Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3131392e3235322e3136312e302f32342d3234203d3e2039333431.roa
File:                     3131392e3235322e3136312e302f32342d3234203d3e2039333431.roa (raw, json)
Hash identifier:          gwa/yC003B1+nsXjf6nj/W/X/VMHEIvnHjRbaDGI6kA=
Subject key identifier:   06:50:28:0F:74:09:E6:46:51:ED:16:8E:CB:D2:12:57:75:41:3F:EB
Certificate issuer:       /CN=61566F205F7037962069571320603B274357CC6D
Certificate serial:       4E75ECD89BC93D322EDD583D1FA27BE13DAB63B6
Authority key identifier: 61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3131392e3235322e3136312e302f32342d3234203d3e2039333431.roa
Signing time:             Sun 22 Feb 2026 04:00:02 +0000
ROA not before:           Sun 22 Feb 2026 03:55:02 +0000
ROA not after:            Sun 21 Feb 2027 04:00:02 +0000
asID:                     9341
IP address blocks:        119.252.161.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.crl
                          rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Mar 2026 02:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:75:ec:d8:9b:c9:3d:32:2e:dd:58:3d:1f:a2:7b:e1:3d:ab:63:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61566F205F7037962069571320603B274357CC6D
        Validity
            Not Before: Feb 22 03:55:02 2026 GMT
            Not After : Feb 21 04:00:02 2027 GMT
        Subject: CN=0650280F7409E64651ED168ECBD2125775413FEB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:2e:25:5b:d0:aa:89:34:89:f8:03:f1:c3:d2:
                    bc:43:91:0a:66:1c:60:44:f8:c2:e1:45:2b:8b:46:
                    d7:55:83:3d:5f:60:97:de:e9:06:25:39:79:25:bf:
                    f5:75:b3:a1:51:3c:c1:8b:8d:13:1e:96:fa:6e:b5:
                    92:aa:60:a5:a4:f7:05:ce:2f:70:56:0b:30:17:66:
                    59:6f:f9:71:87:cb:a8:9c:f4:83:8f:bc:4d:58:91:
                    b8:da:37:20:a8:84:a3:37:0f:f5:fb:0d:ef:d9:39:
                    1b:15:6b:08:ec:fc:57:e6:9f:29:33:5f:58:e7:94:
                    1a:18:4c:e4:3f:4e:ba:f5:c4:8e:66:5b:8a:63:30:
                    62:43:2a:72:ef:7b:5f:a4:82:3b:89:0f:06:bf:a2:
                    6d:b3:21:97:d8:6d:b1:bc:aa:81:8d:bc:76:35:f2:
                    df:c3:71:42:2d:eb:47:48:9d:85:cc:e6:2b:4a:f8:
                    d2:5a:ac:60:84:44:e4:7d:af:20:96:99:65:92:a5:
                    94:71:46:14:af:60:24:95:b9:4f:a5:b9:82:56:a7:
                    c4:6f:4e:f7:dd:33:a8:6c:4a:e9:1b:14:8a:43:69:
                    72:3b:d3:cd:96:3a:cd:0b:a7:a6:70:51:f0:41:42:
                    89:42:0d:03:cc:ad:82:de:ba:06:6b:fe:ed:ac:90:
                    93:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:50:28:0F:74:09:E6:46:51:ED:16:8E:CB:D2:12:57:75:41:3F:EB
            X509v3 Authority Key Identifier:
                keyid:61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3131392e3235322e3136312e302f32342d3234203d3e2039333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.252.161.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:9d:16:b1:e1:3b:18:e2:28:8b:c8:0c:4b:c2:68:53:28:a0:
         1e:87:52:c6:9b:ab:c4:f3:27:4d:7b:0a:a6:17:2e:47:cb:6b:
         9c:d0:4f:78:a6:d0:09:1e:a7:08:f1:1f:7d:ff:cc:c3:9e:9e:
         54:91:21:c2:f9:e0:a8:ab:4a:76:08:96:37:58:8a:5a:77:9b:
         6a:38:31:e6:92:5c:80:4a:e5:a4:69:4c:48:7d:03:bc:87:3b:
         6d:f8:70:64:a9:7a:33:04:e2:48:cf:61:24:09:f3:23:93:de:
         42:3f:59:39:28:4f:71:9c:79:62:dc:e9:7a:2d:21:0c:bb:cd:
         a4:80:c1:16:f1:5f:70:e2:18:95:f0:23:e5:1e:0b:bc:08:28:
         be:f0:f5:dd:08:3b:c2:8e:1f:36:3c:8b:f7:67:f7:f1:57:84:
         c2:c8:23:12:8c:d8:ac:b6:dd:a9:b9:85:9e:47:66:8a:25:ad:
         53:a7:bd:07:e1:95:68:ce:04:d7:e1:80:30:c4:40:eb:70:a1:
         ba:46:0c:2f:6a:22:e7:2e:7f:a1:64:4c:76:2d:8e:2b:d9:9a:
         76:98:25:b8:60:f6:f1:80:1c:a9:19:b9:55:28:08:04:28:0f:
         e6:bc:ec:b1:ff:5a:9a:42:29:bb:76:0c:50:cf:14:f1:51:b8:
         97:c2:aa:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:16:45 2026 by rpki-client