Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3130332e332e37362e302f32342d3234203d3e2039333431.roa
File:                     3130332e332e37362e302f32342d3234203d3e2039333431.roa (raw, json)
Hash identifier:          pPfzW10rdiWm2okHaM9V1F5iLYO58fWyVLxtQruTlrM=
Subject key identifier:   6E:8C:88:AD:E5:1C:BE:EA:B9:1A:E0:F2:08:6D:3B:8C:34:E1:BA:DA
Certificate issuer:       /CN=61566F205F7037962069571320603B274357CC6D
Certificate serial:       03FAFC2C547064E226EAC2C2C07EBD2732BB3FDC
Authority key identifier: 61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3130332e332e37362e302f32342d3234203d3e2039333431.roa
Signing time:             Sun 22 Feb 2026 07:00:02 +0000
ROA not before:           Sun 22 Feb 2026 06:55:02 +0000
ROA not after:            Sun 21 Feb 2027 07:00:02 +0000
asID:                     9341
IP address blocks:        103.3.76.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.crl
                          rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Mar 2026 02:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:fa:fc:2c:54:70:64:e2:26:ea:c2:c2:c0:7e:bd:27:32:bb:3f:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61566F205F7037962069571320603B274357CC6D
        Validity
            Not Before: Feb 22 06:55:02 2026 GMT
            Not After : Feb 21 07:00:02 2027 GMT
        Subject: CN=6E8C88ADE51CBEEAB91AE0F2086D3B8C34E1BADA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:b8:87:e2:1d:13:7d:03:6a:6e:a1:29:48:7c:
                    02:1e:31:17:cd:a6:eb:35:7d:bb:65:5b:32:a6:32:
                    aa:dc:3d:a2:f5:b2:3f:7c:5d:91:0f:6b:cb:89:21:
                    49:a4:60:97:eb:bf:f6:d6:c9:0f:43:26:c0:dd:28:
                    ff:e4:d2:78:55:bc:d6:58:07:28:0e:83:b1:09:5f:
                    a3:6c:90:cf:6c:be:02:6e:41:d3:bf:b1:ba:9f:bc:
                    e1:45:57:c9:b7:76:19:ff:a8:3c:15:79:cb:6c:ce:
                    ed:72:cb:ff:ee:2c:f1:5f:e8:5c:fc:90:72:bd:29:
                    30:1a:96:5c:56:21:0d:18:8d:4c:91:d2:c3:3c:8c:
                    8e:fa:33:31:8c:6c:76:22:5e:2f:6f:96:8f:41:94:
                    46:4c:ee:8d:86:4e:8d:34:1f:b0:86:35:ec:38:10:
                    03:aa:3e:4b:42:e7:3f:78:1a:46:4f:a2:8c:b6:ea:
                    ab:3d:4b:35:3a:05:99:ca:2b:ff:8e:03:45:dc:e0:
                    9c:04:1d:88:80:83:91:df:8a:47:b9:89:98:df:45:
                    0b:75:07:71:2b:cd:ca:b6:74:12:ad:94:33:b3:d6:
                    2b:4d:3f:77:b7:81:11:ef:e5:41:ab:80:96:0d:4d:
                    96:78:b6:dc:15:5c:4c:e5:a3:0c:bf:fe:aa:79:73:
                    04:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:8C:88:AD:E5:1C:BE:EA:B9:1A:E0:F2:08:6D:3B:8C:34:E1:BA:DA
            X509v3 Authority Key Identifier:
