Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/3130332e3137382e38342e302f32332d3233203d3e20313439333138.roa
File:                     3130332e3137382e38342e302f32332d3233203d3e20313439333138.roa (raw, json)
Hash identifier:          iPif/z7qJ4Vb/XGaHBG7VpZKR6W6QOq/zCq1aa/ifyk=
Subject key identifier:   99:97:17:40:2F:77:FF:AF:E3:FA:A6:D2:29:E8:88:66:34:D8:5F:0A
Certificate issuer:       /CN=1DD4F8984667E142BB9C6F1133AA56899352286C
Certificate serial:       3611D397B7F3B739793456256FAA339A13C61447
Authority key identifier: 1D:D4:F8:98:46:67:E1:42:BB:9C:6F:11:33:AA:56:89:93:52:28:6C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1DD4F8984667E142BB9C6F1133AA56899352286C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/3130332e3137382e38342e302f32332d3233203d3e20313439333138.roa
Signing time:             Fri 17 Apr 2026 13:00:03 +0000
ROA not before:           Fri 17 Apr 2026 12:55:03 +0000
ROA not after:            Fri 16 Apr 2027 13:00:03 +0000
asID:                     149318
IP address blocks:        103.178.84.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/1DD4F8984667E142BB9C6F1133AA56899352286C.crl
                          rsync://repo-rpki.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/1DD4F8984667E142BB9C6F1133AA56899352286C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1DD4F8984667E142BB9C6F1133AA56899352286C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 20 Apr 2026 18:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:11:d3:97:b7:f3:b7:39:79:34:56:25:6f:aa:33:9a:13:c6:14:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1DD4F8984667E142BB9C6F1133AA56899352286C
        Validity
            Not Before: Apr 17 12:55:03 2026 GMT
            Not After : Apr 16 13:00:03 2027 GMT
        Subject: CN=999717402F77FFAFE3FAA6D229E8886634D85F0A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:bc:0b:50:2d:8b:d3:2d:25:3e:c0:bd:60:af:
                    a4:dd:81:6c:1f:f7:2e:24:e1:bc:ca:9d:e9:a3:c4:
                    79:8d:97:d2:43:7e:0d:f5:d7:e3:de:7d:27:1a:77:
                    34:5e:b9:59:10:56:00:1e:2e:00:6b:1d:fe:5f:8b:
                    38:41:35:33:53:bc:23:05:7f:d2:0c:a4:90:a4:71:
                    ef:d7:cc:6c:8b:08:b2:7d:76:89:d8:33:8c:c2:d1:
                    a3:bf:e4:2c:cc:72:3d:d8:76:4d:1d:1f:5e:af:ed:
                    22:ce:10:29:93:f5:65:fb:9b:4b:3e:82:a4:38:11:
                    2f:fe:37:ee:76:96:59:1e:08:f2:dc:1d:56:cd:2b:
                    d3:72:90:ad:59:64:d4:bc:74:b4:89:fe:e6:9b:e4:
                    6b:88:e7:d7:e8:ca:0e:94:60:5d:57:b6:ec:87:f9:
                    52:19:45:2f:ce:dc:b3:36:16:d6:b4:6b:ba:9f:92:
                    6f:25:c5:b0:c0:78:53:de:24:3c:72:a5:71:e1:98:
                    ef:17:e8:e3:e8:98:46:33:53:c3:25:a0:d1:11:0b:
                    19:bb:af:9e:88:3e:4b:5d:77:54:09:c0:de:8b:5a:
                    b0:a2:5c:ba:c2:35:57:63:f2:2d:47:cc:51:c0:38:
                    cf:f4:09:05:5e:00:2d:57:5a:52:55:55:e3:a0:a4:
                    da:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:97:17:40:2F:77:FF:AF:E3:FA:A6:D2:29:E8:88:66:34:D8:5F:0A
            X509v3 Authority Key Identifier:
                keyid:1D:D4:F8:98:46:67:E1:42:BB:9C:6F:11:33:AA:56:89:93:52:28:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/1DD4F8984667E142BB9C6F1133AA56899352286C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1DD4F8984667E142BB9C6F1133AA56899352286C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/3130332e3137382e38342e302f32332d3233203d3e20313439333138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.178.84.0/23

    Signature Algorithm: sha256WithRSAEncryption
         96:19:ec:db:c9:0e:9d:11:22:b3:f9:51:dd:83:d6:d9:8f:b8:
         57:73:fc:82:c1:11:2b:c7:ac:38:f8:46:66:08:20:64:3e:1b:
         01:20:69:c9:8c:ea:fd:e9:f0:37:9c:79:58:74:89:71:06:25:
         e4:00:7f:e7:cb:93:23:c0:d8:a9:38:f9:65:36:49:61:c5:19:
         38:6d:99:b3:72:3a:41:82:8f:df:d7:d6:8f:7c:f8:47:a3:46:
         e0:3d:4e:4a:a4:cc:e7:41:a0:a2:05:54:c3:bc:0d:a8:d8:25:
         d2:04:b7:7d:44:fe:cc:56:64:8f:06:4a:0e:55:88:df:aa:d0:
         74:c6:f8:03:81:48:e4:6c:48:3d:31:97:71:b7:06:ad:ca:53:
         63:30:81:32:d1:60:cc:4a:3d:94:98:eb:89:18:c4:9d:fd:a7:
         cd:49:52:4c:74:26:b0:1b:53:0a:e1:29:00:3b:31:3f:6a:26:
         86:32:78:ea:3c:97:bb:45:f9:01:d9:df:e7:95:9e:8c:90:38:
         3e:d5:b9:8e:3d:eb:e8:44:55:1b:87:8f:35:78:1c:a0:97:9f:
         51:73:b2:64:f2:53:b0:01:57:7f:09:29:90:d3:74:a0:91:94:
         69:e1:8b:66:6a:15:92:33:52:d4:dd:51:bd:58:8b:94:01:43:
         9e:87:34:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:35:53 2026 by rpki-client