Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/6e0f9163-3e5a-4efa-8bd9-4ac4bc630414/0/3130332e32382e31322e302f32332d3234203d3e203538343034.roa
File:                     3130332e32382e31322e302f32332d3234203d3e203538343034.roa (raw, json)
Hash identifier:          EXp3RCNwYXOW99lPgPgoT2jmWozp8DenSjKe6GpVx0A=
Subject key identifier:   67:1D:49:BD:6F:66:07:E6:18:3F:D1:1A:2E:53:86:CD:74:79:C1:92
Certificate issuer:       /CN=C2544A0C1EE8ABF9DA0614500930012FFB48871A
Certificate serial:       55CEF53C59C90D9CC066FE2BA24AA12A7899552C
Authority key identifier: C2:54:4A:0C:1E:E8:AB:F9:DA:06:14:50:09:30:01:2F:FB:48:87:1A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2544A0C1EE8ABF9DA0614500930012FFB48871A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6e0f9163-3e5a-4efa-8bd9-4ac4bc630414/0/3130332e32382e31322e302f32332d3234203d3e203538343034.roa
Signing time:             Fri 27 Feb 2026 02:00:01 +0000
ROA not before:           Fri 27 Feb 2026 01:55:01 +0000
ROA not after:            Fri 26 Feb 2027 02:00:01 +0000
asID:                     58404
IP address blocks:        103.28.12.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/6e0f9163-3e5a-4efa-8bd9-4ac4bc630414/0/C2544A0C1EE8ABF9DA0614500930012FFB48871A.crl
                          rsync://repo-rpki.idnic.net/repo/6e0f9163-3e5a-4efa-8bd9-4ac4bc630414/0/C2544A0C1EE8ABF9DA0614500930012FFB48871A.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2544A0C1EE8ABF9DA0614500930012FFB48871A.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Mar 2026 14:42:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:ce:f5:3c:59:c9:0d:9c:c0:66:fe:2b:a2:4a:a1:2a:78:99:55:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2544A0C1EE8ABF9DA0614500930012FFB48871A
        Validity
            Not Before: Feb 27 01:55:01 2026 GMT
            Not After : Feb 26 02:00:01 2027 GMT
        Subject: CN=671D49BD6F6607E6183FD11A2E5386CD7479C192
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:a3:fd:07:c6:1f:e5:de:a1:ab:66:60:87:67:
                    69:8d:21:35:56:22:45:a8:e9:cc:57:45:18:9e:0b:
                    60:37:45:84:b9:3e:d5:07:d0:e4:36:5e:0d:ef:9a:
                    05:b0:ff:5b:a0:5d:18:df:9d:0c:7b:91:5c:4b:65:
                    30:b3:7e:ea:75:77:35:df:3d:5a:40:87:64:20:49:
                    c9:f5:f8:fd:a3:6a:da:e6:e4:0f:dd:f2:8e:7d:59:
                    03:9a:58:7d:dd:59:83:9e:db:d4:2f:6d:b1:4f:79:
                    51:01:22:5a:a6:d4:93:02:80:1b:d2:8c:23:cc:39:
                    d2:e9:e8:28:be:8c:c6:c0:b0:0d:d2:8c:46:7d:21:
                    2a:ed:bd:6e:66:d3:e0:04:4e:f5:b8:05:87:ae:ba:
                    51:af:a7:f5:e4:27:41:29:9a:27:07:5d:61:11:77:
                    53:23:54:c9:e4:ec:bb:fc:0b:ed:46:ad:ff:15:78:
                    ba:be:68:c1:9d:ea:2f:33:df:71:78:b1:77:59:90:
                    d3:5d:9c:da:96:f0:06:25:e9:53:52:1b:7c:a6:7c:
                    bd:37:8c:04:5b:65:a5:34:49:fd:8b:f0:72:87:9d:
                    91:63:5d:2c:b6:58:05:91:92:bd:c1:46:2e:c4:35:
                    d5:03:cf:3c:b2:f3:68:95:ad:76:d6:a7:07:6c:fc:
                    a8:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:1D:49:BD:6F:66:07:E6:18:3F:D1:1A:2E:53:86:CD:74:79:C1:92
            X509v3 Authority Key Identifier:
                keyid:C2:54:4A:0C:1E:E8:AB:F9:DA:06:14:50:09:30:01:2F:FB:48:87:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6e0f9163-3e5a-4efa-8bd9-4ac4bc630414/0/C2544A0C1EE8ABF9DA0614500930012FFB48871A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2544A0C1EE8ABF9DA0614500930012FFB48871A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6e0f9163-3e5a-4efa-8bd9-4ac4bc630414/0/3130332e32382e31322e302f32332d3234203d3e203538343034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.28.12.0/23

    Signature Algorithm: sha256WithRSAEncryption
         86:76:fe:18:70:65:ab:b4:4c:f2:55:6e:23:3f:79:92:e7:24:
         6a:d9:e7:72:6a:c4:be:29:5e:8d:d2:e4:d1:77:97:17:03:c1:
         56:56:86:14:d5:1c:e0:0c:30:7d:19:f9:ab:d2:39:c5:35:88:
         d6:3a:99:9f:f0:f6:38:db:d3:bd:39:d1:f4:a4:f3:76:d7:c2:
         5a:c3:39:5b:9a:83:45:d2:d8:0d:d4:4d:eb:a2:ec:d6:df:1d:
         d6:88:d0:24:10:df:92:e2:3e:ef:77:1b:f8:d2:da:ae:73:f7:
         4d:46:a4:3f:b3:b0:87:fe:cd:ac:b3:66:4f:62:5e:c0:d3:7b:
         cf:fc:8d:26:03:8c:71:e6:c9:c9:63:6a:27:ef:94:4b:3a:8e:
         c6:dd:fb:d2:a6:20:05:2e:d3:d4:de:ae:b2:fb:e9:5e:b9:b8:
         9d:2b:be:e7:61:8a:17:bb:e5:e1:ee:bc:37:27:c6:76:da:04:
         ec:e7:2f:08:cb:f7:b6:a2:3a:99:26:30:67:bd:77:ad:a3:04:
         47:2f:59:60:2d:79:a0:de:85:6e:78:e1:76:f6:62:d3:b2:84:
         be:13:c4:41:7d:44:fb:d3:10:4c:46:e4:fc:d0:28:46:9a:9b:
         c8:b4:d3:bf:c4:a6:0e:15:2e:ec:d2:8a:1c:cd:6d:4f:e0:4d:
         8a:61:de:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:51:41 2026 by rpki-client