Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/fd0e0dea-5f9b-425c-82ce-30a865007c35/0/3130332e382e37382e302f32332d3233203d3e20313534343130.roa
File:                     3130332e382e37382e302f32332d3233203d3e20313534343130.roa (raw, json)
Hash identifier:          jZK9k98AlCB7IeKPrcNsRZGYReSOBY8W5eiR7hAaCNM=
Subject key identifier:   AE:A6:2B:0A:C3:7B:A4:B2:78:90:A2:39:91:51:72:95:09:E6:BF:52
Certificate issuer:       /CN=CDC085E3D4D75439AE1BB6CB68F180E81AAD2450
Certificate serial:       52EA9E261620F3CCDBC6D19C6750248B0C729551
Authority key identifier: CD:C0:85:E3:D4:D7:54:39:AE:1B:B6:CB:68:F1:80:E8:1A:AD:24:50
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CDC085E3D4D75439AE1BB6CB68F180E81AAD2450.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/fd0e0dea-5f9b-425c-82ce-30a865007c35/0/3130332e382e37382e302f32332d3233203d3e20313534343130.roa
Signing time:             Wed 11 Feb 2026 15:31:26 +0000
ROA not before:           Wed 11 Feb 2026 15:26:26 +0000
ROA not after:            Wed 10 Feb 2027 15:31:26 +0000
asID:                     154410
IP address blocks:        103.8.78.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/fd0e0dea-5f9b-425c-82ce-30a865007c35/0/CDC085E3D4D75439AE1BB6CB68F180E81AAD2450.crl
                          rsync://repo-rpki.idnic.net/repo/fd0e0dea-5f9b-425c-82ce-30a865007c35/0/CDC085E3D4D75439AE1BB6CB68F180E81AAD2450.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CDC085E3D4D75439AE1BB6CB68F180E81AAD2450.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Mar 2026 23:39:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:ea:9e:26:16:20:f3:cc:db:c6:d1:9c:67:50:24:8b:0c:72:95:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CDC085E3D4D75439AE1BB6CB68F180E81AAD2450
        Validity
            Not Before: Feb 11 15:26:26 2026 GMT
            Not After : Feb 10 15:31:26 2027 GMT
        Subject: CN=AEA62B0AC37BA4B27890A2399151729509E6BF52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:dc:47:67:d8:8c:4d:9e:34:6a:ee:a9:aa:98:
                    30:91:cd:25:0a:d1:24:18:b8:cc:3a:6e:a2:24:c8:
                    99:89:b4:38:5e:96:85:b1:c8:c5:59:a9:10:09:5a:
                    df:72:3d:c9:ec:36:8c:b2:4f:9f:97:62:aa:1a:99:
                    e1:06:69:70:49:eb:5f:ed:60:8e:69:4f:82:40:60:
                    6c:d0:d4:69:98:9e:89:9b:98:a1:06:18:93:8d:de:
                    9c:e0:dc:79:1c:ec:25:7c:d9:b1:cf:d2:31:87:80:
                    a2:0f:b1:4f:90:a0:85:57:9b:a0:9c:73:07:c5:e2:
                    16:a3:2f:21:1a:02:77:76:07:d4:86:17:10:1e:22:
                    c4:b2:60:e7:7a:dd:ed:8e:f3:29:ea:61:79:a6:d3:
                    29:e1:c9:c9:b7:1a:3d:ff:e3:a3:c1:86:4b:04:3d:
                    f3:1b:28:94:47:01:ef:14:64:09:b0:15:66:c7:d6:
                    ef:ac:5b:f3:6b:f4:91:48:35:1d:cf:d3:9f:9b:00:
                    c1:d8:d9:51:95:c1:94:ca:80:77:f6:5d:bc:f8:56:
                    10:94:4a:d3:9e:a4:fd:e6:3a:85:55:f6:02:2c:ba:
                    ae:4e:37:2a:2b:7b:9d:94:12:6a:b9:e8:e1:08:05:
                    a3:05:84:d3:da:49:eb:23:a3:51:73:7f:a4:39:1b:
                    c8:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:A6:2B:0A:C3:7B:A4:B2:78:90:A2:39:91:51:72:95:09:E6:BF:52
            X509v3 Authority Key Identifier:
