Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/9904f670-7dac-4cf4-991d-50539e3d3f5e/0/3130332e3133312e31372e302f32342d3234203d3e20313338303830.roa
File:                     3130332e3133312e31372e302f32342d3234203d3e20313338303830.roa (raw, json)
Hash identifier:          VrotTTIzDOIqOPMKwmB9Zr+ogm8QEU56tjMylm904jQ=
Subject key identifier:   34:71:90:30:EC:60:5E:EF:F6:E5:E3:04:EC:42:AA:0A:84:E8:B0:ED
Certificate issuer:       /CN=62DD415142DDD76FB165A3918E09BA5891D6ADD0
Certificate serial:       4E39D7C5C5C3DC02CC14CC87533531D3B632577E
Authority key identifier: 62:DD:41:51:42:DD:D7:6F:B1:65:A3:91:8E:09:BA:58:91:D6:AD:D0
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/62DD415142DDD76FB165A3918E09BA5891D6ADD0.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/9904f670-7dac-4cf4-991d-50539e3d3f5e/0/3130332e3133312e31372e302f32342d3234203d3e20313338303830.roa
Signing time:             Wed 18 Feb 2026 08:02:39 +0000
ROA not before:           Wed 18 Feb 2026 07:57:39 +0000
ROA not after:            Wed 17 Feb 2027 08:02:39 +0000
asID:                     138080
IP address blocks:        103.131.17.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/9904f670-7dac-4cf4-991d-50539e3d3f5e/0/62DD415142DDD76FB165A3918E09BA5891D6ADD0.crl
                          rsync://repo-rpki.idnic.net/repo/9904f670-7dac-4cf4-991d-50539e3d3f5e/0/62DD415142DDD76FB165A3918E09BA5891D6ADD0.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/62DD415142DDD76FB165A3918E09BA5891D6ADD0.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Mar 2026 05:44:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:39:d7:c5:c5:c3:dc:02:cc:14:cc:87:53:35:31:d3:b6:32:57:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62DD415142DDD76FB165A3918E09BA5891D6ADD0
        Validity
            Not Before: Feb 18 07:57:39 2026 GMT
            Not After : Feb 17 08:02:39 2027 GMT
        Subject: CN=34719030EC605EEFF6E5E304EC42AA0A84E8B0ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:60:c5:f4:a2:90:d3:20:41:8d:5f:69:74:24:
                    d2:04:c2:ae:b1:85:38:5e:1f:af:d2:32:c6:00:53:
                    40:99:3f:e4:d4:8d:04:a9:1a:39:0d:89:91:a0:6c:
                    f5:dc:df:75:98:d8:55:cb:ce:09:bb:80:b7:17:1f:
                    a8:97:e4:94:af:42:ab:02:cf:57:21:70:6b:c9:f7:
                    a1:64:14:34:5b:f4:fe:e0:8e:50:5c:38:f2:63:a7:
                    b5:4b:3b:2c:64:e4:1f:c0:d0:0a:fa:1b:18:75:c8:
                    f5:a4:b9:81:a2:cc:4e:fb:e5:90:f2:53:bb:0a:4e:
                    02:c7:25:45:a7:e2:3e:09:23:68:64:3d:3a:4d:10:
                    aa:5c:84:51:28:fd:64:8c:b3:49:ac:f6:40:93:2f:
                    ba:79:ee:2f:28:07:74:9b:38:39:1a:bd:a0:42:e5:
                    e3:07:23:9b:d2:e1:67:b0:1b:5c:07:da:51:87:b3:
                    2a:85:0d:4b:59:9e:fe:25:99:61:6a:d5:52:24:8f:
                    f8:81:ba:60:8c:67:35:ee:95:6a:aa:e7:38:3a:64:
                    e7:db:70:95:bb:5b:63:d2:44:db:8a:73:25:f0:98:
                    3c:8f:fc:ca:e0:ae:4a:10:bf:67:66:0a:65:45:18:
                    71:5f:2b:8a:dd:d7:90:4f:03:05:37:33:47:79:a6:
                    8e:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:71:90:30:EC:60:5E:EF:F6:E5:E3:04:EC:42:AA:0A:84:E8:B0:ED
            X509v3 Authority Key Identifier:
                keyid:62:DD:41:51:42:DD:D7:6F:B1:65:A3:91:8E:09:BA:58:91:D6:AD:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/9904f670-7dac-4cf4-991d-50539e3d3f5e/0/62DD415142DDD76FB165A3918E09BA5891D6ADD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/62DD415142DDD76FB165A3918E09BA5891D6ADD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9904f670-7dac-4cf4-991d-50539e3d3f5e/0/3130332e3133312e31372e302f32342d3234203d3e20313338303830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.131.17.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:36:ce:c8:c5:ea:8a:d3:0f:cd:b9:cb:a3:e3:fe:8d:3d:38:
         1c:b6:a4:72:e4:80:f8:2f:6c:41:a9:7f:dc:a0:4c:7d:de:8e:
         ab:f4:fe:62:8f:ed:ae:52:22:f8:81:55:d6:ff:6a:54:83:a8:
         ee:6f:38:41:fe:7a:49:7c:57:d4:42:5d:08:af:f0:c5:ff:14:
         5c:3d:39:2a:bf:3a:56:e4:00:d4:e8:3d:89:ae:43:64:25:e4:
         14:2d:f6:ca:96:0f:51:d8:03:36:ab:34:23:38:74:ee:7d:a9:
         5a:24:94:a3:28:72:23:ec:23:7b:57:4b:db:2e:d6:eb:67:63:
         6c:fb:a7:33:f5:7e:9a:2c:e9:45:f4:f1:2f:d8:57:e0:00:e0:
         5c:0a:68:6c:d7:3d:e9:06:fb:66:e9:d1:f4:16:ad:da:53:87:
         97:28:e2:f8:d7:47:e6:9e:0d:fb:c0:24:9d:4c:b0:71:a6:89:
         66:03:a1:ca:a2:9d:0b:4c:64:4f:98:72:f0:a5:ac:70:3d:6c:
         b9:ad:07:b2:26:d0:13:ed:4b:39:2a:57:a7:2e:e8:c4:c8:0a:
         be:03:fd:03:74:d6:18:88:13:61:52:f4:a1:44:1f:9b:e8:6b:
         e4:6c:2e:3b:46:99:99:b2:bc:f1:d8:8a:ed:1c:d6:85:24:5c:
         44:05:e3:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:18:56 2026 by rpki-client