Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/1831eeb4-f357-45a7-9265-428b007a0270/0/3130332e3138392e3230362e302f32332d3233203d3e2039333431.roa
File:                     3130332e3138392e3230362e302f32332d3233203d3e2039333431.roa (raw, json)
Hash identifier:          BBSfs0YHYFY6aNip4ye3zUlYvhp6JHeTdQdI/P3ewAo=
Subject key identifier:   26:89:56:48:03:12:26:71:78:55:9C:B8:F5:2A:62:0C:7E:54:30:3A
Certificate issuer:       /CN=69945C3869B3E429D4B0AECEDF9999EA5DAEE429
Certificate serial:       0BBCC290B8551E92082FD0B70B73ED6667F916CA
Authority key identifier: 69:94:5C:38:69:B3:E4:29:D4:B0:AE:CE:DF:99:99:EA:5D:AE:E4:29
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69945C3869B3E429D4B0AECEDF9999EA5DAEE429.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/1831eeb4-f357-45a7-9265-428b007a0270/0/3130332e3138392e3230362e302f32332d3233203d3e2039333431.roa
Signing time:             Wed 04 Mar 2026 07:00:00 +0000
ROA not before:           Wed 04 Mar 2026 06:55:00 +0000
ROA not after:            Wed 03 Mar 2027 07:00:00 +0000
asID:                     9341
IP address blocks:        103.189.206.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/1831eeb4-f357-45a7-9265-428b007a0270/0/69945C3869B3E429D4B0AECEDF9999EA5DAEE429.crl
                          rsync://repo-rpki.idnic.net/repo/1831eeb4-f357-45a7-9265-428b007a0270/0/69945C3869B3E429D4B0AECEDF9999EA5DAEE429.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69945C3869B3E429D4B0AECEDF9999EA5DAEE429.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 23 Mar 2026 08:47:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:bc:c2:90:b8:55:1e:92:08:2f:d0:b7:0b:73:ed:66:67:f9:16:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69945C3869B3E429D4B0AECEDF9999EA5DAEE429
        Validity
            Not Before: Mar  4 06:55:00 2026 GMT
            Not After : Mar  3 07:00:00 2027 GMT
        Subject: CN=268956480312267178559CB8F52A620C7E54303A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:82:0f:36:15:a3:10:71:90:59:0a:06:3a:07:
                    b8:42:87:da:b0:f2:48:26:6c:4f:01:34:08:b6:db:
                    d7:1c:85:ae:af:bc:de:c0:7b:65:13:da:9b:a5:7c:
                    a6:00:60:6f:71:65:bd:65:b1:23:13:3d:27:80:58:
                    0f:6c:ea:c1:74:de:67:45:4f:a6:59:14:57:aa:2f:
                    da:7a:d5:97:3d:aa:bf:9a:a4:9a:e8:7e:35:7b:8c:
                    65:f9:13:e4:83:4f:eb:d5:e6:7c:1d:22:22:e6:ea:
                    81:14:31:7b:c7:ed:5f:5d:d9:18:d1:cd:bd:c4:71:
                    41:2f:49:c8:7a:fc:f7:fa:41:a4:b8:18:4d:e0:b9:
                    cd:a3:f5:63:8c:3b:4e:f5:00:d7:ee:ab:8d:af:9e:
                    28:22:23:87:ba:2a:38:8e:23:8b:2c:a2:3d:d0:50:
                    f5:34:15:c8:7a:9c:f2:40:7e:8e:c4:87:84:0d:54:
                    43:e8:b6:25:70:cc:3b:de:e8:3b:7c:22:15:93:47:
                    33:ab:f5:cd:a1:ee:2d:af:3e:40:c5:43:10:8e:31:
                    77:4c:70:6e:61:09:5e:82:2e:c7:9d:8b:4b:c1:e1:
                    62:52:6a:d9:36:4d:4f:23:3e:3c:64:ac:60:22:9f:
                    92:6f:f7:51:5e:6d:95:51:d6:4d:00:3c:28:71:48:
                    2c:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:89:56:48:03:12:26:71:78:55:9C:B8:F5:2A:62:0C:7E:54:30:3A
            X509v3 Authority Key Identifier:
                keyid:69:94:5C:38:69:B3:E4:29:D4:B0:AE:CE:DF:99:99:EA:5D:AE:E4:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/1831eeb4-f357-45a7-9265-428b007a0270/0/69945C3869B3E429D4B0AECEDF9999EA5DAEE429.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69945C3869B3E429D4B0AECEDF9999EA5DAEE429.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1831eeb4-f357-45a7-9265-428b007a0270/0/3130332e3138392e3230362e302f32332d3233203d3e2039333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.189.206.0/23

    Signature Algorithm: sha256WithRSAEncryption
         57:74:c1:b6:15:e9:bf:52:39:f2:71:23:27:30:41:8e:17:ee:
         50:75:f3:a8:96:d7:a9:83:55:1a:fa:6a:cb:0d:94:e3:3d:70:
         81:69:78:bb:33:f3:e4:c6:7b:86:ea:1a:a4:1e:90:fa:bf:94:
         f4:fc:3c:98:03:98:ca:a9:ee:3a:a3:fa:5e:e2:e0:03:e3:d2:
         61:d7:74:ad:22:7e:80:5c:68:dd:64:48:3c:ab:b2:13:2b:09:
         38:e3:7b:ca:84:69:5a:41:b3:f2:bd:ed:1c:76:1b:b1:13:f0:
         e3:9d:47:3b:b9:fe:e6:cc:b4:b8:6a:46:04:01:65:ee:26:d4:
         42:32:52:70:a0:78:0c:f8:0e:6f:9f:7f:0a:a2:4d:f5:07:fd:
         ad:d6:91:26:f6:e7:05:52:3c:f4:1e:af:95:c2:1b:20:da:77:
         e9:b6:b5:26:03:86:67:49:5f:b9:81:8d:db:10:16:56:91:5c:
         96:9e:a9:7e:30:ca:a9:0e:fc:4b:43:4d:59:cc:45:da:78:ba:
         4b:a6:ff:20:a9:d4:d2:84:82:f7:99:da:f6:e0:c3:e8:0a:ad:
         51:81:2e:7c:64:64:52:17:57:1b:1f:09:44:4f:76:bb:af:ab:
         54:59:95:38:8f:e1:9a:20:87:3a:26:e6:9e:26:12:59:70:f9:
         30:24:b7:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 20 10:58:44 2026 by rpki-client