Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/05e603e3-f23e-4c6a-bb3c-06409d65c838/0/3130332e3136362e312e302f32342d3234203d3e20313431393238.roa
File:                     3130332e3136362e312e302f32342d3234203d3e20313431393238.roa (raw, json)
Hash identifier:          B+0qK8qev48/tp9/t2UO1/YEDbjqNXgV6uh7VwKVXwY=
Subject key identifier:   E7:2C:DA:82:19:5C:C5:BA:E5:87:0E:F8:A5:C4:B2:57:36:18:CF:65
Certificate issuer:       /CN=011400263413DE61A797AA22B58664ACD84FD8DF
Certificate serial:       405151654C1CE2CD723E23CD8499B70222CEE035
Authority key identifier: 01:14:00:26:34:13:DE:61:A7:97:AA:22:B5:86:64:AC:D8:4F:D8:DF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/011400263413DE61A797AA22B58664ACD84FD8DF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/05e603e3-f23e-4c6a-bb3c-06409d65c838/0/3130332e3136362e312e302f32342d3234203d3e20313431393238.roa
Signing time:             Wed 11 Feb 2026 13:00:02 +0000
ROA not before:           Wed 11 Feb 2026 12:55:02 +0000
ROA not after:            Wed 10 Feb 2027 13:00:02 +0000
asID:                     141928
IP address blocks:        103.166.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/05e603e3-f23e-4c6a-bb3c-06409d65c838/0/011400263413DE61A797AA22B58664ACD84FD8DF.crl
                          rsync://repo-rpki.idnic.net/repo/05e603e3-f23e-4c6a-bb3c-06409d65c838/0/011400263413DE61A797AA22B58664ACD84FD8DF.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/011400263413DE61A797AA22B58664ACD84FD8DF.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Mar 2026 22:15:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:51:51:65:4c:1c:e2:cd:72:3e:23:cd:84:99:b7:02:22:ce:e0:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=011400263413DE61A797AA22B58664ACD84FD8DF
        Validity
            Not Before: Feb 11 12:55:02 2026 GMT
            Not After : Feb 10 13:00:02 2027 GMT
        Subject: CN=E72CDA82195CC5BAE5870EF8A5C4B2573618CF65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:05:25:4c:54:cf:b1:55:1a:5e:ab:74:d0:a4:
                    b0:95:b4:19:ff:01:72:4b:3d:b9:62:e3:b3:f4:09:
                    20:07:b6:13:f3:8a:4f:b3:31:d8:ad:53:2f:62:f0:
                    6c:59:5f:b8:7c:24:a2:4d:d2:d3:52:97:92:ea:57:
                    a8:6e:b6:d0:a8:b6:9c:18:2c:44:da:3d:c9:b2:48:
                    d3:72:7b:ec:c3:dd:27:55:79:65:46:22:80:2a:f4:
                    6a:6c:fa:6c:bd:f1:85:92:96:49:2e:b4:fe:61:ce:
                    f3:f6:64:04:70:de:e6:56:8d:6a:e0:a2:a9:eb:0c:
                    19:a2:06:84:79:21:ee:60:be:c7:df:80:97:0e:74:
                    f6:8a:e6:2a:62:3a:cd:a3:fc:56:e4:16:0a:1e:49:
                    57:c8:36:ab:1a:7e:8b:af:4b:b0:ac:97:82:d0:5e:
                    51:9e:6b:0d:1b:00:35:ea:91:32:71:c8:4a:a7:11:
                    19:29:66:74:eb:ce:18:2a:76:72:58:fe:d2:0a:ed:
                    d3:aa:35:dd:75:35:44:90:4e:7d:1d:23:1b:05:f9:
                    58:c1:fd:8c:5d:e5:40:57:d9:d7:e1:5d:ef:e3:d3:
                    6e:c0:f2:f4:00:50:7e:86:fc:c0:65:4e:cb:d1:ca:
                    42:4d:4e:57:ee:88:f7:3c:53:b9:8e:0c:f8:bd:a8:
                    28:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:2C:DA:82:19:5C:C5:BA:E5:87:0E:F8:A5:C4:B2:57:36:18:CF:65
            X509v3 Authority Key Identifier:
                keyid:01:14:00:26:34:13:DE:61:A7:97:AA:22:B5:86:64:AC:D8:4F:D8:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/05e603e3-f23e-4c6a-bb3c-06409d65c838/0/011400263413DE61A797AA22B58664ACD84FD8DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/011400263413DE61A797AA22B58664ACD84FD8DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/05e603e3-f23e-4c6a-bb3c-06409d65c838/0/3130332e3136362e312e302f32342d3234203d3e20313431393238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.166.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bf:2f:92:c8:c4:8e:47:3c:91:f8:dc:91:4e:ae:1a:68:5f:ba:
         63:96:f0:8c:dc:1d:1b:3c:f4:3b:85:30:98:62:0f:27:b8:a8:
         92:aa:44:47:51:a3:56:2c:85:3c:35:45:e1:13:4f:dd:57:37:
         ff:0b:28:4b:dd:09:1b:5c:ea:99:d2:6d:c4:68:1b:67:f6:05:
         e5:6a:8f:24:9a:27:6d:15:75:0d:e0:78:71:1e:41:a5:1a:f7:
         fe:3c:99:62:b8:81:78:c8:3b:23:55:ba:5e:c9:57:a3:72:91:
         01:07:4f:0b:1b:67:de:00:7a:26:70:35:75:6b:d4:d4:26:0a:
         7a:49:e8:a2:41:48:d7:af:a5:ff:e6:e1:c9:72:cf:79:6a:57:
         a3:49:d8:79:1e:b0:e5:b0:d3:02:07:fa:1f:c5:60:d3:b0:8e:
         e2:1d:5a:c4:d3:24:50:de:a6:fe:7f:20:85:f6:95:2b:12:df:
         72:77:67:63:66:ed:89:5a:97:ab:d1:ff:3c:44:28:4b:7f:2f:
         4e:61:fe:9f:98:ac:d0:43:12:3f:e1:50:3d:b9:dc:ce:b7:00:
         2e:85:8c:bf:1e:db:33:5e:b7:37:92:82:0b:31:61:fe:27:b3:
         a1:08:c5:29:55:aa:df:20:2e:88:cd:08:6a:1c:87:11:6c:fb:
         8a:14:70:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:52:07 2026 by rpki-client