Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/93dc1b05-2a69-45b0-8c44-626772276bd9/0/3130332e36382e3133362e302f32342d3234203d3e20313335343535.roa
File:                     3130332e36382e3133362e302f32342d3234203d3e20313335343535.roa (raw, json)
Hash identifier:          6TKkLJ/vA8ZX1xyW1i7zZdkDISa15oqAT2rL7tkJxYE=
Subject key identifier:   A3:6D:9F:90:65:01:58:47:25:93:26:90:49:9E:EB:7C:BD:2F:BA:F0
Certificate issuer:       /CN=B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416
Certificate serial:       6EEFF9E5C97571E09732A9657B39A953A036D91F
Authority key identifier: B2:C1:8E:11:C8:53:0B:DF:4E:E3:33:F5:DE:BD:0B:05:5F:9D:A4:16
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/93dc1b05-2a69-45b0-8c44-626772276bd9/0/3130332e36382e3133362e302f32342d3234203d3e20313335343535.roa
Signing time:             Wed 18 Feb 2026 11:02:30 +0000
ROA not before:           Wed 18 Feb 2026 10:57:30 +0000
ROA not after:            Wed 17 Feb 2027 11:02:30 +0000
asID:                     135455
IP address blocks:        103.68.136.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/93dc1b05-2a69-45b0-8c44-626772276bd9/0/B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416.crl
                          rsync://repo-rpki.idnic.net/repo/93dc1b05-2a69-45b0-8c44-626772276bd9/0/B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Mar 2026 06:15:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:ef:f9:e5:c9:75:71:e0:97:32:a9:65:7b:39:a9:53:a0:36:d9:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416
        Validity
            Not Before: Feb 18 10:57:30 2026 GMT
            Not After : Feb 17 11:02:30 2027 GMT
        Subject: CN=A36D9F906501584725932690499EEB7CBD2FBAF0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:90:7a:a0:e3:6d:f8:51:b8:4e:1d:c9:fe:b4:
                    36:29:f8:e0:41:5c:f2:59:01:ea:a1:2f:59:46:cd:
                    2f:3f:c2:b3:ad:31:b2:59:dd:69:2f:e5:9c:35:39:
                    9c:8f:31:c0:67:d7:1e:00:15:79:d4:93:a5:21:9c:
                    4b:e7:99:92:53:af:3d:ce:03:64:31:cd:c6:3e:43:
                    d5:28:62:53:c8:5a:e6:20:e2:cb:7c:a9:43:a9:e1:
                    45:cb:d7:b2:01:c5:00:99:0c:c7:59:93:33:a9:39:
                    fd:c1:5a:e7:5f:00:35:05:58:23:38:42:6e:9e:ab:
                    06:d0:3f:8b:40:ef:0b:e7:14:90:7b:c9:90:f3:76:
                    72:e8:b4:70:66:8f:be:42:9d:83:f1:09:8b:a1:e4:
                    5a:20:4c:e3:6a:e3:97:e8:1c:c2:75:eb:af:9e:1c:
                    d2:9d:ee:fb:90:8c:63:16:7d:a5:ce:85:ab:f6:5a:
                    7c:16:94:08:9c:d8:26:8d:97:52:8c:69:41:b1:1d:
                    00:e4:3b:d0:e2:85:55:34:22:5e:17:81:7d:45:91:
                    34:5a:71:78:bc:09:1a:69:a1:03:5d:d3:a3:f3:99:
                    e9:0f:46:b2:71:03:ce:36:b8:39:66:12:29:6a:e8:
                    d4:60:89:90:da:1d:dc:65:bd:12:7c:45:49:90:b0:
                    84:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:6D:9F:90:65:01:58:47:25:93:26:90:49:9E:EB:7C:BD:2F:BA:F0
            X509v3 Authority Key Identifier:
                keyid:B2:C1:8E:11:C8:53:0B:DF:4E:E3:33:F5:DE:BD:0B:05:5F:9D:A4:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/93dc1b05-2a69-45b0-8c44-626772276bd9/0/B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/93dc1b05-2a69-45b0-8c44-626772276bd9/0/3130332e36382e3133362e302f32342d3234203d3e20313335343535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.68.136.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:01:dd:37:53:be:fc:e0:0a:95:d1:1c:8a:a5:78:08:71:03:
         de:6e:2e:f3:fc:f0:59:75:b1:f2:81:be:52:c6:26:c6:a6:27:
         93:75:c3:99:e0:2a:4b:29:e8:80:92:65:fc:39:70:eb:4b:29:
         4e:fc:7b:88:41:ae:67:62:95:d4:28:f9:47:fb:5e:cb:e7:37:
         61:46:00:8f:3d:0c:1a:e5:2b:19:2a:18:58:ef:e1:4f:05:f6:
         2d:1a:28:47:16:f1:09:75:f1:8c:ce:bf:89:95:d4:98:9d:c5:
         14:f0:83:2c:9b:e9:de:a4:f8:9c:cb:b2:ab:04:3a:85:f4:54:
         54:b5:a4:80:a2:52:e0:cd:bb:c5:39:d0:86:4d:ee:c4:5b:b5:
         3a:66:05:b8:cc:5d:21:d2:91:ef:41:07:9a:d3:a9:83:39:88:
         12:2b:8e:95:12:00:24:da:bf:f0:ed:0f:ef:06:78:ff:e8:ec:
         35:39:8b:44:8e:77:4d:39:e7:0e:b4:4e:5a:78:c0:d9:1d:eb:
         b4:a7:c2:f4:59:a8:5e:ed:c6:d7:f9:1f:f2:d8:1f:66:e4:5b:
         a5:8f:e2:dd:12:98:9b:e7:63:fa:ec:80:5b:eb:47:f8:85:13:
         39:bd:43:64:bf:29:82:88:ae:22:e8:28:2f:2d:65:35:08:9e:
         32:fc:47:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:10:30 2026 by rpki-client