Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a92de805-c80e-4b5c-99c6-d73d97154db5/0/3130332e3136312e37362e302f32342d3234203d3e20313431363131.roa
File:                     3130332e3136312e37362e302f32342d3234203d3e20313431363131.roa (raw, json)
Hash identifier:          N3FttKyUh2kuG9d8wHtOQP0mDLIwP98y5Nvn/Hjds0w=
Subject key identifier:   CF:21:9D:F0:F8:83:2F:55:EE:8B:56:C5:8D:A7:85:5E:C5:91:83:13
Certificate issuer:       /CN=256270ED1D9ED1E43E86D602DAC63FF52F2BD499
Certificate serial:       0E484F0CA3469FF9293A5CF9A5FEAE87F1F2902D
Authority key identifier: 25:62:70:ED:1D:9E:D1:E4:3E:86:D6:02:DA:C6:3F:F5:2F:2B:D4:99
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/256270ED1D9ED1E43E86D602DAC63FF52F2BD499.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a92de805-c80e-4b5c-99c6-d73d97154db5/0/3130332e3136312e37362e302f32342d3234203d3e20313431363131.roa
Signing time:             Fri 27 Feb 2026 10:00:00 +0000
ROA not before:           Fri 27 Feb 2026 09:55:00 +0000
ROA not after:            Fri 26 Feb 2027 10:00:00 +0000
asID:                     141611
IP address blocks:        103.161.76.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a92de805-c80e-4b5c-99c6-d73d97154db5/0/256270ED1D9ED1E43E86D602DAC63FF52F2BD499.crl
                          rsync://repo-rpki.idnic.net/repo/a92de805-c80e-4b5c-99c6-d73d97154db5/0/256270ED1D9ED1E43E86D602DAC63FF52F2BD499.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/256270ED1D9ED1E43E86D602DAC63FF52F2BD499.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Mar 2026 14:30:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:48:4f:0c:a3:46:9f:f9:29:3a:5c:f9:a5:fe:ae:87:f1:f2:90:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=256270ED1D9ED1E43E86D602DAC63FF52F2BD499
        Validity
            Not Before: Feb 27 09:55:00 2026 GMT
            Not After : Feb 26 10:00:00 2027 GMT
        Subject: CN=CF219DF0F8832F55EE8B56C58DA7855EC5918313
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ce:fb:2d:14:09:f3:58:6e:8b:39:5c:50:af:
                    ca:81:93:86:9f:6e:cd:2c:40:a8:89:3f:5a:97:0a:
                    ee:f3:85:b8:98:38:18:10:fb:4f:cd:ed:5c:c5:d2:
                    e4:16:1e:a4:1e:8e:a7:9c:27:b0:80:27:f4:7f:b1:
                    a7:97:cb:41:e6:11:a9:6b:a5:78:1d:e2:82:6b:ef:
                    04:03:73:cf:91:2c:f7:52:b4:cd:1b:56:0f:4e:a3:
                    dc:93:94:21:6e:31:36:cd:05:d1:f5:4d:2e:e2:43:
                    d7:4b:c0:9d:ab:53:a9:53:42:5b:6c:2c:6a:30:4e:
                    f8:e0:5c:81:d7:1f:e1:f8:0f:52:73:59:01:d5:ea:
                    28:1b:14:3f:dd:6e:0c:b5:b2:d0:0c:b0:27:27:d8:
                    7f:76:d7:8b:3c:5c:b5:26:a4:5c:45:bf:92:17:d1:
                    25:11:58:be:a2:1f:01:ab:b3:ed:7e:4b:80:1a:04:
                    36:1b:52:1f:c2:bd:50:71:4a:12:83:e6:00:6d:a5:
                    a8:4f:6c:54:9a:7f:fb:77:76:cb:5d:e5:64:62:71:
                    8b:2f:80:f2:bd:19:a7:9c:11:8f:f7:e1:8e:5f:91:
                    18:d0:e3:0f:b0:b7:57:2f:13:9c:af:ab:a0:43:81:
                    18:78:63:d2:be:63:32:55:87:fd:1a:c6:10:d0:d8:
                    9e:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:21:9D:F0:F8:83:2F:55:EE:8B:56:C5:8D:A7:85:5E:C5:91:83:13
            X509v3 Authority Key Identifier:
                keyid:25:62:70:ED:1D:9E:D1:E4:3E:86:D6:02:DA:C6:3F:F5:2F:2B:D4:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a92de805-c80e-4b5c-99c6-d73d97154db5/0/256270ED1D9ED1E43E86D602DAC63FF52F2BD499.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/256270ED1D9ED1E43E86D602DAC63FF52F2BD499.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a92de805-c80e-4b5c-99c6-d73d97154db5/0/3130332e3136312e37362e302f32342d3234203d3e20313431363131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.161.76.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:f8:7e:ee:09:f6:fa:1b:d7:b0:54:f3:6e:c9:ab:a5:b2:bf:
         ed:f3:65:5c:63:1f:57:55:d6:a3:78:fa:9a:fa:b6:7f:fd:d1:
         99:24:13:ec:58:80:d8:0e:78:64:e5:54:16:84:4e:d4:a1:e2:
         14:e6:4b:a8:c9:d6:38:dc:56:63:15:8e:84:f2:36:ee:db:f9:
         ac:f1:70:c2:2d:66:d5:02:f9:23:f8:67:77:5b:92:6a:3f:1f:
         61:e2:4c:a9:00:44:39:95:ab:8e:01:04:57:02:3a:8b:bc:ad:
         64:81:db:8a:64:2a:c7:28:36:b6:70:6e:10:1e:f2:9a:dd:e2:
         ae:0d:de:fc:4f:2f:72:8f:b1:dc:d1:db:72:06:62:c8:95:31:
         d7:6b:ae:85:93:1f:df:67:3b:77:f2:6c:c8:a5:1a:30:28:30:
         e0:f4:06:c4:01:5e:e6:0a:15:b1:e2:fd:f0:30:d7:51:97:4f:
         e5:d9:91:5b:36:d0:7d:0c:aa:92:2c:4d:7a:a2:d4:25:13:6b:
         92:71:ed:38:e4:dd:87:c8:e8:ef:33:fd:f0:44:24:49:b0:56:
         0b:b2:9f:57:87:c0:e6:95:31:78:15:92:71:49:e3:91:46:0c:
         22:c0:77:50:0e:a1:da:5b:1d:8b:de:2a:ee:df:89:d3:03:8d:
         7f:83:84:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:14:42 2026 by rpki-client