Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/57cd511f-afff-4fec-8724-d4119f891df2/0/3130332e3136342e35372e302f32342d3234203d3e20313431393033.roa
File:                     3130332e3136342e35372e302f32342d3234203d3e20313431393033.roa (raw, json)
Hash identifier:          gi32RXV8JZ3+geKXJ775zfQ6NviF8gztZ4frnl7zPLc=
Subject key identifier:   F9:34:98:9A:34:62:68:8B:C6:5A:80:88:D2:4D:5B:13:41:64:9B:32
Certificate issuer:       /CN=B0B4D0A5FD4E58D80534977B027C8BC68222070F
Certificate serial:       0863D0D559381CBE8CBA88C490E4ACE73FCCC51A
Authority key identifier: B0:B4:D0:A5:FD:4E:58:D8:05:34:97:7B:02:7C:8B:C6:82:22:07:0F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0B4D0A5FD4E58D80534977B027C8BC68222070F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/57cd511f-afff-4fec-8724-d4119f891df2/0/3130332e3136342e35372e302f32342d3234203d3e20313431393033.roa
Signing time:             Fri 27 Feb 2026 10:02:38 +0000
ROA not before:           Fri 27 Feb 2026 09:57:38 +0000
ROA not after:            Fri 26 Feb 2027 10:02:38 +0000
asID:                     141903
IP address blocks:        103.164.57.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/57cd511f-afff-4fec-8724-d4119f891df2/0/B0B4D0A5FD4E58D80534977B027C8BC68222070F.crl
                          rsync://repo-rpki.idnic.net/repo/57cd511f-afff-4fec-8724-d4119f891df2/0/B0B4D0A5FD4E58D80534977B027C8BC68222070F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0B4D0A5FD4E58D80534977B027C8BC68222070F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Mar 2026 12:27:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:63:d0:d5:59:38:1c:be:8c:ba:88:c4:90:e4:ac:e7:3f:cc:c5:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0B4D0A5FD4E58D80534977B027C8BC68222070F
        Validity
            Not Before: Feb 27 09:57:38 2026 GMT
            Not After : Feb 26 10:02:38 2027 GMT
        Subject: CN=F934989A3462688BC65A8088D24D5B1341649B32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:23:cf:4f:48:b2:be:1f:9c:65:72:6a:8e:38:
                    36:ba:cf:6c:01:f3:bc:b5:cb:b8:71:17:c2:e0:73:
                    42:ac:da:9f:1e:80:13:ae:91:7b:a8:44:be:93:55:
                    01:8f:3e:1f:42:9a:f2:81:2e:b5:c7:1b:cf:27:d7:
                    1a:7e:f9:c0:91:fc:50:a5:32:e8:b2:a6:5a:5c:c5:
                    b3:7e:16:49:86:1c:5c:e5:ff:ba:c1:4f:6b:9c:9e:
                    e9:18:90:0e:1e:44:ac:37:ee:b7:5b:29:c8:43:d3:
                    9a:11:9d:b8:bb:77:f5:11:26:d8:71:6c:13:77:57:
                    b3:7d:cd:6f:0c:ed:b7:fc:47:72:20:ae:8a:4f:95:
                    52:1c:fc:b3:14:81:c5:fa:8d:98:a4:aa:f2:04:ac:
                    66:ba:5a:f6:2b:04:7c:db:b1:c7:8f:cb:b0:8d:1a:
                    4b:2b:7d:1d:01:d2:71:5f:e6:db:34:e6:a9:1c:06:
                    28:c9:15:67:e3:54:3a:ec:e0:dd:b2:63:87:89:0e:
                    92:53:0c:98:83:9e:aa:27:9b:a2:8b:52:4a:59:26:
                    d6:78:ad:6b:ba:3d:ee:5f:57:e9:c9:dc:d0:77:03:
                    24:2a:08:92:34:18:dd:5a:f3:73:1a:23:fb:a2:3d:
                    4d:a0:ed:8a:40:9d:d1:34:cb:b4:cd:11:0d:1d:7b:
                    69:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:34:98:9A:34:62:68:8B:C6:5A:80:88:D2:4D:5B:13:41:64:9B:32
            X509v3 Authority Key Identifier:
                keyid:B0:B4:D0:A5:FD:4E:58:D8:05:34:97:7B:02:7C:8B:C6:82:22:07:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/57cd511f-afff-4fec-8724-d4119f891df2/0/B0B4D0A5FD4E58D80534977B027C8BC68222070F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0B4D0A5FD4E58D80534977B027C8BC68222070F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/57cd511f-afff-4fec-8724-d4119f891df2/0/3130332e3136342e35372e302f32342d3234203d3e20313431393033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.164.57.0/24

    Signature Algorithm: sha256WithRSAEncryption
         af:3d:1f:6a:09:7e:05:63:97:12:e7:d6:c1:44:7e:36:9e:39:
         50:58:2c:c1:3e:58:8d:05:d7:99:d0:1f:ee:f8:33:7b:d8:73:
         14:a5:24:ea:cc:4e:3e:7c:00:d5:a7:ac:84:7e:5a:0a:ba:1a:
         88:77:39:fc:f9:79:51:8a:12:b9:ba:43:6f:9c:6a:62:6e:94:
         a0:17:2a:7b:40:32:81:47:bc:c0:94:bb:af:ea:3d:ff:ad:68:
         77:3d:de:a8:65:de:49:3a:b4:b9:bd:44:e6:d7:47:74:9e:98:
         52:fb:77:4e:84:af:94:0b:03:b9:b3:6d:98:57:a1:78:76:c3:
         d0:ac:85:1c:26:7a:cb:f6:f9:10:bf:8c:c9:66:51:3f:38:99:
         da:7c:79:b3:f0:b6:4f:a1:a0:62:66:8b:61:42:28:71:17:8d:
         54:3b:9c:d3:c1:9f:02:76:ff:7d:f6:a1:9e:94:1b:c5:83:44:
         a0:69:29:3b:ef:80:87:04:b2:ca:ac:13:f2:68:f3:9b:c3:1c:
         ea:2a:23:b2:a9:05:5c:0e:bb:ae:06:17:2e:b2:b6:f8:90:4d:
         07:d8:36:45:2f:44:de:8e:85:56:a4:58:ba:86:0a:ce:ea:ab:
         77:2c:7e:82:a9:94:3e:f9:24:1e:ac:9a:d8:a7:06:34:c7:89:
         6d:db:3a:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:39:14 2026 by rpki-client