Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/d501cdf9-52e1-4c98-9ab3-afb70fac377c/0/3130332e3136342e35392e302f32342d3234203d3e20313431393130.roa
File:                     3130332e3136342e35392e302f32342d3234203d3e20313431393130.roa (raw, json)
Hash identifier:          qlhe8ugwsxt3uspMmDDw6M2qCFy+W45YSb6JDOgXmxg=
Subject key identifier:   98:E3:C2:37:E5:81:B7:7B:BA:21:E9:D8:FB:08:D9:3D:92:FF:AE:D2
Certificate issuer:       /CN=F1BDA572CF8D7920C210DBCA1454B1904F1C1D5F
Certificate serial:       0169126B93DF6F065CC9F4B521245843BB54AC6D
Authority key identifier: F1:BD:A5:72:CF:8D:79:20:C2:10:DB:CA:14:54:B1:90:4F:1C:1D:5F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1BDA572CF8D7920C210DBCA1454B1904F1C1D5F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d501cdf9-52e1-4c98-9ab3-afb70fac377c/0/3130332e3136342e35392e302f32342d3234203d3e20313431393130.roa
Signing time:             Tue 10 Mar 2026 05:00:01 +0000
ROA not before:           Tue 10 Mar 2026 04:55:01 +0000
ROA not after:            Tue 09 Mar 2027 05:00:01 +0000
asID:                     141910
IP address blocks:        103.164.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d501cdf9-52e1-4c98-9ab3-afb70fac377c/0/F1BDA572CF8D7920C210DBCA1454B1904F1C1D5F.crl
                          rsync://repo-rpki.idnic.net/repo/d501cdf9-52e1-4c98-9ab3-afb70fac377c/0/F1BDA572CF8D7920C210DBCA1454B1904F1C1D5F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1BDA572CF8D7920C210DBCA1454B1904F1C1D5F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 22 Mar 2026 10:42:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:69:12:6b:93:df:6f:06:5c:c9:f4:b5:21:24:58:43:bb:54:ac:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F1BDA572CF8D7920C210DBCA1454B1904F1C1D5F
        Validity
            Not Before: Mar 10 04:55:01 2026 GMT
            Not After : Mar  9 05:00:01 2027 GMT
        Subject: CN=98E3C237E581B77BBA21E9D8FB08D93D92FFAED2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:8a:6a:1e:a7:7e:3a:d4:3c:ce:ae:47:ae:78:
                    bb:7f:ee:67:6f:af:40:f8:de:7e:7e:3e:63:48:45:
                    e4:40:39:1d:db:a2:1e:ff:27:39:49:fd:09:81:e8:
                    44:b1:5a:1b:c7:3f:4d:bb:9d:d9:be:5d:64:d0:b7:
                    c8:30:48:bb:3b:91:72:c1:4a:c1:fa:e2:dc:ee:bd:
                    5c:3c:d7:70:a6:2e:d1:31:5d:19:cf:53:7f:64:aa:
                    10:f9:43:66:38:80:b2:b6:50:92:d1:5c:13:68:25:
                    51:d8:be:68:28:ad:d9:e9:ce:f7:7c:5c:a9:3d:2e:
                    cc:bd:4c:0d:c2:1a:ff:f0:5a:c6:65:5c:59:30:5f:
                    a2:0f:6e:24:34:b3:61:16:18:29:6b:d6:6c:e1:05:
                    a4:52:78:c7:c3:d1:a1:56:4a:c9:9e:db:3e:94:a2:
                    fe:9d:7e:c1:6b:84:32:56:19:38:f4:ca:68:a4:8c:
                    8f:07:c9:64:99:e1:18:a4:e1:47:a4:b1:5b:f7:3c:
                    3d:ec:82:d9:4b:1e:d3:00:d3:8c:39:c0:5c:01:5d:
                    de:e5:ad:8f:50:28:f2:ec:d3:b5:16:5f:9d:75:f1:
                    21:26:63:b9:eb:c4:78:fd:69:f1:8b:e6:5d:74:13:
                    6b:74:8e:70:80:d1:20:93:76:c9:cd:02:aa:c5:43:
                    c4:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:E3:C2:37:E5:81:B7:7B:BA:21:E9:D8:FB:08:D9:3D:92:FF:AE:D2
            X509v3 Authority Key Identifier:
                keyid:F1:BD:A5:72:CF:8D:79:20:C2:10:DB:CA:14:54:B1:90:4F:1C:1D:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d501cdf9-52e1-4c98-9ab3-afb70fac377c/0/F1BDA572CF8D7920C210DBCA1454B1904F1C1D5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1BDA572CF8D7920C210DBCA1454B1904F1C1D5F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d501cdf9-52e1-4c98-9ab3-afb70fac377c/0/3130332e3136342e35392e302f32342d3234203d3e20313431393130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.164.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:cb:cd:6d:20:44:36:fc:ee:b2:3e:a7:b3:b5:f8:45:b6:14:
         83:08:cf:3f:7c:fa:05:c8:d7:f3:27:e3:5b:74:35:9f:6a:d7:
         2b:5d:d9:61:4e:9b:b3:c1:2a:68:08:db:fe:4c:9f:c7:ed:55:
         fb:6d:53:db:eb:ad:fa:c2:7c:c1:02:50:aa:cf:ed:b1:29:bd:
         3f:72:65:23:f5:a7:69:25:c7:b4:e5:ce:bb:5c:a3:e4:0d:f5:
         14:19:c5:4b:59:20:9f:3a:22:a2:ef:d9:ea:01:0b:a3:ca:5b:
         aa:76:9d:ea:21:a1:cc:e4:8a:74:47:d6:b3:3f:19:8d:d3:3a:
         fb:2c:bc:84:c3:67:c1:81:f6:39:ee:19:c8:9c:92:af:9f:2e:
         bc:37:85:0e:89:70:12:ad:87:15:a8:b1:eb:5a:9b:da:13:93:
         f6:86:aa:9f:5f:43:43:86:e2:d7:31:46:33:3a:37:7a:3d:a5:
         cc:58:35:40:0e:30:cb:ea:a4:4c:9a:87:50:cd:d3:4d:ca:be:
         f4:94:07:ce:ba:91:69:66:b9:f7:73:fe:e3:c1:e6:ab:6d:86:
         dc:37:d2:28:30:05:34:0b:cd:b3:37:66:37:9a:75:58:2e:21:
         3e:13:85:e5:01:f0:ff:b4:22:3d:90:0f:29:30:21:d0:cf:f9:
         f8:a4:ea:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 10:43:34 2026 by rpki-client