                keyid:CD:C0:85:E3:D4:D7:54:39:AE:1B:B6:CB:68:F1:80:E8:1A:AD:24:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/fd0e0dea-5f9b-425c-82ce-30a865007c35/0/CDC085E3D4D75439AE1BB6CB68F180E81AAD2450.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CDC085E3D4D75439AE1BB6CB68F180E81AAD2450.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fd0e0dea-5f9b-425c-82ce-30a865007c35/0/3130332e382e37382e302f32332d3233203d3e20313534343130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.8.78.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5c:a2:7f:7e:1c:8b:39:b9:4b:65:97:c1:1f:e5:4d:70:d3:ae:
         37:6f:85:a6:8a:f0:65:8a:ca:04:29:c1:4e:43:27:16:11:c0:
         1c:d3:9f:28:64:7d:ae:8a:78:ae:ea:5b:61:3a:39:c8:23:b2:
         81:4c:a9:b6:e3:54:7f:00:2f:dc:da:0a:db:6f:f9:5b:3c:14:
         42:02:64:75:99:78:43:98:58:3d:9c:c6:10:44:43:d9:3f:e6:
         26:ef:25:90:47:25:c6:de:a2:cd:b4:2c:48:21:a9:08:e8:3c:
         b9:3f:ee:dd:71:40:48:1f:07:69:81:d1:70:b9:77:22:db:36:
         3e:45:0e:2b:9f:cf:9a:8b:30:7f:3b:ee:c7:f9:4e:7b:53:ab:
         1f:a3:b4:d6:93:16:dc:0e:ee:2a:49:d6:c9:45:73:fa:86:75:
         55:36:79:27:62:96:45:a3:ec:14:9b:77:3c:b6:10:6c:9a:e4:
         c1:de:1b:48:19:42:48:d3:e7:b7:48:b5:6e:52:71:51:cc:44:
         a2:26:cb:e0:df:fb:1c:d9:47:9b:84:cf:c0:e1:5d:6c:cc:0a:
         20:21:b0:b7:0e:82:53:76:be:90:ca:c5:09:e3:d6:58:df:2a:
         c7:97:57:a6:ae:17:93:36:9b:5b:1d:30:bd:a0:34:f7:fe:3e:
         3a:88:e6:d9
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUUuqeJhYg88zbxtGcZ1AkiwxylVEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0RDMDg1RTNENEQ3NTQzOUFFMUJCNkNCNjhGMTgwRTgx
QUFEMjQ1MDAeFw0yNjAyMTExNTI2MjZaFw0yNzAyMTAxNTMxMjZaMDMxMTAvBgNV
BAMTKEFFQTYyQjBBQzM3QkE0QjI3ODkwQTIzOTkxNTE3Mjk1MDlFNkJGNTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt3Edn2IxNnjRq7qmqmDCRzSUK
0SQYuMw6bqIkyJmJtDheloWxyMVZqRAJWt9yPcnsNoyyT5+XYqoameEGaXBJ61/t
YI5pT4JAYGzQ1GmYnombmKEGGJON3pzg3Hkc7CV82bHP0jGHgKIPsU+QoIVXm6Cc
cwfF4hajLyEaAnd2B9SGFxAeIsSyYOd63e2O8ynqYXmm0ynhycm3Gj3/46PBhksE
PfMbKJRHAe8UZAmwFWbH1u+sW/Nr9JFINR3P05+bAMHY2VGVwZTKgHf2Xbz4VhCU
StOepP3mOoVV9gIsuq5ONyore52UEmq56OEIBaMFhNPaSesjo1Fzf6Q5G8hJAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQUrqYrCsN7pLJ4kKI5kVFylQnmv1IwHwYDVR0j
BBgwFoAUzcCF49TXVDmuG7bLaPGA6BqtJFAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m
ZDBlMGRlYS01ZjliLTQyNWMtODJjZS0zMGE4NjUwMDdjMzUvMC9DREMwODVFM0Q0
RDc1NDM5QUUxQkI2Q0I2OEYxODBFODFBQUQyNDUwLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQ0RDMDg1RTNENEQ3NTQzOUFFMUJCNkNCNjhGMTgwRTgxQUFE
MjQ1MC5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2ZkMGUwZGVhLTVmOWItNDI1Yy04
MmNlLTMwYTg2NTAwN2MzNS8wLzMxMzAzMzJlMzgyZTM3MzgyZTMwMmYzMjMzMmQz
MjMzMjAzZDNlMjAzMTM1MzQzNDMxMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnCE4wDQYJKoZIhvcN
AQELBQADggEBAFyif34cizm5S2WXwR/lTXDTrjdvhaaK8GWKygQpwU5DJxYRwBzT
nyhkfa6KeK7qW2E6OcgjsoFMqbbjVH8AL9zaCttv+Vs8FEICZHWZeEOYWD2cxhBE
Q9k/5ibvJZBHJcbeos20LEghqQjoPLk/7t1xQEgfB2mB0XC5dyLbNj5FDiufz5qL
MH877sf5TntTqx+jtNaTFtwO7ipJ1slFc/qGdVU2eSdilkWj7BSbdzy2EGya5MHe
G0gZQkjT57dItW5ScVHMRKImy+Df+xzZR5uEz8DhXWzMCiAhsLcOglN2vpDKxQnj
1ljfKseXV6auF5M2m1sdML2gNPf+PjqI5tk=
-----END CERTIFICATE-----
Generated at Mon Mar 2 13:33:19 2026 by rpki-client