Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/227de071-3aaa-4e2e-974e-a78c81729f06/0/3130332e3133342e3234362e302f32342d3234203d3e20313331373733.roa
File:                     3130332e3133342e3234362e302f32342d3234203d3e20313331373733.roa (raw, json)
Hash identifier:          bS9q1FM6zKkGNpPUTupzPD0zpUyeZPD5xrJMwSlvCZ4=
Subject key identifier:   07:7D:F4:E5:FD:26:00:73:79:C9:58:14:73:64:21:08:DE:2C:79:07
Certificate issuer:       /CN=37EECBD045CA279ED50372AC86831099D2FD896F
Certificate serial:       5F9DF941A18EFF287BFBF4712B7E2880C929AA82
Authority key identifier: 37:EE:CB:D0:45:CA:27:9E:D5:03:72:AC:86:83:10:99:D2:FD:89:6F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/37EECBD045CA279ED50372AC86831099D2FD896F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/227de071-3aaa-4e2e-974e-a78c81729f06/0/3130332e3133342e3234362e302f32342d3234203d3e20313331373733.roa
Signing time:             Thu 05 Feb 2026 09:02:04 +0000
ROA not before:           Thu 05 Feb 2026 08:57:04 +0000
ROA not after:            Thu 04 Feb 2027 09:02:04 +0000
asID:                     131773
IP address blocks:        103.134.246.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/227de071-3aaa-4e2e-974e-a78c81729f06/0/37EECBD045CA279ED50372AC86831099D2FD896F.crl
                          rsync://repo-rpki.idnic.net/repo/227de071-3aaa-4e2e-974e-a78c81729f06/0/37EECBD045CA279ED50372AC86831099D2FD896F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/37EECBD045CA279ED50372AC86831099D2FD896F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Mar 2026 02:26:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:9d:f9:41:a1:8e:ff:28:7b:fb:f4:71:2b:7e:28:80:c9:29:aa:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37EECBD045CA279ED50372AC86831099D2FD896F
        Validity
            Not Before: Feb  5 08:57:04 2026 GMT
            Not After : Feb  4 09:02:04 2027 GMT
        Subject: CN=077DF4E5FD26007379C9581473642108DE2C7907
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:90:ab:b8:1a:a5:ad:8b:90:0f:19:f5:94:bd:
                    f3:d3:76:c1:a2:57:55:a0:5d:92:ed:4e:11:54:3f:
                    43:b0:db:01:59:19:16:bf:5e:f5:a7:fb:0f:00:8d:
                    02:8e:5c:ea:2f:7a:e6:2b:58:80:0e:23:f8:8f:cb:
                    91:a2:0e:0b:1f:43:87:ae:c3:33:3f:6c:77:6f:fd:
                    8a:5d:d4:4f:76:54:70:42:a7:61:e9:e5:3e:34:7f:
                    93:7c:d6:2b:98:9b:2d:e8:80:22:5e:60:a7:fd:59:
                    59:ef:72:9b:1e:08:5d:1e:6f:90:64:93:16:4b:55:
                    54:71:ed:fc:f9:19:46:b4:f4:73:b1:68:88:a3:d8:
                    fb:75:c1:7a:ae:0f:61:20:fe:e8:1b:21:9e:f9:c5:
                    bf:25:1b:55:3e:91:9b:eb:ec:91:33:41:6f:87:44:
                    c0:2d:ba:31:3f:b5:49:c8:df:bf:b8:09:81:f1:3f:
                    f6:cb:64:35:ef:5f:d0:cf:e8:69:39:a1:00:cc:78:
                    d8:d7:d3:4e:7b:1b:d5:17:ac:26:87:5a:67:13:40:
                    50:97:6a:07:8e:c0:fd:e4:38:49:cb:26:b4:b7:2c:
                    89:50:05:67:1f:4d:d5:a2:16:da:8f:3f:91:ee:83:
                    8a:10:12:9d:cb:26:4d:8b:f9:7c:5e:0f:0e:28:05:
                    76:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:7D:F4:E5:FD:26:00:73:79:C9:58:14:73:64:21:08:DE:2C:79:07
            X509v3 Authority Key Identifier:
                keyid:37:EE:CB:D0:45:CA:27:9E:D5:03:72:AC:86:83:10:99:D2:FD:89:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/227de071-3aaa-4e2e-974e-a78c81729f06/0/37EECBD045CA279ED50372AC86831099D2FD896F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/37EECBD045CA279ED50372AC86831099D2FD896F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/227de071-3aaa-4e2e-974e-a78c81729f06/0/3130332e3133342e3234362e302f32342d3234203d3e20313331373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.134.246.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:6c:0d:8d:01:a1:27:5b:43:5b:c7:52:bd:ca:e4:3e:6c:8e:
         ac:f1:66:f7:ab:94:b1:a6:64:24:b3:c7:37:73:03:38:68:fc:
         af:01:46:7e:2a:3d:85:ca:1b:76:7b:1e:00:17:99:c8:70:16:
         ec:78:81:50:4c:88:d5:ba:2c:55:c7:c1:02:e4:37:3f:41:dc:
         8f:60:19:f9:25:90:a5:5f:e4:da:39:af:7b:95:df:17:8c:e7:
         39:f6:bb:de:34:83:10:01:77:48:a5:a4:26:56:cd:25:c9:a8:
         6a:61:7e:c9:78:02:3f:bc:ba:7c:f1:a1:94:0c:34:07:66:ee:
         7d:8d:23:f0:c5:42:39:bd:29:b0:c9:bd:2d:ca:94:9a:e3:95:
         41:4a:19:fb:33:ca:bb:df:1f:28:b3:8d:29:fd:ef:07:9f:a9:
         9e:c6:1c:91:21:0f:62:67:a7:cc:f4:f3:9f:8b:00:2b:78:2c:
         cf:9f:79:e0:04:ff:ad:75:15:72:24:bf:d5:00:f0:f5:17:48:
         c9:4f:bd:a5:50:08:55:20:2b:54:b0:f6:8a:70:ec:64:f5:cf:
         3c:b3:79:dc:35:1c:d2:23:9a:84:be:94:e4:e5:b9:6a:91:f7:
         38:6d:fb:ab:50:07:4c:37:a3:b5:76:f9:2a:69:25:3e:98:a0:
         00:61:a5:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:40:21 2026 by rpki-client