Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/3130332e3131322e3232332e302f32342d3234203d3e203338373539.roa
File:                     3130332e3131322e3232332e302f32342d3234203d3e203338373539.roa (raw, json)
Hash identifier:          xUH6hBErmhVIAC7hqy3cXz0kV3U+6cg7ogjiBk1mZyg=
Subject key identifier:   C4:AF:C0:32:49:3A:F1:C9:34:24:8F:FD:EB:75:F0:FD:A1:4C:FB:9B
Certificate issuer:       /CN=C509602E8492E1EF2F7A2B99A4C6BF4FF306945D
Certificate serial:       2E1E4CE34136A8542CDD0EA74F3922A6A7437648
Authority key identifier: C5:09:60:2E:84:92:E1:EF:2F:7A:2B:99:A4:C6:BF:4F:F3:06:94:5D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/3130332e3131322e3232332e302f32342d3234203d3e203338373539.roa
Signing time:             Thu 12 Feb 2026 07:31:56 +0000
ROA not before:           Thu 12 Feb 2026 07:26:56 +0000
ROA not after:            Thu 11 Feb 2027 07:31:56 +0000
asID:                     38759
IP address blocks:        103.112.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.crl
                          rsync://repo-rpki.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Mar 2026 02:10:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:1e:4c:e3:41:36:a8:54:2c:dd:0e:a7:4f:39:22:a6:a7:43:76:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C509602E8492E1EF2F7A2B99A4C6BF4FF306945D
        Validity
            Not Before: Feb 12 07:26:56 2026 GMT
            Not After : Feb 11 07:31:56 2027 GMT
        Subject: CN=C4AFC032493AF1C934248FFDEB75F0FDA14CFB9B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:15:81:21:c6:6c:32:17:44:c7:47:6a:ba:2d:
                    07:dc:25:4f:96:ed:10:02:32:5f:bb:a9:55:f6:73:
                    49:49:2b:04:17:c6:b3:99:dd:a4:0f:fb:be:40:f4:
                    c5:fa:88:08:ab:2e:b0:c0:c6:67:36:42:d4:6b:ff:
                    5a:96:80:e7:43:b7:3c:58:2c:ce:0c:c3:29:45:eb:
                    c8:e2:04:93:6f:eb:e1:26:08:a0:88:2a:c5:06:32:
                    0e:51:c3:16:02:e8:6b:f9:2d:bb:14:82:dc:9a:8e:
                    67:92:32:58:59:e7:83:7e:c7:44:f6:a2:96:9c:0e:
                    82:72:44:8f:f4:82:b2:33:79:88:2f:37:83:1a:53:
                    35:3a:52:dd:4e:21:f8:d5:7e:33:76:93:09:fd:75:
                    e2:5e:d0:b6:84:03:dd:55:f8:1d:00:65:d3:55:0f:
                    1f:5c:33:84:36:67:5b:bb:e5:e8:b3:42:1d:24:df:
                    d6:d1:e1:ed:be:2c:79:fb:49:fa:be:17:db:12:fb:
                    54:fe:4c:6e:3a:22:a8:44:da:65:95:24:1f:c4:c1:
                    fd:69:e3:8e:09:48:69:09:06:0f:26:91:ac:60:45:
                    ae:2c:53:dd:99:86:82:17:f8:3b:d2:93:13:d1:ba:
                    05:56:2f:a9:c6:ab:9c:ed:aa:2e:f9:9a:fe:0c:6e:
                    49:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:AF:C0:32:49:3A:F1:C9:34:24:8F:FD:EB:75:F0:FD:A1:4C:FB:9B
            X509v3 Authority Key Identifier:
