Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/7c636a46-38ff-4496-9721-8c03cf046345/0/3130332e35352e3235342e302f32332d3234203d3e20333936393832.roa
File:                     3130332e35352e3235342e302f32332d3234203d3e20333936393832.roa (raw, json)
Hash identifier:          nOJth0dsfxCtKqNpbF/ClbO6tgDUa3GRK1SgSY7h8Qo=
Subject key identifier:   79:48:E7:D4:E3:6F:4F:8F:CB:F8:E9:72:7F:0F:DA:DF:E4:7B:CB:03
Certificate issuer:       /CN=73279DADB4EB9B31B88CCAB5F683DDA055F4F0A9
Certificate serial:       6BF2F5B3247C332A8059A35A041A2B6CA13536EE
Authority key identifier: 73:27:9D:AD:B4:EB:9B:31:B8:8C:CA:B5:F6:83:DD:A0:55:F4:F0:A9
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/73279DADB4EB9B31B88CCAB5F683DDA055F4F0A9.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/7c636a46-38ff-4496-9721-8c03cf046345/0/3130332e35352e3235342e302f32332d3234203d3e20333936393832.roa
Signing time:             Thu 29 Jan 2026 08:03:07 +0000
ROA not before:           Thu 29 Jan 2026 07:58:07 +0000
ROA not after:            Thu 28 Jan 2027 08:03:07 +0000
asID:                     396982
IP address blocks:        103.55.254.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/7c636a46-38ff-4496-9721-8c03cf046345/0/73279DADB4EB9B31B88CCAB5F683DDA055F4F0A9.crl
                          rsync://repo-rpki.idnic.net/repo/7c636a46-38ff-4496-9721-8c03cf046345/0/73279DADB4EB9B31B88CCAB5F683DDA055F4F0A9.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/73279DADB4EB9B31B88CCAB5F683DDA055F4F0A9.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 24 Feb 2026 11:51:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:f2:f5:b3:24:7c:33:2a:80:59:a3:5a:04:1a:2b:6c:a1:35:36:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73279DADB4EB9B31B88CCAB5F683DDA055F4F0A9
        Validity
            Not Before: Jan 29 07:58:07 2026 GMT
            Not After : Jan 28 08:03:07 2027 GMT
        Subject: CN=7948E7D4E36F4F8FCBF8E9727F0FDADFE47BCB03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:b7:1e:ad:ca:44:ed:5e:a7:1f:e0:71:e8:57:
                    24:f5:6b:26:84:84:23:57:c3:c8:71:bd:f7:1a:3c:
                    9e:7d:6c:9b:e4:60:3c:78:0c:b8:fb:7f:5d:c3:ca:
                    f1:ff:e4:f0:b2:34:26:27:80:ac:1c:bc:7d:68:e1:
                    d5:7f:52:ee:99:a9:0b:2e:fe:d0:c0:1a:00:5d:8a:
                    ec:1c:1b:10:a0:d8:c9:c5:37:0a:85:d1:f0:6f:d8:
                    bf:61:e1:97:cc:d0:88:e4:76:cb:f5:92:ee:c6:e0:
                    27:28:af:af:68:a5:ae:dc:47:f5:bf:a8:ef:2e:2b:
                    49:16:ba:7b:ab:23:e1:47:39:03:59:76:9c:70:e0:
                    ba:49:e4:ab:10:3c:4e:78:98:9a:25:f4:d9:c9:1b:
                    32:d8:c1:82:cd:5c:e3:1d:c9:af:a3:f9:99:59:a1:
                    01:66:6d:7a:3a:b8:f5:c6:db:d3:aa:ba:66:54:0a:
                    ab:ea:4e:7e:4b:7c:32:91:31:49:0d:ea:b2:a3:f5:
                    f1:a5:96:43:05:71:93:33:34:9e:f2:03:ba:d2:67:
                    3a:a1:94:5c:3f:3e:85:61:e8:64:6a:91:10:cd:c4:
                    42:08:e7:c4:dc:fa:21:5d:9b:1d:c5:9b:4f:b4:2f:
                    53:0a:11:ad:70:3c:61:bc:6d:6f:1d:a2:57:80:aa:
                    63:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:48:E7:D4:E3:6F:4F:8F:CB:F8:E9:72:7F:0F:DA:DF:E4:7B:CB:03
            X509v3 Authority Key Identifier:
                keyid:73:27:9D:AD:B4:EB:9B:31:B8:8C:CA:B5:F6:83:DD:A0:55:F4:F0:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/7c636a46-38ff-4496-9721-8c03cf046345/0/73279DADB4EB9B31B88CCAB5F683DDA055F4F0A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/73279DADB4EB9B31B88CCAB5F683DDA055F4F0A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7c636a46-38ff-4496-9721-8c03cf046345/0/3130332e35352e3235342e302f32332d3234203d3e20333936393832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.55.254.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7f:3f:70:80:2b:58:e7:75:0a:94:3e:b5:6f:b3:bb:f1:27:f2:
         af:64:81:ab:cd:ee:32:a6:2e:21:11:2f:33:cc:9f:1a:85:cc:
         ba:4d:ae:6e:4f:20:f8:9a:6e:dd:0d:5b:ea:48:f0:04:30:f8:
         3e:39:7d:c1:da:43:72:41:49:3a:bd:ff:2d:04:3d:37:c2:5e:
         6e:7a:fb:68:da:c6:bc:b2:0d:1e:fa:fa:67:ac:4f:0e:8d:28:
         d6:b8:b7:3b:64:9b:4b:88:e1:17:00:ef:f3:1f:24:8b:89:fe:
         a9:91:d9:1d:31:ed:09:eb:59:b4:49:60:ad:d7:e0:11:23:c1:
         97:c9:fd:f0:51:8c:cf:25:02:2c:01:0a:2a:43:ce:24:60:c5:
         a8:62:c4:ff:9c:dd:0e:7e:67:f5:be:21:14:9b:97:2a:35:36:
         15:79:c4:f1:cc:7d:77:52:3b:b2:71:ad:b2:11:d6:ab:3a:01:
         6b:88:f2:17:55:24:33:b0:19:cd:32:57:84:48:2b:32:a2:ce:
         24:76:4c:3a:f1:95:f7:0e:a3:fb:be:9a:5d:44:33:2b:8d:b9:
         35:8d:1b:a3:6c:86:06:87:8a:d9:44:d6:8d:22:0e:f8:99:e4:
         2d:04:42:c6:ad:88:b1:1c:f1:01:da:16:67:cf:5c:e1:c1:33:
         c6:51:27:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 22 22:05:03 2026 by rpki-client