Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3130332e332e37382e302f32342d3234203d3e2039333431.roa
File:                     3130332e332e37382e302f32342d3234203d3e2039333431.roa (raw, json)
Hash identifier:          fmNgMtU3ppJUlru5MBtC9uSzOzT6b3OudFMbuRPBnnI=
Subject key identifier:   2D:C9:43:14:EE:B2:9D:58:F4:9F:5C:30:D2:59:70:20:6E:5A:1B:20
Certificate issuer:       /CN=61566F205F7037962069571320603B274357CC6D
Certificate serial:       61C9C077A3DA8B9DA25C9B6116A9D6DF62A480B0
Authority key identifier: 61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3130332e332e37382e302f32342d3234203d3e2039333431.roa
Signing time:             Sun 22 Feb 2026 05:00:02 +0000
ROA not before:           Sun 22 Feb 2026 04:55:02 +0000
ROA not after:            Sun 21 Feb 2027 05:00:02 +0000
asID:                     9341
IP address blocks:        103.3.78.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.crl
                          rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Mar 2026 02:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:c9:c0:77:a3:da:8b:9d:a2:5c:9b:61:16:a9:d6:df:62:a4:80:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61566F205F7037962069571320603B274357CC6D
        Validity
            Not Before: Feb 22 04:55:02 2026 GMT
            Not After : Feb 21 05:00:02 2027 GMT
        Subject: CN=2DC94314EEB29D58F49F5C30D25970206E5A1B20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:9a:88:59:71:0a:26:7e:a8:5e:8a:6e:3a:97:
                    1f:5b:1b:4f:ab:58:89:1e:83:1f:68:7f:b7:dd:b6:
                    3d:f8:86:1d:4d:5e:ca:21:9e:2d:38:be:c7:d4:45:
                    50:88:fe:2d:1d:93:dd:da:4a:b9:6e:a1:c0:b5:52:
                    ea:70:78:22:2e:7e:34:28:03:8c:47:e5:88:84:ae:
                    4b:a7:30:62:df:24:21:d2:dd:b0:63:fc:2d:b7:76:
                    c8:19:11:00:fb:9e:ed:43:76:00:ea:8a:4a:ac:43:
                    f9:91:0a:4f:43:05:67:22:77:e2:0f:32:19:2b:03:
                    3f:b7:e5:e3:d7:c6:21:9b:d4:34:e2:eb:33:fd:fa:
                    11:09:c6:88:09:26:05:77:43:92:99:52:0b:00:75:
                    7a:9f:82:c2:40:92:c1:3b:bf:e1:cd:fa:af:30:21:
                    a1:8e:98:42:38:e9:6f:11:2f:e1:a5:bc:60:cc:92:
                    65:9a:2b:87:a3:0a:62:1d:1c:67:62:01:df:a8:88:
                    da:01:22:65:d1:29:7a:8b:f5:6c:cb:83:a9:8a:51:
                    b5:67:88:e2:e2:ae:27:3e:1b:fa:dc:4a:3e:08:9a:
                    8b:ca:95:0a:4a:6b:b8:50:7b:aa:27:d6:48:a3:be:
                    87:3c:6e:28:29:c0:b3:0b:5c:b9:54:48:d3:76:0f:
                    85:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:C9:43:14:EE:B2:9D:58:F4:9F:5C:30:D2:59:70:20:6E:5A:1B:20
            X509v3 Authority Key Identifier:
