Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c61e9de2-a4ec-47a2-9bb8-10821dda67f3/0/3130332e3138362e39372e302f32342d3234203d3e20313439363933.roa
File:                     3130332e3138362e39372e302f32342d3234203d3e20313439363933.roa (raw, json)
Hash identifier:          WnciReR37Q3sZkKiPgEqiE1RTQq39mIcAnatYEQxD2I=
Subject key identifier:   C0:A4:F9:92:4E:18:A7:DF:3C:67:D2:2B:71:F0:8E:44:FA:F7:73:58
Certificate issuer:       /CN=F61D0A85B56D8F824658A8287BE8D4F659680324
Certificate serial:       A0C72825C095307DA57EB2338A257F7EDCFE37
Authority key identifier: F6:1D:0A:85:B5:6D:8F:82:46:58:A8:28:7B:E8:D4:F6:59:68:03:24
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F61D0A85B56D8F824658A8287BE8D4F659680324.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c61e9de2-a4ec-47a2-9bb8-10821dda67f3/0/3130332e3138362e39372e302f32342d3234203d3e20313439363933.roa
Signing time:             Wed 04 Feb 2026 02:03:10 +0000
ROA not before:           Wed 04 Feb 2026 01:58:10 +0000
ROA not after:            Wed 03 Feb 2027 02:03:10 +0000
asID:                     149693
IP address blocks:        103.186.97.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c61e9de2-a4ec-47a2-9bb8-10821dda67f3/0/F61D0A85B56D8F824658A8287BE8D4F659680324.crl
                          rsync://repo-rpki.idnic.net/repo/c61e9de2-a4ec-47a2-9bb8-10821dda67f3/0/F61D0A85B56D8F824658A8287BE8D4F659680324.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F61D0A85B56D8F824658A8287BE8D4F659680324.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Mar 2026 06:31:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            a0:c7:28:25:c0:95:30:7d:a5:7e:b2:33:8a:25:7f:7e:dc:fe:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F61D0A85B56D8F824658A8287BE8D4F659680324
        Validity
            Not Before: Feb  4 01:58:10 2026 GMT
            Not After : Feb  3 02:03:10 2027 GMT
        Subject: CN=C0A4F9924E18A7DF3C67D22B71F08E44FAF77358
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:2d:ca:d5:57:21:a2:97:4d:8a:4d:90:a8:b9:
                    0e:ee:d0:0b:b3:3b:cd:88:56:ab:ab:56:db:a0:af:
                    e4:d4:fe:41:e2:e1:cb:91:e5:21:70:59:e7:66:2f:
                    99:33:36:e6:96:da:de:09:43:54:6d:10:63:ca:10:
                    f3:42:a8:fc:1d:37:ce:f2:0d:2e:1c:80:25:30:6a:
                    94:b0:5d:8c:01:bb:4d:b1:46:98:db:08:81:23:84:
                    11:01:03:07:d5:cf:b1:92:68:3c:3c:80:9f:17:75:
                    95:bd:3c:e0:e9:c8:e0:c8:c4:f0:f2:01:2f:31:43:
                    37:ce:50:e5:b3:ad:bd:25:6b:6f:98:dd:7f:70:ad:
                    87:cf:ba:75:f6:4c:1a:38:ad:76:3d:14:af:2c:64:
                    e2:ac:87:15:2c:e0:1c:ec:59:9c:26:dd:3a:b4:f9:
                    8d:0a:6c:b6:c1:3a:c9:23:5c:d2:82:9b:ce:32:d4:
                    55:39:6c:7b:f9:44:86:d2:95:7c:c5:1c:99:d2:18:
                    0d:bb:f7:d9:48:e5:57:20:4d:77:88:d2:f6:ef:54:
                    9d:2b:3e:de:05:19:8b:cb:dd:a0:00:8c:39:c8:83:
                    c0:2a:74:a0:b5:cb:9d:21:e3:78:ff:0e:a5:f6:e7:
                    b3:ac:5d:55:32:48:81:86:92:cb:98:e2:79:34:14:
                    43:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:A4:F9:92:4E:18:A7:DF:3C:67:D2:2B:71:F0:8E:44:FA:F7:73:58
            X509v3 Authority Key Identifier:
                keyid:F6:1D:0A:85:B5:6D:8F:82:46:58:A8:28:7B:E8:D4:F6:59:68:03:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c61e9de2-a4ec-47a2-9bb8-10821dda67f3/0/F61D0A85B56D8F824658A8287BE8D4F659680324.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F61D0A85B56D8F824658A8287BE8D4F659680324.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c61e9de2-a4ec-47a2-9bb8-10821dda67f3/0/3130332e3138362e39372e302f32342d3234203d3e20313439363933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.186.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:4e:5a:35:24:3b:b7:a9:ad:29:9e:28:c8:3b:52:53:0e:86:
         5e:4d:35:f9:51:96:78:c9:d6:fe:49:7f:b8:4c:37:4f:34:b0:
         94:fc:73:f0:61:c5:06:9c:77:c5:5c:3c:38:1d:4a:d4:ad:da:
         c7:3c:1c:8a:b4:5d:34:f3:66:99:b8:64:dd:53:1c:e8:9f:fb:
         6d:b3:7b:43:09:82:25:16:6a:2b:59:06:17:48:a2:60:3b:bc:
         50:52:03:1c:c4:1a:73:f3:55:d5:49:d4:4a:81:b0:fa:fe:82:
         74:f0:04:56:b0:06:b8:19:43:04:5f:ff:8d:a9:4d:ce:e7:c1:
         92:07:8c:30:1c:ab:ab:64:58:75:60:46:77:6d:7e:b3:84:70:
         4f:92:d0:ba:56:7b:c6:7e:97:0e:8a:92:76:0d:04:18:f7:5e:
         70:82:5c:36:8f:f6:5c:e4:1f:58:2d:a5:ce:34:43:00:da:e1:
         34:99:cf:bd:9e:9e:86:ff:6d:12:33:01:7f:4c:41:3f:d9:3e:
         36:b1:a3:44:7e:9e:a4:ff:5a:ab:97:2c:c4:ba:16:08:93:59:
         e6:72:e5:69:9f:01:63:07:6d:d8:93:60:5f:b7:cc:c5:07:2f:
         68:f3:de:b2:49:01:9d:fc:21:41:50:6a:96:98:f0:11:e8:63:
         d4:f8:67:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:15:34 2026 by rpki-client