Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e74d0bf9-cc9a-42a3-830a-76f6d32b2f45/0/3130332e32362e3137362e302f32332d3234203d3e203538383231.roa
File:                     3130332e32362e3137362e302f32332d3234203d3e203538383231.roa (raw, json)
Hash identifier:          jWQI6LPdnDNubtpwhRmszSA0Y5bZBxr7CwJjx+OnnV0=
Subject key identifier:   81:34:2A:05:85:E6:47:B9:96:D4:71:B2:AC:B0:3F:A6:D2:3B:D9:90
Certificate issuer:       /CN=2370B87417B78EB4410F4394F29FB327D1401F0D
Certificate serial:       1836CCCBC200B5AB1259BD1055B14E1B1F0C782F
Authority key identifier: 23:70:B8:74:17:B7:8E:B4:41:0F:43:94:F2:9F:B3:27:D1:40:1F:0D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2370B87417B78EB4410F4394F29FB327D1401F0D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e74d0bf9-cc9a-42a3-830a-76f6d32b2f45/0/3130332e32362e3137362e302f32332d3234203d3e203538383231.roa
Signing time:             Wed 08 Apr 2026 03:00:01 +0000
ROA not before:           Wed 08 Apr 2026 02:55:01 +0000
ROA not after:            Wed 07 Apr 2027 03:00:01 +0000
asID:                     58821
IP address blocks:        103.26.176.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e74d0bf9-cc9a-42a3-830a-76f6d32b2f45/0/2370B87417B78EB4410F4394F29FB327D1401F0D.crl
                          rsync://repo-rpki.idnic.net/repo/e74d0bf9-cc9a-42a3-830a-76f6d32b2f45/0/2370B87417B78EB4410F4394F29FB327D1401F0D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2370B87417B78EB4410F4394F29FB327D1401F0D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 20 Apr 2026 08:15:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:36:cc:cb:c2:00:b5:ab:12:59:bd:10:55:b1:4e:1b:1f:0c:78:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2370B87417B78EB4410F4394F29FB327D1401F0D
        Validity
            Not Before: Apr  8 02:55:01 2026 GMT
            Not After : Apr  7 03:00:01 2027 GMT
        Subject: CN=81342A0585E647B996D471B2ACB03FA6D23BD990
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:d3:54:f5:73:46:cc:98:38:1c:ae:b4:cc:49:
                    92:93:64:6f:bd:23:ae:00:75:70:55:2a:e4:c6:3d:
                    32:10:53:09:aa:b7:69:cb:71:3b:bf:a5:7a:41:05:
                    a3:28:90:8d:4b:20:7d:32:9a:77:df:ad:65:48:1c:
                    93:14:a5:af:e2:45:92:df:75:10:f7:ce:2e:06:66:
                    71:16:c1:9f:f1:4b:14:20:dc:53:98:c5:14:e5:e1:
                    36:e4:b2:20:3a:1e:9f:ce:81:c6:b3:ad:b8:ac:0a:
                    b4:d0:6e:d8:9b:43:5e:05:7c:f2:f3:aa:85:88:06:
                    b8:e8:e0:eb:60:9e:95:9c:31:84:e7:f6:03:4c:9e:
                    96:dd:58:50:9e:8b:1c:2e:2c:2e:54:b3:9d:a4:69:
                    74:43:0c:0d:eb:d0:7f:28:c8:bb:78:bb:71:c9:db:
                    34:e5:e1:a5:43:c3:6f:35:7a:6b:09:34:30:00:d7:
                    05:62:e4:f8:6d:12:a2:11:91:fa:8f:45:27:40:79:
                    2d:ee:69:bb:1e:91:6d:9d:8b:05:18:62:b2:4e:3b:
                    65:f4:e6:20:a5:14:12:24:f2:13:12:e9:8b:2f:da:
                    c0:28:56:0e:48:a3:65:80:ed:9a:3c:ff:0a:f6:f5:
                    41:98:62:97:90:84:6b:dd:ee:8e:28:80:99:45:7c:
                    bf:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:34:2A:05:85:E6:47:B9:96:D4:71:B2:AC:B0:3F:A6:D2:3B:D9:90
            X509v3 Authority Key Identifier:
                keyid:23:70:B8:74:17:B7:8E:B4:41:0F:43:94:F2:9F:B3:27:D1:40:1F:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e74d0bf9-cc9a-42a3-830a-76f6d32b2f45/0/2370B87417B78EB4410F4394F29FB327D1401F0D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2370B87417B78EB4410F4394F29FB327D1401F0D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e74d0bf9-cc9a-42a3-830a-76f6d32b2f45/0/3130332e32362e3137362e302f32332d3234203d3e203538383231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.26.176.0/23

    Signature Algorithm: sha256WithRSAEncryption
         35:71:ee:cc:7a:c8:3d:c3:b6:6e:81:25:8a:41:bb:15:f9:f4:
         d5:f1:01:d6:dd:49:7c:1f:f2:44:65:58:03:ea:05:de:19:60:
         3c:22:1f:bf:fd:f4:7b:c0:26:b0:b9:c0:00:9d:b2:c3:f7:35:
         3b:ef:a5:cb:99:9f:fc:5b:c4:fd:67:b0:5c:0a:0e:b1:32:89:
         78:0d:01:9e:b6:0d:59:60:9d:4f:11:44:b0:75:9c:1d:c5:cc:
         2f:88:40:55:c3:28:e5:6a:f8:0f:3b:ae:76:28:d4:87:74:e4:
         10:96:65:19:b8:e2:9f:f5:96:e1:25:a7:c7:77:c1:28:b3:5b:
         1c:6d:56:2e:40:74:a0:2c:1c:45:16:34:cc:37:ee:7b:9b:e8:
         31:65:3b:97:c2:c2:6f:83:6c:13:42:fe:7d:37:75:b3:2d:b3:
         2c:87:ed:9a:d4:f7:6a:db:75:54:10:be:0b:30:ef:7d:94:aa:
         ec:00:bd:30:d3:f2:4d:e5:d1:61:18:f1:c8:b5:09:9b:fb:83:
         ed:5e:e1:ba:fc:d7:3e:ff:97:9b:3a:b7:04:c1:a0:ae:cf:8e:
         2d:d5:11:de:b4:07:88:a1:a0:1c:fb:56:25:5c:8c:cd:8b:ac:
         db:87:bc:fd:ab:9e:78:81:51:3e:51:9c:1e:0d:aa:bf:fb:5e:
         b0:f3:a4:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:40:40 2026 by rpki-client