Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3130332e35352e3232302e302f32322d3234203d3e2039333431.roa
File:                     3130332e35352e3232302e302f32322d3234203d3e2039333431.roa (raw, json)
Hash identifier:          yBGarfr9z9Kr9Dos3XR9HBJi29NzQykAO4mXcxY3sag=
Subject key identifier:   0A:10:1C:4B:FD:31:EE:29:0A:7F:AA:D3:26:53:C6:86:B2:B6:92:54
Certificate issuer:       /CN=61566F205F7037962069571320603B274357CC6D
Certificate serial:       667D415DFEF7058386A422142450319C92E5DCFC
Authority key identifier: 61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3130332e35352e3232302e302f32322d3234203d3e2039333431.roa
Signing time:             Wed 25 Feb 2026 04:46:12 +0000
ROA not before:           Wed 25 Feb 2026 04:41:12 +0000
ROA not after:            Wed 24 Feb 2027 04:46:12 +0000
asID:                     9341
IP address blocks:        103.55.220.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.crl
                          rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Mar 2026 02:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:7d:41:5d:fe:f7:05:83:86:a4:22:14:24:50:31:9c:92:e5:dc:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61566F205F7037962069571320603B274357CC6D
        Validity
            Not Before: Feb 25 04:41:12 2026 GMT
            Not After : Feb 24 04:46:12 2027 GMT
        Subject: CN=0A101C4BFD31EE290A7FAAD32653C686B2B69254
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:83:60:79:18:f4:43:dd:b2:c9:0b:1f:c4:9f:
                    e5:03:0b:9b:ef:13:60:9f:26:1e:6f:ba:cb:c2:a7:
                    41:ec:1e:ad:b9:aa:f5:16:82:1a:f8:ae:88:64:53:
                    1d:e7:a2:44:79:e8:2e:75:94:0d:23:63:e4:89:d3:
                    2c:ba:0a:b1:0a:67:75:8c:b9:82:42:93:34:3b:41:
                    b2:a7:2a:c6:24:94:d9:9d:86:88:a5:26:e1:a1:fb:
                    0e:ad:4d:66:d6:be:94:70:02:4c:7d:13:df:1f:4b:
                    14:6c:0b:db:04:df:29:1d:82:43:ac:88:b7:a9:e8:
                    eb:e4:58:dd:e7:0f:11:ec:6e:e8:2e:55:23:87:57:
                    98:cd:b8:d1:59:46:72:33:91:ad:fc:c7:3c:dd:9c:
                    72:aa:4e:e2:64:6f:b2:15:33:8a:2b:5b:22:7e:1d:
                    3d:23:ab:c9:b7:25:eb:af:69:0b:ac:cd:d1:7e:3c:
                    75:bc:aa:24:d9:cc:c6:46:9f:e1:9a:27:83:27:6e:
                    10:0f:e4:60:66:7a:63:3c:94:51:13:5a:8b:a6:04:
                    b7:89:26:b1:73:da:bb:3b:6e:ca:05:16:a7:c0:68:
                    11:73:a6:8c:3d:dd:ef:4a:65:e1:0c:93:bc:82:33:
                    27:b9:e8:24:32:f3:59:93:b5:1d:17:28:b7:19:85:
                    1b:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:10:1C:4B:FD:31:EE:29:0A:7F:AA:D3:26:53:C6:86:B2:B6:92:54
            X509v3 Authority Key Identifier:
