Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/6a071514-e4de-4ace-a0df-f7c4ab8074a5/0/3130332e31372e37372e302f32342d3234203d3e20313331373831.roa
File:                     3130332e31372e37372e302f32342d3234203d3e20313331373831.roa (raw, json)
Hash identifier:          sN9oQCwDYePBe8r+43GJgwamWTT8YKpnPVKv3cAiMnM=
Subject key identifier:   47:59:C4:59:08:46:15:4B:3D:28:E4:6D:E6:FE:F3:5C:A3:0D:51:5C
Certificate issuer:       /CN=5234A428BC63559E2511B3EFFB085B82B195A8ED
Certificate serial:       5F4F0213D312242F6C867DB08109EEEB500D399F
Authority key identifier: 52:34:A4:28:BC:63:55:9E:25:11:B3:EF:FB:08:5B:82:B1:95:A8:ED
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5234A428BC63559E2511B3EFFB085B82B195A8ED.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6a071514-e4de-4ace-a0df-f7c4ab8074a5/0/3130332e31372e37372e302f32342d3234203d3e20313331373831.roa
Signing time:             Thu 26 Feb 2026 17:00:01 +0000
ROA not before:           Thu 26 Feb 2026 16:55:01 +0000
ROA not after:            Thu 25 Feb 2027 17:00:01 +0000
asID:                     131781
IP address blocks:        103.17.77.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/6a071514-e4de-4ace-a0df-f7c4ab8074a5/0/5234A428BC63559E2511B3EFFB085B82B195A8ED.crl
                          rsync://repo-rpki.idnic.net/repo/6a071514-e4de-4ace-a0df-f7c4ab8074a5/0/5234A428BC63559E2511B3EFFB085B82B195A8ED.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5234A428BC63559E2511B3EFFB085B82B195A8ED.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Mar 2026 06:57:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:4f:02:13:d3:12:24:2f:6c:86:7d:b0:81:09:ee:eb:50:0d:39:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5234A428BC63559E2511B3EFFB085B82B195A8ED
        Validity
            Not Before: Feb 26 16:55:01 2026 GMT
            Not After : Feb 25 17:00:01 2027 GMT
        Subject: CN=4759C4590846154B3D28E46DE6FEF35CA30D515C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:2d:0b:01:81:d1:ae:a0:46:f7:e9:7d:2c:b2:
                    8f:9a:62:90:31:31:ce:de:f9:53:7a:c0:25:11:75:
                    32:ab:33:d4:b3:86:3c:fb:a6:a5:66:a7:26:ac:e0:
                    63:57:b3:52:96:65:bb:22:80:15:62:50:8e:30:34:
                    3b:9c:61:07:5f:39:36:d9:b6:7a:8a:67:f0:79:74:
                    00:1c:4b:5b:8a:55:22:d5:b2:16:94:6b:f6:04:79:
                    6d:1d:5b:c4:25:c3:bd:53:22:f7:bb:fe:44:d8:35:
                    92:09:41:b5:b3:92:1c:f7:46:f3:24:75:f7:d4:bd:
                    b2:80:09:14:61:6e:10:66:25:86:6c:9a:fb:61:c4:
                    c4:b6:f9:e0:4d:d0:d6:2f:03:0b:19:89:e7:69:27:
                    8d:25:d6:ac:cb:c9:30:a8:d3:6b:0d:08:0b:9d:48:
                    72:f0:d8:d8:59:18:9e:60:5f:d8:3f:e6:d1:6f:ae:
                    7c:53:5e:24:79:2d:61:b4:80:87:23:c4:b9:dd:18:
                    c3:02:5e:3e:97:8a:21:80:a7:0a:c0:5c:05:18:b2:
                    73:b0:e2:cd:ad:7b:9e:54:d6:06:23:92:30:03:61:
                    59:52:b9:2d:18:20:87:60:a2:75:d7:af:8e:ed:f8:
                    ca:3d:98:72:8f:5f:ff:53:9d:a8:c3:d9:1a:53:6c:
                    22:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:59:C4:59:08:46:15:4B:3D:28:E4:6D:E6:FE:F3:5C:A3:0D:51:5C
            X509v3 Authority Key Identifier:
                keyid:52:34:A4:28:BC:63:55:9E:25:11:B3:EF:FB:08:5B:82:B1:95:A8:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6a071514-e4de-4ace-a0df-f7c4ab8074a5/0/5234A428BC63559E2511B3EFFB085B82B195A8ED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5234A428BC63559E2511B3EFFB085B82B195A8ED.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6a071514-e4de-4ace-a0df-f7c4ab8074a5/0/3130332e31372e37372e302f32342d3234203d3e20313331373831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.17.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c5:1f:57:47:d1:e4:56:10:e5:c2:a9:ac:ae:17:f4:10:3d:46:
         5e:f0:b9:93:2d:ff:7f:76:9c:2a:c9:82:bd:b7:7e:e3:b9:c4:
         04:84:ef:4d:2c:92:a2:9b:af:23:ba:39:a8:f8:e4:8b:42:c7:
         a3:bf:a0:69:6f:6a:60:9f:0c:37:b1:f8:c7:15:5c:57:d7:0b:
         6c:2d:18:cd:2b:15:60:3e:db:b3:e1:20:0c:8a:62:fd:15:72:
         b9:19:e6:68:ef:92:44:49:76:1e:fa:ee:75:08:b2:98:87:36:
         15:d3:ff:11:e1:82:24:3e:f2:15:7e:da:43:cd:34:03:ee:2e:
         74:7e:e0:e5:55:d8:ce:99:f9:4a:5e:d7:f8:d1:d1:11:5d:ee:
         3c:ca:09:6e:6e:46:75:53:50:82:6b:1f:37:f4:d5:a4:aa:85:
         e9:35:bd:15:ab:8c:51:e6:2e:48:74:c7:20:7a:87:83:23:98:
         0e:ad:c2:d7:b2:c8:93:e6:cc:ac:9a:60:87:08:5b:42:25:a7:
         50:e6:ab:7e:e3:d2:f6:86:fa:44:6c:13:0d:fb:92:45:97:a4:
         58:5e:87:cf:28:18:db:e0:4f:ff:74:12:d7:b7:05:9d:1b:41:
         7e:66:b6:0d:aa:9b:91:f8:fe:07:e6:22:03:06:0d:df:a2:6c:
         aa:b1:44:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:57:29 2026 by rpki-client