Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/88788a8b-541b-4cbf-bab9-8dc377bc1284/0/3130332e3131342e3134342e302f32342d3234203d3e20313337333531.roa
File:                     3130332e3131342e3134342e302f32342d3234203d3e20313337333531.roa (raw, json)
Hash identifier:          3hFFQihiUWQ6IklFjwNs/rvoW0wAPy/hcaMMMxF76HU=
Subject key identifier:   EA:AF:88:13:11:6F:3B:77:AE:8B:AF:12:23:86:89:EE:42:B4:81:1B
Certificate issuer:       /CN=8208317A24AB4CD828CD8855F81F3EF2B53CC681
Certificate serial:       BB8E3B38233460A64026C528F3D684214C50D9
Authority key identifier: 82:08:31:7A:24:AB:4C:D8:28:CD:88:55:F8:1F:3E:F2:B5:3C:C6:81
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8208317A24AB4CD828CD8855F81F3EF2B53CC681.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/88788a8b-541b-4cbf-bab9-8dc377bc1284/0/3130332e3131342e3134342e302f32342d3234203d3e20313337333531.roa
Signing time:             Wed 11 Feb 2026 17:00:02 +0000
ROA not before:           Wed 11 Feb 2026 16:55:02 +0000
ROA not after:            Wed 10 Feb 2027 17:00:02 +0000
asID:                     137351
IP address blocks:        103.114.144.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/88788a8b-541b-4cbf-bab9-8dc377bc1284/0/8208317A24AB4CD828CD8855F81F3EF2B53CC681.crl
                          rsync://repo-rpki.idnic.net/repo/88788a8b-541b-4cbf-bab9-8dc377bc1284/0/8208317A24AB4CD828CD8855F81F3EF2B53CC681.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8208317A24AB4CD828CD8855F81F3EF2B53CC681.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Mar 2026 06:31:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            bb:8e:3b:38:23:34:60:a6:40:26:c5:28:f3:d6:84:21:4c:50:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8208317A24AB4CD828CD8855F81F3EF2B53CC681
        Validity
            Not Before: Feb 11 16:55:02 2026 GMT
            Not After : Feb 10 17:00:02 2027 GMT
        Subject: CN=EAAF8813116F3B77AE8BAF12238689EE42B4811B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:8a:7e:47:76:28:32:06:eb:47:bb:e9:15:aa:
                    17:f9:d3:06:25:13:51:93:5c:27:f4:53:bc:ea:49:
                    c0:50:9e:c5:bf:20:e0:4c:8f:63:77:53:35:50:83:
                    dd:54:ff:52:22:85:d2:21:ca:99:a0:67:0b:9a:f1:
                    ac:70:17:f5:a5:99:84:4d:d6:40:5c:fb:33:d6:9a:
                    fb:67:a1:1f:2e:b4:49:69:53:3d:72:28:b5:99:f2:
                    e8:4b:56:a9:b0:97:64:35:5f:9e:3e:48:43:20:b8:
                    3f:df:74:c3:4a:18:b2:66:e4:83:34:55:5e:79:f0:
                    25:70:f0:72:94:98:70:b0:ef:29:e2:07:61:e8:bb:
                    2e:02:fb:d6:61:a8:86:8a:38:2a:97:48:e1:a1:1f:
                    52:77:8c:5c:25:ec:83:c7:ae:57:b7:94:2a:74:ef:
                    e8:6a:f9:7b:d2:55:80:f8:e7:e8:c8:12:e6:e3:c7:
                    d9:24:f1:4e:8f:53:68:7e:32:94:f4:24:50:84:50:
                    ea:83:5b:81:67:cf:75:d5:b7:36:b9:80:7a:11:0e:
                    60:10:e2:d1:a1:22:7f:3c:70:32:6b:a6:58:f0:9a:
                    94:ab:82:4d:ed:d8:d5:19:d5:d2:99:c7:f2:c9:a9:
                    80:6e:db:d6:7d:83:ab:17:f0:f4:0d:a1:17:78:b8:
                    58:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:AF:88:13:11:6F:3B:77:AE:8B:AF:12:23:86:89:EE:42:B4:81:1B
            X509v3 Authority Key Identifier:
                keyid:82:08:31:7A:24:AB:4C:D8:28:CD:88:55:F8:1F:3E:F2:B5:3C:C6:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/88788a8b-541b-4cbf-bab9-8dc377bc1284/0/8208317A24AB4CD828CD8855F81F3EF2B53CC681.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8208317A24AB4CD828CD8855F81F3EF2B53CC681.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/88788a8b-541b-4cbf-bab9-8dc377bc1284/0/3130332e3131342e3134342e302f32342d3234203d3e20313337333531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.114.144.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:30:7e:d4:70:7e:93:ce:1a:91:9f:18:59:51:2c:4a:38:59:
         63:7d:88:a3:02:6a:b8:bb:bd:56:0e:ad:6b:d7:9a:45:ec:e9:
         13:55:34:30:e4:42:1f:e2:1d:7c:fc:10:4d:44:0a:84:36:f1:
         74:79:bf:11:b6:56:ac:84:58:55:d1:4e:96:62:3e:77:45:46:
         45:12:41:65:e9:de:fc:17:b5:e7:2b:47:dd:7b:75:c0:84:46:
         5a:4b:6b:f1:f7:34:e5:60:64:b3:e7:8d:34:f3:d0:5b:62:54:
         12:2e:54:df:4f:12:08:c6:4b:4e:37:b6:fa:76:bd:cd:b0:84:
         c0:eb:45:2d:a6:c2:32:d6:3e:d3:77:d9:3f:96:b5:37:9a:0b:
         28:31:ef:77:e4:86:e3:b0:fb:e9:5f:71:cd:f7:71:cf:b4:fc:
         ee:0f:78:a1:5d:d2:f1:35:55:3c:01:7d:21:75:1f:66:98:5f:
         de:58:23:ed:1b:8a:b4:fa:c5:ea:4c:e0:3f:68:95:86:0b:f5:
         96:6d:fa:9e:86:eb:3b:90:ee:e5:87:40:5f:e2:b8:be:2c:c3:
         63:40:e2:70:0a:3b:90:3b:27:2e:2a:35:f2:54:73:c8:2f:88:
         bc:eb:87:d0:f5:2b:e0:5e:0f:f6:23:83:89:49:c8:df:a7:eb:
         30:c0:b6:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:31:29 2026 by rpki-client