Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/f1eed09c-6068-407a-b0a6-59b7d0b87855/0/3130332e3136302e3133362e302f32342d3234203d3e20313431353838.roa
File:                     3130332e3136302e3133362e302f32342d3234203d3e20313431353838.roa (raw, json)
Hash identifier:          E8iyoRQLnXrcwMN1WnLcyNrfUU3LsmswVwtlZYjs2Qo=
Subject key identifier:   00:CF:88:D3:72:AC:F2:26:D1:19:3F:0F:50:6E:B0:E4:54:BB:56:86
Certificate issuer:       /CN=07479445ACFB5044B3A1BCAAD626072CABEA5C10
Certificate serial:       7B4359C3B031AFA1BB087D35C2FC17E288990064
Authority key identifier: 07:47:94:45:AC:FB:50:44:B3:A1:BC:AA:D6:26:07:2C:AB:EA:5C:10
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/07479445ACFB5044B3A1BCAAD626072CABEA5C10.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f1eed09c-6068-407a-b0a6-59b7d0b87855/0/3130332e3136302e3133362e302f32342d3234203d3e20313431353838.roa
Signing time:             Sat 07 Feb 2026 07:02:36 +0000
ROA not before:           Sat 07 Feb 2026 06:57:36 +0000
ROA not after:            Sat 06 Feb 2027 07:02:36 +0000
asID:                     141588
IP address blocks:        103.160.136.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/f1eed09c-6068-407a-b0a6-59b7d0b87855/0/07479445ACFB5044B3A1BCAAD626072CABEA5C10.crl
                          rsync://repo-rpki.idnic.net/repo/f1eed09c-6068-407a-b0a6-59b7d0b87855/0/07479445ACFB5044B3A1BCAAD626072CABEA5C10.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/07479445ACFB5044B3A1BCAAD626072CABEA5C10.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Mar 2026 08:39:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:43:59:c3:b0:31:af:a1:bb:08:7d:35:c2:fc:17:e2:88:99:00:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07479445ACFB5044B3A1BCAAD626072CABEA5C10
        Validity
            Not Before: Feb  7 06:57:36 2026 GMT
            Not After : Feb  6 07:02:36 2027 GMT
        Subject: CN=00CF88D372ACF226D1193F0F506EB0E454BB5686
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f9:76:f7:27:dd:8c:76:f4:7e:62:04:7a:18:
                    09:65:69:43:86:c7:02:2f:e4:a5:95:02:2d:aa:35:
                    8f:92:39:5b:0d:eb:33:0a:02:a0:bf:65:58:cb:9f:
                    c7:f9:35:cc:bd:6d:88:db:7b:6a:72:99:18:5c:e4:
                    dd:61:25:ca:5f:19:d3:16:d6:39:c6:d3:78:be:12:
                    f7:49:95:e2:90:4f:28:a7:bf:50:75:27:bf:63:64:
                    4a:db:6a:6b:63:a3:a3:ee:e0:f2:a1:71:f8:51:55:
                    ea:da:8e:92:63:98:37:58:68:9d:58:03:ae:23:a4:
                    40:2e:5f:4d:61:fa:f5:80:37:37:fa:5c:fb:2a:be:
                    a6:90:1c:57:f3:6d:1a:2b:63:e1:d8:de:8c:74:d8:
                    d6:eb:6c:61:5a:ce:be:59:c3:b8:95:2c:57:90:88:
                    da:3c:03:8b:e6:84:4c:4c:aa:40:4e:86:d0:4b:1d:
                    71:f2:5a:c2:33:a3:9d:cf:a9:c0:98:a0:32:5c:72:
                    b7:1e:d9:0f:63:47:4a:7c:2b:14:02:34:c8:4b:d8:
                    bf:34:af:cf:78:57:0b:c4:75:60:ef:d1:f3:76:e7:
                    9c:41:cf:13:c8:53:ae:f2:2d:0a:2c:88:4d:df:a4:
                    0b:6b:c4:58:df:92:ba:ff:5a:1d:7c:24:e2:2b:df:
                    30:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:CF:88:D3:72:AC:F2:26:D1:19:3F:0F:50:6E:B0:E4:54:BB:56:86
            X509v3 Authority Key Identifier:
                keyid:07:47:94:45:AC:FB:50:44:B3:A1:BC:AA:D6:26:07:2C:AB:EA:5C:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f1eed09c-6068-407a-b0a6-59b7d0b87855/0/07479445ACFB5044B3A1BCAAD626072CABEA5C10.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/07479445ACFB5044B3A1BCAAD626072CABEA5C10.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f1eed09c-6068-407a-b0a6-59b7d0b87855/0/3130332e3136302e3133362e302f32342d3234203d3e20313431353838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.160.136.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:dc:a3:3a:86:e4:f5:d0:64:01:23:12:68:b9:69:39:d0:48:
         7c:67:82:80:cd:e3:66:a8:e6:ae:20:95:78:8a:d0:36:74:cf:
         f4:aa:44:b6:b6:13:94:6c:78:c9:ce:d0:91:40:f0:11:08:de:
         ff:31:e0:59:9c:7d:0b:15:f6:4a:99:9e:f4:51:b4:3c:5f:5f:
         e3:7e:f4:5f:24:e0:be:58:aa:fb:d0:4f:76:42:fd:f1:8d:f2:
         36:cc:c2:f5:45:0e:64:80:b9:52:82:82:3a:6f:f8:38:6c:ba:
         de:9c:b5:21:6c:f7:21:8e:cf:1a:f1:7e:2f:e5:5e:e4:b2:71:
         30:5f:0e:dd:19:bd:49:79:c8:34:9d:e2:3d:94:8e:d1:ba:d2:
         11:3b:ab:73:8d:32:01:63:12:5f:d4:a2:c5:b2:72:12:6c:f4:
         b4:64:2c:3c:e2:48:f1:92:22:10:36:52:4d:78:a9:1e:6f:7e:
         d5:51:81:70:bd:3a:75:d6:5b:ea:73:10:61:60:35:11:ce:bb:
         07:b5:e7:6f:86:0d:6f:7b:df:07:78:77:91:31:f3:2c:bc:e6:
         71:d6:18:4c:49:6b:31:05:39:af:4d:97:af:5a:68:e4:64:b6:
         fd:19:16:e3:58:53:53:40:80:dc:08:08:d5:20:8e:f9:20:ee:
         5e:46:8e:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 00:06:42 2026 by rpki-client