Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3130332e332e37372e302f32342d3234203d3e2039333431.roa
File:                     3130332e332e37372e302f32342d3234203d3e2039333431.roa (raw, json)
Hash identifier:          OLUUYuC78QHbR4CtuTdS3N8FHz6GU8PQFIYOwjswUyc=
Subject key identifier:   27:FE:17:73:94:A6:2A:B6:A2:B2:08:9C:8E:4D:E1:E4:AB:D8:EA:E3
Certificate issuer:       /CN=61566F205F7037962069571320603B274357CC6D
Certificate serial:       7AE0AB7F352426C299BFDC103B67A95E407DDA12
Authority key identifier: 61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3130332e332e37372e302f32342d3234203d3e2039333431.roa
Signing time:             Sun 22 Feb 2026 05:00:02 +0000
ROA not before:           Sun 22 Feb 2026 04:55:02 +0000
ROA not after:            Sun 21 Feb 2027 05:00:02 +0000
asID:                     9341
IP address blocks:        103.3.77.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.crl
                          rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Mar 2026 02:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:e0:ab:7f:35:24:26:c2:99:bf:dc:10:3b:67:a9:5e:40:7d:da:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61566F205F7037962069571320603B274357CC6D
        Validity
            Not Before: Feb 22 04:55:02 2026 GMT
            Not After : Feb 21 05:00:02 2027 GMT
        Subject: CN=27FE177394A62AB6A2B2089C8E4DE1E4ABD8EAE3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:18:aa:72:1a:be:8e:28:cf:9c:04:44:2b:78:
                    77:f5:76:1e:f9:52:51:bc:1b:3b:9a:a6:a2:da:af:
                    2d:f0:19:f0:b5:5a:e2:dc:5b:1c:f7:f3:66:e3:23:
                    7f:e3:9f:c6:62:04:1f:41:80:6c:d5:ed:68:03:cb:
                    5f:89:25:2c:0c:a7:c1:1f:53:15:8c:32:ad:9c:fb:
                    64:96:70:dd:a4:f1:9f:08:ea:72:10:de:04:fe:e2:
                    95:29:15:c3:91:f5:50:f8:b2:ba:92:31:04:f6:6b:
                    7d:f1:bd:2d:9b:03:72:83:5b:be:96:b8:74:75:a7:
                    55:62:b5:7b:8e:1f:56:66:4a:93:73:b9:2b:1e:70:
                    2c:8c:ed:ce:2e:92:ca:43:ea:9e:97:bf:e3:f9:96:
                    41:9c:a1:01:79:0c:9e:2c:1f:63:22:dc:0e:a4:94:
                    c9:6c:16:0d:ca:b9:ef:8e:ab:57:51:bc:ec:51:79:
                    1f:ba:18:00:f2:3c:61:b8:d0:fa:b2:3e:20:28:4c:
                    80:99:88:21:cb:e0:43:28:5a:49:b7:b1:cc:bf:e8:
                    49:0e:0a:3c:c2:07:7c:b8:d3:92:b4:7a:b9:9a:a1:
                    24:fc:cf:60:0f:19:cd:66:2a:8a:0a:89:0d:77:ee:
                    9a:41:f0:19:6e:d1:54:a5:00:09:33:47:1f:e3:59:
                    e3:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:FE:17:73:94:A6:2A:B6:A2:B2:08:9C:8E:4D:E1:E4:AB:D8:EA:E3
            X509v3 Authority Key Identifier:
                keyid:61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3130332e332e37372e302f32342d3234203d3e2039333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.3.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:b6:87:07:ba:81:35:11:98:47:38:c9:b3:a4:87:bb:c1:64:
         80:58:d6:a5:d9:95:b5:d0:22:f9:ec:2f:5d:04:88:82:d0:0f:
         ff:4b:ce:7e:35:2d:c6:9e:bb:ab:19:5d:86:4e:d5:84:19:7c:
         0f:8a:e7:fa:a3:4a:db:18:1d:80:6f:a7:50:a8:44:19:32:03:
         d7:6c:aa:c5:45:e0:32:83:31:6d:65:c5:5f:88:d8:f7:31:03:
         c8:e0:7d:a9:2d:5a:0d:eb:84:d9:79:63:85:5a:d4:97:de:17:
         17:01:8b:1b:4a:cc:62:8e:28:5a:66:08:79:ab:d5:3e:d7:59:
         1a:63:48:c2:fd:11:54:17:a9:2f:f8:71:32:e5:d7:dd:f5:4a:
         9e:bf:05:09:79:17:76:78:6f:f6:b3:e2:57:aa:69:2c:8c:cf:
         0e:88:ca:78:c4:ef:ab:ea:ff:5d:98:2d:38:f3:a2:04:32:00:
         5c:54:04:7b:a7:f8:a6:19:46:c7:57:74:d7:95:71:76:81:b3:
         79:01:54:cb:bf:1f:96:32:40:ba:cb:c0:88:d5:46:1c:4b:6a:
         bb:a5:51:31:61:35:49:50:20:98:fb:fa:ce:1b:09:e2:0f:cd:
         1d:45:ee:7d:fc:a6:85:ad:61:0d:4e:82:89:4a:1a:ca:21:6e:
         f1:97:81:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:32:06 2026 by rpki-client