Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a6358dda-0ff1-4f6a-bb66-60f4ca04c490/0/3130332e372e3232362e302f32332d3233203d3e203539313335.roa
File:                     3130332e372e3232362e302f32332d3233203d3e203539313335.roa (raw, json)
Hash identifier:          uFmBVOauDxyFmJh4IK3hlVUYnFizoaY30PZq6wsxA+k=
Subject key identifier:   EE:6E:0A:6A:24:68:E4:57:F5:DF:99:FC:BB:A0:96:50:B5:72:6A:ED
Certificate issuer:       /CN=754AE571E3432B20E78045BE7B2C99E39E0F1873
Certificate serial:       11BE7E228BF09ADC7CCE9BB6B84B4208E873476F
Authority key identifier: 75:4A:E5:71:E3:43:2B:20:E7:80:45:BE:7B:2C:99:E3:9E:0F:18:73
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/754AE571E3432B20E78045BE7B2C99E39E0F1873.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a6358dda-0ff1-4f6a-bb66-60f4ca04c490/0/3130332e372e3232362e302f32332d3233203d3e203539313335.roa
Signing time:             Tue 17 Feb 2026 11:00:01 +0000
ROA not before:           Tue 17 Feb 2026 10:55:01 +0000
ROA not after:            Tue 16 Feb 2027 11:00:01 +0000
asID:                     59135
IP address blocks:        103.7.226.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a6358dda-0ff1-4f6a-bb66-60f4ca04c490/0/754AE571E3432B20E78045BE7B2C99E39E0F1873.crl
                          rsync://repo-rpki.idnic.net/repo/a6358dda-0ff1-4f6a-bb66-60f4ca04c490/0/754AE571E3432B20E78045BE7B2C99E39E0F1873.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/754AE571E3432B20E78045BE7B2C99E39E0F1873.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Mar 2026 00:48:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:be:7e:22:8b:f0:9a:dc:7c:ce:9b:b6:b8:4b:42:08:e8:73:47:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=754AE571E3432B20E78045BE7B2C99E39E0F1873
        Validity
            Not Before: Feb 17 10:55:01 2026 GMT
            Not After : Feb 16 11:00:01 2027 GMT
        Subject: CN=EE6E0A6A2468E457F5DF99FCBBA09650B5726AED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:48:db:df:49:fd:20:fb:8e:a1:74:c6:bc:5d:
                    7b:74:61:e9:c3:d9:56:1c:a1:62:c2:a0:4f:fe:f4:
                    58:d7:47:a4:55:e3:d2:a3:29:92:7b:2b:c9:e2:0c:
                    6b:15:b9:af:61:42:bf:6e:53:75:48:8b:4b:74:05:
                    19:b2:dc:b0:17:cb:22:e8:37:9e:a5:4a:1a:e5:3e:
                    2d:fb:e8:33:a0:6d:df:47:5d:35:77:24:5d:40:a6:
                    6f:21:25:a0:18:56:1d:56:d2:2d:4c:29:11:cd:f2:
                    b8:73:19:1a:12:69:82:e6:aa:3e:1e:d1:09:18:5b:
                    63:43:df:94:9b:82:3f:ef:b0:95:11:a7:9b:d6:19:
                    06:e1:5b:ae:71:f0:d7:e3:d9:b7:da:0b:e1:92:8d:
                    86:fd:58:13:e5:9b:fd:d6:b9:f7:f5:e2:a8:3b:6d:
                    1a:1b:e5:e2:93:f0:42:22:65:70:cb:c6:1a:d0:1c:
                    96:2f:c4:0a:3f:1b:ea:1f:4e:1f:c2:9f:88:88:49:
                    68:b5:ae:99:6e:d4:25:ae:28:e6:cc:b4:72:99:74:
                    33:e3:e1:b9:ae:cc:2f:61:72:e3:3a:bc:4d:0f:2a:
                    02:4e:29:5c:cb:9b:ba:db:02:77:c3:2e:10:e4:1d:
                    90:b9:4c:61:38:5a:a9:8a:60:97:a6:bc:68:6e:a0:
                    97:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:6E:0A:6A:24:68:E4:57:F5:DF:99:FC:BB:A0:96:50:B5:72:6A:ED
            X509v3 Authority Key Identifier:
                keyid:75:4A:E5:71:E3:43:2B:20:E7:80:45:BE:7B:2C:99:E3:9E:0F:18:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a6358dda-0ff1-4f6a-bb66-60f4ca04c490/0/754AE571E3432B20E78045BE7B2C99E39E0F1873.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/754AE571E3432B20E78045BE7B2C99E39E0F1873.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a6358dda-0ff1-4f6a-bb66-60f4ca04c490/0/3130332e372e3232362e302f32332d3233203d3e203539313335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.7.226.0/23

    Signature Algorithm: sha256WithRSAEncryption
         81:c2:72:83:36:e1:45:78:98:22:3a:a7:f3:48:83:82:2c:7a:
         63:a0:59:ec:32:89:b8:40:f7:b9:17:a3:80:df:e6:4b:fb:cf:
         12:5b:91:4e:db:44:a1:27:67:e7:04:db:1d:2e:8a:de:23:2e:
         e1:68:4b:54:b6:08:7d:b3:fb:a2:10:87:97:91:5a:c7:5f:76:
         75:dd:72:f7:db:e8:0d:0e:1c:98:d5:12:21:2d:1b:f0:6e:e3:
         54:80:1e:80:47:65:3c:bf:9c:7b:f1:ce:f2:23:8a:0e:f0:a7:
         7c:7b:8f:21:e4:87:5b:aa:7f:d0:32:53:85:b5:ec:2b:69:63:
         0f:30:bb:cc:2c:28:5e:c6:48:83:84:bb:96:e8:f8:e5:49:c1:
         36:1b:a6:73:a1:f7:c7:73:35:b8:e7:28:f3:29:bf:e8:8a:c9:
         38:23:08:a6:1f:04:59:6e:4f:83:c3:54:71:ae:dd:43:62:82:
         8c:df:c3:77:81:f6:73:6b:45:ed:d4:05:2b:e5:e4:46:38:b3:
         a8:93:58:6b:fc:20:eb:9f:df:5d:a4:3e:37:17:f3:6a:09:f6:
         dc:e6:19:ac:95:a6:86:f5:57:1a:3c:10:06:76:dd:88:2c:dc:
         7b:2f:7d:6e:b3:53:29:68:24:e6:7f:c0:2d:68:21:93:54:55:
         4c:e3:5d:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:55:26 2026 by rpki-client