Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/d387e85d-b185-4334-801b-49c8c8b91844/0/3130332e3134302e37352e302f32342d3234203d3e20313338383931.roa
File:                     3130332e3134302e37352e302f32342d3234203d3e20313338383931.roa (raw, json)
Hash identifier:          eF36F2O8aJxtQTB4dhuIgesGEoNbnpucx3HVN8PdcpY=
Subject key identifier:   39:3D:D0:64:A8:08:D8:4C:07:36:29:8F:35:A0:F7:BD:B3:07:DF:DB
Certificate issuer:       /CN=CCFC496C7B175F19C9F311A3BB624A5C30B345F4
Certificate serial:       27E5E08212EC4A6F94196E5C196E989767F166C0
Authority key identifier: CC:FC:49:6C:7B:17:5F:19:C9:F3:11:A3:BB:62:4A:5C:30:B3:45:F4
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CCFC496C7B175F19C9F311A3BB624A5C30B345F4.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d387e85d-b185-4334-801b-49c8c8b91844/0/3130332e3134302e37352e302f32342d3234203d3e20313338383931.roa
Signing time:             Tue 24 Feb 2026 09:48:53 +0000
ROA not before:           Tue 24 Feb 2026 09:43:53 +0000
ROA not after:            Tue 23 Feb 2027 09:48:53 +0000
asID:                     138891
IP address blocks:        103.140.75.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d387e85d-b185-4334-801b-49c8c8b91844/0/CCFC496C7B175F19C9F311A3BB624A5C30B345F4.crl
                          rsync://repo-rpki.idnic.net/repo/d387e85d-b185-4334-801b-49c8c8b91844/0/CCFC496C7B175F19C9F311A3BB624A5C30B345F4.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CCFC496C7B175F19C9F311A3BB624A5C30B345F4.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Mar 2026 01:09:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:e5:e0:82:12:ec:4a:6f:94:19:6e:5c:19:6e:98:97:67:f1:66:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CCFC496C7B175F19C9F311A3BB624A5C30B345F4
        Validity
            Not Before: Feb 24 09:43:53 2026 GMT
            Not After : Feb 23 09:48:53 2027 GMT
        Subject: CN=393DD064A808D84C0736298F35A0F7BDB307DFDB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:d0:57:e4:0b:a7:07:74:e2:15:5b:1f:57:4d:
                    ff:74:df:72:a0:04:5e:22:07:ae:f0:c0:df:ed:85:
                    0b:f1:e9:ff:9c:b7:25:5f:af:ff:45:43:fc:bf:cc:
                    7e:48:7e:d2:a8:4f:1e:51:f6:57:c9:ab:b4:86:c3:
                    7a:de:5b:d4:dc:55:1d:0d:0a:91:9a:d3:69:b4:61:
                    ad:7a:d3:c2:7a:b9:1a:5c:ef:f8:a4:29:5e:f7:d9:
                    f7:30:5b:b8:9c:3d:f7:43:ad:3c:d8:fd:57:b0:4d:
                    b1:1b:7e:3a:e3:58:ba:f5:ec:f9:4e:12:58:5e:c9:
                    c4:38:ff:5f:0f:f5:c5:a0:ce:34:2a:4e:30:4c:77:
                    c9:79:5a:62:35:e7:2a:71:83:37:bc:67:25:63:4c:
                    1d:95:e7:94:a4:f4:8a:fd:6a:09:27:41:47:25:1c:
                    39:ba:e1:6b:2e:1d:44:51:87:3e:60:2b:bc:b8:75:
                    40:7a:e4:3f:95:10:7c:32:4f:56:98:a0:48:82:88:
                    1d:70:41:67:19:28:59:ef:54:27:00:1b:f3:74:c3:
                    05:db:cb:fc:a4:f0:e3:cc:57:9d:66:df:c2:66:ea:
                    f6:f7:71:42:06:59:95:d7:7d:15:3d:b7:3a:b5:95:
                    0e:86:12:0e:eb:30:4a:79:01:2e:f2:98:c5:91:9b:
                    a5:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:3D:D0:64:A8:08:D8:4C:07:36:29:8F:35:A0:F7:BD:B3:07:DF:DB
            X509v3 Authority Key Identifier:
                keyid:CC:FC:49:6C:7B:17:5F:19:C9:F3:11:A3:BB:62:4A:5C:30:B3:45:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d387e85d-b185-4334-801b-49c8c8b91844/0/CCFC496C7B175F19C9F311A3BB624A5C30B345F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CCFC496C7B175F19C9F311A3BB624A5C30B345F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d387e85d-b185-4334-801b-49c8c8b91844/0/3130332e3134302e37352e302f32342d3234203d3e20313338383931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.140.75.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:ab:be:1a:6a:01:21:82:b4:ad:17:37:cc:d0:1d:8e:52:dc:
         98:63:d8:0a:bc:d6:a4:37:97:a7:b6:12:09:6f:6e:57:43:67:
         02:17:d2:98:8e:db:30:7c:a3:a4:6d:ec:72:75:4b:dd:15:12:
         e0:9a:29:2f:e7:38:81:46:e4:44:ff:45:fd:bb:3e:e1:7b:48:
         1f:be:e4:2f:65:f0:6c:b5:d7:ba:3b:a2:57:15:06:7e:16:19:
         df:20:69:b1:e9:2f:90:57:90:4e:42:be:df:48:4d:6d:d9:e6:
         2e:b0:81:f6:bc:74:56:5f:74:07:3a:ca:47:23:bf:0d:52:4b:
         ec:ca:0d:7f:0f:74:23:6f:d9:b5:7c:b6:f9:e8:5a:6a:23:2c:
         59:ea:a6:6f:b2:d9:77:29:4a:ea:6a:6f:7b:ec:08:25:34:97:
         b7:6a:54:e9:6c:7e:c5:da:7d:b9:ae:e3:f0:b7:15:32:cd:36:
         1f:bb:ee:0a:b4:e0:cd:4a:3e:6d:2a:50:42:7c:10:e9:c8:59:
         28:c9:87:c9:b7:e8:fc:a6:da:78:d5:ef:9c:8c:a2:aa:19:21:
         e3:e6:a7:fd:4d:17:9c:ac:93:0a:76:b8:a8:0f:72:8d:a5:07:
         70:3f:58:c4:89:9c:2d:02:e4:d9:eb:a5:6d:e8:2c:58:72:9a:
         70:64:f3:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:03:49 2026 by rpki-client