Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/05e603e3-f23e-4c6a-bb3c-06409d65c838/0/3130332e3136362e302e302f32332d3233203d3e20313431393238.roa
File:                     3130332e3136362e302e302f32332d3233203d3e20313431393238.roa (raw, json)
Hash identifier:          B1alLS1xI97lN/iz08W7t/RODR8Mf+zpIATLUw32vLA=
Subject key identifier:   D7:AA:D5:36:DC:FF:48:07:0B:97:C6:EF:C0:EA:C4:43:BF:E1:2C:7F
Certificate issuer:       /CN=011400263413DE61A797AA22B58664ACD84FD8DF
Certificate serial:       5E8381A27C5D8281CD4A8F2617A47095183E41C8
Authority key identifier: 01:14:00:26:34:13:DE:61:A7:97:AA:22:B5:86:64:AC:D8:4F:D8:DF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/011400263413DE61A797AA22B58664ACD84FD8DF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/05e603e3-f23e-4c6a-bb3c-06409d65c838/0/3130332e3136362e302e302f32332d3233203d3e20313431393238.roa
Signing time:             Wed 11 Feb 2026 13:00:02 +0000
ROA not before:           Wed 11 Feb 2026 12:55:02 +0000
ROA not after:            Wed 10 Feb 2027 13:00:02 +0000
asID:                     141928
IP address blocks:        103.166.0.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/05e603e3-f23e-4c6a-bb3c-06409d65c838/0/011400263413DE61A797AA22B58664ACD84FD8DF.crl
                          rsync://repo-rpki.idnic.net/repo/05e603e3-f23e-4c6a-bb3c-06409d65c838/0/011400263413DE61A797AA22B58664ACD84FD8DF.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/011400263413DE61A797AA22B58664ACD84FD8DF.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Mar 2026 22:15:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:83:81:a2:7c:5d:82:81:cd:4a:8f:26:17:a4:70:95:18:3e:41:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=011400263413DE61A797AA22B58664ACD84FD8DF
        Validity
            Not Before: Feb 11 12:55:02 2026 GMT
            Not After : Feb 10 13:00:02 2027 GMT
        Subject: CN=D7AAD536DCFF48070B97C6EFC0EAC443BFE12C7F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ed:f0:fc:5a:03:62:ff:2a:77:3b:67:7f:89:
                    c7:25:4c:1e:b7:99:69:14:ff:f0:e0:e2:28:71:66:
                    10:ea:e6:1b:b0:c4:23:ff:e4:95:01:4e:bc:82:96:
                    ee:b1:2b:07:67:45:a0:8e:11:4d:a6:21:d5:50:49:
                    38:ce:60:15:54:06:cc:13:23:e8:b1:61:d7:8c:72:
                    b6:90:78:d3:7d:fa:b1:d4:fc:e2:49:99:f2:9a:46:
                    53:4a:a8:93:49:f8:56:d8:1d:d1:78:11:fa:77:6a:
                    f6:37:89:e7:e7:23:f3:34:6f:27:9b:ad:a3:6d:b9:
                    05:5d:c3:53:3a:fe:a6:37:68:75:d1:06:b9:86:b1:
                    be:90:c4:77:72:ae:1c:45:50:81:4f:38:8f:d3:04:
                    46:3d:3b:37:4c:23:14:bb:13:37:e6:82:d8:c2:79:
                    67:78:31:b0:3e:2b:d0:03:41:32:b3:23:31:c2:cc:
                    28:45:47:17:e8:c5:ae:69:5a:ef:84:1f:d2:cb:b5:
                    d3:4b:69:04:e3:15:6f:4d:78:d0:08:55:04:50:80:
                    b6:d8:dc:2a:66:84:29:89:ff:af:a7:75:f7:3d:72:
                    70:ab:5e:88:ba:fb:82:c5:be:ad:0d:2a:9a:ea:ce:
                    50:c4:15:59:f4:f9:cd:03:7c:3e:49:f9:a5:f6:92:
                    55:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:AA:D5:36:DC:FF:48:07:0B:97:C6:EF:C0:EA:C4:43:BF:E1:2C:7F
            X509v3 Authority Key Identifier:
                keyid:01:14:00:26:34:13:DE:61:A7:97:AA:22:B5:86:64:AC:D8:4F:D8:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/05e603e3-f23e-4c6a-bb3c-06409d65c838/0/011400263413DE61A797AA22B58664ACD84FD8DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/011400263413DE61A797AA22B58664ACD84FD8DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/05e603e3-f23e-4c6a-bb3c-06409d65c838/0/3130332e3136362e302e302f32332d3233203d3e20313431393238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.166.0.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9b:dd:39:da:ed:83:c3:0b:e0:23:4b:a7:c7:09:2d:ae:68:86:
         27:df:d2:b9:6b:2e:e9:c1:a3:cf:85:cc:08:ca:82:41:90:c3:
         14:45:f7:a2:26:03:a9:90:e9:b9:eb:cb:67:65:9d:98:ec:f3:
         9d:e8:1c:e6:40:c8:37:11:8e:27:f3:55:e4:b6:27:cb:48:37:
         5f:57:aa:23:0e:fb:47:ce:2f:2d:b6:da:a9:46:18:9f:87:68:
         ed:68:0b:44:d7:8a:1b:8f:0c:18:8a:18:16:bc:ef:24:ca:eb:
         49:83:e4:fb:c5:15:3c:9d:52:22:cb:78:50:af:a0:b7:c0:33:
         74:cb:df:02:d0:08:36:99:9b:a4:7c:4b:4d:01:33:68:55:e5:
         1f:33:f0:6f:45:cd:fd:b7:8d:ba:46:e7:ea:df:2b:c7:c2:73:
         a0:59:e8:9f:4f:ea:4e:12:b2:44:a9:8f:6a:95:c2:69:8d:50:
         1f:36:b2:3a:b6:1a:84:ec:4c:af:1b:8c:d1:2e:55:93:48:dd:
         92:5f:48:4d:52:66:6f:e3:35:f7:11:e6:45:28:c1:48:17:3c:
         89:6f:ef:da:58:06:64:03:8b:4e:a1:87:15:3b:4e:dc:21:03:
         96:ec:6e:5f:85:cc:85:ce:08:af:bc:50:10:87:11:7f:8b:c8:
         c4:83:f3:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:39:10 2026 by rpki-client