Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a679824f-4e08-4970-bba6-27b4726ca580/0/3130332e3138362e36302e302f32332d3234203d3e20313439363932.roa
File:                     3130332e3138362e36302e302f32332d3234203d3e20313439363932.roa (raw, json)
Hash identifier:          l2B2aK7iKjtGlm+JZBsaRQ0Oiz1msVZD+MDO3SYRf38=
Subject key identifier:   0D:B9:D9:9F:31:D1:98:17:34:F9:74:9E:75:80:CD:FB:EA:2F:CF:0A
Certificate issuer:       /CN=8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C
Certificate serial:       29542764E8D5C3C43421CE328A54382CC7CE2D67
Authority key identifier: 8B:7B:64:8E:54:AB:C4:F4:35:64:B6:B7:D8:EC:6C:A2:5E:B6:C6:5C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a679824f-4e08-4970-bba6-27b4726ca580/0/3130332e3138362e36302e302f32332d3234203d3e20313439363932.roa
Signing time:             Fri 13 Feb 2026 10:02:37 +0000
ROA not before:           Fri 13 Feb 2026 09:57:37 +0000
ROA not after:            Fri 12 Feb 2027 10:02:37 +0000
asID:                     149692
IP address blocks:        103.186.60.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a679824f-4e08-4970-bba6-27b4726ca580/0/8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C.crl
                          rsync://repo-rpki.idnic.net/repo/a679824f-4e08-4970-bba6-27b4726ca580/0/8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Mar 2026 15:30:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:54:27:64:e8:d5:c3:c4:34:21:ce:32:8a:54:38:2c:c7:ce:2d:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C
        Validity
            Not Before: Feb 13 09:57:37 2026 GMT
            Not After : Feb 12 10:02:37 2027 GMT
        Subject: CN=0DB9D99F31D1981734F9749E7580CDFBEA2FCF0A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:58:00:4e:38:2a:85:68:12:e2:2f:2e:5a:6e:
                    fd:d7:3d:e1:de:09:e8:30:9b:70:6a:16:b6:f3:ec:
                    f5:c2:f0:90:66:f4:d4:3e:90:c6:0a:44:2c:31:ff:
                    68:27:6d:57:c8:2a:e6:df:b9:46:35:54:c2:ce:78:
                    a0:7f:38:c5:be:93:b5:d8:7c:97:e6:38:4b:f2:9c:
                    ec:19:a9:dd:59:8f:89:3c:cd:d4:9e:1f:38:3b:d0:
                    da:8a:a4:44:44:4f:e8:39:79:34:17:4c:bb:60:da:
                    6d:af:42:58:03:6b:35:3d:b4:81:14:ce:8d:18:61:
                    e8:40:0f:25:e7:23:e6:63:6b:4d:40:2b:2e:47:48:
                    14:fa:f5:15:dc:a9:16:eb:f8:70:96:25:05:61:fc:
                    24:ce:f2:a7:d4:5a:04:6e:cc:ef:40:d5:ce:52:d5:
                    80:d0:17:b6:74:8a:3e:95:0c:a6:74:9f:3c:1c:c1:
                    e2:e7:be:48:52:03:98:40:0c:2e:77:7e:ba:67:1e:
                    92:e7:76:08:b7:ff:aa:49:08:1a:91:fe:63:a0:a4:
                    70:e7:43:79:aa:8f:7e:df:91:51:88:a5:09:a7:b5:
                    8c:80:d8:fe:3f:9b:f8:12:fb:97:c4:f1:61:36:c8:
                    b0:f6:8e:3b:33:31:82:c9:12:20:c0:37:85:90:3f:
                    15:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:B9:D9:9F:31:D1:98:17:34:F9:74:9E:75:80:CD:FB:EA:2F:CF:0A
            X509v3 Authority Key Identifier:
                keyid:8B:7B:64:8E:54:AB:C4:F4:35:64:B6:B7:D8:EC:6C:A2:5E:B6:C6:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a679824f-4e08-4970-bba6-27b4726ca580/0/8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a679824f-4e08-4970-bba6-27b4726ca580/0/3130332e3138362e36302e302f32332d3234203d3e20313439363932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.186.60.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b9:fc:62:c8:73:fb:e8:70:6c:a8:4c:90:1d:b3:b6:bf:92:fa:
         8f:39:b8:49:23:49:60:13:50:3c:f9:e2:69:ec:bf:61:e5:6d:
         2c:be:fc:1d:5d:6c:70:0d:c0:98:9a:47:df:92:a3:07:1b:69:
         a3:7b:bc:31:4e:af:e0:28:54:e6:b2:90:c6:f5:60:e3:f3:96:
         93:6c:a9:28:e5:1e:db:63:ef:1b:3c:81:cc:96:5c:8a:95:f9:
         78:08:36:46:e3:2f:c8:6a:ba:e4:dc:c8:cd:a6:98:ea:16:cd:
         e6:04:b4:70:6b:b6:ea:00:34:35:d0:fe:08:03:22:d5:c7:49:
         d0:25:0e:c6:63:d5:d6:f4:f3:55:ae:1d:9d:b1:fd:c6:5e:d0:
         e4:b9:b9:3d:b2:d1:d4:71:35:9e:87:d6:06:b3:e3:d7:06:89:
         f0:d5:6f:43:d2:67:0a:62:c6:b2:85:64:87:bd:45:34:18:ec:
         d0:53:d9:24:28:26:d6:d0:ad:f6:ff:e1:c9:9e:00:20:7a:f4:
         e5:05:54:7f:37:d7:8d:cb:fc:b5:b4:18:59:21:eb:48:47:25:
         8f:85:4e:94:5f:37:8c:e6:f2:db:71:6e:27:c6:c6:be:a5:82:
         12:6c:cf:a7:9c:dc:ab:77:de:14:7b:45:7f:97:e0:1d:c2:e6:
         d5:0f:75:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:53:05 2026 by rpki-client