Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/010fef48-1ee8-4342-a541-2510fb15b96b/0/3130332e3136362e36352e302f32342d3234203d3e20313431393333.roa
File:                     3130332e3136362e36352e302f32342d3234203d3e20313431393333.roa (raw, json)
Hash identifier:          nFT/KNUyVqU2ueWuJT9Sf7OnQAqcMHxwp4qW4t66Fok=
Subject key identifier:   28:84:75:8D:03:66:EE:6E:FE:B1:F4:FC:5C:6F:EF:3F:2D:46:D5:11
Certificate issuer:       /CN=79FE7055A022B9483725E25688019B44DD3B94A7
Certificate serial:       209204FB2B674A5219CB3290E2BF144502709128
Authority key identifier: 79:FE:70:55:A0:22:B9:48:37:25:E2:56:88:01:9B:44:DD:3B:94:A7
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/79FE7055A022B9483725E25688019B44DD3B94A7.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/010fef48-1ee8-4342-a541-2510fb15b96b/0/3130332e3136362e36352e302f32342d3234203d3e20313431393333.roa
Signing time:             Thu 29 Jan 2026 04:00:00 +0000
ROA not before:           Thu 29 Jan 2026 03:55:00 +0000
ROA not after:            Thu 28 Jan 2027 04:00:00 +0000
asID:                     141933
IP address blocks:        103.166.65.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/010fef48-1ee8-4342-a541-2510fb15b96b/0/79FE7055A022B9483725E25688019B44DD3B94A7.crl
                          rsync://repo-rpki.idnic.net/repo/010fef48-1ee8-4342-a541-2510fb15b96b/0/79FE7055A022B9483725E25688019B44DD3B94A7.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/79FE7055A022B9483725E25688019B44DD3B94A7.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Mar 2026 21:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:92:04:fb:2b:67:4a:52:19:cb:32:90:e2:bf:14:45:02:70:91:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79FE7055A022B9483725E25688019B44DD3B94A7
        Validity
            Not Before: Jan 29 03:55:00 2026 GMT
            Not After : Jan 28 04:00:00 2027 GMT
        Subject: CN=2884758D0366EE6EFEB1F4FC5C6FEF3F2D46D511
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:0d:9a:a4:01:15:bf:52:3a:a5:1d:b7:01:65:
                    f8:2b:0b:fd:b7:d1:3f:6f:84:3c:d4:fb:6d:cf:f5:
                    da:15:1f:2c:7d:3f:f0:0a:65:c5:72:f1:6e:72:12:
                    8a:93:aa:0a:d7:57:69:7e:c8:38:42:48:93:b9:41:
                    e4:cb:d0:fa:ca:13:20:2c:9c:32:ef:80:5d:b2:30:
                    78:91:48:4b:e0:82:44:1b:1f:0e:81:fb:bd:a5:1c:
                    30:f0:78:61:a4:78:3c:d4:39:7a:a9:31:0b:1a:57:
                    c2:5d:d5:65:ca:90:e8:bb:b3:e7:5f:45:a2:8b:16:
                    32:bd:4a:95:6e:ad:f6:bc:84:3c:fb:33:c1:1d:0b:
                    33:85:6d:2d:1f:e6:8f:79:f5:e7:68:89:6c:8f:8d:
                    e0:09:4c:6b:94:67:c1:27:e3:51:6f:10:a0:9e:6c:
                    b9:5c:5b:d1:2f:4f:60:3f:db:a4:60:5e:fc:4d:55:
                    90:7a:bb:db:04:1b:3d:a9:e0:84:b7:e6:9b:53:e2:
                    e8:f2:08:1c:7f:00:41:43:71:a4:84:3d:97:21:4c:
                    e3:c2:02:f2:84:1b:b6:d3:77:80:e2:f9:28:0d:1f:
                    df:50:47:10:8c:4b:6c:a0:05:41:e4:10:8d:33:4c:
                    72:8b:cd:10:b8:14:aa:4e:ba:f7:3e:d7:fc:cc:39:
                    d6:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:84:75:8D:03:66:EE:6E:FE:B1:F4:FC:5C:6F:EF:3F:2D:46:D5:11
            X509v3 Authority Key Identifier:
                keyid:79:FE:70:55:A0:22:B9:48:37:25:E2:56:88:01:9B:44:DD:3B:94:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/010fef48-1ee8-4342-a541-2510fb15b96b/0/79FE7055A022B9483725E25688019B44DD3B94A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/79FE7055A022B9483725E25688019B44DD3B94A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/010fef48-1ee8-4342-a541-2510fb15b96b/0/3130332e3136362e36352e302f32342d3234203d3e20313431393333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.166.65.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:ff:6e:2d:2c:ab:04:95:20:2f:69:65:56:57:ec:a7:4b:16:
         5f:f7:bd:0e:3b:6e:15:75:ba:55:eb:39:56:15:71:c9:86:1e:
         7c:80:27:a1:72:f1:8e:91:0d:33:9e:ff:ee:33:86:52:0d:21:
         27:68:67:5e:62:1f:af:a1:af:3b:43:db:0d:2a:1a:22:86:97:
         3f:51:5d:9e:6f:d0:11:c7:ff:0e:2c:bc:1d:99:c7:e3:0e:ef:
         6d:bb:e3:2b:ed:35:cd:a1:66:15:8c:93:fd:9a:f0:80:b9:20:
         c1:e7:db:ee:5c:ee:c2:b5:5f:68:c2:e7:12:31:d8:c5:81:fd:
         f5:85:c0:60:d2:49:5e:b8:0f:2c:86:78:ae:d8:a6:90:cf:61:
         97:eb:8e:67:bd:c8:b4:63:87:d3:f4:b3:57:58:ad:35:69:93:
         33:80:80:bb:42:0a:ed:bd:2f:44:d8:42:4e:44:aa:ae:f1:ca:
         9b:1d:e4:70:65:4f:a6:75:22:a9:2a:62:36:78:79:ec:d4:9e:
         e1:96:a5:4c:87:32:1c:46:cb:53:a6:e8:09:da:b0:1b:8e:cd:
         5e:3c:4a:45:0c:ed:b5:8c:7f:cf:4c:d8:1e:f9:30:0c:a8:39:
         38:de:b2:8a:8b:20:1e:2a:d9:7a:7c:5c:35:44:59:19:e1:43:
         8a:d8:ce:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:15:36 2026 by rpki-client