Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/010fef48-1ee8-4342-a541-2510fb15b96b/0/3130332e3136362e36342e302f32342d3234203d3e20313431393333.roa
File:                     3130332e3136362e36342e302f32342d3234203d3e20313431393333.roa (raw, json)
Hash identifier:          BSdiOpHgz4CHvVfH7CbqWPqkZmUi9x7dmD1WcBDDSls=
Subject key identifier:   99:B4:06:71:17:EA:55:3A:AF:5B:2E:CE:AD:C2:5F:A0:FE:E9:5C:5C
Certificate issuer:       /CN=79FE7055A022B9483725E25688019B44DD3B94A7
Certificate serial:       666AE8B787EDF669677FA0638F82A657358BB316
Authority key identifier: 79:FE:70:55:A0:22:B9:48:37:25:E2:56:88:01:9B:44:DD:3B:94:A7
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/79FE7055A022B9483725E25688019B44DD3B94A7.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/010fef48-1ee8-4342-a541-2510fb15b96b/0/3130332e3136362e36342e302f32342d3234203d3e20313431393333.roa
Signing time:             Thu 29 Jan 2026 04:00:00 +0000
ROA not before:           Thu 29 Jan 2026 03:55:00 +0000
ROA not after:            Thu 28 Jan 2027 04:00:00 +0000
asID:                     141933
IP address blocks:        103.166.64.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/010fef48-1ee8-4342-a541-2510fb15b96b/0/79FE7055A022B9483725E25688019B44DD3B94A7.crl
                          rsync://repo-rpki.idnic.net/repo/010fef48-1ee8-4342-a541-2510fb15b96b/0/79FE7055A022B9483725E25688019B44DD3B94A7.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/79FE7055A022B9483725E25688019B44DD3B94A7.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Mar 2026 21:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:6a:e8:b7:87:ed:f6:69:67:7f:a0:63:8f:82:a6:57:35:8b:b3:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79FE7055A022B9483725E25688019B44DD3B94A7
        Validity
            Not Before: Jan 29 03:55:00 2026 GMT
            Not After : Jan 28 04:00:00 2027 GMT
        Subject: CN=99B4067117EA553AAF5B2ECEADC25FA0FEE95C5C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:03:41:82:67:20:8f:ec:3c:85:f2:6c:2c:50:
                    11:70:e5:6f:f4:fd:91:ab:c1:34:0a:fe:b5:4a:95:
                    20:5b:16:a5:18:db:8f:46:c9:ca:ff:08:11:4f:a1:
                    01:89:d1:65:b1:a1:91:11:e7:23:15:ed:70:b3:84:
                    c9:97:c3:c2:49:17:13:d8:e5:a4:6a:ee:2d:0c:32:
                    ab:00:57:5e:ef:3c:dd:07:9b:de:6d:92:9a:11:ca:
                    32:5d:28:71:f1:72:61:3e:a6:f6:07:ff:87:bb:35:
                    91:17:16:37:c6:82:ef:21:b2:c1:93:83:e7:16:33:
                    5d:a9:5b:75:ae:1f:76:78:d2:2b:e3:80:6a:e0:f5:
                    e5:8f:aa:09:a9:8d:e8:58:63:02:8a:17:a5:59:2e:
                    1d:5b:43:50:4b:e9:5d:c6:1b:cf:23:bc:41:04:4b:
                    32:6a:bf:21:b9:e8:19:de:f3:56:92:29:3a:10:09:
                    fd:f0:0e:ff:db:ef:23:d2:f3:30:be:68:9a:d7:9c:
                    7d:c0:9d:83:39:ac:3a:57:31:b7:0b:ae:7c:a1:70:
                    13:b7:6e:cb:64:29:00:d8:5b:88:4e:c9:75:50:78:
                    f3:af:3b:52:94:80:31:ea:5a:95:44:05:27:c4:ce:
                    1c:d1:e4:07:a2:62:c5:50:28:f6:2c:f4:9f:2c:7f:
                    bd:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:B4:06:71:17:EA:55:3A:AF:5B:2E:CE:AD:C2:5F:A0:FE:E9:5C:5C
            X509v3 Authority Key Identifier:
                keyid:79:FE:70:55:A0:22:B9:48:37:25:E2:56:88:01:9B:44:DD:3B:94:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/010fef48-1ee8-4342-a541-2510fb15b96b/0/79FE7055A022B9483725E25688019B44DD3B94A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/79FE7055A022B9483725E25688019B44DD3B94A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/010fef48-1ee8-4342-a541-2510fb15b96b/0/3130332e3136362e36342e302f32342d3234203d3e20313431393333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.166.64.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:19:d6:25:9e:5c:3b:8e:b9:41:9e:cb:ef:26:d6:39:53:2f:
         8d:de:2e:d5:fa:a2:ef:ec:5d:be:82:e2:37:c9:a9:a6:11:f3:
         02:fc:ac:ed:75:14:77:d5:5f:43:4d:df:2d:fc:d2:a2:70:3b:
         38:a3:9c:ee:85:af:f8:5a:42:d8:89:4d:57:de:59:31:43:40:
         07:48:e8:24:d3:2b:c3:fe:55:f3:70:27:f0:33:b7:c3:d6:6e:
         31:9d:08:4f:40:80:2e:89:3a:42:dd:2f:e6:95:5f:0d:15:8e:
         8f:7c:2a:42:91:1c:5a:1d:91:ea:cd:b4:fc:5d:b0:69:7e:80:
         bb:5d:89:67:1f:45:ea:65:3a:bf:43:c4:c5:b2:25:21:9b:44:
         88:e1:a7:04:5c:9a:aa:50:e1:80:4c:7c:ef:04:ca:48:68:95:
         48:3b:a4:5d:21:7b:c3:bf:19:ec:03:e5:a0:9d:8d:db:b9:5f:
         bf:a7:01:72:a1:36:1b:34:10:3d:2d:70:ea:69:70:c4:19:2b:
         01:09:db:c0:3b:cc:ea:b9:2b:a1:38:83:5c:82:d1:94:27:58:
         6a:ab:1f:2f:30:b3:1b:6a:22:65:dc:85:3b:35:40:21:45:71:
         e2:f5:c8:b8:29:93:cf:64:5b:01:07:85:e5:7a:37:97:4e:4d:
         4b:dc:e5:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:14:58 2026 by rpki-client