Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e5c8b9e3-b44f-490b-bf51-99f2dd2a1364/0/3130332e37392e3132382e302f32332d3234203d3e20313339393531.roa
File:                     3130332e37392e3132382e302f32332d3234203d3e20313339393531.roa (raw, json)
Hash identifier:          Lqk7sZKV0+hi1szgYX9YILOG01YWWyBiUC0FX+79Zro=
Subject key identifier:   99:A4:B8:DC:13:2D:10:EB:08:A7:12:3A:A9:79:21:47:55:BE:79:D3
Certificate issuer:       /CN=27114CFC585C5DB2E0AC5DA74F04C66C319492F1
Certificate serial:       0DD1FF70F5035FF6E391E32DED1CA0B7A1530779
Authority key identifier: 27:11:4C:FC:58:5C:5D:B2:E0:AC:5D:A7:4F:04:C6:6C:31:94:92:F1
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27114CFC585C5DB2E0AC5DA74F04C66C319492F1.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e5c8b9e3-b44f-490b-bf51-99f2dd2a1364/0/3130332e37392e3132382e302f32332d3234203d3e20313339393531.roa
Signing time:             Wed 04 Feb 2026 07:00:02 +0000
ROA not before:           Wed 04 Feb 2026 06:55:02 +0000
ROA not after:            Wed 03 Feb 2027 07:00:02 +0000
asID:                     139951
IP address blocks:        103.79.128.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e5c8b9e3-b44f-490b-bf51-99f2dd2a1364/0/27114CFC585C5DB2E0AC5DA74F04C66C319492F1.crl
                          rsync://repo-rpki.idnic.net/repo/e5c8b9e3-b44f-490b-bf51-99f2dd2a1364/0/27114CFC585C5DB2E0AC5DA74F04C66C319492F1.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27114CFC585C5DB2E0AC5DA74F04C66C319492F1.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Mar 2026 22:00:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:d1:ff:70:f5:03:5f:f6:e3:91:e3:2d:ed:1c:a0:b7:a1:53:07:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27114CFC585C5DB2E0AC5DA74F04C66C319492F1
        Validity
            Not Before: Feb  4 06:55:02 2026 GMT
            Not After : Feb  3 07:00:02 2027 GMT
        Subject: CN=99A4B8DC132D10EB08A7123AA979214755BE79D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:81:56:a5:50:52:77:2a:f5:9f:61:6e:45:c4:
                    b9:a6:89:ea:bd:66:42:d1:02:ad:bb:a4:d5:36:f2:
                    6b:ba:8d:56:a4:e3:e9:19:01:90:26:28:14:99:f9:
                    b6:06:41:6e:bb:6c:94:a1:54:42:ba:97:67:e0:b9:
                    87:a8:ae:68:8d:be:55:ca:64:ea:41:30:2f:c2:27:
                    8f:ef:05:a2:4d:38:65:2e:d3:95:bf:24:70:81:a0:
                    36:2e:46:56:fa:03:70:fe:59:a7:30:ef:af:0a:6a:
                    0c:34:7f:ae:43:73:a7:a1:90:91:5c:78:de:56:e7:
                    fa:25:2c:fc:b3:71:bf:ce:6e:ef:b6:b3:ac:71:92:
                    f6:2f:0f:57:ab:b4:1e:c2:8e:57:08:a7:22:34:7d:
                    1f:97:55:8c:3e:48:71:ee:2d:61:21:2a:c9:03:ae:
                    bd:fa:06:2c:31:db:58:ea:4d:1d:cf:f3:ed:10:e2:
                    25:29:5a:36:8d:a8:c3:ca:57:95:c5:d1:b3:be:55:
                    22:98:88:1a:0d:d0:fe:3e:ec:47:76:8a:4b:cd:07:
                    b6:13:e6:b2:b5:62:be:30:bf:57:83:31:41:84:9e:
                    e4:94:c1:ba:fd:e8:93:72:74:8b:b1:52:94:46:da:
                    b4:14:9f:2d:84:22:78:25:da:5d:23:85:11:4d:1c:
                    b7:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:A4:B8:DC:13:2D:10:EB:08:A7:12:3A:A9:79:21:47:55:BE:79:D3
            X509v3 Authority Key Identifier:
                keyid:27:11:4C:FC:58:5C:5D:B2:E0:AC:5D:A7:4F:04:C6:6C:31:94:92:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e5c8b9e3-b44f-490b-bf51-99f2dd2a1364/0/27114CFC585C5DB2E0AC5DA74F04C66C319492F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27114CFC585C5DB2E0AC5DA74F04C66C319492F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e5c8b9e3-b44f-490b-bf51-99f2dd2a1364/0/3130332e37392e3132382e302f32332d3234203d3e20313339393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.79.128.0/23

    Signature Algorithm: sha256WithRSAEncryption
         13:c5:4d:6d:5e:0e:53:c8:7f:7a:c8:24:18:1b:99:56:1f:37:
         3c:29:4f:b4:4a:08:f6:2e:53:ac:58:34:8a:54:5c:b6:d3:f2:
         95:d7:30:cd:3c:70:ec:96:65:68:91:ab:f5:04:9c:13:66:5c:
         2e:34:d8:9a:49:d9:34:f8:7c:a6:87:1b:6f:76:a6:29:84:b8:
         3f:3b:4d:77:db:b2:87:a3:14:90:ea:da:51:39:cb:00:a0:ba:
         57:43:94:f5:e1:98:75:42:08:fd:83:6b:49:ef:7e:f8:cb:5d:
         77:47:c5:75:77:b6:a4:c0:c7:a2:63:99:04:19:bd:3f:c1:b9:
         7b:8c:46:d0:23:36:c3:91:5d:f9:47:41:56:50:c0:bb:9b:38:
         b9:db:a1:1f:58:3b:cc:2c:3f:60:ab:13:75:72:31:bc:59:2b:
         ba:a9:4a:fc:4f:fa:4b:1e:b2:0c:ee:ff:0c:71:27:6e:01:bb:
         bd:47:c1:39:47:93:2f:a1:8c:38:a2:4f:35:d1:59:43:94:c2:
         75:f7:b6:fd:8e:04:9b:46:65:e1:43:0e:00:6b:78:1e:a3:17:
         e5:6a:77:95:d2:2a:e3:aa:16:01:97:64:73:47:22:75:67:58:
         58:e4:95:0d:ec:70:f6:94:2f:92:9d:11:be:a4:6a:0d:24:3c:
         d6:36:c3:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:31:07 2026 by rpki-client