Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/f7a110e8-b8c2-4277-beb3-92aa5b3690f0/0/3130332e3138312e3133392e302f32342d3234203d3e20313439333833.roa
File:                     3130332e3138312e3133392e302f32342d3234203d3e20313439333833.roa (raw, json)
Hash identifier:          oQF2g29fJ1rphB8ZnKarTHkHJW/AbS8xJ9Z8slQV/e4=
Subject key identifier:   83:8C:83:7F:91:11:CD:F5:2F:D7:AF:AC:F0:AA:93:E5:59:4A:5A:DA
Certificate issuer:       /CN=3B276288FD701E3EC497C2BCC17831BA188BAF79
Certificate serial:       5B0568B65338D29A7CAA978C3158A80D9CEF4E55
Authority key identifier: 3B:27:62:88:FD:70:1E:3E:C4:97:C2:BC:C1:78:31:BA:18:8B:AF:79
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B276288FD701E3EC497C2BCC17831BA188BAF79.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f7a110e8-b8c2-4277-beb3-92aa5b3690f0/0/3130332e3138312e3133392e302f32342d3234203d3e20313439333833.roa
Signing time:             Mon 16 Feb 2026 10:00:01 +0000
ROA not before:           Mon 16 Feb 2026 09:55:01 +0000
ROA not after:            Mon 15 Feb 2027 10:00:01 +0000
asID:                     149383
IP address blocks:        103.181.139.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/f7a110e8-b8c2-4277-beb3-92aa5b3690f0/0/3B276288FD701E3EC497C2BCC17831BA188BAF79.crl
                          rsync://repo-rpki.idnic.net/repo/f7a110e8-b8c2-4277-beb3-92aa5b3690f0/0/3B276288FD701E3EC497C2BCC17831BA188BAF79.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B276288FD701E3EC497C2BCC17831BA188BAF79.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Mar 2026 22:08:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:05:68:b6:53:38:d2:9a:7c:aa:97:8c:31:58:a8:0d:9c:ef:4e:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B276288FD701E3EC497C2BCC17831BA188BAF79
        Validity
            Not Before: Feb 16 09:55:01 2026 GMT
            Not After : Feb 15 10:00:01 2027 GMT
        Subject: CN=838C837F9111CDF52FD7AFACF0AA93E5594A5ADA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:82:1c:cc:d8:a4:6e:57:2f:33:2d:1f:d8:76:
                    d1:ee:c5:b8:bc:17:8a:2c:03:1d:95:95:ab:58:74:
                    a5:51:c0:74:8b:9d:3a:46:1b:86:36:e9:65:6d:c6:
                    e4:f1:e2:1c:0a:c1:72:90:f7:fa:64:37:29:26:63:
                    8a:29:5e:f7:cb:9a:30:42:d2:cc:2a:a0:1f:ab:77:
                    3c:7b:99:cd:4e:3b:25:d5:8e:fa:dc:63:28:f1:ca:
                    95:41:46:a1:88:78:3f:7d:3f:93:3c:b4:72:6b:52:
                    7c:64:b8:ba:9e:22:b5:3c:fd:e9:71:08:25:a1:bb:
                    3b:f2:4d:2c:95:4c:26:71:63:e7:b0:84:e0:0a:9f:
                    12:e3:00:0a:84:20:4f:d8:1e:b0:29:f1:f5:36:60:
                    b1:6b:46:bc:aa:a1:f0:df:11:ca:df:76:d3:d2:50:
                    50:8c:2d:46:ae:2d:be:3b:98:5b:47:e2:2b:76:6e:
                    11:c1:45:55:0d:8c:8f:3e:5b:66:72:c7:43:d7:59:
                    9a:b1:b3:c3:9f:bf:0f:4c:bd:d6:eb:db:5d:fa:27:
                    07:6d:d4:c3:ad:cb:f0:34:05:02:b5:a9:55:21:44:
                    a5:1b:47:8b:95:d6:2d:f8:8d:bb:4f:11:5d:be:95:
                    5c:53:1f:5b:41:40:f2:7b:8b:bf:e0:aa:7a:cb:ea:
                    35:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:8C:83:7F:91:11:CD:F5:2F:D7:AF:AC:F0:AA:93:E5:59:4A:5A:DA
            X509v3 Authority Key Identifier:
                keyid:3B:27:62:88:FD:70:1E:3E:C4:97:C2:BC:C1:78:31:BA:18:8B:AF:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f7a110e8-b8c2-4277-beb3-92aa5b3690f0/0/3B276288FD701E3EC497C2BCC17831BA188BAF79.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B276288FD701E3EC497C2BCC17831BA188BAF79.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f7a110e8-b8c2-4277-beb3-92aa5b3690f0/0/3130332e3138312e3133392e302f32342d3234203d3e20313439333833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.181.139.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:be:10:1c:a0:af:8a:1c:41:83:f5:46:d3:4f:e1:43:ae:55:
         f4:9d:59:cf:90:ae:cb:27:e7:f9:09:88:67:02:db:7e:95:71:
         d3:3f:a7:ab:f5:98:c3:6f:17:9c:e6:be:d5:c1:c9:b1:df:c6:
         dd:82:aa:2f:ed:7a:cb:e2:44:1b:c0:65:7a:c7:63:ce:3d:52:
         03:31:a4:22:39:17:d4:f5:e9:76:5d:e3:42:ce:97:8a:0b:fc:
         56:47:45:b3:42:1e:34:27:ce:25:5b:4b:14:7c:dc:f0:c2:4b:
         16:31:9f:b1:c4:00:62:a0:3c:b6:fe:44:8b:86:84:29:be:84:
         35:e3:f1:b0:43:72:d7:9a:ce:5c:41:0a:3d:f0:3f:a4:13:14:
         ae:1f:e3:81:5e:32:8e:e4:b8:1c:9b:af:20:71:16:78:0a:2f:
         e8:e0:20:04:42:6a:69:a5:3f:16:8f:29:e4:a4:15:44:2b:51:
         35:a1:35:5c:66:f4:40:9c:cb:ad:a0:f0:ca:4e:17:17:73:16:
         8d:43:7d:9b:09:fc:cb:e1:af:6b:83:da:b4:ec:c7:29:52:f2:
         89:ee:fb:13:8d:f0:3f:a6:51:11:ed:c3:28:16:c6:f1:89:23:
         5e:4e:a7:86:72:98:b2:53:e1:73:c8:0f:6f:3f:eb:20:e7:8f:
         f2:5d:9a:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:56:38 2026 by rpki-client