Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/fe1cbd79-8f26-4b0e-8b3b-ab9e9938fcae/0/3130332e3138312e37362e302f32342d3234203d3e20313439333739.roa
File:                     3130332e3138312e37362e302f32342d3234203d3e20313439333739.roa (raw, json)
Hash identifier:          78fptN4YaRDrrzJqTXgZDDNS0EvYZ1w31k3WR6YTec8=
Subject key identifier:   3B:1F:2D:E8:13:9B:99:BA:D7:C5:2E:4F:64:39:0C:C2:87:DF:64:4C
Certificate issuer:       /CN=EC973BE13EF324E7D59046CF7690A12F9DF12932
Certificate serial:       038E924B21D7EEDDCCE928CD8ADE13FD656DF965
Authority key identifier: EC:97:3B:E1:3E:F3:24:E7:D5:90:46:CF:76:90:A1:2F:9D:F1:29:32
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC973BE13EF324E7D59046CF7690A12F9DF12932.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/fe1cbd79-8f26-4b0e-8b3b-ab9e9938fcae/0/3130332e3138312e37362e302f32342d3234203d3e20313439333739.roa
Signing time:             Sat 18 Apr 2026 10:02:34 +0000
ROA not before:           Sat 18 Apr 2026 09:57:34 +0000
ROA not after:            Sat 17 Apr 2027 10:02:34 +0000
asID:                     149379
IP address blocks:        103.181.76.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/fe1cbd79-8f26-4b0e-8b3b-ab9e9938fcae/0/EC973BE13EF324E7D59046CF7690A12F9DF12932.crl
                          rsync://repo-rpki.idnic.net/repo/fe1cbd79-8f26-4b0e-8b3b-ab9e9938fcae/0/EC973BE13EF324E7D59046CF7690A12F9DF12932.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC973BE13EF324E7D59046CF7690A12F9DF12932.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 18:26:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:8e:92:4b:21:d7:ee:dd:cc:e9:28:cd:8a:de:13:fd:65:6d:f9:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC973BE13EF324E7D59046CF7690A12F9DF12932
        Validity
            Not Before: Apr 18 09:57:34 2026 GMT
            Not After : Apr 17 10:02:34 2027 GMT
        Subject: CN=3B1F2DE8139B99BAD7C52E4F64390CC287DF644C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:7e:e3:c0:3b:3e:63:93:9b:36:27:50:f4:02:
                    45:3a:81:97:ec:87:c1:49:63:dc:14:41:12:a3:f4:
                    a9:fe:7c:2c:a5:09:5c:40:b4:e6:82:24:e5:f7:07:
                    ca:e0:5a:0b:53:9f:6a:08:7e:69:85:db:09:67:47:
                    55:99:78:35:3b:8f:8d:c9:77:22:c6:e9:37:66:63:
                    48:bc:83:92:91:19:a0:df:81:53:d4:6f:86:e9:22:
                    a2:c5:5d:41:5c:59:0b:a4:02:bb:d5:9b:4b:d5:24:
                    fa:6f:72:27:af:ba:fd:67:f5:8f:1f:ff:3d:68:dd:
                    29:03:cb:1b:36:12:7d:57:e5:ac:c5:3e:ff:01:cc:
                    6d:e2:f5:83:7a:58:e0:8c:40:62:a2:5d:a7:3f:a9:
                    d2:41:65:df:33:1c:31:1d:9a:c2:ca:37:39:5b:ce:
                    f6:a8:3a:fa:7c:6a:34:8f:bb:58:cb:bb:83:b2:40:
                    64:47:85:80:d7:3d:20:0f:fd:15:18:0d:80:0a:6d:
                    c4:d0:9c:12:bd:9b:86:25:05:47:9b:33:81:c9:0d:
                    ec:02:86:01:cf:a3:ba:5b:53:85:a8:93:c3:31:76:
                    02:c1:d6:a2:7e:1a:8d:e4:db:88:01:1f:d0:9d:44:
                    26:ce:24:c0:58:e5:52:21:06:20:86:c3:3e:be:1f:
                    8e:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:1F:2D:E8:13:9B:99:BA:D7:C5:2E:4F:64:39:0C:C2:87:DF:64:4C
            X509v3 Authority Key Identifier:
                keyid:EC:97:3B:E1:3E:F3:24:E7:D5:90:46:CF:76:90:A1:2F:9D:F1:29:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/fe1cbd79-8f26-4b0e-8b3b-ab9e9938fcae/0/EC973BE13EF324E7D59046CF7690A12F9DF12932.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC973BE13EF324E7D59046CF7690A12F9DF12932.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fe1cbd79-8f26-4b0e-8b3b-ab9e9938fcae/0/3130332e3138312e37362e302f32342d3234203d3e20313439333739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.181.76.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:fe:0a:f2:ea:c0:c1:c0:40:48:f8:7f:6f:83:7b:57:fd:20:
         da:17:df:e9:ec:b7:e7:37:50:a3:ed:62:12:75:14:7f:38:db:
         ec:67:dd:e5:9f:db:b8:f5:6d:85:61:c0:58:67:30:86:2f:8b:
         da:b2:aa:a9:69:19:5d:4c:8f:e1:78:ee:e7:6f:d2:e9:f5:11:
         c0:39:00:5f:e0:73:fd:b5:b6:42:b1:0b:0f:79:c4:2a:02:da:
         db:20:e9:1d:d5:0c:ca:24:e6:0c:98:57:a4:2c:cf:a7:de:8a:
         44:ea:13:c8:11:11:6d:c0:ba:23:46:ec:fa:6d:81:b0:86:ed:
         81:34:7b:42:14:8a:1b:b4:f5:5d:a2:b4:9c:c4:f6:c4:ec:69:
         e8:7f:80:4d:2c:14:8e:75:da:b4:3e:95:3f:52:b0:86:07:13:
         10:a0:57:bd:0a:b3:20:f0:3b:c4:54:e2:b1:f9:1c:f0:84:94:
         da:4d:10:2d:0f:2a:25:e8:ec:10:85:23:ac:4d:e3:87:d3:1c:
         95:f3:de:83:e5:61:ee:73:58:d7:3a:68:1b:0d:32:d7:3a:af:
         ff:4b:33:f4:dd:fd:92:76:74:c4:dd:ee:dd:fb:ef:67:51:29:
         62:6a:f4:bd:25:97:46:9c:33:7e:e5:5c:00:7d:ff:ab:23:0f:
         da:64:7a:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 06:03:13 2026 by rpki-client