Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3132312e3130302e31362e302f32322d3234203d3e2039333431.roa
File:                     3132312e3130302e31362e302f32322d3234203d3e2039333431.roa (raw, json)
Hash identifier:          hDCh1bCy3DQU6i6DjIVF9Vf/iAJiTAH+faqLcrfOr0I=
Subject key identifier:   B6:6E:DC:B0:53:EA:05:25:B2:2B:70:BC:C3:DA:E0:11:81:06:A9:87
Certificate issuer:       /CN=61566F205F7037962069571320603B274357CC6D
Certificate serial:       63F490668EE350B78750220C3512C7BC8784F2C7
Authority key identifier: 61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3132312e3130302e31362e302f32322d3234203d3e2039333431.roa
Signing time:             Tue 24 Feb 2026 04:00:38 +0000
ROA not before:           Tue 24 Feb 2026 03:55:38 +0000
ROA not after:            Tue 23 Feb 2027 04:00:38 +0000
asID:                     9341
IP address blocks:        121.100.16.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.crl
                          rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Mar 2026 02:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:f4:90:66:8e:e3:50:b7:87:50:22:0c:35:12:c7:bc:87:84:f2:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61566F205F7037962069571320603B274357CC6D
        Validity
            Not Before: Feb 24 03:55:38 2026 GMT
            Not After : Feb 23 04:00:38 2027 GMT
        Subject: CN=B66EDCB053EA0525B22B70BCC3DAE0118106A987
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:d3:f8:d9:a5:07:b5:38:d3:54:73:c8:82:c0:
                    9f:0f:3e:6e:bc:ac:d6:54:48:52:f7:0f:41:79:ff:
                    8b:f6:4d:d8:76:4e:27:c8:3f:1f:12:14:cf:e4:cf:
                    3a:86:1d:1f:62:ea:c0:1f:4c:87:02:ef:2d:62:0f:
                    2e:93:df:16:d0:e9:91:ac:e9:0f:ba:3b:35:92:41:
                    60:94:f0:d1:ed:8b:65:39:b5:77:ae:5c:2f:4b:53:
                    b8:8d:e7:6e:73:55:a8:f5:aa:63:ad:d8:cb:35:d2:
                    b6:57:ec:0e:1c:8e:f8:18:59:a2:fc:94:46:b7:25:
                    11:1e:4a:e3:f9:66:07:99:9e:00:4d:0b:8b:fe:d3:
                    e4:bd:88:46:d5:ee:9f:db:b9:f1:f8:e3:d9:d9:82:
                    40:51:b8:55:31:67:1b:61:f3:ed:54:fc:19:24:d4:
                    9f:e7:96:b6:d7:f2:72:ec:5a:2b:f5:15:9b:04:a1:
                    34:33:d7:dd:1d:71:81:6d:e6:55:62:2b:fd:b0:40:
                    98:c3:a5:38:43:00:6c:c3:a1:6b:12:48:35:d5:7b:
                    86:ee:1c:57:c4:93:a7:1f:b1:fc:cb:a1:5a:c1:c1:
                    4f:bb:9d:14:42:1a:e6:04:fe:77:c2:0b:8f:44:34:
                    2d:db:c2:a8:4f:28:c8:dc:0c:e4:77:67:06:23:43:
                    63:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:6E:DC:B0:53:EA:05:25:B2:2B:70:BC:C3:DA:E0:11:81:06:A9:87
            X509v3 Authority Key Identifier:
                keyid:61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3132312e3130302e31362e302f32322d3234203d3e2039333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  121.100.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ab:5f:48:37:69:bf:bb:d8:55:59:c0:83:b6:e7:c2:e3:51:e8:
         77:dd:99:bd:ff:c3:cd:bb:68:c5:f7:c8:0e:ce:e9:34:4c:64:
         62:e7:a5:1d:ce:77:fb:49:35:cb:2b:77:94:77:e8:3b:8e:13:
         32:7d:af:25:83:60:e9:0b:ef:fb:e5:7b:d4:83:4f:7a:22:31:
         5a:75:62:9b:4b:11:36:d6:7a:46:c8:fa:3c:7b:47:5b:79:7c:
         a2:9a:47:e2:b8:f7:7e:e0:c6:02:e7:ae:40:f1:66:77:18:91:
         05:f2:bd:2d:8e:a4:18:52:75:d2:c4:7e:6f:8a:ef:ff:c6:7d:
         f8:b9:8c:39:bc:44:33:8a:52:49:0c:19:bf:61:87:4f:a7:78:
         d1:3b:64:19:4a:e9:c3:4d:94:5c:4c:81:f8:99:8b:8f:8c:18:
         08:8e:47:a3:25:71:95:eb:c6:5b:3e:02:86:62:6b:60:fa:ee:
         64:20:30:48:f4:d6:67:d3:76:7f:54:ea:5d:e5:80:eb:50:75:
         89:1e:b7:6c:c2:49:41:65:c4:c7:14:1b:83:9d:eb:6f:37:38:
         6c:d8:6e:1d:4a:84:16:0c:51:56:41:d2:41:52:4d:d0:7f:cf:
         77:4f:d6:cc:14:79:57:95:85:95:a1:c1:78:50:4f:96:9d:6b:
         3a:cb:49:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:13:53 2026 by rpki-client