Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/0a4a21b9-f912-41f3-b62c-1217581c948a/0/3130332e3134302e3130382e302f32332d3233203d3e203538333639.roa
File:                     3130332e3134302e3130382e302f32332d3233203d3e203538333639.roa (raw, json)
Hash identifier:          yZXQq1AsbvVqsIpt8X61N4yo3oIwRlVFOr0RHwfGuds=
Subject key identifier:   2C:BA:CC:48:59:A7:05:56:2B:47:9A:D0:90:67:A9:CA:35:31:D7:DB
Certificate issuer:       /CN=0D5DCD544694BBE8DB99D2D8DAB98314745CD97F
Certificate serial:       2112C3666CEDBCBB8D79A0F1DD62EB5973E0E64B
Authority key identifier: 0D:5D:CD:54:46:94:BB:E8:DB:99:D2:D8:DA:B9:83:14:74:5C:D9:7F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D5DCD544694BBE8DB99D2D8DAB98314745CD97F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/0a4a21b9-f912-41f3-b62c-1217581c948a/0/3130332e3134302e3130382e302f32332d3233203d3e203538333639.roa
Signing time:             Tue 24 Feb 2026 07:00:56 +0000
ROA not before:           Tue 24 Feb 2026 06:55:56 +0000
ROA not after:            Tue 23 Feb 2027 07:00:56 +0000
asID:                     58369
IP address blocks:        103.140.108.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/0a4a21b9-f912-41f3-b62c-1217581c948a/0/0D5DCD544694BBE8DB99D2D8DAB98314745CD97F.crl
                          rsync://repo-rpki.idnic.net/repo/0a4a21b9-f912-41f3-b62c-1217581c948a/0/0D5DCD544694BBE8DB99D2D8DAB98314745CD97F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D5DCD544694BBE8DB99D2D8DAB98314745CD97F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Mar 2026 23:08:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:12:c3:66:6c:ed:bc:bb:8d:79:a0:f1:dd:62:eb:59:73:e0:e6:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D5DCD544694BBE8DB99D2D8DAB98314745CD97F
        Validity
            Not Before: Feb 24 06:55:56 2026 GMT
            Not After : Feb 23 07:00:56 2027 GMT
        Subject: CN=2CBACC4859A705562B479AD09067A9CA3531D7DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:b4:78:2f:d9:b9:e2:9e:3a:f6:6a:0b:04:fa:
                    67:6a:cc:85:f3:4f:45:f5:ed:b4:e5:d1:26:e0:58:
                    f3:9d:28:23:b7:2d:9f:28:72:ca:8f:d5:ab:14:ae:
                    e2:2f:b0:6e:2b:36:ee:b5:97:95:78:a8:d5:c7:1b:
                    9b:eb:ff:38:3a:45:58:4b:b2:c7:81:8c:22:43:4c:
                    e8:7a:9f:22:09:6e:09:c4:c3:36:e6:6f:35:2f:5d:
                    be:64:29:ab:df:d4:c1:89:53:75:aa:a3:2d:e3:fc:
                    94:3e:dc:d1:7b:e5:6f:34:f3:d7:4e:f1:ca:11:d9:
                    1d:c0:8b:6d:d3:9a:20:fd:35:ff:83:92:0b:41:1d:
                    ce:93:dc:08:cb:e7:23:3a:1c:32:f6:bb:30:4d:76:
                    31:79:41:a7:66:56:dd:78:64:40:a8:8f:eb:16:86:
                    54:21:ab:eb:94:eb:a8:87:d5:aa:ab:21:c7:93:73:
                    4b:81:07:1a:ff:1d:01:ae:44:59:9c:1b:de:74:11:
                    82:a2:cf:72:52:ff:d5:c7:f2:60:75:38:b1:ef:15:
                    d1:9c:6d:9a:3f:b0:64:7b:db:f3:a6:a3:f7:e0:6d:
                    2d:e2:26:21:0d:3c:ce:41:fe:ca:0d:02:95:a2:8c:
                    92:7d:72:24:7b:2e:95:77:99:9f:f5:97:e5:d9:a9:
                    2c:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:BA:CC:48:59:A7:05:56:2B:47:9A:D0:90:67:A9:CA:35:31:D7:DB
            X509v3 Authority Key Identifier:
