Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c61e9de2-a4ec-47a2-9bb8-10821dda67f3/0/3130332e3138362e39362e302f32342d3234203d3e20313439363933.roa
File:                     3130332e3138362e39362e302f32342d3234203d3e20313439363933.roa (raw, json)
Hash identifier:          fk5h/S4jSQI4thBEqEx+ocxOCOpDquhTLg33I3n6VV0=
Subject key identifier:   7B:13:94:A9:3A:9F:6A:03:CE:E6:4F:C3:99:69:00:80:FD:2C:21:F5
Certificate issuer:       /CN=F61D0A85B56D8F824658A8287BE8D4F659680324
Certificate serial:       409F7E8CBE36004AC1E5556F86FF110F57E9806A
Authority key identifier: F6:1D:0A:85:B5:6D:8F:82:46:58:A8:28:7B:E8:D4:F6:59:68:03:24
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F61D0A85B56D8F824658A8287BE8D4F659680324.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c61e9de2-a4ec-47a2-9bb8-10821dda67f3/0/3130332e3138362e39362e302f32342d3234203d3e20313439363933.roa
Signing time:             Wed 04 Feb 2026 02:03:10 +0000
ROA not before:           Wed 04 Feb 2026 01:58:10 +0000
ROA not after:            Wed 03 Feb 2027 02:03:10 +0000
asID:                     149693
IP address blocks:        103.186.96.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c61e9de2-a4ec-47a2-9bb8-10821dda67f3/0/F61D0A85B56D8F824658A8287BE8D4F659680324.crl
                          rsync://repo-rpki.idnic.net/repo/c61e9de2-a4ec-47a2-9bb8-10821dda67f3/0/F61D0A85B56D8F824658A8287BE8D4F659680324.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F61D0A85B56D8F824658A8287BE8D4F659680324.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Mar 2026 10:55:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:9f:7e:8c:be:36:00:4a:c1:e5:55:6f:86:ff:11:0f:57:e9:80:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F61D0A85B56D8F824658A8287BE8D4F659680324
        Validity
            Not Before: Feb  4 01:58:10 2026 GMT
            Not After : Feb  3 02:03:10 2027 GMT
        Subject: CN=7B1394A93A9F6A03CEE64FC399690080FD2C21F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:03:b6:80:6a:fc:b7:a4:d6:3b:33:b9:fa:bd:
                    ce:98:ed:b7:8f:e0:4c:de:09:fd:ec:6e:40:e6:47:
                    51:d9:93:b0:8c:ae:b2:bd:c5:33:c0:1d:d9:b8:ca:
                    01:c5:e7:b4:a9:88:f9:be:a5:a7:a3:46:13:66:b2:
                    68:87:ef:a7:ad:fb:f6:a9:3f:09:59:79:3e:38:37:
                    9e:80:37:75:d3:45:9d:4d:ff:51:5c:69:b0:65:e1:
                    f9:d5:aa:61:3b:72:e9:a3:f6:c1:8e:35:56:83:69:
                    d0:8d:22:7b:79:7c:a4:61:33:76:22:71:9a:b0:52:
                    10:64:aa:ac:3b:8b:a8:bb:df:25:e4:a3:8a:b7:b9:
                    f6:e4:43:ad:46:60:f0:15:c5:bf:55:00:7c:17:8f:
                    7a:fb:bf:dc:e5:78:db:58:76:36:f5:1d:6a:aa:d6:
                    e0:02:3e:6c:d6:cc:35:00:e1:2c:51:96:39:78:f8:
                    42:e8:71:bf:4f:93:8f:ad:c8:52:de:3e:1a:c2:77:
                    a5:13:5d:b5:7d:71:0e:8a:94:d9:cc:e1:d9:19:ba:
                    1c:be:ba:98:2f:17:6c:1e:e4:91:d4:e3:8a:fa:84:
                    85:10:af:f0:c2:b7:f3:07:55:0a:a6:f2:1e:8c:d0:
                    95:37:a6:a4:0c:6f:6e:32:d7:b2:09:18:44:ac:c5:
                    6f:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:13:94:A9:3A:9F:6A:03:CE:E6:4F:C3:99:69:00:80:FD:2C:21:F5
            X509v3 Authority Key Identifier:
                keyid:F6:1D:0A:85:B5:6D:8F:82:46:58:A8:28:7B:E8:D4:F6:59:68:03:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c61e9de2-a4ec-47a2-9bb8-10821dda67f3/0/F61D0A85B56D8F824658A8287BE8D4F659680324.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F61D0A85B56D8F824658A8287BE8D4F659680324.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c61e9de2-a4ec-47a2-9bb8-10821dda67f3/0/3130332e3138362e39362e302f32342d3234203d3e20313439363933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.186.96.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:e2:7d:8a:05:30:78:b6:ac:2d:e6:f3:29:3a:d5:39:22:e3:
         c6:cc:e3:66:dd:24:c2:f8:4e:4a:f8:e1:ba:56:11:e1:42:4a:
         ea:82:3d:62:ce:61:cd:bf:15:16:91:fd:e0:9b:ec:d4:4c:6d:
         77:f7:cc:46:a3:e9:65:50:3c:68:b8:9d:58:d0:86:c5:4f:3e:
         5f:69:ec:38:53:4f:7b:da:05:d1:af:01:67:71:db:b1:c8:c6:
         03:3a:8d:fd:0c:46:12:33:2b:ab:1e:38:25:72:6e:25:c9:7e:
         f4:af:e1:bb:e1:80:09:33:65:72:65:b1:52:a7:d1:ab:3b:2e:
         85:e7:17:06:97:71:67:ba:a5:b1:13:8b:5f:40:16:cf:ab:dc:
         df:22:47:ee:8e:36:68:41:57:4e:52:0a:30:a1:e4:7f:68:de:
         6f:ff:09:69:2b:31:cc:27:9e:87:91:c9:4e:64:19:bd:df:8f:
         ae:a7:b9:13:d9:91:75:ee:73:0c:bd:64:65:ab:b7:b3:02:1f:
         4d:06:e9:89:c7:1c:68:7d:7b:de:ad:0c:45:81:51:ee:0c:76:
         78:13:ea:fd:92:7b:59:c0:9b:da:0a:4d:48:59:e6:7e:ae:f4:
         5f:b4:cc:8a:54:fa:8b:fa:94:a4:a9:f0:ba:6c:b6:ed:32:98:
         83:db:62:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:47:09 2026 by rpki-client