Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/d68c7a34-ba31-4d29-8384-186789b384f1/0/3130332e3136352e3234362e302f32332d3234203d3e20313339343630.roa
File:                     3130332e3136352e3234362e302f32332d3234203d3e20313339343630.roa (raw, json)
Hash identifier:          vtEjv2q0SLw+wrm21rrZ1C1Z0EF7U2shQs5wt9qaUps=
Subject key identifier:   46:33:40:A9:60:62:AA:30:3A:76:16:AB:60:4E:5E:E9:0C:98:BE:1F
Certificate issuer:       /CN=A1918C156A9ACFCDF2471DEAFC618EE162DCB340
Certificate serial:       55E03D200D8509287A3684B8F664CEF0F4302418
Authority key identifier: A1:91:8C:15:6A:9A:CF:CD:F2:47:1D:EA:FC:61:8E:E1:62:DC:B3:40
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A1918C156A9ACFCDF2471DEAFC618EE162DCB340.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d68c7a34-ba31-4d29-8384-186789b384f1/0/3130332e3136352e3234362e302f32332d3234203d3e20313339343630.roa
Signing time:             Fri 13 Feb 2026 04:01:16 +0000
ROA not before:           Fri 13 Feb 2026 03:56:16 +0000
ROA not after:            Fri 12 Feb 2027 04:01:16 +0000
asID:                     139460
IP address blocks:        103.165.246.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d68c7a34-ba31-4d29-8384-186789b384f1/0/A1918C156A9ACFCDF2471DEAFC618EE162DCB340.crl
                          rsync://repo-rpki.idnic.net/repo/d68c7a34-ba31-4d29-8384-186789b384f1/0/A1918C156A9ACFCDF2471DEAFC618EE162DCB340.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A1918C156A9ACFCDF2471DEAFC618EE162DCB340.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 22 Feb 2026 17:00:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:e0:3d:20:0d:85:09:28:7a:36:84:b8:f6:64:ce:f0:f4:30:24:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A1918C156A9ACFCDF2471DEAFC618EE162DCB340
        Validity
            Not Before: Feb 13 03:56:16 2026 GMT
            Not After : Feb 12 04:01:16 2027 GMT
        Subject: CN=463340A96062AA303A7616AB604E5EE90C98BE1F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:cb:1f:6a:5a:6d:6c:29:67:bb:e7:54:9f:48:
                    c4:d8:0a:24:65:b3:85:a5:52:a0:0e:2c:19:67:cc:
                    a8:02:02:cf:53:2f:3b:a6:fa:5d:6b:34:3a:d3:e8:
                    0f:63:9b:09:7c:a1:6e:d7:7c:c2:71:c5:16:0a:49:
                    b8:b4:df:87:e5:33:3d:2f:37:1d:3a:d7:1b:1f:8c:
                    54:dc:07:bc:b3:ee:ef:ab:aa:36:15:38:53:30:f7:
                    8d:ce:5d:57:87:53:38:7b:06:6f:e6:95:d8:a4:9a:
                    90:21:3f:bc:0c:be:ef:a3:7b:4b:af:6d:d2:2e:c8:
                    f7:e4:dd:cb:35:ed:eb:40:cf:51:72:f0:a3:86:92:
                    bf:2e:46:34:5d:91:de:e5:3f:f0:cd:65:9f:f6:89:
                    a7:43:5f:40:62:07:89:53:71:68:e2:41:dc:49:b2:
                    70:60:b4:38:2f:4d:bb:b2:ee:e2:87:9b:ab:65:8e:
                    0a:43:ea:a8:01:52:95:16:a0:c1:58:db:30:52:f1:
                    a2:bd:91:9d:5b:93:22:2c:03:c0:ee:af:75:f8:5f:
                    6f:7e:53:c8:0b:04:00:ac:42:4b:0a:79:80:11:fc:
                    f1:fd:e1:ec:c7:d0:b2:12:e2:82:17:81:21:da:2f:
                    fa:e3:cd:42:d6:d4:8b:27:3a:18:69:b7:45:c2:9a:
                    2c:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:33:40:A9:60:62:AA:30:3A:76:16:AB:60:4E:5E:E9:0C:98:BE:1F
            X509v3 Authority Key Identifier:
                keyid:A1:91:8C:15:6A:9A:CF:CD:F2:47:1D:EA:FC:61:8E:E1:62:DC:B3:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d68c7a34-ba31-4d29-8384-186789b384f1/0/A1918C156A9ACFCDF2471DEAFC618EE162DCB340.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A1918C156A9ACFCDF2471DEAFC618EE162DCB340.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d68c7a34-ba31-4d29-8384-186789b384f1/0/3130332e3136352e3234362e302f32332d3234203d3e20313339343630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.165.246.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9a:9c:a2:25:6a:16:7d:0e:d6:77:2f:31:bf:61:6a:46:92:f8:
         8e:c2:e1:2c:4c:b9:19:13:4b:20:a9:76:cc:ef:48:e6:44:37:
         f0:d6:d6:9b:ac:75:e4:2c:eb:d5:eb:97:b2:63:48:9a:05:ff:
         39:d6:a5:dc:3d:dd:d4:71:37:63:ae:2b:83:29:4f:84:6f:53:
         25:c3:ba:85:1b:09:f1:6c:e0:f4:de:88:ea:bb:3f:8d:a6:d1:
         3b:40:88:5c:55:7f:a3:e4:76:d9:ab:65:ef:89:24:74:83:ac:
         9b:e3:49:55:c1:e0:8d:35:70:bb:97:bf:76:b5:9f:d0:34:a3:
         5f:b6:00:26:6e:3e:d6:df:e5:90:03:67:0e:a7:22:2a:bf:2a:
         f3:3a:fe:38:bd:07:f6:c5:d2:23:71:04:61:73:42:95:c3:21:
         56:5c:9d:ed:96:6b:bb:ae:7c:c2:c8:00:ca:de:7a:7b:b3:27:
         aa:97:f2:68:e6:7f:8e:09:26:60:16:71:93:51:4a:aa:7f:40:
         db:0f:a3:e6:51:22:b5:30:82:a1:59:1f:92:f0:14:28:92:37:
         93:16:85:8b:c6:c7:58:3b:3d:29:b0:47:59:29:39:fe:70:67:
         3a:a4:db:0b:ba:61:37:ae:d3:31:ae:99:b4:7d:80:d0:18:80:
         28:22:de:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 06:00:43 2026 by rpki-client