Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/9904f670-7dac-4cf4-991d-50539e3d3f5e/0/3130332e3133312e31362e302f32342d3234203d3e20313338303830.roa
File:                     3130332e3133312e31362e302f32342d3234203d3e20313338303830.roa (raw, json)
Hash identifier:          /UXYB4TtCj6DhWGBpWw5uknPOcQXZgKkP3NIlYwqDgE=
Subject key identifier:   DF:66:EB:D6:BF:1C:59:34:B7:D4:B4:87:F5:D1:6E:5F:70:E0:B6:C9
Certificate issuer:       /CN=62DD415142DDD76FB165A3918E09BA5891D6ADD0
Certificate serial:       49FA9AFDA972D628A96A7A9B5A598337F6C3B22F
Authority key identifier: 62:DD:41:51:42:DD:D7:6F:B1:65:A3:91:8E:09:BA:58:91:D6:AD:D0
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/62DD415142DDD76FB165A3918E09BA5891D6ADD0.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/9904f670-7dac-4cf4-991d-50539e3d3f5e/0/3130332e3133312e31362e302f32342d3234203d3e20313338303830.roa
Signing time:             Wed 18 Feb 2026 07:04:05 +0000
ROA not before:           Wed 18 Feb 2026 06:59:05 +0000
ROA not after:            Wed 17 Feb 2027 07:04:05 +0000
asID:                     138080
IP address blocks:        103.131.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/9904f670-7dac-4cf4-991d-50539e3d3f5e/0/62DD415142DDD76FB165A3918E09BA5891D6ADD0.crl
                          rsync://repo-rpki.idnic.net/repo/9904f670-7dac-4cf4-991d-50539e3d3f5e/0/62DD415142DDD76FB165A3918E09BA5891D6ADD0.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/62DD415142DDD76FB165A3918E09BA5891D6ADD0.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Mar 2026 05:44:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:fa:9a:fd:a9:72:d6:28:a9:6a:7a:9b:5a:59:83:37:f6:c3:b2:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62DD415142DDD76FB165A3918E09BA5891D6ADD0
        Validity
            Not Before: Feb 18 06:59:05 2026 GMT
            Not After : Feb 17 07:04:05 2027 GMT
        Subject: CN=DF66EBD6BF1C5934B7D4B487F5D16E5F70E0B6C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:80:2b:31:76:f2:30:99:ab:2e:92:ab:44:b4:
                    7c:66:69:18:49:33:17:1f:06:b5:4d:52:8f:84:85:
                    1d:c0:5e:d2:ba:ef:71:da:e9:1f:80:9a:9f:96:69:
                    81:25:ed:e6:f5:48:c0:0f:62:e3:a6:87:87:4f:e5:
                    91:17:b7:00:2b:cb:b7:2c:ba:8f:8c:60:a2:01:d4:
                    74:e9:a1:16:7c:d5:38:3e:1f:67:8e:39:c0:42:9f:
                    76:af:c3:8d:a6:10:67:90:dc:29:21:35:4d:b6:84:
                    55:20:62:b9:32:1b:a8:c6:a0:05:30:d5:4d:1c:54:
                    e4:67:22:2e:2b:f6:b2:fb:ce:0f:97:0a:aa:98:62:
                    bd:f7:72:64:e9:a7:f1:a9:03:0c:e2:a5:86:5d:37:
                    b8:8d:f9:0d:b6:9c:4b:5f:96:93:b0:05:42:3e:29:
                    1d:1a:a0:cc:e0:72:55:0d:9a:35:c9:04:d4:06:a2:
                    8c:c8:57:34:20:b3:b8:eb:d7:5d:59:1a:3c:25:5e:
                    5e:07:b6:39:97:63:aa:3d:b7:d9:00:e7:82:7f:91:
                    95:a6:93:84:54:f4:be:dd:b7:fc:a0:92:b6:2c:1e:
                    a2:6f:27:82:33:95:ab:c8:97:07:03:08:8e:3a:6e:
                    c5:b6:42:e2:e4:5c:b8:5e:bb:e6:63:8f:b2:78:98:
                    8d:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:66:EB:D6:BF:1C:59:34:B7:D4:B4:87:F5:D1:6E:5F:70:E0:B6:C9
            X509v3 Authority Key Identifier:
                keyid:62:DD:41:51:42:DD:D7:6F:B1:65:A3:91:8E:09:BA:58:91:D6:AD:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/9904f670-7dac-4cf4-991d-50539e3d3f5e/0/62DD415142DDD76FB165A3918E09BA5891D6ADD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/62DD415142DDD76FB165A3918E09BA5891D6ADD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9904f670-7dac-4cf4-991d-50539e3d3f5e/0/3130332e3133312e31362e302f32342d3234203d3e20313338303830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.131.16.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:ad:c8:22:5d:43:d4:d2:af:0a:ac:ba:81:0b:5c:5b:f6:c2:
         53:b7:46:43:f5:a5:f2:a0:ff:f9:c6:9c:fe:5e:6e:7b:47:ce:
         aa:9c:08:d8:10:70:80:58:45:24:ca:6a:9f:33:1d:a9:e4:4e:
         82:f8:74:55:b2:d0:bf:ac:d0:64:53:89:60:8b:af:75:91:6e:
         1b:fe:2d:50:db:0e:bb:55:2d:74:40:47:22:a0:c2:56:d1:e2:
         c4:65:f2:78:f2:50:41:57:77:9c:80:26:7c:e2:0d:c5:ad:9f:
         ba:bd:8b:43:89:91:c4:03:8e:8d:bc:a3:42:c4:ea:45:bf:f6:
         96:7e:9e:fa:44:96:6f:72:7c:e3:43:5d:e3:6c:b5:ac:6d:f5:
         e0:da:a5:6a:40:cf:08:5f:68:9f:d1:9a:0e:bb:7a:bb:fc:ae:
         bc:11:36:68:a3:ab:ec:7a:bd:f4:a0:dd:ed:4b:3a:56:55:5e:
         1f:9f:ab:35:2f:6c:e5:97:4e:cb:3a:ef:7a:11:5d:fc:f7:33:
         39:d9:f9:76:2b:b2:64:9b:5d:97:68:42:e3:34:01:84:bb:8b:
         38:5a:79:90:de:66:8e:4c:45:f0:38:fe:a7:61:a0:f9:49:45:
         c0:ea:64:04:d4:ed:1b:19:c6:4c:b8:09:e1:29:89:18:fc:21:
         9f:5c:2f:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:18:53 2026 by rpki-client