Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/6aad6a3f-6ca0-4669-98f7-6f34837faa62/0/3130332e3232302e32322e302f32342d3234203d3e20313431363037.roa
File:                     3130332e3232302e32322e302f32342d3234203d3e20313431363037.roa (raw, json)
Hash identifier:          sVVEMBCIRiU+8ZymFGPR1GPJM2F6ba5mTXLj9cZPKzM=
Subject key identifier:   93:72:27:98:63:F3:45:0B:BC:85:B0:8B:4D:7C:46:09:55:F7:9E:72
Certificate issuer:       /CN=771D0AB9C445B28C887FD7BA18DEC515D8BA3862
Certificate serial:       1C9FCFF5EEAE45CEA686ABBA77CCDCBD26B11EA7
Authority key identifier: 77:1D:0A:B9:C4:45:B2:8C:88:7F:D7:BA:18:DE:C5:15:D8:BA:38:62
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/771D0AB9C445B28C887FD7BA18DEC515D8BA3862.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6aad6a3f-6ca0-4669-98f7-6f34837faa62/0/3130332e3232302e32322e302f32342d3234203d3e20313431363037.roa
Signing time:             Wed 08 Apr 2026 09:00:01 +0000
ROA not before:           Wed 08 Apr 2026 08:55:01 +0000
ROA not after:            Wed 07 Apr 2027 09:00:01 +0000
asID:                     141607
IP address blocks:        103.220.22.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/6aad6a3f-6ca0-4669-98f7-6f34837faa62/0/771D0AB9C445B28C887FD7BA18DEC515D8BA3862.crl
                          rsync://repo-rpki.idnic.net/repo/6aad6a3f-6ca0-4669-98f7-6f34837faa62/0/771D0AB9C445B28C887FD7BA18DEC515D8BA3862.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/771D0AB9C445B28C887FD7BA18DEC515D8BA3862.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 20 Apr 2026 18:04:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:9f:cf:f5:ee:ae:45:ce:a6:86:ab:ba:77:cc:dc:bd:26:b1:1e:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=771D0AB9C445B28C887FD7BA18DEC515D8BA3862
        Validity
            Not Before: Apr  8 08:55:01 2026 GMT
            Not After : Apr  7 09:00:01 2027 GMT
        Subject: CN=9372279863F3450BBC85B08B4D7C460955F79E72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:32:e6:de:4b:3b:35:2b:30:05:3e:d0:6d:78:
                    55:45:2e:72:c6:a4:e0:ed:71:52:02:0f:b1:9f:f6:
                    a0:a3:32:67:49:83:08:10:68:32:e3:8a:60:0b:18:
                    ae:52:4f:47:a5:4b:9f:fd:be:7d:7d:0f:ea:60:68:
                    20:78:b7:b2:c4:0c:fa:01:ac:8b:98:49:de:11:f5:
                    5f:f9:0d:01:5b:20:63:81:88:34:45:32:4f:ae:fd:
                    fe:b5:25:8a:b1:41:1a:28:25:c0:97:41:aa:ab:dc:
                    cb:7a:45:b8:f0:7b:75:1b:5b:10:0b:a6:41:b2:4c:
                    e3:e2:0f:cf:31:50:3c:98:5e:64:00:53:41:20:11:
                    23:c0:f3:0c:98:e9:44:6f:32:33:4c:f5:43:6c:5c:
                    ff:71:90:12:3e:7e:07:7b:4c:7b:38:8e:f4:9f:13:
                    73:e5:a6:b0:2e:6e:e9:a0:cd:ce:34:ab:6d:fe:b5:
                    e7:7c:a1:5d:ef:be:0f:2e:6a:d3:e4:a0:8c:ed:65:
                    9f:b3:49:71:3c:5a:0c:64:88:3d:85:dc:7b:76:71:
                    72:e4:58:55:78:e7:60:87:32:de:91:10:a9:d6:f8:
                    37:b2:0d:07:67:55:d7:75:9b:2f:af:4a:e4:46:5f:
                    6c:37:f8:b8:e9:ec:46:00:98:35:f5:95:b6:35:ea:
                    0f:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:72:27:98:63:F3:45:0B:BC:85:B0:8B:4D:7C:46:09:55:F7:9E:72
            X509v3 Authority Key Identifier:
                keyid:77:1D:0A:B9:C4:45:B2:8C:88:7F:D7:BA:18:DE:C5:15:D8:BA:38:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6aad6a3f-6ca0-4669-98f7-6f34837faa62/0/771D0AB9C445B28C887FD7BA18DEC515D8BA3862.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/771D0AB9C445B28C887FD7BA18DEC515D8BA3862.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6aad6a3f-6ca0-4669-98f7-6f34837faa62/0/3130332e3232302e32322e302f32342d3234203d3e20313431363037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.220.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:6f:6b:43:64:a9:b7:d2:5d:ee:ce:bf:c9:fc:cb:1e:9d:95:
         93:e5:be:f8:a1:68:bf:97:8b:37:09:36:9c:97:4a:53:42:9f:
         18:10:f0:1c:2c:eb:d6:d3:9e:1b:78:3b:13:0a:c3:29:fa:6e:
         a4:1f:d5:fd:fc:27:ce:77:85:c9:c5:0e:9b:ab:b4:c2:c3:49:
         10:72:ec:e2:0e:1c:e9:4b:81:12:2a:6e:5b:ba:e3:44:64:c9:
         19:10:49:45:08:91:f3:e5:85:7c:6e:89:bf:cd:74:a2:a0:90:
         3e:98:52:86:4a:be:a1:37:5c:80:8e:29:df:64:dd:a5:44:cf:
         aa:e4:e5:5c:cd:ba:01:0f:74:3b:50:da:e2:bc:79:55:4d:ec:
         66:20:75:fb:4a:47:3b:54:27:94:72:27:a7:47:3a:da:a9:49:
         83:de:a3:14:70:8d:46:39:8b:bb:2f:0a:ae:e0:7f:35:90:a7:
         6e:4d:04:ed:6c:2a:26:10:0f:bc:8c:c5:f5:ff:3b:92:6c:55:
         78:a4:1d:5a:b5:c2:a5:60:69:b1:02:d8:e0:20:7d:0b:62:b0:
         65:ac:f4:6d:94:49:84:b7:a1:a6:d0:64:6b:9f:a5:e5:eb:ee:
         e3:fb:a1:4b:69:da:f9:3f:84:13:1c:b4:b5:14:f8:55:c0:66:
         62:99:42:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:21:52 2026 by rpki-client