Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/3130332e3131322e3134342e302f32342d3234203d3e20313337333334.roa
File:                     3130332e3131322e3134342e302f32342d3234203d3e20313337333334.roa (raw, json)
Hash identifier:          irW6q7ITtYGefmDvXgL1C1+KbMR4s3lcy75Hz7Jf3gU=
Subject key identifier:   06:61:00:93:C0:2E:9A:66:D7:B0:3C:A5:22:E6:79:AC:3D:AC:56:D6
Certificate issuer:       /CN=094D556CA0B55AF4A636873A1B1E7032B2C9813C
Certificate serial:       5BA07B33B92B35D6396F997861C4361089E38ECE
Authority key identifier: 09:4D:55:6C:A0:B5:5A:F4:A6:36:87:3A:1B:1E:70:32:B2:C9:81:3C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/094D556CA0B55AF4A636873A1B1E7032B2C9813C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/3130332e3131322e3134342e302f32342d3234203d3e20313337333334.roa
Signing time:             Tue 03 Feb 2026 16:42:35 +0000
ROA not before:           Tue 03 Feb 2026 16:37:35 +0000
ROA not after:            Tue 02 Feb 2027 16:42:35 +0000
asID:                     137334
IP address blocks:        103.112.144.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/094D556CA0B55AF4A636873A1B1E7032B2C9813C.crl
                          rsync://repo-rpki.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/094D556CA0B55AF4A636873A1B1E7032B2C9813C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/094D556CA0B55AF4A636873A1B1E7032B2C9813C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Mar 2026 08:19:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:a0:7b:33:b9:2b:35:d6:39:6f:99:78:61:c4:36:10:89:e3:8e:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=094D556CA0B55AF4A636873A1B1E7032B2C9813C
        Validity
            Not Before: Feb  3 16:37:35 2026 GMT
            Not After : Feb  2 16:42:35 2027 GMT
        Subject: CN=06610093C02E9A66D7B03CA522E679AC3DAC56D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ec:0c:71:33:f4:b2:62:a2:5e:23:a5:2d:85:
                    2d:a6:aa:90:df:83:cd:4c:7c:43:41:51:69:74:40:
                    46:75:18:e2:2a:de:98:11:29:a4:ea:ee:dc:c4:3d:
                    fe:6e:3c:d4:a5:40:ac:32:83:ab:d2:e3:27:0a:2c:
                    2b:04:b1:6a:27:b6:99:61:4e:2d:0f:8e:85:7d:de:
                    85:ef:c7:9d:e7:98:ca:17:82:0a:0f:00:05:03:39:
                    ec:6c:23:66:0e:86:23:65:b7:2b:d3:b1:78:bd:4a:
                    51:95:1a:d0:ab:25:a1:2c:fe:29:32:25:10:55:6e:
                    54:66:9f:ea:d0:a0:64:8d:b2:29:be:c2:3a:d6:06:
                    f2:89:ce:7a:ce:ef:39:c2:df:12:2a:19:85:a0:fa:
                    86:d6:1a:ff:d5:fe:79:79:14:cd:0f:95:2f:e4:6c:
                    a4:26:4c:b6:da:18:75:fc:88:c5:bd:ca:2e:2c:48:
                    1b:1f:73:20:14:24:7d:b6:c4:27:76:fe:c2:f5:a7:
                    e5:b0:c0:ad:14:bb:a2:54:6b:6b:19:ff:2a:75:f7:
                    80:dc:3e:74:6a:86:bb:67:02:bf:76:ce:08:3e:81:
                    33:72:2d:07:d4:a8:c5:4d:72:d1:53:d0:ab:85:cf:
                    18:13:d6:d9:5a:ed:d9:ba:0a:4f:b6:06:99:49:d8:
                    c7:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:61:00:93:C0:2E:9A:66:D7:B0:3C:A5:22:E6:79:AC:3D:AC:56:D6
            X509v3 Authority Key Identifier:
                keyid:09:4D:55:6C:A0:B5:5A:F4:A6:36:87:3A:1B:1E:70:32:B2:C9:81:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/094D556CA0B55AF4A636873A1B1E7032B2C9813C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/094D556CA0B55AF4A636873A1B1E7032B2C9813C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/3130332e3131322e3134342e302f32342d3234203d3e20313337333334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.112.144.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:5f:ef:99:af:00:44:ce:8d:3d:f4:2e:2a:53:4e:a6:4a:5e:
         c9:b1:8d:ac:7f:82:c9:94:54:d5:80:ed:7e:a8:07:37:20:cb:
         ca:57:b6:8b:b6:40:ed:38:eb:c6:bb:53:98:8c:e2:5b:d1:39:
         21:d5:c9:7c:65:1c:e1:de:7e:90:e0:85:c1:e3:57:b9:fb:e7:
         2f:b5:e2:64:a6:c5:56:6b:1a:24:bd:91:ee:2f:65:d4:e9:b6:
         77:8e:2c:3e:d7:5d:6e:9e:67:a6:66:83:66:d0:f0:d3:33:1b:
         97:c5:f8:72:f8:81:9e:3e:cb:9a:cd:6f:5c:d2:ce:87:24:0a:
         7a:d7:8d:18:26:b0:4d:7c:95:f9:83:dd:c6:8f:da:90:06:98:
         8c:24:76:b0:1b:c6:88:5c:77:97:e9:f6:c1:2a:fb:3f:54:de:
         a1:3b:7f:d5:3e:9b:a5:24:28:4f:b9:49:6a:3b:01:c5:fe:9b:
         da:89:84:ba:50:31:af:71:80:ad:1f:e0:51:e2:d6:9a:a3:7a:
         b4:93:3f:2f:f2:ff:2c:2c:fe:87:7e:0b:8e:89:91:e3:30:26:
         46:14:80:63:07:8a:58:4d:46:08:2c:b8:80:c5:03:15:4c:20:
         52:81:0f:84:95:81:f2:f7:aa:ef:13:e2:47:7d:d2:aa:5d:d1:
         a6:cc:83:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:29:57 2026 by rpki-client