Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/7d035b3b-e6c5-47f8-99b4-1cb0326edae5/0/3130332e3136332e3233302e302f32332d3233203d3e20313431393037.roa
File:                     3130332e3136332e3233302e302f32332d3233203d3e20313431393037.roa (raw, json)
Hash identifier:          7aywUIXFUEuMUfYXXNrXCaHCS72hzYp6TKpPIt+Y3+k=
Subject key identifier:   1A:82:54:C7:B9:86:2D:FA:DF:BB:0F:3E:AB:11:6D:95:F3:F7:8E:36
Certificate issuer:       /CN=4ECF7DFB09FB3B5C21DDE661150B95768B6BD319
Certificate serial:       1A219EFB7EC63F18A301DF84873E6B1CE4C8C118
Authority key identifier: 4E:CF:7D:FB:09:FB:3B:5C:21:DD:E6:61:15:0B:95:76:8B:6B:D3:19
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/7d035b3b-e6c5-47f8-99b4-1cb0326edae5/0/3130332e3136332e3233302e302f32332d3233203d3e20313431393037.roa
Signing time:             Tue 17 Feb 2026 07:00:03 +0000
ROA not before:           Tue 17 Feb 2026 06:55:03 +0000
ROA not after:            Tue 16 Feb 2027 07:00:03 +0000
asID:                     141907
IP address blocks:        103.163.230.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/7d035b3b-e6c5-47f8-99b4-1cb0326edae5/0/4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.crl
                          rsync://repo-rpki.idnic.net/repo/7d035b3b-e6c5-47f8-99b4-1cb0326edae5/0/4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Mar 2026 12:19:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:21:9e:fb:7e:c6:3f:18:a3:01:df:84:87:3e:6b:1c:e4:c8:c1:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ECF7DFB09FB3B5C21DDE661150B95768B6BD319
        Validity
            Not Before: Feb 17 06:55:03 2026 GMT
            Not After : Feb 16 07:00:03 2027 GMT
        Subject: CN=1A8254C7B9862DFADFBB0F3EAB116D95F3F78E36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:dc:33:29:e6:11:5a:c7:20:4a:82:71:05:ab:
                    66:ef:d3:6f:87:1f:c4:30:62:38:c0:8e:dd:d1:a2:
                    99:1d:e4:52:0b:82:6a:41:a5:99:81:18:7b:34:dd:
                    3f:7c:2f:39:5e:2a:21:f7:76:b5:f9:59:61:3e:40:
                    38:d4:27:d6:e0:40:3b:d5:a3:79:c0:f1:0c:a9:1f:
                    f2:5d:0c:c6:5e:fc:6d:07:7b:d7:49:b6:df:56:04:
                    c0:f5:e9:6e:03:47:04:e0:a8:d6:9e:39:55:bd:61:
                    9e:27:bc:98:57:f5:97:bd:e7:95:bb:70:2e:d4:30:
                    cd:60:24:05:d3:48:ff:e4:60:42:0c:a6:f3:35:2e:
                    e9:91:f6:e3:ea:18:f7:03:18:30:12:e2:f6:4a:ab:
                    b8:18:7e:8e:a0:f5:34:17:63:83:eb:14:b0:3c:e2:
                    53:4d:30:67:14:d1:9b:09:49:99:0e:34:a7:42:30:
                    d4:aa:7b:3e:b7:c1:9a:f7:31:11:43:3d:60:4a:cb:
                    7f:b2:2d:a9:6a:fd:52:2c:95:1d:5f:a0:3f:28:be:
                    64:7a:1a:30:6e:e1:d5:5a:27:59:dc:3c:7d:01:c9:
                    ae:b6:47:77:d7:f0:8f:4a:c3:cc:13:85:4e:61:ca:
                    8f:fe:27:08:ca:4a:8f:d7:d9:f2:ac:cf:1d:8b:ec:
                    fc:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:82:54:C7:B9:86:2D:FA:DF:BB:0F:3E:AB:11:6D:95:F3:F7:8E:36
            X509v3 Authority Key Identifier:
                keyid:4E:CF:7D:FB:09:FB:3B:5C:21:DD:E6:61:15:0B:95:76:8B:6B:D3:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/7d035b3b-e6c5-47f8-99b4-1cb0326edae5/0/4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7d035b3b-e6c5-47f8-99b4-1cb0326edae5/0/3130332e3136332e3233302e302f32332d3233203d3e20313431393037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.163.230.0/23

    Signature Algorithm: sha256WithRSAEncryption
         72:a1:a1:f9:c9:72:dd:6d:ea:39:6a:d8:50:93:8b:75:06:70:
         d1:2e:6b:75:26:15:13:93:c3:53:6d:ea:fd:88:31:02:9d:a6:
         14:b5:62:7b:f2:02:fa:38:91:78:01:d4:ad:dc:67:6d:50:6f:
         3b:a5:ee:96:82:86:d1:3d:66:18:11:e1:1b:c7:39:c8:37:40:
         32:d2:fb:b3:ca:44:f6:94:cb:1b:0d:b2:06:76:cf:c1:01:e0:
         6e:57:81:a9:59:b4:bb:0f:2d:5a:24:47:57:04:98:bc:08:e4:
         10:9c:cf:95:e0:ba:72:6a:29:de:4a:91:00:ea:09:07:3e:3f:
         ca:78:27:38:7f:33:c3:73:9b:d7:55:e4:73:54:c9:1a:fd:ef:
         df:ff:bc:0c:eb:61:d6:1e:2c:bf:fd:93:c4:98:71:22:ae:4c:
         58:f9:97:09:4f:54:9b:65:38:46:d3:e3:d8:9c:ef:a9:eb:9d:
         1a:28:6f:e8:a9:88:5f:56:23:ad:f8:22:65:6b:b6:13:70:ba:
         1c:c5:d4:f5:dd:a7:ef:97:b5:6e:9b:09:bd:3d:da:b2:a7:24:
         85:f1:50:63:5f:39:0c:a4:49:7d:12:fa:70:be:e6:7d:be:26:
         25:8d:f7:d1:5b:b3:1f:d4:cd:03:ab:de:23:0b:1a:df:14:cf:
         17:12:bc:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:35:06 2026 by rpki-client