Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/5c285291-ce92-4144-9c18-9e8c191ddec6/0/3130332e3137342e3138302e302f32332d3233203d3e20313534343130.roa
File:                     3130332e3137342e3138302e302f32332d3233203d3e20313534343130.roa (raw, json)
Hash identifier:          5f6WVPyM1NaAUmmM9KmlCurONgPApRx10UTt15+/gqw=
Subject key identifier:   A8:C6:EC:9D:49:EB:F4:D8:99:12:70:A7:CB:4C:0A:D9:C0:A1:4D:CC
Certificate issuer:       /CN=166B4918E7A1A1641E7C79C537833379E393522E
Certificate serial:       23C74D91A54528B81FAC4B5A8231F0D4596BAE40
Authority key identifier: 16:6B:49:18:E7:A1:A1:64:1E:7C:79:C5:37:83:33:79:E3:93:52:2E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/166B4918E7A1A1641E7C79C537833379E393522E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5c285291-ce92-4144-9c18-9e8c191ddec6/0/3130332e3137342e3138302e302f32332d3233203d3e20313534343130.roa
Signing time:             Wed 11 Feb 2026 22:03:43 +0000
ROA not before:           Wed 11 Feb 2026 21:58:43 +0000
ROA not after:            Wed 10 Feb 2027 22:03:43 +0000
asID:                     154410
IP address blocks:        103.174.180.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/5c285291-ce92-4144-9c18-9e8c191ddec6/0/166B4918E7A1A1641E7C79C537833379E393522E.crl
                          rsync://repo-rpki.idnic.net/repo/5c285291-ce92-4144-9c18-9e8c191ddec6/0/166B4918E7A1A1641E7C79C537833379E393522E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/166B4918E7A1A1641E7C79C537833379E393522E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Mar 2026 00:44:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:c7:4d:91:a5:45:28:b8:1f:ac:4b:5a:82:31:f0:d4:59:6b:ae:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=166B4918E7A1A1641E7C79C537833379E393522E
        Validity
            Not Before: Feb 11 21:58:43 2026 GMT
            Not After : Feb 10 22:03:43 2027 GMT
        Subject: CN=A8C6EC9D49EBF4D8991270A7CB4C0AD9C0A14DCC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:62:9d:fa:ce:5f:39:6b:49:04:74:6a:80:ed:
                    f3:c0:94:48:60:48:82:9b:64:3e:f0:76:1c:e0:a1:
                    64:a0:a7:d8:8d:10:86:cf:3f:1f:aa:44:57:bb:2e:
                    5e:13:5e:91:d8:7f:cd:9a:7b:fd:01:25:cc:fa:a0:
                    dd:a4:d2:9f:5a:fe:fc:67:1c:2f:3f:f5:ed:b7:e1:
                    9d:13:83:d7:c1:3b:b4:af:a4:b2:81:e9:67:a9:88:
                    2f:35:f5:0b:8c:42:b9:92:29:38:a1:5b:c2:ac:ec:
                    3b:07:65:ce:33:ff:bc:ec:51:66:56:26:6d:dd:88:
                    87:9d:9a:4b:eb:83:6d:00:2d:e7:85:8d:a9:1a:d7:
                    b0:5c:5b:ae:7c:ce:4b:90:7b:d6:a7:e5:67:f9:bd:
                    47:3b:23:49:7a:9b:4a:f7:67:01:86:c5:61:f4:23:
                    ea:77:69:0a:77:39:17:d4:4d:3d:0c:d5:18:e0:c7:
                    4d:8b:07:2c:e6:8f:85:6e:73:0e:44:85:a0:c2:eb:
                    16:62:47:32:08:bd:9e:e1:c1:9e:10:c3:0e:0f:0e:
                    cc:1e:4e:12:54:7f:45:03:2f:27:34:50:e9:56:e7:
                    cd:ba:4b:d0:db:ea:dc:28:88:a9:09:e5:4d:ff:56:
                    91:2a:58:e5:d2:13:49:70:00:2f:7c:e7:95:50:27:
                    57:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:C6:EC:9D:49:EB:F4:D8:99:12:70:A7:CB:4C:0A:D9:C0:A1:4D:CC
            X509v3 Authority Key Identifier:
                keyid:16:6B:49:18:E7:A1:A1:64:1E:7C:79:C5:37:83:33:79:E3:93:52:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5c285291-ce92-4144-9c18-9e8c191ddec6/0/166B4918E7A1A1641E7C79C537833379E393522E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/166B4918E7A1A1641E7C79C537833379E393522E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5c285291-ce92-4144-9c18-9e8c191ddec6/0/3130332e3137342e3138302e302f32332d3233203d3e20313534343130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.174.180.0/23

    Signature Algorithm: sha256WithRSAEncryption
         65:28:82:fe:32:35:81:d7:ec:fa:61:9e:36:a9:bf:c9:3a:b8:
         5f:7d:7c:fd:52:77:a6:f5:fb:5d:61:7e:98:9a:ae:c9:d3:8d:
         ef:0c:ba:8d:1f:9c:a8:0f:13:b1:fd:1d:dd:f3:4b:30:3b:86:
         4b:a2:e5:bc:fc:c7:9d:4c:24:e0:d3:37:bf:d4:1b:22:9f:7c:
         1d:8f:de:9d:53:21:aa:b0:b1:f8:03:4b:82:85:fc:13:15:be:
         47:65:5b:a4:cc:87:b0:2d:b7:96:a6:2a:01:59:11:94:a1:39:
         ec:7e:58:1e:02:c6:de:f5:38:85:3b:f1:97:eb:1c:50:1a:b9:
         00:37:93:06:45:db:72:9c:b1:ba:eb:ac:15:38:4f:ad:f0:19:
         48:44:32:a9:35:8c:7e:7b:62:fc:81:3c:fb:91:a5:30:cc:db:
         78:f4:7d:e9:eb:72:5c:81:35:ea:88:5c:f9:a1:7b:6e:f4:0f:
         55:7d:53:3e:df:26:f3:bb:59:6f:d5:49:f0:21:d5:87:8e:55:
         91:d3:bd:7b:30:1a:d7:ab:de:f2:11:50:a6:b2:1d:50:ca:3f:
         13:8e:7f:ed:2b:00:e4:d2:b4:09:a3:1d:67:99:d2:28:c1:72:
         d7:72:cf:da:73:82:3e:56:ed:09:93:95:b4:66:e7:1e:76:9d:
         a7:dc:f8:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:21:41 2026 by rpki-client