Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/d61b8ccc-6c22-424e-9614-8ab8ad28849c/0/3130332e35322e36302e302f32332d3233203d3e20313339343237.roa
File:                     3130332e35322e36302e302f32332d3233203d3e20313339343237.roa (raw, json)
Hash identifier:          2wBcOPKUCI6Zp/xtAhOQEAoecnilxu7COOIy78SMgIo=
Subject key identifier:   88:D9:19:2F:76:68:E9:F5:E4:8C:ED:60:43:8E:2F:02:49:02:C0:D0
Certificate issuer:       /CN=A17DC55845B70106CEB3A498496454BE640F44AB
Certificate serial:       0200085243AF32940429E627D4AFD9A50D3FF63D
Authority key identifier: A1:7D:C5:58:45:B7:01:06:CE:B3:A4:98:49:64:54:BE:64:0F:44:AB
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A17DC55845B70106CEB3A498496454BE640F44AB.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d61b8ccc-6c22-424e-9614-8ab8ad28849c/0/3130332e35322e36302e302f32332d3233203d3e20313339343237.roa
Signing time:             Fri 13 Feb 2026 05:19:13 +0000
ROA not before:           Fri 13 Feb 2026 05:14:13 +0000
ROA not after:            Fri 12 Feb 2027 05:19:13 +0000
asID:                     139427
IP address blocks:        103.52.60.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d61b8ccc-6c22-424e-9614-8ab8ad28849c/0/A17DC55845B70106CEB3A498496454BE640F44AB.crl
                          rsync://repo-rpki.idnic.net/repo/d61b8ccc-6c22-424e-9614-8ab8ad28849c/0/A17DC55845B70106CEB3A498496454BE640F44AB.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A17DC55845B70106CEB3A498496454BE640F44AB.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Mar 2026 18:52:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:00:08:52:43:af:32:94:04:29:e6:27:d4:af:d9:a5:0d:3f:f6:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A17DC55845B70106CEB3A498496454BE640F44AB
        Validity
            Not Before: Feb 13 05:14:13 2026 GMT
            Not After : Feb 12 05:19:13 2027 GMT
        Subject: CN=88D9192F7668E9F5E48CED60438E2F024902C0D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:78:50:86:d5:a8:ad:fd:9b:91:17:8c:87:a9:
                    41:a0:02:e4:bc:79:29:9d:dc:24:7d:52:39:6f:b7:
                    99:7d:4e:04:88:3a:2a:77:a0:a3:9c:cf:79:3c:96:
                    58:c6:b7:b2:64:c0:f2:af:17:83:bf:fd:cc:97:f4:
                    93:2e:aa:5d:3b:9c:30:d3:30:87:b5:32:5f:dc:9e:
                    ca:b1:0c:9a:64:48:50:a8:ef:04:5a:de:d2:9c:8e:
                    d8:e0:5d:e1:1f:5c:20:e8:e0:d2:5d:f4:02:c3:9a:
                    e1:3e:48:79:1f:f1:f6:20:90:94:bc:43:17:8f:b9:
                    60:cc:3d:d4:3f:66:5f:01:94:94:b9:98:95:e2:7d:
                    58:65:26:52:47:cf:bd:95:cc:1b:28:05:80:06:65:
                    8d:a2:c0:97:2d:46:40:8e:ab:5a:3a:f1:50:3d:f4:
                    64:a4:b7:59:b9:52:1e:42:ee:1c:7a:ff:42:78:f0:
                    f2:80:3c:3d:8e:01:0c:4d:cc:48:a0:09:cc:6d:f1:
                    cc:ed:cc:e9:f6:c2:f3:8f:17:a9:15:b4:03:a5:11:
                    9a:be:eb:21:84:ac:49:7a:bc:8d:b7:5d:77:5f:7b:
                    cd:5d:f5:c5:39:3e:b8:57:b2:21:c0:70:d4:ba:38:
                    ae:43:14:1d:93:36:c8:a4:96:70:3a:6c:b8:25:eb:
                    e6:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:D9:19:2F:76:68:E9:F5:E4:8C:ED:60:43:8E:2F:02:49:02:C0:D0
            X509v3 Authority Key Identifier:
                keyid:A1:7D:C5:58:45:B7:01:06:CE:B3:A4:98:49:64:54:BE:64:0F:44:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d61b8ccc-6c22-424e-9614-8ab8ad28849c/0/A17DC55845B70106CEB3A498496454BE640F44AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A17DC55845B70106CEB3A498496454BE640F44AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d61b8ccc-6c22-424e-9614-8ab8ad28849c/0/3130332e35322e36302e302f32332d3233203d3e20313339343237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.52.60.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2a:e1:63:8b:ae:e9:b0:f9:89:80:86:da:c8:35:0e:7d:df:f2:
         67:b5:7e:5e:fa:c0:05:9e:df:53:04:7f:3c:a7:e4:5e:76:59:
         34:ac:6e:84:8c:9e:27:54:c4:54:45:92:52:b8:84:6e:e4:25:
         d7:15:ba:1d:36:2c:94:c8:b0:a4:4b:3f:0d:4c:a1:46:1f:a7:
         e6:2f:21:4e:1b:0b:ac:ec:3d:f1:39:3c:46:ae:6c:4b:3b:24:
         10:49:de:63:6f:bf:6f:6d:73:46:81:4c:6d:1d:ed:47:13:a1:
         50:8d:a6:00:eb:d5:97:96:20:79:e5:2a:dc:95:0b:8b:28:38:
         14:a3:48:27:85:c1:5f:1e:00:05:ae:d0:48:3f:4d:1f:1c:78:
         da:ba:c2:02:99:f3:3a:da:f3:25:77:e4:c9:a5:07:7a:cd:cd:
         a8:7e:49:70:5a:2b:55:c7:ba:88:91:78:6c:28:b6:41:41:70:
         fe:24:15:93:ec:2e:d9:5f:50:5c:f7:70:3e:ef:35:f0:d8:2b:
         ad:e2:0e:67:a8:02:13:9a:de:ae:39:34:b4:4a:e3:cc:50:93:
         9c:80:7e:58:60:46:dd:ed:02:3f:d0:94:cf:69:ae:2f:84:bc:
         e6:fe:24:b4:af:6e:2b:dc:f9:7d:90:d8:b6:da:c5:a5:c2:13:
         e8:63:b5:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:52:46 2026 by rpki-client