Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/7540cf80-9315-42c1-844e-bb03622a05c1/0/3130332e3136372e3136362e302f32332d3233203d3e20313431393834.roa
File:                     3130332e3136372e3136362e302f32332d3233203d3e20313431393834.roa (raw, json)
Hash identifier:          sCzn25/m0je6VeQbbVeLyb+BPsHQc3CBvZyRKt6D7A8=
Subject key identifier:   CC:AA:16:2F:B1:AB:11:37:E6:15:B2:7B:52:82:F2:E6:8C:0C:84:2A
Certificate issuer:       /CN=722FE79638E6D14E4794815122247CBEC27B8505
Certificate serial:       04C3F2DED4F5FB8587570D53972ECB5403F81A1F
Authority key identifier: 72:2F:E7:96:38:E6:D1:4E:47:94:81:51:22:24:7C:BE:C2:7B:85:05
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/722FE79638E6D14E4794815122247CBEC27B8505.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/7540cf80-9315-42c1-844e-bb03622a05c1/0/3130332e3136372e3136362e302f32332d3233203d3e20313431393834.roa
Signing time:             Sat 07 Feb 2026 16:00:01 +0000
ROA not before:           Sat 07 Feb 2026 15:55:01 +0000
ROA not after:            Sat 06 Feb 2027 16:00:01 +0000
asID:                     141984
IP address blocks:        103.167.166.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/7540cf80-9315-42c1-844e-bb03622a05c1/0/722FE79638E6D14E4794815122247CBEC27B8505.crl
                          rsync://repo-rpki.idnic.net/repo/7540cf80-9315-42c1-844e-bb03622a05c1/0/722FE79638E6D14E4794815122247CBEC27B8505.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/722FE79638E6D14E4794815122247CBEC27B8505.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Mar 2026 06:31:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:c3:f2:de:d4:f5:fb:85:87:57:0d:53:97:2e:cb:54:03:f8:1a:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=722FE79638E6D14E4794815122247CBEC27B8505
        Validity
            Not Before: Feb  7 15:55:01 2026 GMT
            Not After : Feb  6 16:00:01 2027 GMT
        Subject: CN=CCAA162FB1AB1137E615B27B5282F2E68C0C842A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:9f:36:32:ff:60:e5:de:97:2c:7c:ea:89:e7:
                    e9:b0:5a:35:0c:0d:bf:9e:c1:4b:b9:80:cc:fb:ce:
                    2d:3c:d6:a7:e9:c1:e7:98:c5:98:9b:03:77:e6:d4:
                    88:8c:cc:51:74:0e:49:63:17:22:4c:d5:b1:5d:33:
                    e4:5d:11:9d:6d:3a:47:6f:b8:7a:a0:b1:65:82:bd:
                    bc:58:01:a3:b9:e5:03:2e:92:c8:77:ec:85:bd:39:
                    ca:ad:b6:1e:d4:ec:70:b7:b3:d0:a0:51:37:96:6a:
                    7d:a3:cb:31:1e:de:9d:10:5e:56:95:97:7b:66:34:
                    c0:1a:ce:1e:0a:79:43:cb:3f:97:94:77:bb:06:06:
                    9a:04:40:d7:06:8d:43:d1:ff:60:4c:63:07:d7:a1:
                    71:9b:58:ad:5d:67:12:06:a2:1e:7b:0c:6d:4d:69:
                    98:3a:5d:2f:39:b3:90:9f:4f:df:51:02:b5:b5:ef:
                    60:6b:26:0a:16:19:48:10:83:72:d4:f0:06:b4:b2:
                    8c:e1:2e:2f:86:93:e8:dd:72:8d:89:2f:ae:58:84:
                    43:bb:34:51:e5:10:bb:8f:8d:91:91:9d:ae:e2:88:
                    72:5f:e5:8f:e0:10:76:08:14:d9:43:8b:bf:f9:22:
                    bc:54:63:66:9a:c2:d0:27:61:f7:3b:2b:13:15:8f:
                    f8:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:AA:16:2F:B1:AB:11:37:E6:15:B2:7B:52:82:F2:E6:8C:0C:84:2A
            X509v3 Authority Key Identifier:
                keyid:72:2F:E7:96:38:E6:D1:4E:47:94:81:51:22:24:7C:BE:C2:7B:85:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/7540cf80-9315-42c1-844e-bb03622a05c1/0/722FE79638E6D14E4794815122247CBEC27B8505.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/722FE79638E6D14E4794815122247CBEC27B8505.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7540cf80-9315-42c1-844e-bb03622a05c1/0/3130332e3136372e3136362e302f32332d3233203d3e20313431393834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.167.166.0/23

    Signature Algorithm: sha256WithRSAEncryption
         d2:64:fd:64:91:b2:7b:98:d4:d4:69:58:11:8e:d0:a0:d5:73:
         42:bf:87:4b:bb:11:61:79:4c:f0:44:c7:da:2c:f2:20:78:70:
         29:15:78:6f:49:d7:42:de:3d:76:dd:60:11:d7:fe:82:40:2f:
         96:97:15:2e:ba:d1:76:34:be:78:9a:7f:45:e0:49:72:8a:98:
         18:d4:2b:56:63:ae:be:88:53:af:64:ae:dd:00:97:73:ee:c1:
         03:ed:cd:a3:64:48:d5:49:d4:f2:bb:2b:f1:e5:c5:10:87:48:
         df:1a:1b:d7:70:3b:5b:f5:ae:80:49:ce:c8:06:ac:f7:d9:9f:
         63:cb:af:8b:47:73:40:ff:17:67:68:9a:09:d1:a7:a3:05:72:
         5c:11:26:dd:a3:4d:2c:6e:44:54:03:91:e0:a8:a4:a0:ba:f7:
         b1:89:21:62:ce:f1:cb:60:d6:c0:75:97:0c:91:20:0f:6c:90:
         05:47:57:cc:a8:1a:78:14:1f:b9:cd:8e:4f:6b:ac:5e:a2:9e:
         df:39:f1:b6:fc:0f:12:32:5b:9f:d5:b5:1a:98:6b:28:c1:51:
         a7:ed:14:ed:02:df:59:da:df:f5:1e:6e:77:2b:c4:10:84:bf:
         9c:60:2c:15:e2:6b:ff:ac:7b:90:5a:3d:7a:6c:cf:75:19:bf:
         a5:23:3b:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:18:28 2026 by rpki-client