Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/94e1ac7c-904d-493f-ba5e-5e0837dcbd29/0/3130332e3138362e39322e302f32342d3234203d3e20313439363937.roa
File:                     3130332e3138362e39322e302f32342d3234203d3e20313439363937.roa (raw, json)
Hash identifier:          S2I1Rsjv579X48PlNdNNUlZ5cCuw34WCjOICWZBzNII=
Subject key identifier:   7C:30:C1:8A:1C:FC:B4:82:BA:7A:45:F6:BB:A7:68:5C:6B:53:5E:E3
Certificate issuer:       /CN=86E6795ACAB99CF29CE7C7E10D7FCCE7E2FF263E
Certificate serial:       272DF902B3EDD0EB441FDAA849D586EB6809ABA0
Authority key identifier: 86:E6:79:5A:CA:B9:9C:F2:9C:E7:C7:E1:0D:7F:CC:E7:E2:FF:26:3E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/86E6795ACAB99CF29CE7C7E10D7FCCE7E2FF263E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/94e1ac7c-904d-493f-ba5e-5e0837dcbd29/0/3130332e3138362e39322e302f32342d3234203d3e20313439363937.roa
Signing time:             Thu 05 Feb 2026 11:00:01 +0000
ROA not before:           Thu 05 Feb 2026 10:55:01 +0000
ROA not after:            Thu 04 Feb 2027 11:00:01 +0000
asID:                     149697
IP address blocks:        103.186.92.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/94e1ac7c-904d-493f-ba5e-5e0837dcbd29/0/86E6795ACAB99CF29CE7C7E10D7FCCE7E2FF263E.crl
                          rsync://repo-rpki.idnic.net/repo/94e1ac7c-904d-493f-ba5e-5e0837dcbd29/0/86E6795ACAB99CF29CE7C7E10D7FCCE7E2FF263E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/86E6795ACAB99CF29CE7C7E10D7FCCE7E2FF263E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Mar 2026 12:42:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:2d:f9:02:b3:ed:d0:eb:44:1f:da:a8:49:d5:86:eb:68:09:ab:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86E6795ACAB99CF29CE7C7E10D7FCCE7E2FF263E
        Validity
            Not Before: Feb  5 10:55:01 2026 GMT
            Not After : Feb  4 11:00:01 2027 GMT
        Subject: CN=7C30C18A1CFCB482BA7A45F6BBA7685C6B535EE3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:78:64:5d:43:b9:b6:07:6a:cf:ef:15:94:34:
                    18:9f:b6:53:ae:2e:47:d4:15:23:e8:9e:85:d3:9a:
                    7f:cb:f5:06:13:75:de:36:98:54:78:d3:16:c2:35:
                    03:c2:02:b4:49:d9:4c:ee:9e:7f:99:8c:0b:8a:26:
                    c6:1e:7e:46:83:cb:16:22:83:67:d2:51:b5:37:50:
                    cf:c8:ca:fb:e4:c1:c5:cb:e1:2d:02:3b:d8:21:5f:
                    d0:56:d5:21:2b:f9:5f:11:f2:f5:60:7c:eb:ab:ba:
                    7d:cb:fd:dc:c3:a2:d5:f0:fb:01:28:73:a7:ae:2a:
                    13:58:b5:f9:85:8d:ea:9a:a7:f9:a9:97:19:2c:15:
                    68:17:0f:30:08:9d:f6:96:1b:16:dd:68:86:e0:bf:
                    a9:13:de:25:5c:3b:66:ac:f0:33:80:73:48:1d:c0:
                    ac:41:ce:78:63:f9:29:ab:e7:b6:a9:1e:19:52:a1:
                    89:07:83:2e:ff:fd:91:a6:e0:d3:56:94:01:4a:76:
                    d3:33:25:4a:4f:5c:c4:61:ff:97:5e:9e:b3:a4:c1:
                    a0:37:e4:7a:a7:2c:01:60:b9:b0:94:3b:2b:b7:42:
                    fd:73:d7:e1:34:34:50:ca:af:01:98:ea:28:3a:a4:
                    62:e1:7b:fc:f5:3d:4d:91:b6:06:1c:ad:c9:7a:18:
                    9d:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:30:C1:8A:1C:FC:B4:82:BA:7A:45:F6:BB:A7:68:5C:6B:53:5E:E3
            X509v3 Authority Key Identifier:
                keyid:86:E6:79:5A:CA:B9:9C:F2:9C:E7:C7:E1:0D:7F:CC:E7:E2:FF:26:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/94e1ac7c-904d-493f-ba5e-5e0837dcbd29/0/86E6795ACAB99CF29CE7C7E10D7FCCE7E2FF263E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/86E6795ACAB99CF29CE7C7E10D7FCCE7E2FF263E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/94e1ac7c-904d-493f-ba5e-5e0837dcbd29/0/3130332e3138362e39322e302f32342d3234203d3e20313439363937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.186.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:c0:b1:df:4c:38:60:35:d2:1e:17:4d:fb:af:46:50:5f:1d:
         ad:05:a0:4e:81:58:3d:ca:b2:9b:f9:30:39:0c:6f:be:53:4f:
         35:41:8f:bc:bc:44:7a:4f:39:0c:2f:e9:3c:11:f5:3f:03:0a:
         58:7a:f6:a4:10:54:5e:fc:83:17:fc:e8:f3:70:09:e3:04:4f:
         2c:93:86:99:35:4e:e9:39:95:6a:90:af:2b:63:f4:02:b9:ec:
         8c:09:1a:4e:20:87:43:4f:71:45:d4:31:b9:91:f8:bd:14:16:
         d0:71:f0:25:43:a5:aa:b0:6c:c7:42:f8:44:4d:a7:3e:79:0b:
         1d:f0:28:11:3a:bc:5e:86:32:e1:58:7f:43:a8:46:96:5e:35:
         e6:5e:48:d1:83:17:3c:68:82:23:a4:5c:d3:b7:9b:da:cb:0f:
         5d:33:68:70:fc:51:bd:6a:7e:c3:1f:cc:dd:92:64:cf:9a:33:
         85:d4:9d:ab:ed:84:ab:c9:26:8c:19:f2:fd:1e:de:6b:94:29:
         33:25:4d:95:e9:7a:e0:d4:5c:f8:d7:0e:e1:6d:cf:e4:60:35:
         93:cc:31:f3:63:e7:38:a3:43:45:2c:5a:24:17:2c:08:d2:5f:
         c3:a9:8a:b5:9c:03:8b:76:4e:dc:c8:cb:0d:32:40:6d:0c:f1:
         e5:d3:2c:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:28:12 2026 by rpki-client