                keyid:C5:09:60:2E:84:92:E1:EF:2F:7A:2B:99:A4:C6:BF:4F:F3:06:94:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/3130332e3131322e3232332e302f32342d3234203d3e203338373539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.112.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:84:3e:ca:cd:c4:91:af:80:6c:82:e8:5f:0f:a0:24:75:3e:
         5a:e2:9c:bd:fc:24:85:69:30:b2:36:55:61:f2:48:67:81:bb:
         d6:02:a4:ed:13:cd:6b:cc:f7:03:02:4c:23:5c:4d:cc:6c:33:
         4a:08:28:ba:89:17:a3:8d:60:2a:52:62:de:53:81:3c:56:98:
         e6:89:dc:c7:5a:3e:ca:1e:76:ff:82:94:22:39:b2:9e:55:32:
         06:40:45:7c:70:f5:4e:7d:6b:70:e5:bf:da:8f:eb:f9:16:3f:
         f3:77:81:7f:46:38:3f:67:5f:57:4c:82:6c:ae:db:ee:fb:17:
         11:72:d2:5a:d9:34:30:89:50:44:67:8d:1a:d6:89:69:03:ac:
         ce:4b:df:7a:26:72:44:c3:bc:8e:19:2f:a9:49:66:ab:be:43:
         02:69:e9:e6:14:ff:f1:9c:1b:0e:41:99:96:21:40:7b:d4:54:
         7b:4a:e8:ea:68:ca:a6:40:1b:f9:a5:bd:31:21:7a:38:4e:c5:
         f0:7e:5a:ef:7c:5e:e1:ea:f5:30:4c:11:8c:ae:8e:a6:fb:07:
         f9:93:2b:ee:0b:70:d7:cc:33:d3:63:d0:4e:5e:b5:b9:2a:e9:
         9a:54:88:85:b2:ac:7f:36:f7:4c:2b:01:49:c8:20:25:ec:aa:
         0a:14:49:07
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIULh5M40E2qFQs3Q6nTzkipqdDdkgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzUwOTYwMkU4NDkyRTFFRjJGN0EyQjk5QTRDNkJGNEZG
MzA2OTQ1RDAeFw0yNjAyMTIwNzI2NTZaFw0yNzAyMTEwNzMxNTZaMDMxMTAvBgNV
BAMTKEM0QUZDMDMyNDkzQUYxQzkzNDI0OEZGREVCNzVGMEZEQTE0Q0ZCOUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/FYEhxmwyF0THR2q6LQfcJU+W
7RACMl+7qVX2c0lJKwQXxrOZ3aQP+75A9MX6iAirLrDAxmc2QtRr/1qWgOdDtzxY
LM4MwylF68jiBJNv6+EmCKCIKsUGMg5RwxYC6Gv5LbsUgtyajmeSMlhZ54N+x0T2
opacDoJyRI/0grIzeYgvN4MaUzU6Ut1OIfjVfjN2kwn9deJe0LaEA91V+B0AZdNV
Dx9cM4Q2Z1u75eizQh0k39bR4e2+LHn7Sfq+F9sS+1T+TG46IqhE2mWVJB/Ewf1p
444JSGkJBg8mkaxgRa4sU92ZhoIX+DvSkxPRugVWL6nGq5ztqi75mv4Mbkn7AgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUxK/AMkk68ck0JI/963Xw/aFM+5swHwYDVR0j
BBgwFoAUxQlgLoSS4e8veiuZpMa/T/MGlF0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k
MmQ2ZDBkZi1jMjFlLTQ5MWMtYjExNi00YTFkOWEyYzc0YmUvMC9DNTA5NjAyRTg0
OTJFMUVGMkY3QTJCOTlBNEM2QkY0RkYzMDY5NDVELmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQzUwOTYwMkU4NDkyRTFFRjJGN0EyQjk5QTRDNkJGNEZGMzA2
OTQ1RC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2QyZDZkMGRmLWMyMWUtNDkxYy1i
MTE2LTRhMWQ5YTJjNzRiZS8wLzMxMzAzMzJlMzEzMTMyMmUzMjMyMzMyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMzM4MzczNTM5LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ3DfMA0GCSqG
SIb3DQEBCwUAA4IBAQCOhD7KzcSRr4BsguhfD6AkdT5a4py9/CSFaTCyNlVh8khn
gbvWAqTtE81rzPcDAkwjXE3MbDNKCCi6iRejjWAqUmLeU4E8VpjmidzHWj7KHnb/
gpQiObKeVTIGQEV8cPVOfWtw5b/aj+v5Fj/zd4F/Rjg/Z19XTIJsrtvu+xcRctJa
2TQwiVBEZ40a1olpA6zOS996JnJEw7yOGS+pSWarvkMCaenmFP/xnBsOQZmWIUB7
1FR7SujqaMqmQBv5pb0xIXo4TsXwflrvfF7h6vUwTBGMro6m+wf5kyvuC3DXzDPT
Y9BOXrW5KumaVIiFsqx/NvdMKwFJyCAl7KoKFEkH
-----END CERTIFICATE-----
Generated at Mon Mar 2 08:10:01 2026 by rpki-client