                keyid:61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3130332e332e37382e302f32342d3234203d3e2039333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.3.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:f6:14:0c:d0:78:74:78:f3:7d:9b:67:76:c9:f3:bf:4c:1f:
         51:07:3d:08:18:18:10:98:b1:40:cd:7d:f4:3b:ab:aa:31:f0:
         2e:8a:ad:de:41:cd:41:16:5d:22:5b:11:1a:33:8a:27:8c:c0:
         18:59:0d:80:b0:98:49:d2:d8:b2:f3:3d:6b:a9:45:64:5d:43:
         48:0e:3d:0d:dd:e5:c8:26:20:93:9c:63:46:3f:a6:7c:de:20:
         1d:9a:38:a1:47:3b:49:94:e4:ea:1c:8c:0f:2a:a8:d0:be:7a:
         a1:c3:82:3e:c4:f5:c7:3c:5f:9d:e7:7c:aa:39:7c:55:ca:c3:
         9a:16:08:bd:a1:94:ad:2e:21:8f:8f:30:6b:fd:82:af:ba:1c:
         dc:d6:76:be:e7:99:7e:81:2c:04:1c:e2:7c:18:32:35:34:0f:
         77:b1:ce:29:36:91:ae:c7:1e:bf:ec:99:aa:ee:27:bf:58:c2:
         82:d8:d6:a6:84:51:57:d8:c0:18:d3:66:c9:ba:03:47:9a:52:
         cd:8a:1a:9b:a8:79:8c:8f:a9:33:e1:32:03:40:13:6a:72:e5:
         e4:ac:25:df:ba:2d:49:30:7e:ba:f2:43:e9:58:64:aa:76:d9:
         87:bb:e4:dc:ff:ec:c0:90:51:8d:37:d4:d2:96:74:f1:c3:9e:
         7d:48:87:0f
-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgIUYcnAd6Pai52iXJthFqnW32KkgLAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjE1NjZGMjA1RjcwMzc5NjIwNjk1NzEzMjA2MDNCMjc0
MzU3Q0M2RDAeFw0yNjAyMjIwNDU1MDJaFw0yNzAyMjEwNTAwMDJaMDMxMTAvBgNV
BAMTKDJEQzk0MzE0RUVCMjlENThGNDlGNUMzMEQyNTk3MDIwNkU1QTFCMjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpmohZcQomfqheim46lx9bG0+r
WIkegx9of7fdtj34hh1NXsohni04vsfURVCI/i0dk93aSrluocC1UupweCIufjQo
A4xH5YiErkunMGLfJCHS3bBj/C23dsgZEQD7nu1DdgDqikqsQ/mRCk9DBWcid+IP
MhkrAz+35ePXxiGb1DTi6zP9+hEJxogJJgV3Q5KZUgsAdXqfgsJAksE7v+HN+q8w
IaGOmEI46W8RL+GlvGDMkmWaK4ejCmIdHGdiAd+oiNoBImXRKXqL9WzLg6mKUbVn
iOLiric+G/rcSj4ImovKlQpKa7hQe6on1kijvoc8bigpwLMLXLlUSNN2D4XZAgMB
AAGjggIrMIICJzAdBgNVHQ4EFgQULclDFO6ynVj0n1ww0llwIG5aGyAwHwYDVR0j
BBgwFoAUYVZvIF9wN5YgaVcTIGA7J0NXzG0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83
M2JkY2JhZS0yZTlkLTRmM2YtOGFiOS0zNDI0ZTQ0ODQ4NGUvMC82MTU2NkYyMDVG
NzAzNzk2MjA2OTU3MTMyMDYwM0IyNzQzNTdDQzZELmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNjE1NjZGMjA1RjcwMzc5NjIwNjk1NzEzMjA2MDNCMjc0MzU3
Q0M2RC5jZXIwgZsGCCsGAQUFBwELBIGOMIGLMIGIBggrBgEFBQcwC4Z8cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzNiZGNiYWUtMmU5ZC00ZjNmLThh
YjktMzQyNGU0NDg0ODRlLzAvMzEzMDMzMmUzMzJlMzczODJlMzAyZjMyMzQyZDMy
MzQyMDNkM2UyMDM5MzMzNDMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZwNOMA0GCSqGSIb3DQEBCwUA
A4IBAQCd9hQM0Hh0ePN9m2d2yfO/TB9RBz0IGBgQmLFAzX30O6uqMfAuiq3eQc1B
Fl0iWxEaM4onjMAYWQ2AsJhJ0tiy8z1rqUVkXUNIDj0N3eXIJiCTnGNGP6Z83iAd
mjihRztJlOTqHIwPKqjQvnqhw4I+xPXHPF+d53yqOXxVysOaFgi9oZStLiGPjzBr
/YKvuhzc1na+55l+gSwEHOJ8GDI1NA93sc4pNpGuxx6/7Jmq7ie/WMKC2NamhFFX
2MAY02bJugNHmlLNihqbqHmMj6kz4TIDQBNqcuXkrCXfui1JMH668kPpWGSqdtmH
u+Tc/+zAkFGNN9TSlnTxw559SIcP
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:31:48 2026 by rpki-client