Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/7d035b3b-e6c5-47f8-99b4-1cb0326edae5/0/3130332e3136332e3233312e302f32342d3234203d3e20313431393037.roa
File:                     3130332e3136332e3233312e302f32342d3234203d3e20313431393037.roa (raw, json)
Hash identifier:          82YqFhb4/ZH/TVttJfl2TXhpxvQiL0hSWz60Ovq6qlE=
Subject key identifier:   7B:F4:B7:17:3C:B2:97:16:73:BA:CB:A1:92:DF:2E:66:E9:26:B9:88
Certificate issuer:       /CN=4ECF7DFB09FB3B5C21DDE661150B95768B6BD319
Certificate serial:       0FAEA83F08D092E2E05D83294D2858C4AA891929
Authority key identifier: 4E:CF:7D:FB:09:FB:3B:5C:21:DD:E6:61:15:0B:95:76:8B:6B:D3:19
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/7d035b3b-e6c5-47f8-99b4-1cb0326edae5/0/3130332e3136332e3233312e302f32342d3234203d3e20313431393037.roa
Signing time:             Tue 17 Feb 2026 08:00:03 +0000
ROA not before:           Tue 17 Feb 2026 07:55:03 +0000
ROA not after:            Tue 16 Feb 2027 08:00:03 +0000
asID:                     141907
IP address blocks:        103.163.231.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/7d035b3b-e6c5-47f8-99b4-1cb0326edae5/0/4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.crl
                          rsync://repo-rpki.idnic.net/repo/7d035b3b-e6c5-47f8-99b4-1cb0326edae5/0/4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Mar 2026 12:19:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:ae:a8:3f:08:d0:92:e2:e0:5d:83:29:4d:28:58:c4:aa:89:19:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ECF7DFB09FB3B5C21DDE661150B95768B6BD319
        Validity
            Not Before: Feb 17 07:55:03 2026 GMT
            Not After : Feb 16 08:00:03 2027 GMT
        Subject: CN=7BF4B7173CB2971673BACBA192DF2E66E926B988
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:b4:e7:79:c3:dc:dc:74:c1:53:17:c1:36:0a:
                    1a:e8:70:05:73:11:a0:fb:f1:cd:bd:d4:0b:ff:9a:
                    55:20:4d:23:c2:33:16:01:45:86:08:65:26:90:b9:
                    ec:49:65:28:51:44:71:15:7e:61:f2:7f:a8:3c:7f:
                    47:55:a7:ea:4d:30:65:d0:df:05:b3:36:92:2e:ac:
                    c3:0c:78:e2:8c:eb:c7:5f:6d:f8:26:d7:95:8d:2f:
                    28:d8:41:00:c6:db:af:08:69:93:26:4d:f3:5f:ad:
                    ba:9c:93:72:9b:33:01:71:93:42:90:50:00:ec:94:
                    e2:40:0c:ed:21:dc:55:cd:dd:41:da:69:ec:d7:2e:
                    44:20:82:b7:21:5d:1e:df:67:2b:74:fe:5b:0f:cb:
                    90:6d:0c:b6:60:3a:ed:01:d5:1c:ec:c1:27:89:4f:
                    3e:c6:25:b6:fd:24:4f:8a:33:8b:0f:50:2e:bf:3e:
                    af:5d:93:4c:03:e0:83:34:d7:3b:db:e2:02:f0:ce:
                    70:94:a1:f7:68:0e:86:a6:91:29:1b:a8:d5:43:ae:
                    f4:3a:01:fe:f8:ab:11:24:af:eb:ae:91:61:4c:0a:
                    7b:aa:94:ba:e9:07:b9:61:c9:53:e9:6f:66:c0:1b:
                    be:49:a1:26:07:f9:fd:cd:21:77:f1:8f:87:a6:97:
                    78:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:F4:B7:17:3C:B2:97:16:73:BA:CB:A1:92:DF:2E:66:E9:26:B9:88
            X509v3 Authority Key Identifier:
                keyid:4E:CF:7D:FB:09:FB:3B:5C:21:DD:E6:61:15:0B:95:76:8B:6B:D3:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/7d035b3b-e6c5-47f8-99b4-1cb0326edae5/0/4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7d035b3b-e6c5-47f8-99b4-1cb0326edae5/0/3130332e3136332e3233312e302f32342d3234203d3e20313431393037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.163.231.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ab:e6:39:0f:69:82:4d:28:bf:34:29:95:ca:b2:ea:ae:05:d2:
         23:9a:c7:c8:34:08:03:00:b3:90:6e:90:a8:a0:af:dc:ec:49:
         5f:a5:d8:ac:50:b1:8d:51:47:47:4a:cc:1f:60:ca:ca:6f:28:
         60:e8:fc:ba:b6:27:ba:86:c8:5d:ff:9c:f2:2e:26:0a:62:d6:
         48:76:d4:3a:7f:ff:66:89:41:fe:0c:3a:c3:99:7c:d4:8c:04:
         61:87:95:83:7a:90:bf:84:94:be:94:48:a7:26:d9:90:08:59:
         fc:c7:e6:cc:8c:18:40:38:d3:f7:26:0d:f6:9c:ac:c9:3c:73:
         79:d7:d7:8d:47:af:01:e5:69:af:33:2c:d7:c8:5a:19:c8:20:
         42:62:aa:8e:c2:6b:a0:36:2b:b5:42:50:a6:78:5c:b7:db:8e:
         d9:a6:56:4d:a1:f9:6d:4f:d5:14:cc:ce:ba:f0:32:b6:2f:59:
         c9:6f:10:7a:0e:4b:3e:6f:61:fa:09:89:1a:b8:7d:c4:db:36:
         f6:68:d9:78:9b:ea:d5:69:ba:b6:72:ef:e1:00:58:af:9b:08:
         38:e2:bc:a7:1d:74:d2:1e:85:72:80:56:ae:31:e8:9c:4e:90:
         48:05:a9:05:4e:1b:bc:47:34:16:e8:2c:72:1d:7c:8e:fc:69:
         32:77:1b:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:38:36 2026 by rpki-client