                keyid:61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3130332e332e37362e302f32342d3234203d3e2039333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.3.76.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:69:5d:54:6d:6e:f6:05:f1:40:c6:23:bc:7e:75:e4:8c:7f:
         c8:c3:24:f0:4e:52:b5:86:57:b5:ef:69:b4:3c:c6:4e:26:97:
         92:5c:07:ac:2b:89:4f:95:fe:cc:ba:43:f4:98:9e:59:9b:0f:
         29:a3:e1:22:a4:b9:bc:c3:7d:cd:68:09:d5:8e:b5:ed:9d:11:
         d4:a6:46:8b:2e:ec:9e:66:f7:4c:34:24:31:11:3e:b7:e7:f8:
         3b:03:7d:ca:ca:c8:61:cd:0f:b6:0e:5a:81:af:aa:a4:20:66:
         de:46:c7:17:fa:a7:fe:eb:5a:e1:a2:7c:8b:b5:47:e7:cb:d3:
         6b:32:ea:52:f2:76:b9:74:83:0e:dd:d7:62:b6:d6:3a:61:ed:
         9e:b2:9e:e8:8f:ba:8e:e0:67:53:fd:66:86:0c:61:aa:d8:6d:
         0f:1a:3d:c8:cc:52:26:6d:39:4c:bf:84:c2:a9:2f:39:c8:dd:
         3e:ce:63:0a:e2:8e:ef:50:f6:99:60:e9:3e:65:0e:cf:49:fe:
         77:67:94:67:2b:8e:de:48:9a:41:6a:45:11:9b:7b:b7:cd:63:
         e4:ae:d3:d8:27:e6:4c:19:04:91:94:74:57:d1:6b:70:d9:10:
         6a:85:cd:6a:5c:0c:0a:d0:70:c1:c5:bb:b8:ed:6f:c1:27:97:
         8b:5d:3b:e2
-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgIUA/r8LFRwZOIm6sLCwH69JzK7P9wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjE1NjZGMjA1RjcwMzc5NjIwNjk1NzEzMjA2MDNCMjc0
MzU3Q0M2RDAeFw0yNjAyMjIwNjU1MDJaFw0yNzAyMjEwNzAwMDJaMDMxMTAvBgNV
BAMTKDZFOEM4OEFERTUxQ0JFRUFCOTFBRTBGMjA4NkQzQjhDMzRFMUJBREEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzuIfiHRN9A2puoSlIfAIeMRfN
pus1fbtlWzKmMqrcPaL1sj98XZEPa8uJIUmkYJfrv/bWyQ9DJsDdKP/k0nhVvNZY
BygOg7EJX6NskM9svgJuQdO/sbqfvOFFV8m3dhn/qDwVectszu1yy//uLPFf6Fz8
kHK9KTAallxWIQ0YjUyR0sM8jI76MzGMbHYiXi9vlo9BlEZM7o2GTo00H7CGNew4
EAOqPktC5z94GkZPooy26qs9SzU6BZnKK/+OA0Xc4JwEHYiAg5Hfike5iZjfRQt1
B3Erzcq2dBKtlDOz1itNP3e3gRHv5UGrgJYNTZZ4ttwVXEzlowy//qp5cwSpAgMB
AAGjggIrMIICJzAdBgNVHQ4EFgQUboyIreUcvuq5GuDyCG07jDThutowHwYDVR0j
BBgwFoAUYVZvIF9wN5YgaVcTIGA7J0NXzG0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83
M2JkY2JhZS0yZTlkLTRmM2YtOGFiOS0zNDI0ZTQ0ODQ4NGUvMC82MTU2NkYyMDVG
NzAzNzk2MjA2OTU3MTMyMDYwM0IyNzQzNTdDQzZELmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNjE1NjZGMjA1RjcwMzc5NjIwNjk1NzEzMjA2MDNCMjc0MzU3
Q0M2RC5jZXIwgZsGCCsGAQUFBwELBIGOMIGLMIGIBggrBgEFBQcwC4Z8cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzNiZGNiYWUtMmU5ZC00ZjNmLThh
YjktMzQyNGU0NDg0ODRlLzAvMzEzMDMzMmUzMzJlMzczNjJlMzAyZjMyMzQyZDMy
MzQyMDNkM2UyMDM5MzMzNDMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZwNMMA0GCSqGSIb3DQEBCwUA
A4IBAQBCaV1UbW72BfFAxiO8fnXkjH/IwyTwTlK1hle172m0PMZOJpeSXAesK4lP
lf7MukP0mJ5Zmw8po+EipLm8w33NaAnVjrXtnRHUpkaLLuyeZvdMNCQxET635/g7
A33KyshhzQ+2DlqBr6qkIGbeRscX+qf+61rhonyLtUfny9NrMupS8na5dIMO3ddi
ttY6Ye2esp7oj7qO4GdT/WaGDGGq2G0PGj3IzFImbTlMv4TCqS85yN0+zmMK4o7v
UPaZYOk+ZQ7PSf53Z5RnK47eSJpBakURm3u3zWPkrtPYJ+ZMGQSRlHRX0Wtw2RBq
hc1qXAwK0HDBxbu47W/BJ5eLXTvi
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:31:55 2026 by rpki-client