Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/227de071-3aaa-4e2e-974e-a78c81729f06/0/3130332e3133342e3234342e302f32342d3234203d3e20313331373733.roa
File:                     3130332e3133342e3234342e302f32342d3234203d3e20313331373733.roa (raw, json)
Hash identifier:          DI8mGUi19aF12orHykc0S36TC5G+Qtw+wyOAf8XRRXA=
Subject key identifier:   61:1A:2B:71:FF:FB:E8:38:64:4F:C2:05:C9:98:91:1E:3F:7E:1B:1F
Certificate issuer:       /CN=37EECBD045CA279ED50372AC86831099D2FD896F
Certificate serial:       407DC9D9DFD6E719F5E0942F664AF2292E7893E0
Authority key identifier: 37:EE:CB:D0:45:CA:27:9E:D5:03:72:AC:86:83:10:99:D2:FD:89:6F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/37EECBD045CA279ED50372AC86831099D2FD896F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/227de071-3aaa-4e2e-974e-a78c81729f06/0/3130332e3133342e3234342e302f32342d3234203d3e20313331373733.roa
Signing time:             Thu 05 Feb 2026 09:02:04 +0000
ROA not before:           Thu 05 Feb 2026 08:57:04 +0000
ROA not after:            Thu 04 Feb 2027 09:02:04 +0000
asID:                     131773
IP address blocks:        103.134.244.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/227de071-3aaa-4e2e-974e-a78c81729f06/0/37EECBD045CA279ED50372AC86831099D2FD896F.crl
                          rsync://repo-rpki.idnic.net/repo/227de071-3aaa-4e2e-974e-a78c81729f06/0/37EECBD045CA279ED50372AC86831099D2FD896F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/37EECBD045CA279ED50372AC86831099D2FD896F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Mar 2026 02:26:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:7d:c9:d9:df:d6:e7:19:f5:e0:94:2f:66:4a:f2:29:2e:78:93:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37EECBD045CA279ED50372AC86831099D2FD896F
        Validity
            Not Before: Feb  5 08:57:04 2026 GMT
            Not After : Feb  4 09:02:04 2027 GMT
        Subject: CN=611A2B71FFFBE838644FC205C998911E3F7E1B1F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:8c:96:8a:83:34:f5:a1:7a:5e:61:6b:2f:86:
                    f9:08:fd:67:6c:ae:77:8b:e8:c0:1b:5d:99:c5:00:
                    be:24:89:26:71:b5:6e:34:33:2b:4c:24:41:d2:d2:
                    a2:75:6c:f9:57:e1:7c:18:67:90:53:03:3a:53:56:
                    50:c9:91:9c:f9:8a:ff:d4:c1:de:2c:82:1b:fa:85:
                    36:af:98:ca:a0:15:5b:8a:1d:bb:e5:f4:1b:36:06:
                    15:8e:a2:ea:bc:f5:ba:74:b5:00:1e:d1:cf:05:d5:
                    a4:2e:fa:39:a5:ef:88:9d:05:9e:03:11:fe:88:f2:
                    6f:84:19:b5:50:0f:25:e9:66:f3:51:ff:07:bc:91:
                    c1:d2:52:92:be:69:37:81:ec:a0:37:fa:ae:87:77:
                    37:aa:04:2e:f3:19:1c:85:d7:a4:09:07:76:38:c6:
                    96:39:5b:8b:08:1e:92:2d:2e:ed:b0:bc:fc:9b:e6:
                    63:10:55:85:7e:77:74:11:7f:16:86:64:54:b3:47:
                    ea:70:93:64:a6:61:54:67:38:c2:3d:87:aa:31:70:
                    17:2b:fe:bc:1b:b7:d9:12:8e:ef:88:ec:cc:36:5c:
                    11:29:54:2d:ff:d3:98:84:54:87:e1:b1:e2:c8:04:
                    72:56:fa:35:4e:08:8d:7f:f8:6b:41:11:92:c3:f5:
                    d6:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:1A:2B:71:FF:FB:E8:38:64:4F:C2:05:C9:98:91:1E:3F:7E:1B:1F
            X509v3 Authority Key Identifier:
                keyid:37:EE:CB:D0:45:CA:27:9E:D5:03:72:AC:86:83:10:99:D2:FD:89:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/227de071-3aaa-4e2e-974e-a78c81729f06/0/37EECBD045CA279ED50372AC86831099D2FD896F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/37EECBD045CA279ED50372AC86831099D2FD896F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/227de071-3aaa-4e2e-974e-a78c81729f06/0/3130332e3133342e3234342e302f32342d3234203d3e20313331373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.134.244.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c2:70:0c:6d:49:81:2d:11:d2:9a:47:ac:5c:c7:aa:2b:cc:83:
         6f:c0:52:fe:42:89:ea:86:99:10:2d:5d:1c:af:6d:8c:75:05:
         ca:c2:39:b2:0f:d4:9e:bb:f5:f7:9f:24:51:4c:5a:56:25:5c:
         29:e6:6c:c6:aa:ac:fc:97:9a:23:ff:e0:53:b1:e0:b2:66:65:
         dc:5a:a5:24:4f:15:8f:c4:24:cc:89:c6:83:e3:cd:3b:69:c2:
         80:d0:53:4a:88:a7:01:9e:17:8d:9f:17:85:33:d4:27:95:b0:
         b2:4d:9c:b3:8c:66:1b:e8:fd:ee:7c:cc:41:af:47:e3:ec:22:
         f9:5f:61:60:56:cc:dd:02:04:4a:ef:15:59:c5:15:4b:6a:76:
         07:55:a5:f9:44:fb:d3:95:ec:da:55:b5:a6:89:b0:2b:94:ae:
         63:28:c0:2c:84:18:b9:ee:9e:15:13:6d:f6:6a:33:1b:29:8f:
         b1:20:02:11:dc:cb:5b:f6:e2:65:e2:94:61:de:0b:09:82:2e:
         1d:65:2a:cb:4d:10:d4:f6:05:a9:a2:54:27:6a:5f:2e:55:2b:
         17:68:5c:47:bd:91:53:38:51:8d:8b:4f:f9:e8:ec:1a:40:4f:
         5b:8b:1d:11:23:25:36:b6:d7:ed:b1:f8:5b:66:89:f5:9b:51:
         8c:89:dd:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:06:38 2026 by rpki-client