Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3132312e3130302e32322e302f32332d3233203d3e2039333431.roa
File:                     3132312e3130302e32322e302f32332d3233203d3e2039333431.roa (raw, json)
Hash identifier:          P87H+k82VgNOHOfl65t8w6n7G0vrTBryk6qAfS4vYoc=
Subject key identifier:   40:56:F5:2F:91:B7:A1:B2:6F:1F:D6:92:EA:E3:20:C4:FF:F5:7D:4C
Certificate issuer:       /CN=61566F205F7037962069571320603B274357CC6D
Certificate serial:       6BAFC6D34F928685AE54E2377C546D831DDA4CD2
Authority key identifier: 61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3132312e3130302e32322e302f32332d3233203d3e2039333431.roa
Signing time:             Tue 07 Apr 2026 06:02:46 +0000
ROA not before:           Tue 07 Apr 2026 05:57:46 +0000
ROA not after:            Tue 06 Apr 2027 06:02:46 +0000
asID:                     9341
IP address blocks:        121.100.22.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.crl
                          rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 20 Apr 2026 16:33:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:af:c6:d3:4f:92:86:85:ae:54:e2:37:7c:54:6d:83:1d:da:4c:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61566F205F7037962069571320603B274357CC6D
        Validity
            Not Before: Apr  7 05:57:46 2026 GMT
            Not After : Apr  6 06:02:46 2027 GMT
        Subject: CN=4056F52F91B7A1B26F1FD692EAE320C4FFF57D4C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:e5:85:be:66:02:b3:26:f0:44:ee:12:f9:a3:
                    10:15:06:50:33:ee:c3:60:52:b4:29:d7:72:cf:2e:
                    08:1b:2c:65:5b:52:ca:f4:45:72:f4:56:3f:40:f4:
                    b8:67:6b:34:6e:18:1f:e9:45:3a:8c:bc:d5:db:3d:
                    90:5c:55:f3:71:ab:a2:17:71:d0:38:9f:8c:50:dd:
                    6a:59:97:60:76:bd:1a:b5:60:08:73:a9:62:55:17:
                    ef:b6:77:53:60:7b:5a:e5:fe:c4:61:b7:59:44:dd:
                    5a:75:93:fa:2a:03:ed:78:ed:77:ec:34:e3:69:61:
                    4f:67:b5:c6:c3:0f:fa:ba:22:ce:00:75:6e:33:25:
                    8f:7e:e5:b6:1b:88:46:aa:4c:25:16:1d:72:1b:83:
                    e6:40:e3:87:9b:63:66:4b:e0:9d:8f:41:90:7e:2e:
                    19:60:19:5d:1f:26:b1:45:35:8f:b4:61:32:b1:1a:
                    8d:91:e0:64:88:80:0d:fe:98:f2:c0:38:46:a0:68:
                    14:dd:43:28:30:f4:b2:fb:f3:88:b0:a1:75:ff:ff:
                    b7:10:f4:d1:be:9f:46:66:bf:b5:8d:5a:cb:05:c7:
                    5d:ec:92:c7:a4:8c:91:a9:42:73:2d:ea:fb:cb:13:
                    98:18:62:70:c7:4d:1a:74:ce:99:eb:49:f9:ea:f8:
                    9f:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:56:F5:2F:91:B7:A1:B2:6F:1F:D6:92:EA:E3:20:C4:FF:F5:7D:4C
            X509v3 Authority Key Identifier:
                keyid:61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3132312e3130302e32322e302f32332d3233203d3e2039333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  121.100.22.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8a:f2:7d:94:e2:54:7b:94:15:56:53:3e:54:4b:c1:26:f4:c3:
         be:9f:73:c5:24:16:64:da:c2:bb:17:85:e0:05:1e:cd:48:61:
         ee:00:1e:9a:83:82:f9:88:10:cb:70:15:b7:68:45:a7:4f:88:
         b7:e2:e0:a1:12:b8:58:2a:d7:54:d5:38:da:d4:d3:32:b1:6b:
         c6:d3:f3:b1:b9:b9:3e:01:17:6c:e9:85:96:63:b1:ba:ec:3d:
         58:62:e3:85:a6:57:ee:f9:b5:b5:f1:63:ae:43:33:00:70:67:
         2e:e3:79:4e:44:63:b0:bb:4b:94:13:4c:c3:7d:3a:91:fb:a5:
         ed:20:c2:98:29:8e:68:c6:96:78:9e:01:2d:e0:9c:b6:45:8b:
         08:8a:f9:1c:ae:18:7d:0a:e9:76:b1:73:d4:a0:30:6b:a8:fb:
         06:72:dd:21:0b:e6:77:05:36:c3:70:8e:b9:d0:26:89:5e:f6:
         29:7c:0b:07:50:9e:11:21:d7:e2:21:7e:b7:b6:6f:13:65:06:
         30:1d:b1:c0:09:e4:62:a8:ed:d6:17:19:26:59:c4:6c:42:8c:
         71:14:95:55:31:57:bf:76:48:c2:2f:e3:84:1b:54:8b:4a:8b:
         02:4e:db:a9:2a:4a:94:fa:98:8b:5c:32:35:46:5c:b6:59:5f:
         7a:5f:91:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:48:59 2026 by rpki-client