Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/10ff022a-9b16-4b4c-98a2-534994f589d0/0/3130332e3137322e37302e302f32332d3234203d3e20313432333836.roa
File:                     3130332e3137322e37302e302f32332d3234203d3e20313432333836.roa (raw, json)
Hash identifier:          PN7woaDe1VcAHp93rJDDFu2lHlYOzHq+B+FfhIvH/ME=
Subject key identifier:   57:03:FC:34:56:8A:6E:74:9D:08:53:7E:08:5E:02:34:ED:9A:3E:AC
Certificate issuer:       /CN=7E46C2EE5082354F1494DE6AEA6CDA642769EDF1
Certificate serial:       16B8A7986BAD79363CEC6F7655A0FA8746DC705A
Authority key identifier: 7E:46:C2:EE:50:82:35:4F:14:94:DE:6A:EA:6C:DA:64:27:69:ED:F1
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E46C2EE5082354F1494DE6AEA6CDA642769EDF1.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/10ff022a-9b16-4b4c-98a2-534994f589d0/0/3130332e3137322e37302e302f32332d3234203d3e20313432333836.roa
Signing time:             Tue 24 Feb 2026 10:02:36 +0000
ROA not before:           Tue 24 Feb 2026 09:57:36 +0000
ROA not after:            Tue 23 Feb 2027 10:02:36 +0000
asID:                     142386
IP address blocks:        103.172.70.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/10ff022a-9b16-4b4c-98a2-534994f589d0/0/7E46C2EE5082354F1494DE6AEA6CDA642769EDF1.crl
                          rsync://repo-rpki.idnic.net/repo/10ff022a-9b16-4b4c-98a2-534994f589d0/0/7E46C2EE5082354F1494DE6AEA6CDA642769EDF1.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E46C2EE5082354F1494DE6AEA6CDA642769EDF1.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Mar 2026 07:35:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:b8:a7:98:6b:ad:79:36:3c:ec:6f:76:55:a0:fa:87:46:dc:70:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7E46C2EE5082354F1494DE6AEA6CDA642769EDF1
        Validity
            Not Before: Feb 24 09:57:36 2026 GMT
            Not After : Feb 23 10:02:36 2027 GMT
        Subject: CN=5703FC34568A6E749D08537E085E0234ED9A3EAC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:42:63:bb:1e:98:3d:d4:c7:9e:49:d6:08:fe:
                    df:57:5f:18:48:db:c0:64:af:f6:8a:b8:83:a9:9c:
                    6a:73:46:a4:ee:52:96:63:8c:e6:34:46:d9:4f:43:
                    e3:8f:4e:94:bb:e1:61:38:71:d0:d1:57:88:f2:8d:
                    6a:42:99:c1:54:a5:86:51:60:dc:ae:63:af:99:8d:
                    7c:50:86:6c:d8:7d:8b:31:05:ff:1f:f4:73:20:00:
                    4c:56:c8:91:04:c8:95:2a:a9:72:6e:0f:47:81:6c:
                    19:46:e9:05:5f:29:6e:ca:18:06:f8:3c:79:65:2b:
                    3f:cb:bd:a0:09:86:c9:80:fb:7b:62:5c:bc:1e:61:
                    ba:50:6b:93:b0:f3:6b:12:e6:b3:86:91:9e:62:1f:
                    16:24:f7:f8:84:2b:fd:22:fa:af:1d:d1:2a:9d:17:
                    f1:a1:b5:e6:fb:b8:e0:ab:4d:22:cc:dc:26:87:9c:
                    1d:b3:ab:f8:a4:9f:df:6c:a2:97:30:ce:e4:c7:a3:
                    54:ac:e3:83:fe:9d:1f:db:c9:41:f1:e9:ee:84:de:
                    89:f3:42:71:24:0a:ee:ae:31:8e:c1:c9:ce:98:c2:
                    61:e8:f7:74:2f:ec:71:86:3a:a3:ed:ba:82:dc:a6:
                    a9:9c:2d:90:06:42:36:c3:7b:2d:43:5f:39:e0:9f:
                    28:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:03:FC:34:56:8A:6E:74:9D:08:53:7E:08:5E:02:34:ED:9A:3E:AC
            X509v3 Authority Key Identifier:
                keyid:7E:46:C2:EE:50:82:35:4F:14:94:DE:6A:EA:6C:DA:64:27:69:ED:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/10ff022a-9b16-4b4c-98a2-534994f589d0/0/7E46C2EE5082354F1494DE6AEA6CDA642769EDF1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E46C2EE5082354F1494DE6AEA6CDA642769EDF1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/10ff022a-9b16-4b4c-98a2-534994f589d0/0/3130332e3137322e37302e302f32332d3234203d3e20313432333836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.172.70.0/23

    Signature Algorithm: sha256WithRSAEncryption
         23:38:72:4b:5b:2e:6a:86:a8:aa:9b:21:51:4d:ab:47:b3:95:
         7f:83:d4:20:a5:d6:d1:fb:8d:c7:21:39:7f:23:15:13:6f:79:
         17:33:10:e8:0d:db:61:8d:23:77:51:14:a7:ab:43:22:04:c2:
         80:e7:e3:01:71:0d:11:84:9b:8c:f6:29:41:5a:13:2b:0e:9a:
         96:43:be:e9:85:fa:08:f6:ae:be:16:6e:ee:2c:0b:09:8c:ba:
         f9:93:76:46:01:13:85:72:dc:4c:ec:0b:84:73:ce:63:75:e0:
         11:b5:8d:67:f9:00:a7:32:69:ec:09:bd:a1:95:55:64:20:56:
         96:e6:9b:9b:f6:b9:45:84:a8:56:b4:4d:2b:25:08:67:4a:24:
         5a:fa:33:52:cc:b5:c8:bd:e0:df:81:14:d1:b2:35:9e:af:98:
         bb:63:81:d5:e7:01:13:54:21:86:d6:38:5c:ac:6a:17:45:df:
         5e:39:5a:1e:f2:47:65:b5:71:79:e1:57:7d:52:2a:ad:e8:06:
         1b:56:2e:d6:f3:62:c0:6c:e2:bc:3c:d5:a3:2f:b4:ea:7c:af:
         8b:55:cd:b8:55:18:2f:5b:68:c2:e4:d4:d8:a2:75:47:5c:3d:
         28:d2:f2:ad:5d:06:da:ca:6b:dd:d2:1c:76:2b:54:45:b2:47:
         1f:d7:cc:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:14:27 2026 by rpki-client