Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a63097f0-3978-49ce-b69c-4b20b4dcfb7e/0/3130332e3138372e3232372e302f32342d3234203d3e20313439373238.roa
File:                     3130332e3138372e3232372e302f32342d3234203d3e20313439373238.roa (raw, json)
Hash identifier:          ZaP6okTPzJHZKniyIdhQXNdEudbstzWU4bsphJPUV9E=
Subject key identifier:   0A:12:B6:E6:7B:03:07:8D:AB:CD:2F:DA:5C:29:F7:6B:D6:34:FB:AF
Certificate issuer:       /CN=B0734A32D13A96FCB3FDF982C2EEC500150411CA
Certificate serial:       3B23A9DBD0BBC3835EC720A82A3ECCD529864648
Authority key identifier: B0:73:4A:32:D1:3A:96:FC:B3:FD:F9:82:C2:EE:C5:00:15:04:11:CA
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0734A32D13A96FCB3FDF982C2EEC500150411CA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a63097f0-3978-49ce-b69c-4b20b4dcfb7e/0/3130332e3138372e3232372e302f32342d3234203d3e20313439373238.roa
Signing time:             Sat 21 Feb 2026 06:14:50 +0000
ROA not before:           Sat 21 Feb 2026 06:09:50 +0000
ROA not after:            Sat 20 Feb 2027 06:14:50 +0000
asID:                     149728
IP address blocks:        103.187.227.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a63097f0-3978-49ce-b69c-4b20b4dcfb7e/0/B0734A32D13A96FCB3FDF982C2EEC500150411CA.crl
                          rsync://repo-rpki.idnic.net/repo/a63097f0-3978-49ce-b69c-4b20b4dcfb7e/0/B0734A32D13A96FCB3FDF982C2EEC500150411CA.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0734A32D13A96FCB3FDF982C2EEC500150411CA.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Mar 2026 22:29:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:23:a9:db:d0:bb:c3:83:5e:c7:20:a8:2a:3e:cc:d5:29:86:46:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0734A32D13A96FCB3FDF982C2EEC500150411CA
        Validity
            Not Before: Feb 21 06:09:50 2026 GMT
            Not After : Feb 20 06:14:50 2027 GMT
        Subject: CN=0A12B6E67B03078DABCD2FDA5C29F76BD634FBAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:b1:15:67:cb:fc:9e:f3:53:c3:1b:6a:cc:d0:
                    5c:90:db:d2:03:5c:88:14:af:5f:5f:98:a0:88:22:
                    e6:d4:cf:4c:f4:a4:89:7f:15:c2:50:e2:a7:94:ce:
                    88:8d:dd:49:e5:3c:3e:56:14:fd:9d:34:0a:e4:8f:
                    15:0a:2e:2b:59:a2:91:9b:29:f8:22:d7:3c:ce:e8:
                    12:ab:70:d3:cc:17:49:00:4b:c8:9e:dd:75:d1:9e:
                    fd:9f:84:c5:d6:c9:29:33:fb:2d:17:fa:aa:14:35:
                    98:40:df:79:de:81:ab:30:a9:e3:c1:3c:8d:4e:58:
                    8c:c4:af:29:fe:f3:24:5b:20:5a:39:0f:3a:7c:07:
                    60:32:61:10:e4:f3:1d:c9:58:65:f0:5f:f8:bd:9f:
                    5e:e2:75:f2:6b:50:93:04:90:88:f3:06:ed:c0:45:
                    ec:63:f0:e4:4e:80:94:3d:06:56:3e:1c:96:72:00:
                    3b:24:92:5c:33:6b:6a:a7:31:7f:7e:90:47:6a:19:
                    d8:f7:67:37:a9:5f:7f:c2:94:d3:c0:5f:e6:93:54:
                    b5:c3:3c:98:03:71:06:9d:93:48:65:f6:58:f0:aa:
                    b0:8d:43:67:34:62:6e:85:48:0e:50:2e:35:07:0f:
                    62:79:c6:de:e4:f9:86:69:a0:21:5e:80:53:9a:31:
                    93:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:12:B6:E6:7B:03:07:8D:AB:CD:2F:DA:5C:29:F7:6B:D6:34:FB:AF
            X509v3 Authority Key Identifier:
                keyid:B0:73:4A:32:D1:3A:96:FC:B3:FD:F9:82:C2:EE:C5:00:15:04:11:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a63097f0-3978-49ce-b69c-4b20b4dcfb7e/0/B0734A32D13A96FCB3FDF982C2EEC500150411CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0734A32D13A96FCB3FDF982C2EEC500150411CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a63097f0-3978-49ce-b69c-4b20b4dcfb7e/0/3130332e3138372e3232372e302f32342d3234203d3e20313439373238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.187.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:70:35:81:de:10:29:41:ea:fb:57:6a:74:5c:f1:40:1e:33:
         10:a4:06:03:57:39:27:50:61:95:00:99:c0:18:ab:c0:56:04:
         8b:55:28:6b:28:b1:00:27:4b:a1:85:84:fb:73:3f:3f:02:7c:
         f2:30:0f:fc:04:f9:15:8e:75:4d:7e:b0:4c:84:f2:68:45:f1:
         55:5f:7f:ce:db:a2:0b:28:e1:32:43:ad:40:fa:8f:91:b4:a4:
         ac:80:03:e6:12:e8:b6:e5:9b:df:41:90:8a:c9:3d:a8:70:ba:
         d9:95:c4:db:43:f1:9d:bf:b3:31:af:a0:a9:dc:64:2e:49:d4:
         b6:88:29:e2:7b:76:6f:17:16:e5:98:2e:23:8c:0f:90:35:cf:
         17:56:19:9c:b4:5d:30:da:ab:e4:5e:5a:a3:93:27:90:b0:e1:
         7d:ad:c5:da:3c:66:48:a8:09:99:4c:82:0c:1c:f6:c9:d1:18:
         f6:1c:ad:a0:e7:13:95:1d:10:77:23:19:33:04:c2:bb:23:e8:
         f8:3c:48:6b:00:56:9e:16:38:ea:a2:74:48:cd:e1:8f:7c:0d:
         bb:b2:02:4f:b0:14:38:6c:ae:e2:4c:0c:63:17:0b:8e:bc:06:
         67:45:1c:b0:ae:02:a3:67:cd:0a:f7:85:01:65:e7:9a:90:ff:
         02:fe:39:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:38:19 2026 by rpki-client