Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/3130332e37372e3230342e302f32322d3232203d3e203634323937.roa
File:                     3130332e37372e3230342e302f32322d3232203d3e203634323937.roa (raw, json)
Hash identifier:          KAmpBoTLVKtQpzZQRpEjJRr9zTKNjSVFlisu1/zsLDs=
Subject key identifier:   E6:76:A6:3B:35:67:6D:A1:BC:D8:CA:55:3D:FB:BE:C9:E9:36:17:59
Certificate issuer:       /CN=A7D1BD82113CD720C572AF99A8FB2940610AEC49
Certificate serial:       4ECE19A9C0CD039AAE55483BCF145FE873C12486
Authority key identifier: A7:D1:BD:82:11:3C:D7:20:C5:72:AF:99:A8:FB:29:40:61:0A:EC:49
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7D1BD82113CD720C572AF99A8FB2940610AEC49.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/3130332e37372e3230342e302f32322d3232203d3e203634323937.roa
Signing time:             Sat 07 Feb 2026 04:00:00 +0000
ROA not before:           Sat 07 Feb 2026 03:55:00 +0000
ROA not after:            Sat 06 Feb 2027 04:00:00 +0000
asID:                     64297
IP address blocks:        103.77.204.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/A7D1BD82113CD720C572AF99A8FB2940610AEC49.crl
                          rsync://repo-rpki.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/A7D1BD82113CD720C572AF99A8FB2940610AEC49.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7D1BD82113CD720C572AF99A8FB2940610AEC49.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Mar 2026 08:10:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:ce:19:a9:c0:cd:03:9a:ae:55:48:3b:cf:14:5f:e8:73:c1:24:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A7D1BD82113CD720C572AF99A8FB2940610AEC49
        Validity
            Not Before: Feb  7 03:55:00 2026 GMT
            Not After : Feb  6 04:00:00 2027 GMT
        Subject: CN=E676A63B35676DA1BCD8CA553DFBBEC9E9361759
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:45:50:d7:4a:a1:d7:89:92:55:0a:12:1d:6b:
                    b3:81:36:ff:cd:a8:30:00:8f:01:ee:c4:d0:f3:97:
                    b7:78:ae:25:f8:d0:d6:9b:d9:3e:e1:bc:c4:b9:e4:
                    cc:f8:18:da:c9:b4:81:d2:85:4f:a8:4d:e3:b2:96:
                    c1:45:2e:34:7c:81:0f:20:1e:b7:4e:0e:67:bb:55:
                    1f:c6:84:4b:b1:31:75:fc:55:28:11:cb:05:8c:c6:
                    ac:68:69:e4:84:57:6d:1c:3b:64:59:94:0c:08:98:
                    46:ae:93:d8:32:8a:c8:43:a1:e3:a6:70:e0:a2:5a:
                    88:82:c7:92:d9:34:cf:b5:35:3d:e4:c7:35:97:97:
                    cb:c1:f2:5e:37:d7:27:41:f3:49:a0:bf:c7:a0:19:
                    a5:fc:ab:7a:2f:2e:b8:99:87:7e:3c:af:dc:4a:83:
                    49:95:8a:34:39:f4:44:38:94:59:1a:79:a3:c5:9d:
                    fd:b4:a0:e9:0a:74:4e:6c:41:14:17:49:11:c4:f0:
                    0b:f0:91:d8:e4:b2:ae:e2:11:3f:3e:a8:a3:72:50:
                    15:74:6e:39:90:9e:25:41:02:20:a4:4c:47:4d:82:
                    3e:2f:e6:85:ae:58:6a:95:3c:ce:83:dd:68:a9:1c:
                    f2:76:6d:2e:88:fb:f3:47:bb:dc:e2:ac:0c:5c:01:
                    b6:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:76:A6:3B:35:67:6D:A1:BC:D8:CA:55:3D:FB:BE:C9:E9:36:17:59
            X509v3 Authority Key Identifier:
                keyid:A7:D1:BD:82:11:3C:D7:20:C5:72:AF:99:A8:FB:29:40:61:0A:EC:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/A7D1BD82113CD720C572AF99A8FB2940610AEC49.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7D1BD82113CD720C572AF99A8FB2940610AEC49.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/3130332e37372e3230342e302f32322d3232203d3e203634323937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.77.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         14:c0:63:8c:70:53:35:48:fa:54:2c:0f:51:54:4c:33:3c:31:
         93:6d:16:0d:44:f0:57:6c:4d:4e:b3:92:aa:2e:30:63:91:f0:
         b8:b1:cc:81:eb:80:07:79:13:94:6f:07:0e:de:f7:65:63:43:
         dd:1b:ae:e9:74:c6:20:8c:cd:90:99:bc:c5:33:84:14:0c:24:
         f7:a6:f0:39:b1:53:e4:68:d7:f6:fc:41:a3:96:9a:0a:94:c4:
         e9:9d:fc:57:ad:d2:4e:28:47:c6:3a:37:23:be:a0:d4:a3:d6:
         9e:34:d9:7b:db:62:52:46:39:06:0f:54:7c:dd:4e:04:72:c1:
         57:52:19:26:b3:8d:6b:d9:9a:cc:e1:fe:1d:58:ea:f0:60:fe:
         8b:e3:ec:ee:f2:47:8a:9a:6e:84:f2:47:74:80:19:91:9f:2b:
         da:11:af:58:28:26:5f:36:fd:d7:38:6c:69:cb:d3:23:3b:4c:
         68:b1:46:15:78:61:70:4b:c1:74:7f:c1:a3:0b:9d:8a:0e:02:
         9a:96:10:51:1f:53:80:32:49:52:f7:49:20:04:20:ec:f2:7a:
         57:83:63:0b:5c:87:16:14:36:83:a0:f0:25:3e:07:7a:66:3b:
         0c:d1:93:bb:c2:bf:ac:96:7b:00:53:57:08:32:60:a8:61:49:
         a6:15:e7:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:16:57 2026 by rpki-client