                keyid:61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3130332e35352e3232302e302f32322d3234203d3e2039333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.55.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1c:92:2d:84:00:8e:75:77:5a:03:02:98:5b:81:17:68:85:9f:
         c6:14:5d:9c:8c:c0:0c:42:76:b8:d4:83:a2:8e:d4:52:1d:0c:
         e2:f0:eb:2a:f8:21:31:25:0d:7c:07:56:34:43:75:25:fc:6e:
         4f:e0:5f:dc:93:80:74:ac:e5:5c:cc:7d:d0:d0:24:47:46:74:
         18:68:d3:79:96:2a:d5:48:3a:8d:a4:1c:2c:67:77:c2:6e:ba:
         09:99:78:96:2b:03:f8:3d:af:a4:f3:26:33:36:36:b5:be:58:
         73:d0:6b:fa:6a:be:b1:34:1a:04:90:33:80:8b:94:1e:02:e2:
         16:ce:d9:43:fd:1c:bd:fd:ad:22:41:c9:c0:39:98:78:49:6a:
         ba:f5:b2:28:4f:82:45:74:96:8d:c0:13:79:4c:e4:55:58:e7:
         20:27:2d:03:9d:22:47:80:7c:92:6f:59:8b:bc:1e:74:6f:e3:
         59:22:6b:96:ac:15:dc:62:ff:11:6c:69:1e:8d:d3:1e:91:89:
         c9:31:78:1f:d6:19:4b:40:ea:a2:12:cb:3a:a7:b7:d0:a7:cb:
         20:fb:38:a9:3a:2d:c9:7f:11:07:39:55:64:41:f5:e2:56:31:
         c9:96:ef:47:5d:1c:fb:6c:3c:75:b6:9d:9d:0b:a7:a9:92:b3:
         06:86:98:e8
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUZn1BXf73BYOGpCIUJFAxnJLl3PwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjE1NjZGMjA1RjcwMzc5NjIwNjk1NzEzMjA2MDNCMjc0
MzU3Q0M2RDAeFw0yNjAyMjUwNDQxMTJaFw0yNzAyMjQwNDQ2MTJaMDMxMTAvBgNV
BAMTKDBBMTAxQzRCRkQzMUVFMjkwQTdGQUFEMzI2NTNDNjg2QjJCNjkyNTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSg2B5GPRD3bLJCx/En+UDC5vv
E2CfJh5vusvCp0HsHq25qvUWghr4rohkUx3nokR56C51lA0jY+SJ0yy6CrEKZ3WM
uYJCkzQ7QbKnKsYklNmdhoilJuGh+w6tTWbWvpRwAkx9E98fSxRsC9sE3ykdgkOs
iLep6OvkWN3nDxHsbuguVSOHV5jNuNFZRnIzka38xzzdnHKqTuJkb7IVM4orWyJ+
HT0jq8m3JeuvaQuszdF+PHW8qiTZzMZGn+GaJ4MnbhAP5GBmemM8lFETWoumBLeJ
JrFz2rs7bsoFFqfAaBFzpow93e9KZeEMk7yCMye56CQy81mTtR0XKLcZhRuXAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQUChAcS/0x7ikKf6rTJlPGhrK2klQwHwYDVR0j
BBgwFoAUYVZvIF9wN5YgaVcTIGA7J0NXzG0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83
M2JkY2JhZS0yZTlkLTRmM2YtOGFiOS0zNDI0ZTQ0ODQ4NGUvMC82MTU2NkYyMDVG
NzAzNzk2MjA2OTU3MTMyMDYwM0IyNzQzNTdDQzZELmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNjE1NjZGMjA1RjcwMzc5NjIwNjk1NzEzMjA2MDNCMjc0MzU3
Q0M2RC5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzczYmRjYmFlLTJlOWQtNGYzZi04
YWI5LTM0MjRlNDQ4NDg0ZS8wLzMxMzAzMzJlMzUzNTJlMzIzMjMwMmUzMDJmMzIz
MjJkMzIzNDIwM2QzZTIwMzkzMzM0MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJnN9wwDQYJKoZIhvcN
AQELBQADggEBABySLYQAjnV3WgMCmFuBF2iFn8YUXZyMwAxCdrjUg6KO1FIdDOLw
6yr4ITElDXwHVjRDdSX8bk/gX9yTgHSs5VzMfdDQJEdGdBho03mWKtVIOo2kHCxn
d8JuugmZeJYrA/g9r6TzJjM2NrW+WHPQa/pqvrE0GgSQM4CLlB4C4hbO2UP9HL39
rSJBycA5mHhJarr1sihPgkV0lo3AE3lM5FVY5yAnLQOdIkeAfJJvWYu8HnRv41ki
a5asFdxi/xFsaR6N0x6RickxeB/WGUtA6qISyzqnt9CnyyD7OKk6Lcl/EQc5VWRB
9eJWMcmW70ddHPtsPHW2nZ0Lp6mSswaGmOg=
-----END CERTIFICATE-----
Generated at Mon Mar 2 08:08:56 2026 by rpki-client