Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/3130332e3131322e3134342e302f32332d3233203d3e20313337333334.roa
File:                     3130332e3131322e3134342e302f32332d3233203d3e20313337333334.roa (raw, json)
Hash identifier:          +aaeTzESf46hiW4iCKWdgpmCd8nyx/eyhjM3ENRIOGY=
Subject key identifier:   7E:7C:AC:31:78:89:D6:3E:8A:4B:68:1C:CC:EE:49:A6:DE:A2:FA:64
Certificate issuer:       /CN=094D556CA0B55AF4A636873A1B1E7032B2C9813C
Certificate serial:       19A51CDEBEE99FEEADBBC037A66F62E1CE8457B4
Authority key identifier: 09:4D:55:6C:A0:B5:5A:F4:A6:36:87:3A:1B:1E:70:32:B2:C9:81:3C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/094D556CA0B55AF4A636873A1B1E7032B2C9813C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/3130332e3131322e3134342e302f32332d3233203d3e20313337333334.roa
Signing time:             Tue 03 Feb 2026 15:36:49 +0000
ROA not before:           Tue 03 Feb 2026 15:31:49 +0000
ROA not after:            Tue 02 Feb 2027 15:36:49 +0000
asID:                     137334
IP address blocks:        103.112.144.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/094D556CA0B55AF4A636873A1B1E7032B2C9813C.crl
                          rsync://repo-rpki.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/094D556CA0B55AF4A636873A1B1E7032B2C9813C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/094D556CA0B55AF4A636873A1B1E7032B2C9813C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Mar 2026 08:19:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:a5:1c:de:be:e9:9f:ee:ad:bb:c0:37:a6:6f:62:e1:ce:84:57:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=094D556CA0B55AF4A636873A1B1E7032B2C9813C
        Validity
            Not Before: Feb  3 15:31:49 2026 GMT
            Not After : Feb  2 15:36:49 2027 GMT
        Subject: CN=7E7CAC317889D63E8A4B681CCCEE49A6DEA2FA64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:a0:92:2a:9c:46:c7:82:65:b3:b2:05:11:a8:
                    dc:80:48:86:be:36:f2:3b:fb:4f:75:14:65:56:1a:
                    16:eb:1d:ec:9f:21:98:38:7d:86:c3:6f:61:91:3b:
                    aa:56:67:7b:c8:41:0b:d3:48:bf:ba:44:e4:ad:65:
                    77:d6:28:0b:7f:c9:a9:42:c8:da:80:11:85:67:dc:
                    52:5c:7b:86:ef:86:28:3b:05:86:de:a4:45:c0:11:
                    21:ae:40:77:88:f7:38:49:41:c6:c8:6d:fc:a1:11:
                    d7:1d:88:8e:a0:8e:88:cb:b1:30:75:87:01:00:9e:
                    a4:00:f0:57:16:9b:c7:e8:92:6e:d4:66:b6:50:80:
                    1f:b6:6d:16:66:c8:c8:bb:4d:6f:9c:d6:1b:0a:c8:
                    88:48:3e:17:ea:09:9b:c3:a9:ac:4f:37:28:07:4c:
                    77:50:b3:e7:dd:6b:e1:e1:47:03:82:94:49:cc:8c:
                    a9:f3:21:5d:3f:05:87:68:71:43:23:2c:9e:c6:b9:
                    d1:39:9b:84:89:8b:b0:17:5a:ee:b9:48:a0:88:c5:
                    97:33:d4:2f:03:89:65:4d:94:ab:50:aa:c0:6a:27:
                    63:d1:a1:d6:b3:53:86:a8:4a:d6:1f:c5:e4:46:b0:
                    e2:ae:d3:e4:7c:3a:a9:ee:f9:3e:be:ba:20:bd:50:
                    65:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:7C:AC:31:78:89:D6:3E:8A:4B:68:1C:CC:EE:49:A6:DE:A2:FA:64
            X509v3 Authority Key Identifier:
                keyid:09:4D:55:6C:A0:B5:5A:F4:A6:36:87:3A:1B:1E:70:32:B2:C9:81:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/094D556CA0B55AF4A636873A1B1E7032B2C9813C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/094D556CA0B55AF4A636873A1B1E7032B2C9813C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/3130332e3131322e3134342e302f32332d3233203d3e20313337333334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.112.144.0/23

    Signature Algorithm: sha256WithRSAEncryption
         42:4c:0d:dc:68:ab:60:d1:d2:dd:50:fb:e1:32:2c:5b:a1:12:
         57:ed:44:0b:04:7f:c2:10:68:ea:e4:b5:2c:9d:f5:6e:d9:80:
         52:aa:87:06:7f:22:2d:82:b5:83:83:84:14:09:65:f3:72:6a:
         c4:3e:c1:38:d8:60:c2:b4:b4:fd:26:70:90:d1:89:dc:b1:36:
         b2:75:6c:b5:17:6f:31:ef:81:9a:f5:3f:b9:0c:08:e8:bb:69:
         a6:9b:5e:32:69:a2:12:36:90:07:62:1b:45:56:17:f7:ff:58:
         fb:c6:f3:6b:1e:06:38:00:e9:a0:08:a9:ae:d5:50:f6:eb:b6:
         7e:d7:d8:99:cf:0d:18:d7:08:05:e5:48:84:d4:bf:1c:5a:b6:
         4e:c2:6f:79:55:fd:ed:c1:4e:7f:07:10:28:7a:bc:ac:1e:f2:
         fe:ec:b4:9b:fa:1e:39:98:2e:62:cb:91:84:4e:32:a6:fa:9a:
         07:cd:6b:cc:b5:8d:b8:8e:60:0c:84:7d:1e:49:32:8c:40:18:
         cf:37:18:60:36:d4:b4:3b:56:5b:fb:4e:09:24:2a:ef:5b:83:
         17:05:53:40:7d:77:9f:a8:1d:e7:ba:f7:ec:32:92:76:5c:17:
         90:7f:ef:81:b6:8e:c6:47:dd:98:36:a4:28:89:e0:ce:47:c4:
         d3:6f:78:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:18:55 2026 by rpki-client