Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/6aad6a3f-6ca0-4669-98f7-6f34837faa62/0/3130332e3232302e32332e302f32342d3234203d3e20313431363037.roa
File:                     3130332e3232302e32332e302f32342d3234203d3e20313431363037.roa (raw, json)
Hash identifier:          LQCghhVjBQqtajWL79jI6IPFtxv3pbUEdBHeeD2ZFPo=
Subject key identifier:   02:B3:CD:99:05:0E:58:5E:BE:57:03:AE:D2:D0:6C:33:D7:5F:E6:FA
Certificate issuer:       /CN=771D0AB9C445B28C887FD7BA18DEC515D8BA3862
Certificate serial:       70B2CCFD3946175ABFCBAAE10376CFF21D2B79F1
Authority key identifier: 77:1D:0A:B9:C4:45:B2:8C:88:7F:D7:BA:18:DE:C5:15:D8:BA:38:62
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/771D0AB9C445B28C887FD7BA18DEC515D8BA3862.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6aad6a3f-6ca0-4669-98f7-6f34837faa62/0/3130332e3232302e32332e302f32342d3234203d3e20313431363037.roa
Signing time:             Wed 08 Apr 2026 09:00:00 +0000
ROA not before:           Wed 08 Apr 2026 08:55:00 +0000
ROA not after:            Wed 07 Apr 2027 09:00:00 +0000
asID:                     141607
IP address blocks:        103.220.23.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/6aad6a3f-6ca0-4669-98f7-6f34837faa62/0/771D0AB9C445B28C887FD7BA18DEC515D8BA3862.crl
                          rsync://repo-rpki.idnic.net/repo/6aad6a3f-6ca0-4669-98f7-6f34837faa62/0/771D0AB9C445B28C887FD7BA18DEC515D8BA3862.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/771D0AB9C445B28C887FD7BA18DEC515D8BA3862.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 20 Apr 2026 18:04:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:b2:cc:fd:39:46:17:5a:bf:cb:aa:e1:03:76:cf:f2:1d:2b:79:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=771D0AB9C445B28C887FD7BA18DEC515D8BA3862
        Validity
            Not Before: Apr  8 08:55:00 2026 GMT
            Not After : Apr  7 09:00:00 2027 GMT
        Subject: CN=02B3CD99050E585EBE5703AED2D06C33D75FE6FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:98:27:58:ca:c3:a6:fd:0a:b6:05:76:d9:c1:
                    1d:70:45:44:40:23:86:8e:cb:c2:f5:cc:08:86:6d:
                    47:03:67:2b:af:6d:6e:b1:10:9c:68:95:60:4b:1a:
                    9e:e0:c6:b3:83:9b:be:a8:82:48:11:6f:a2:c6:f4:
                    60:70:41:a8:8b:61:3c:37:af:43:fe:29:e4:6c:18:
                    78:5e:c6:8d:6f:cc:39:dc:6a:f3:7a:bd:f4:31:76:
                    16:17:cd:ab:89:91:f7:d7:42:40:7d:da:4f:0f:2c:
                    89:3d:4e:51:fa:71:36:12:8b:24:02:ba:c5:58:a7:
                    70:88:4a:1a:89:0f:c3:59:20:6e:bc:c7:8d:f0:d2:
                    da:bf:66:51:32:f9:b9:c2:69:fd:57:27:2e:a2:6d:
                    53:b0:5e:ec:51:e3:4f:1f:91:37:7a:c1:f9:74:79:
                    2e:35:d5:70:72:ec:21:61:05:ec:7c:a6:64:62:5d:
                    be:17:33:30:57:e8:7c:c7:ba:11:99:60:0b:73:8e:
                    a7:f5:51:3f:68:b4:dd:20:43:c2:53:6c:ae:71:48:
                    46:e6:5e:93:33:4c:21:e5:91:68:c2:e8:42:3a:60:
                    9c:84:57:34:4b:e6:e6:00:53:e5:0e:1d:d6:40:03:
                    88:4e:cb:ea:c8:f6:b6:af:1e:4a:af:71:a1:e0:b1:
                    83:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:B3:CD:99:05:0E:58:5E:BE:57:03:AE:D2:D0:6C:33:D7:5F:E6:FA
            X509v3 Authority Key Identifier:
                keyid:77:1D:0A:B9:C4:45:B2:8C:88:7F:D7:BA:18:DE:C5:15:D8:BA:38:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6aad6a3f-6ca0-4669-98f7-6f34837faa62/0/771D0AB9C445B28C887FD7BA18DEC515D8BA3862.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/771D0AB9C445B28C887FD7BA18DEC515D8BA3862.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6aad6a3f-6ca0-4669-98f7-6f34837faa62/0/3130332e3232302e32332e302f32342d3234203d3e20313431363037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.220.23.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:a6:77:6d:48:e2:6f:69:63:4e:ec:f5:68:1a:49:54:0a:76:
         ad:60:45:12:39:e0:e5:ba:47:cb:03:5e:be:f0:ea:dd:44:94:
         23:8c:fa:af:f6:ad:e2:46:8e:a3:ca:5f:d7:b3:0b:4e:aa:ff:
         5d:80:61:6c:6c:45:25:ea:30:dd:51:82:c2:a8:31:90:f5:b0:
         90:45:72:d3:d9:98:aa:a0:64:07:22:9a:23:01:d5:2a:8d:4e:
         8f:56:f0:64:d7:ca:1b:eb:1f:95:c6:ce:25:3b:17:15:a2:65:
         8e:55:b2:be:a1:1c:eb:a0:56:3e:5a:8b:94:6b:e3:d6:96:f7:
         1d:40:4e:5c:95:15:3f:51:50:9f:58:8a:4f:8c:5a:4c:29:42:
         79:06:c9:8d:86:57:2d:4b:88:4c:72:84:ec:24:7c:66:bb:90:
         73:50:52:1a:0e:e7:57:02:68:08:8c:31:14:ec:4e:58:2c:4c:
         88:04:f3:97:ac:ab:b1:ef:2e:ac:a9:f8:84:a5:99:73:bb:c8:
         f9:8e:7c:f1:f1:18:91:94:25:9f:11:dc:18:96:83:bc:1f:21:
         c3:45:58:10:6c:eb:ff:83:22:37:e6:01:9e:5a:e8:e0:3a:47:
         a7:b6:4b:c9:6e:aa:d0:dd:b5:da:44:3d:dc:86:ad:c3:9a:42:
         e0:4f:04:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:07:16 2026 by rpki-client