Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/227de071-3aaa-4e2e-974e-a78c81729f06/0/3130332e3133342e3234372e302f32342d3234203d3e20313331373733.roa
File:                     3130332e3133342e3234372e302f32342d3234203d3e20313331373733.roa (raw, json)
Hash identifier:          6Du7YSTsPoNmwsS5ivsTmUWMLaQgevGKBTkeY7AtcXE=
Subject key identifier:   FA:EC:94:45:34:C3:71:10:15:43:55:0F:43:B3:79:D7:5C:15:D5:26
Certificate issuer:       /CN=37EECBD045CA279ED50372AC86831099D2FD896F
Certificate serial:       5FC37A3DF04F135ACAA7D34D6C479D115F7DED7D
Authority key identifier: 37:EE:CB:D0:45:CA:27:9E:D5:03:72:AC:86:83:10:99:D2:FD:89:6F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/37EECBD045CA279ED50372AC86831099D2FD896F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/227de071-3aaa-4e2e-974e-a78c81729f06/0/3130332e3133342e3234372e302f32342d3234203d3e20313331373733.roa
Signing time:             Thu 05 Feb 2026 09:02:04 +0000
ROA not before:           Thu 05 Feb 2026 08:57:04 +0000
ROA not after:            Thu 04 Feb 2027 09:02:04 +0000
asID:                     131773
IP address blocks:        103.134.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/227de071-3aaa-4e2e-974e-a78c81729f06/0/37EECBD045CA279ED50372AC86831099D2FD896F.crl
                          rsync://repo-rpki.idnic.net/repo/227de071-3aaa-4e2e-974e-a78c81729f06/0/37EECBD045CA279ED50372AC86831099D2FD896F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/37EECBD045CA279ED50372AC86831099D2FD896F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Mar 2026 02:26:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:c3:7a:3d:f0:4f:13:5a:ca:a7:d3:4d:6c:47:9d:11:5f:7d:ed:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37EECBD045CA279ED50372AC86831099D2FD896F
        Validity
            Not Before: Feb  5 08:57:04 2026 GMT
            Not After : Feb  4 09:02:04 2027 GMT
        Subject: CN=FAEC944534C371101543550F43B379D75C15D526
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:4c:7c:13:5c:cb:17:9a:f1:e0:42:f8:3b:2b:
                    db:a8:df:9b:05:00:10:ff:9f:8c:cb:f2:f4:dc:de:
                    72:b2:f8:e5:72:0b:15:45:9e:bb:f4:87:27:e8:7d:
                    4e:d8:56:cb:d9:f5:5f:03:c2:53:61:90:f3:1c:27:
                    cd:e1:63:3f:6a:5a:80:2a:e5:0d:14:59:63:43:a6:
                    71:6f:11:d6:67:52:80:fb:9c:3f:fd:b0:fb:05:40:
                    ce:53:40:01:cf:33:b9:18:c4:ae:89:da:dd:55:ae:
                    f6:16:19:77:f1:a8:4a:7b:c3:c7:20:50:81:94:8f:
                    8e:73:e8:db:2e:07:7d:71:0f:19:fc:c7:33:fe:e3:
                    66:8f:32:9e:f7:c2:99:a1:e8:21:d3:8d:7e:f2:32:
                    0e:9f:f3:b3:1d:a6:3d:a7:c7:3d:b7:1f:33:cb:53:
                    80:3d:c5:da:cf:b7:ee:61:ca:3e:d4:44:29:91:0b:
                    37:98:d5:8a:2a:86:a3:e6:f9:44:07:fc:08:57:b9:
                    f6:27:23:80:48:6e:7c:9c:b1:56:3a:f9:5b:e6:0d:
                    16:d3:92:58:b0:1f:4b:63:70:7a:d1:74:9a:6c:c8:
                    75:ac:94:cf:f5:c6:8c:64:96:0c:b7:b6:ef:f5:9f:
                    0f:18:c1:fc:e7:5f:dc:b3:e5:10:3f:42:69:77:6c:
                    d0:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:EC:94:45:34:C3:71:10:15:43:55:0F:43:B3:79:D7:5C:15:D5:26
            X509v3 Authority Key Identifier:
                keyid:37:EE:CB:D0:45:CA:27:9E:D5:03:72:AC:86:83:10:99:D2:FD:89:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/227de071-3aaa-4e2e-974e-a78c81729f06/0/37EECBD045CA279ED50372AC86831099D2FD896F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/37EECBD045CA279ED50372AC86831099D2FD896F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/227de071-3aaa-4e2e-974e-a78c81729f06/0/3130332e3133342e3234372e302f32342d3234203d3e20313331373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.134.247.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:47:b7:61:57:86:b0:b1:6c:3d:6c:00:94:40:1c:ed:ae:26:
         fe:1f:7d:2a:a5:62:11:d5:d3:fc:39:21:46:07:2e:4c:26:f4:
         68:32:bb:b8:b2:89:12:9e:f7:a5:ba:b4:80:bb:be:7d:2b:2e:
         84:4b:62:92:3a:ca:30:27:b3:8b:c6:a9:ef:54:04:28:1d:54:
         79:b4:db:9a:96:09:95:d7:95:68:55:ff:2c:f7:e6:de:aa:5c:
         ad:d6:be:43:08:17:b9:1c:c8:22:06:19:e7:b3:d2:3e:a0:d6:
         22:67:d7:4e:a0:f8:cd:c9:a7:06:2f:7c:22:34:fb:f0:56:00:
         ae:a8:ad:06:30:a7:57:e0:62:40:0f:05:a1:c7:98:2f:14:1d:
         1b:79:6b:bd:5b:f2:10:91:d3:1c:44:01:d5:8d:71:c2:17:c5:
         14:a4:9f:51:f6:db:67:4c:b8:5b:e6:38:e4:68:0f:06:95:05:
         ea:ea:70:53:be:40:b5:d4:26:27:1a:65:2e:10:64:07:70:d9:
         d0:7b:31:3e:67:21:28:33:1b:89:c5:40:01:76:00:ae:06:ac:
         94:b3:4b:a8:f3:99:db:6e:b1:b1:31:ab:b2:71:d6:ff:4a:cc:
         ae:d1:fd:e9:ce:f1:94:0c:9e:ae:ab:5e:15:b2:e8:b1:14:cb:
         ea:1d:b0:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:28:02 2026 by rpki-client