Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/67db23b7-9159-46c7-8853-06654ae47aed/0/3130332e3136342e38302e302f32342d3234203d3e20313334363530.roa
File:                     3130332e3136342e38302e302f32342d3234203d3e20313334363530.roa (raw, json)
Hash identifier:          iIgboqPAZcJ6GkgIoGNtSVY4wHjrhyWezE3yGK9cDpI=
Subject key identifier:   60:4A:68:C2:41:B4:69:C4:9A:3D:F5:9E:AE:ED:0F:CA:72:22:01:FF
Certificate issuer:       /CN=20ABF702057AD5F01207F6C578160654EB44C914
Certificate serial:       7468BC259F1404539C64EA06A17959631DAE9822
Authority key identifier: 20:AB:F7:02:05:7A:D5:F0:12:07:F6:C5:78:16:06:54:EB:44:C9:14
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20ABF702057AD5F01207F6C578160654EB44C914.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/67db23b7-9159-46c7-8853-06654ae47aed/0/3130332e3136342e38302e302f32342d3234203d3e20313334363530.roa
Signing time:             Tue 24 Feb 2026 06:02:18 +0000
ROA not before:           Tue 24 Feb 2026 05:57:18 +0000
ROA not after:            Tue 23 Feb 2027 06:02:18 +0000
asID:                     134650
IP address blocks:        103.164.80.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/67db23b7-9159-46c7-8853-06654ae47aed/0/20ABF702057AD5F01207F6C578160654EB44C914.crl
                          rsync://repo-rpki.idnic.net/repo/67db23b7-9159-46c7-8853-06654ae47aed/0/20ABF702057AD5F01207F6C578160654EB44C914.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20ABF702057AD5F01207F6C578160654EB44C914.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Mar 2026 02:07:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:68:bc:25:9f:14:04:53:9c:64:ea:06:a1:79:59:63:1d:ae:98:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20ABF702057AD5F01207F6C578160654EB44C914
        Validity
            Not Before: Feb 24 05:57:18 2026 GMT
            Not After : Feb 23 06:02:18 2027 GMT
        Subject: CN=604A68C241B469C49A3DF59EAEED0FCA722201FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:f7:48:89:61:58:57:dc:28:b6:f9:1b:4e:10:
                    f6:d4:ba:79:71:79:2c:f3:10:ae:9e:6c:22:66:a5:
                    01:4f:b8:70:22:e3:f7:59:5e:a5:46:1d:59:2d:ab:
                    05:d4:7e:05:22:65:32:14:bf:f2:d1:0a:93:ad:64:
                    c3:11:45:7c:d0:ad:f0:fd:49:60:27:5c:a8:7e:9c:
                    92:d8:42:9e:37:e1:0f:aa:6b:cd:e4:57:63:2e:1a:
                    ef:99:19:3d:c7:26:28:f6:4c:2a:c4:a2:8e:e7:bb:
                    cc:68:17:a9:32:af:90:8a:34:a9:78:f8:3c:e4:a1:
                    c7:07:95:3c:0d:d8:46:9c:c3:61:7b:33:c0:95:9a:
                    3e:ad:48:cc:75:24:a2:b2:64:d0:cb:5e:3a:77:30:
                    84:49:30:3e:ea:10:b6:53:94:a3:36:98:55:e5:37:
                    07:48:2d:d1:d7:06:8e:9a:31:dd:72:e7:5c:d3:0f:
                    63:4f:6e:65:9d:cb:5e:7f:a4:21:7f:0a:fa:f0:d1:
                    6d:dd:66:3a:e0:47:e2:95:ce:45:a1:dc:e1:b0:21:
                    e4:29:aa:14:49:bb:9a:62:8d:04:ff:75:0c:53:84:
                    31:69:a5:a7:41:df:08:73:ec:fa:ba:c4:3a:72:ea:
                    8a:2d:4a:03:7d:23:7e:66:56:79:df:90:b5:e3:fe:
                    8f:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:4A:68:C2:41:B4:69:C4:9A:3D:F5:9E:AE:ED:0F:CA:72:22:01:FF
            X509v3 Authority Key Identifier:
                keyid:20:AB:F7:02:05:7A:D5:F0:12:07:F6:C5:78:16:06:54:EB:44:C9:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/67db23b7-9159-46c7-8853-06654ae47aed/0/20ABF702057AD5F01207F6C578160654EB44C914.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20ABF702057AD5F01207F6C578160654EB44C914.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/67db23b7-9159-46c7-8853-06654ae47aed/0/3130332e3136342e38302e302f32342d3234203d3e20313334363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.164.80.0/24

    Signature Algorithm: sha256WithRSAEncryption
         aa:75:80:ef:21:93:bf:57:4c:6b:04:bc:a2:14:df:8b:85:c5:
         16:a9:37:c7:90:4a:18:0f:a1:25:23:ee:4f:39:40:5f:b8:3c:
         fb:63:af:92:20:78:05:78:46:47:3b:2c:6e:f2:cd:9d:ec:d6:
         fe:8d:bd:cf:c6:ea:74:2c:fe:99:a0:01:c2:78:d7:1d:80:b2:
         f3:a3:6c:44:c5:78:7e:fe:90:9c:d0:13:a2:c3:f5:3c:89:6f:
         60:8d:56:e7:a6:57:25:34:31:f4:11:78:2a:82:52:e9:ab:f0:
         00:72:e4:87:c7:0e:b6:d0:8c:b7:40:67:e5:6d:f2:f8:c0:cd:
         69:a0:5c:03:46:cd:7d:36:2a:3d:11:8b:e1:49:59:70:fe:38:
         25:e9:65:ab:08:6c:1c:83:ce:2b:76:3a:92:20:40:08:4b:be:
         d4:a8:ad:51:a9:cb:31:af:53:03:cd:00:fe:3e:d4:e4:7d:e4:
         1d:ac:9a:12:98:a1:6a:fd:c1:03:cf:f5:1f:b7:ee:39:3e:d7:
         0b:26:7e:96:c4:17:91:66:c0:33:6f:11:af:6a:32:96:1a:44:
         ba:36:98:10:01:24:c5:63:ce:a0:ff:03:fe:3a:bb:f8:93:dd:
         1d:84:fa:71:02:8c:c9:20:b6:9a:98:a8:41:5f:7c:59:18:95:
         bd:58:12:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:03:26 2026 by rpki-client