                keyid:0D:5D:CD:54:46:94:BB:E8:DB:99:D2:D8:DA:B9:83:14:74:5C:D9:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/0a4a21b9-f912-41f3-b62c-1217581c948a/0/0D5DCD544694BBE8DB99D2D8DAB98314745CD97F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D5DCD544694BBE8DB99D2D8DAB98314745CD97F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0a4a21b9-f912-41f3-b62c-1217581c948a/0/3130332e3134302e3130382e302f32332d3233203d3e203538333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.140.108.0/23

    Signature Algorithm: sha256WithRSAEncryption
         80:75:03:fe:48:fb:7c:41:91:cf:98:f3:15:c7:68:db:b6:e8:
         3b:8b:1b:b9:c5:86:22:82:4f:3b:13:13:11:60:4c:a0:08:3f:
         e9:22:d3:60:68:14:09:66:45:d6:53:82:c0:9f:04:80:90:d2:
         0a:6f:2a:9f:d7:90:ef:a0:a1:49:6e:59:02:b2:bc:4e:1d:0b:
         57:16:9a:78:cf:9d:2b:fa:8c:0a:c1:c9:b9:62:57:5b:78:8b:
         d4:34:01:fd:1c:0c:66:17:d5:7b:d6:b2:c8:75:88:7e:3e:f9:
         a3:e3:36:43:c4:95:4c:82:10:cc:67:7a:2a:dd:dc:a3:e9:72:
         fb:6b:b2:89:f9:34:00:6e:23:a0:84:3b:b8:fa:3f:84:de:da:
         e3:89:dd:20:67:f9:82:83:b2:71:ac:20:8e:3d:98:33:4c:ad:
         9b:1b:07:c3:e5:67:11:77:c1:31:d1:81:ca:8f:0a:12:6b:16:
         0e:c0:69:72:3d:62:e5:03:25:5c:5b:45:33:97:ea:6a:93:13:
         49:82:63:56:b1:0d:67:0c:d1:b7:8d:d5:e6:1c:11:9c:f4:e4:
         18:95:bf:c9:8f:78:68:ae:46:6f:64:fb:d9:6d:05:b5:41:46:
         cd:f7:08:67:6f:2f:b8:65:c8:03:3d:0d:d9:04:57:e1:25:d1:
         69:e5:68:ff
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUIRLDZmztvLuNeaDx3WLrWXPg5kswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEQ1RENENTQ0Njk0QkJFOERCOTlEMkQ4REFCOTgzMTQ3
NDVDRDk3RjAeFw0yNjAyMjQwNjU1NTZaFw0yNzAyMjMwNzAwNTZaMDMxMTAvBgNV
BAMTKDJDQkFDQzQ4NTlBNzA1NTYyQjQ3OUFEMDkwNjdBOUNBMzUzMUQ3REIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBtHgv2bninjr2agsE+mdqzIXz
T0X17bTl0SbgWPOdKCO3LZ8ocsqP1asUruIvsG4rNu61l5V4qNXHG5vr/zg6RVhL
sseBjCJDTOh6nyIJbgnEwzbmbzUvXb5kKavf1MGJU3Wqoy3j/JQ+3NF75W8089dO
8coR2R3Ai23TmiD9Nf+DkgtBHc6T3AjL5yM6HDL2uzBNdjF5QadmVt14ZECoj+sW
hlQhq+uU66iH1aqrIceTc0uBBxr/HQGuRFmcG950EYKiz3JS/9XH8mB1OLHvFdGc
bZo/sGR72/Omo/fgbS3iJiENPM5B/soNApWijJJ9ciR7LpV3mZ/1l+XZqSwrAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQULLrMSFmnBVYrR5rQkGepyjUx19swHwYDVR0j
BBgwFoAUDV3NVEaUu+jbmdLY2rmDFHRc2X8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w
YTRhMjFiOS1mOTEyLTQxZjMtYjYyYy0xMjE3NTgxYzk0OGEvMC8wRDVEQ0Q1NDQ2
OTRCQkU4REI5OUQyRDhEQUI5ODMxNDc0NUNEOTdGLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMEQ1RENENTQ0Njk0QkJFOERCOTlEMkQ4REFCOTgzMTQ3NDVD
RDk3Ri5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzBhNGEyMWI5LWY5MTItNDFmMy1i
NjJjLTEyMTc1ODFjOTQ4YS8wLzMxMzAzMzJlMzEzNDMwMmUzMTMwMzgyZTMwMmYz
MjMzMmQzMjMzMjAzZDNlMjAzNTM4MzMzNjM5LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ4xsMA0GCSqG
SIb3DQEBCwUAA4IBAQCAdQP+SPt8QZHPmPMVx2jbtug7ixu5xYYigk87ExMRYEyg
CD/pItNgaBQJZkXWU4LAnwSAkNIKbyqf15DvoKFJblkCsrxOHQtXFpp4z50r+owK
wcm5YldbeIvUNAH9HAxmF9V71rLIdYh+Pvmj4zZDxJVMghDMZ3oq3dyj6XL7a7KJ
+TQAbiOghDu4+j+E3trjid0gZ/mCg7JxrCCOPZgzTK2bGwfD5WcRd8Ex0YHKjwoS
axYOwGlyPWLlAyVcW0Uzl+pqkxNJgmNWsQ1nDNG3jdXmHBGc9OQYlb/Jj3horkZv
ZPvZbQW1QUbN9whnby+4ZcgDPQ3ZBFfhJdFp5Wj/
-----END CERTIFICATE-----
Generated at Fri Feb 27 02:01:24 2026 by rpki-client