +0000
asID:                     149675
IP address blocks:        103.184.18.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/b0d914ef-0b1f-490b-808d-a27b83ff9a3e/0/5A40FD19E2DD5380CB6E502F16DB222F9089552B.crl
                          rsync://repo-rpki.idnic.net/repo/b0d914ef-0b1f-490b-808d-a27b83ff9a3e/0/5A40FD19E2DD5380CB6E502F16DB222F9089552B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5A40FD19E2DD5380CB6E502F16DB222F9089552B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 22 Mar 2026 22:09:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:3d:a9:87:e6:03:01:66:ad:1d:11:bf:0b:a7:c1:3a:2e:70:73:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5A40FD19E2DD5380CB6E502F16DB222F9089552B
        Validity
            Not Before: Mar 10 09:55:03 2026 GMT
            Not After : Mar  9 10:00:03 2027 GMT
        Subject: CN=1D02076314201952060923728ECA2B80A910AF3A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:97:70:a4:07:49:60:05:27:d1:f3:ae:19:69:
                    d1:0f:17:34:2f:e1:0c:c6:c6:f0:7c:82:e0:a8:2b:
                    6f:be:a5:3a:04:34:53:65:ce:d3:fb:bf:4f:0d:60:
                    b3:eb:00:db:69:1f:b5:06:c3:d4:1f:fd:36:da:f4:
                    46:f9:66:7e:3d:7a:4a:4a:da:89:da:ce:fb:07:d8:
                    cc:b5:da:a9:7c:d1:dc:5c:7e:9b:f8:5b:28:46:58:
                    82:97:d9:ae:d6:93:31:bc:c3:d8:99:a1:13:c5:49:
                    d0:ac:10:34:1f:33:4b:5e:6c:14:34:c9:ce:ab:0d:
                    8e:77:f6:39:17:9e:a8:69:2a:4d:7b:ff:3c:b8:39:
                    3a:d3:71:bd:7c:44:20:e1:2e:cf:4b:34:e2:cd:4a:
                    18:c0:a4:d2:d2:76:2e:1e:ba:4e:79:62:9f:4f:4b:
                    06:9b:60:c2:ac:d0:ea:dc:32:dc:ba:e0:ac:7c:50:
                    af:4a:0b:ef:a8:c4:60:4f:0f:24:9d:ad:2c:27:f1:
                    15:a0:67:e9:d2:79:ab:cc:34:d9:55:fa:f1:8c:4d:
                    01:a6:32:f5:72:a3:4d:01:94:ac:f8:cb:d5:f8:ce:
                    8f:98:5f:39:b1:c1:88:ab:76:96:5d:e6:d7:99:17:
                    8a:26:06:61:9c:fb:d9:4b:ae:e4:0d:2c:99:09:72:
                    b5:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:02:07:63:14:20:19:52:06:09:23:72:8E:CA:2B:80:A9:10:AF:3A
            X509v3 Authority Key Identifier:
                keyid:5A:40:FD:19:E2:DD:53:80:CB:6E:50:2F:16:DB:22:2F:90:89:55:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/b0d914ef-0b1f-490b-808d-a27b83ff9a3e/0/5A40FD19E2DD5380CB6E502F16DB222F9089552B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5A40FD19E2DD5380CB6E502F16DB222F9089552B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b0d914ef-0b1f-490b-808d-a27b83ff9a3e/0/3130332e3138342e31382e302f32332d3233203d3e20313439363735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.184.18.0/23

    Signature Algorithm: sha256WithRSAEncryption
         32:57:4c:b8:1c:94:2d:c4:66:40:97:78:f5:92:ef:ba:ff:3a:
         9b:dc:4a:78:bf:d8:cb:61:ba:38:c1:74:9d:9b:3d:ba:38:98:
         60:5d:d6:3b:73:38:91:ef:01:a4:5c:7c:df:eb:74:27:72:55:
         c9:91:23:a7:db:2c:45:4c:fd:a9:ae:a6:28:06:4b:5b:e6:f6:
         11:41:80:21:58:5e:23:e8:e4:47:a9:ee:5a:8a:d3:e3:03:7c:
         85:2d:29:7d:86:a5:e9:8d:23:c4:c2:2d:9d:42:10:f6:63:4b:
         53:8f:c7:bf:65:20:56:76:73:bc:f0:38:2b:52:b2:63:cd:41:
         67:4c:bd:59:20:2d:6b:b6:80:5e:ba:d9:a2:45:7a:ab:2f:4c:
         ff:f2:cc:d5:13:7b:d5:29:d7:5e:82:17:df:f6:af:a2:00:64:
         db:af:16:aa:e2:e5:94:60:09:43:51:f9:8b:b6:78:a7:92:65:
         fe:19:78:18:f4:d0:ab:3d:9b:cb:fe:71:38:f1:f5:5f:a3:3c:
         73:03:0d:76:63:21:5b:6b:92:bd:4b:d6:3e:d1:e1:ce:00:c1:
         0d:5a:e0:35:0e:d0:76:2c:e0:97:e7:bc:b8:89:88:fd:16:1e:
         39:03:05:28:47:2c:fb:bd:ea:75:db:42:02:60:1d:a6:a3:8e:
         8f:8c:6a:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 03:26:40 2026 by rpki-client