Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3130332e332e37392e302f32342d3234203d3e2039333431.roa
File:                     3130332e332e37392e302f32342d3234203d3e2039333431.roa (raw, json)
Hash identifier:          U1ICA+tseM/6EvRQrcLFt9P2bZyOLSuZWbCEvxWhIW4=
Subject key identifier:   3D:16:9A:CB:63:88:4B:DB:1A:7E:92:C3:01:CA:1A:92:27:FC:EF:F7
Certificate issuer:       /CN=61566F205F7037962069571320603B274357CC6D
Certificate serial:       405BCADBC8606D78290B7E72AB029B8F161E15BB
Authority key identifier: 61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3130332e332e37392e302f32342d3234203d3e2039333431.roa
Signing time:             Sun 22 Feb 2026 06:00:02 +0000
ROA not before:           Sun 22 Feb 2026 05:55:02 +0000
ROA not after:            Sun 21 Feb 2027 06:00:02 +0000
asID:                     9341
IP address blocks:        103.3.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.crl
                          rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Mar 2026 02:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:5b:ca:db:c8:60:6d:78:29:0b:7e:72:ab:02:9b:8f:16:1e:15:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61566F205F7037962069571320603B274357CC6D
        Validity
            Not Before: Feb 22 05:55:02 2026 GMT
            Not After : Feb 21 06:00:02 2027 GMT
        Subject: CN=3D169ACB63884BDB1A7E92C301CA1A9227FCEFF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:89:37:51:b7:b9:21:11:18:cc:06:7a:3d:be:
                    6f:70:4d:38:c7:22:c6:42:33:23:bd:bd:8e:8e:20:
                    e5:09:ee:4a:c1:f8:da:e4:77:6c:e8:89:80:1f:c0:
                    54:e2:23:de:3d:bc:5e:89:db:70:31:39:44:a6:0c:
                    02:3d:a0:b7:86:ac:74:6b:32:9e:4f:7c:b5:9d:8f:
                    fb:f5:ee:d0:24:12:cd:55:5b:d0:e0:2f:3b:a0:e1:
                    94:f2:34:b8:27:6e:b6:aa:9d:8e:af:e0:33:3c:79:
                    46:95:5d:6e:85:4a:ba:ee:bf:9c:cb:c0:7e:a8:59:
                    79:43:f0:42:44:cf:74:c3:96:8d:e3:99:43:a6:65:
                    3a:eb:f1:72:f1:ac:49:bb:33:ac:6a:23:7f:11:6f:
                    6b:95:4a:92:06:54:74:55:1d:58:08:ba:5b:64:7b:
                    c3:f6:05:5b:82:18:7d:3c:0c:39:ea:f9:bd:b9:4a:
                    45:d9:e0:36:54:64:ef:40:62:b5:44:7c:d1:ff:61:
                    b3:4b:17:32:37:7f:0a:84:2e:00:f2:3b:9a:19:37:
                    17:37:0f:ca:89:2a:2f:f1:32:c0:2d:99:da:ee:c6:
                    d2:ca:b9:e4:fe:5c:c0:87:0b:0e:9c:3c:af:d0:e5:
                    5f:cc:0d:c0:b7:9c:66:34:3c:ed:dc:17:ab:fa:1c:
                    2c:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:16:9A:CB:63:88:4B:DB:1A:7E:92:C3:01:CA:1A:92:27:FC:EF:F7
            X509v3 Authority Key Identifier:
                keyid:61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3130332e332e37392e302f32342d3234203d3e2039333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.3.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:97:f3:56:33:fa:f9:49:08:33:a6:e7:0d:0b:72:00:3e:38:
         cd:4a:d5:71:7d:c2:e5:ba:42:43:6c:d6:a4:af:a3:33:85:51:
         92:ef:0b:3f:56:8e:4f:25:ed:ea:b8:5c:0b:31:f1:bc:e3:c2:
         97:72:7f:ca:4a:90:f3:f4:1b:81:d9:16:73:b6:e1:ba:d2:00:
         fb:cb:1e:b4:6b:64:46:c3:2d:f5:d0:b3:66:eb:d1:ca:ca:71:
         72:a5:0b:9f:13:d4:89:2e:ee:f0:fe:2a:58:ac:26:3c:c6:30:
         4d:13:49:56:b2:e1:d5:4f:22:37:2f:09:84:e9:cf:7c:e4:a9:
         ef:a3:bb:fc:e0:27:02:52:c8:bd:2c:4f:10:80:c5:b0:4c:a8:
         e2:e1:44:80:67:46:7f:65:70:a1:d1:cd:22:06:1b:fa:5a:62:
         92:5c:a4:b3:d4:87:58:53:3e:d2:b3:0c:76:74:b7:d4:d4:ea:
         30:3e:a9:0c:88:6e:af:8c:a4:43:05:11:85:a3:0c:d4:e6:d3:
         1a:7d:5c:c0:b1:17:20:a7:09:25:01:6f:1b:b7:38:42:84:b8:
         63:94:33:a8:20:5e:55:eb:6b:0f:54:3b:2d:51:8f:7f:4e:b7:
         e3:8f:b0:82:45:d0:66:56:02:a5:00:c0:80:a6:05:7b:11:86:
         5e:01:25:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:31:44 2026 by rpki-client