Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/3130332e39372e37382e302f32342d3234203d3e20313336313331.roa
File:                     3130332e39372e37382e302f32342d3234203d3e20313336313331.roa (raw, json)
Hash identifier:          e/2G8Cbvzg0J07eep0ZBOJL7Iat2J09djGHNrLt/GAo=
Subject key identifier:   88:6F:09:94:7E:F8:F6:08:43:A5:0C:07:F5:F3:3B:90:53:B7:9C:3C
Certificate issuer:       /CN=7D64B8F4CFB687141137D10F9E73FFD0BAB93F67
Certificate serial:       787E3E8BCB3EEB81785B0209595895397487CEBF
Authority key identifier: 7D:64:B8:F4:CF:B6:87:14:11:37:D1:0F:9E:73:FF:D0:BA:B9:3F:67
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/3130332e39372e37382e302f32342d3234203d3e20313336313331.roa
Signing time:             Thu 05 Feb 2026 16:00:01 +0000
ROA not before:           Thu 05 Feb 2026 15:55:01 +0000
ROA not after:            Thu 04 Feb 2027 16:00:01 +0000
asID:                     136131
IP address blocks:        103.97.78.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.crl
                          rsync://repo-rpki.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Mar 2026 23:18:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:7e:3e:8b:cb:3e:eb:81:78:5b:02:09:59:58:95:39:74:87:ce:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D64B8F4CFB687141137D10F9E73FFD0BAB93F67
        Validity
            Not Before: Feb  5 15:55:01 2026 GMT
            Not After : Feb  4 16:00:01 2027 GMT
        Subject: CN=886F09947EF8F60843A50C07F5F33B9053B79C3C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:b3:c7:a4:c8:ea:f2:4c:b5:6e:9b:9e:10:2d:
                    9b:8c:d2:38:8e:1c:e4:9c:ae:46:39:ab:55:3e:6a:
                    3a:32:05:a9:ed:5a:14:0e:62:cf:ce:de:42:1c:6f:
                    09:50:8a:76:8e:77:d1:69:b4:e2:0a:bd:a7:a2:9a:
                    99:a3:6b:40:22:90:36:9c:f4:a9:ed:88:e8:d1:20:
                    03:02:cb:50:99:db:2b:55:67:37:60:ac:fe:16:18:
                    97:3f:8e:3d:2a:f5:87:8f:e3:10:50:bb:56:5d:c6:
                    da:b6:f6:d1:b1:14:23:c0:44:06:a9:0b:ec:8a:a0:
                    54:71:d9:fe:41:e4:52:bf:32:e3:b8:d3:d1:79:c2:
                    ee:29:e6:42:a0:2e:23:df:90:11:16:9f:b4:06:31:
                    7e:68:7d:15:0f:c1:a3:f6:b6:3c:8a:18:d5:2c:eb:
                    44:f8:38:f4:3f:36:3e:ff:58:7c:8c:f6:0b:31:fa:
                    ad:ee:ab:70:e0:cf:55:77:aa:1e:05:df:19:ff:bb:
                    bb:6e:30:03:f9:cc:b7:b2:c8:cc:ed:53:2d:7c:2f:
                    84:da:29:93:c4:fd:07:fe:26:8c:d6:25:7b:bf:a8:
                    f5:ea:f3:53:84:35:e8:8b:55:dc:36:ea:f6:10:81:
                    d2:b1:64:d8:d8:fd:81:cf:cb:a2:67:10:26:ea:11:
                    11:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:6F:09:94:7E:F8:F6:08:43:A5:0C:07:F5:F3:3B:90:53:B7:9C:3C
            X509v3 Authority Key Identifier:
                keyid:7D:64:B8:F4:CF:B6:87:14:11:37:D1:0F:9E:73:FF:D0:BA:B9:3F:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/3130332e39372e37382e302f32342d3234203d3e20313336313331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.97.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c3:6e:d9:03:5a:e7:05:e9:57:26:e7:5e:8e:80:4c:8f:db:be:
         f6:a2:70:5e:32:86:f4:11:55:c1:33:a1:ed:d8:14:d8:5a:d6:
         27:6f:ca:a2:18:6e:9e:26:61:0a:80:d0:b7:32:0d:e0:aa:51:
         9c:e2:7e:e9:0f:14:ba:82:6a:53:a3:b2:0f:6e:1f:8f:6d:b0:
         01:44:e9:7d:da:51:51:52:66:62:6b:51:a2:66:99:57:5d:6b:
         13:a2:88:a3:ef:0b:ce:cf:5f:22:27:58:d2:a8:20:a1:c1:49:
         28:04:08:57:4b:2a:96:2f:40:d6:40:17:61:bb:93:91:d0:6f:
         17:62:9a:58:f6:4b:7a:f9:d5:70:27:b5:1e:b4:bc:ee:56:6a:
         38:c2:76:1b:f8:98:84:53:a9:19:c8:8a:bd:32:f0:de:9a:71:
         41:b0:b0:37:4b:0d:61:8d:af:f8:48:ce:8c:66:5d:d6:11:1b:
         8d:28:ed:41:e2:5e:ce:5d:cb:d6:f1:61:bc:2f:ec:1c:b4:1f:
         ea:50:69:08:48:ad:02:f6:d1:78:06:3b:85:d6:27:ce:3a:82:
         f3:63:5b:32:b0:2a:2b:98:89:78:d6:6a:d5:df:5a:01:75:e1:
         81:10:3f:13:90:33:b9:34:d7:db:4e:f1:2f:ce:47:d7:99:b3:
         03:5d:87:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:41:30 2026 by rpki-client