Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/05e603e3-f23e-4c6a-bb3c-06409d65c838/0/3130332e3136362e302e302f32342d3234203d3e20313431393238.roa
File:                     3130332e3136362e302e302f32342d3234203d3e20313431393238.roa (raw, json)
Hash identifier:          UCD1z+W4tyFwluif/oowVZxDkqfBy5ImUmesy2XlxWU=
Subject key identifier:   92:EA:D5:33:D4:B9:6A:47:CC:ED:E1:22:12:BF:70:33:BC:ED:7A:0D
Certificate issuer:       /CN=011400263413DE61A797AA22B58664ACD84FD8DF
Certificate serial:       5F2E7BF2F11EAC44849A81F4CB38A30A6533FB2E
Authority key identifier: 01:14:00:26:34:13:DE:61:A7:97:AA:22:B5:86:64:AC:D8:4F:D8:DF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/011400263413DE61A797AA22B58664ACD84FD8DF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/05e603e3-f23e-4c6a-bb3c-06409d65c838/0/3130332e3136362e302e302f32342d3234203d3e20313431393238.roa
Signing time:             Wed 11 Feb 2026 13:00:02 +0000
ROA not before:           Wed 11 Feb 2026 12:55:02 +0000
ROA not after:            Wed 10 Feb 2027 13:00:02 +0000
asID:                     141928
IP address blocks:        103.166.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/05e603e3-f23e-4c6a-bb3c-06409d65c838/0/011400263413DE61A797AA22B58664ACD84FD8DF.crl
                          rsync://repo-rpki.idnic.net/repo/05e603e3-f23e-4c6a-bb3c-06409d65c838/0/011400263413DE61A797AA22B58664ACD84FD8DF.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/011400263413DE61A797AA22B58664ACD84FD8DF.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Mar 2026 22:15:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:2e:7b:f2:f1:1e:ac:44:84:9a:81:f4:cb:38:a3:0a:65:33:fb:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=011400263413DE61A797AA22B58664ACD84FD8DF
        Validity
            Not Before: Feb 11 12:55:02 2026 GMT
            Not After : Feb 10 13:00:02 2027 GMT
        Subject: CN=92EAD533D4B96A47CCEDE12212BF7033BCED7A0D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:17:0c:a7:eb:a3:07:fe:0b:2d:0b:c5:ff:c2:
                    26:b9:2e:83:78:94:ec:da:fd:a6:07:a5:ed:87:71:
                    8c:db:91:66:e2:fc:fe:d2:80:08:db:19:f3:b2:64:
                    f6:99:8c:c3:e1:d1:3d:86:4a:d5:56:61:c1:96:f1:
                    d2:93:8c:2f:d9:4f:00:c5:d3:8f:e6:3e:af:b1:b3:
                    96:da:56:72:21:d6:21:14:65:4f:19:bb:79:08:25:
                    5b:ce:43:af:b5:53:fc:70:fd:3f:de:e1:7a:75:59:
                    2f:a1:b7:81:cf:da:81:b7:21:68:d6:53:83:8d:ad:
                    3c:e4:62:85:a8:a3:24:79:7a:ef:16:67:3b:7d:f7:
                    4b:07:8d:f5:e5:6a:67:64:50:69:8f:d9:0c:33:bb:
                    b5:cb:d2:f3:ba:f6:71:2c:f5:1b:d2:ca:f6:07:3c:
                    77:dd:58:46:a6:e7:d7:74:05:5e:55:e0:90:7f:eb:
                    d2:e1:0c:48:e7:b0:46:ed:2d:ce:8f:b7:f7:ed:55:
                    98:46:46:89:de:1f:11:82:71:67:d6:b9:e7:07:f0:
                    14:e8:8f:9b:78:dc:cc:2c:f6:96:7f:0a:39:fd:40:
                    b6:1f:5b:b1:dc:0d:2e:b5:2c:9a:96:f3:5a:40:5f:
                    bd:f8:54:63:f5:17:04:fd:ef:f8:fa:ec:cd:01:4d:
                    07:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:EA:D5:33:D4:B9:6A:47:CC:ED:E1:22:12:BF:70:33:BC:ED:7A:0D
            X509v3 Authority Key Identifier:
                keyid:01:14:00:26:34:13:DE:61:A7:97:AA:22:B5:86:64:AC:D8:4F:D8:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/05e603e3-f23e-4c6a-bb3c-06409d65c838/0/011400263413DE61A797AA22B58664ACD84FD8DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/011400263413DE61A797AA22B58664ACD84FD8DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/05e603e3-f23e-4c6a-bb3c-06409d65c838/0/3130332e3136362e302e302f32342d3234203d3e20313431393238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.166.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c7:33:40:fe:e7:3c:2b:a3:72:2c:81:3e:a7:69:74:3d:79:4b:
         34:f8:97:a3:99:e5:20:cc:56:b0:1f:a6:fc:7d:5e:ae:59:b6:
         17:4c:93:1c:44:81:d6:a5:2c:72:02:47:9f:7d:da:49:b4:9d:
         74:88:fc:b4:4f:87:c6:d7:b6:e2:01:5b:93:a6:07:f1:61:14:
         98:39:6a:2b:ab:5e:13:fc:6c:0d:46:61:e3:95:05:c0:c1:6f:
         bd:76:2f:e8:41:12:49:20:cf:9a:24:a2:b9:04:b4:53:d0:0c:
         38:78:a8:e5:0f:0c:c1:fb:a6:d9:2b:3d:28:08:ce:38:23:3a:
         7f:96:ce:89:41:13:0e:d4:e9:f9:63:61:40:13:92:24:79:9f:
         b9:e2:66:46:4f:f2:08:c5:0d:78:7e:4f:b7:e5:e0:84:91:90:
         d1:54:ce:cb:03:05:e4:31:4c:eb:9a:a6:61:cf:a2:03:ff:7f:
         89:80:ad:dd:fb:52:ca:cf:28:74:bd:e6:23:2c:98:0a:91:6b:
         f5:50:a4:3f:66:78:a1:81:30:e2:4c:7e:09:60:2b:65:12:dc:
         ad:cf:dd:c2:ec:4e:1f:5b:e4:c2:40:f9:2b:0f:fa:e5:25:aa:
         bf:ca:6d:c1:01:6b:bb:ed:cf:9d:fe:81:23:05:03:08:0c:26:
         1b:ca:48:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:52:07 2026 by rpki-client