Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/3138302e3231312e39342e302f32332d3233203d3e203435373235.roa
File:                     3138302e3231312e39342e302f32332d3233203d3e203435373235.roa (raw, json)
Hash identifier:          fGxoKniAEBM76VKMJUo00rgXTRmiICzBUwxTJepbQTc=
Subject key identifier:   77:C8:79:44:F6:79:20:F4:82:EC:C8:1C:3A:7F:3A:D0:DA:E4:56:1E
Certificate issuer:       /CN=BE7F813F3C6CA289A9CDAC5630975B7627458103
Certificate serial:       4F406E4DB249C3E45EDD8666645025BA6A71A8EA
Authority key identifier: BE:7F:81:3F:3C:6C:A2:89:A9:CD:AC:56:30:97:5B:76:27:45:81:03
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE7F813F3C6CA289A9CDAC5630975B7627458103.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/3138302e3231312e39342e302f32332d3233203d3e203435373235.roa
Signing time:             Sun 08 Mar 2026 16:00:01 +0000
ROA not before:           Sun 08 Mar 2026 15:55:01 +0000
ROA not after:            Sun 07 Mar 2027 16:00:01 +0000
asID:                     45725
IP address blocks:        180.211.94.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/BE7F813F3C6CA289A9CDAC5630975B7627458103.crl
                          rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/BE7F813F3C6CA289A9CDAC5630975B7627458103.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE7F813F3C6CA289A9CDAC5630975B7627458103.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 27 Mar 2026 21:55:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:40:6e:4d:b2:49:c3:e4:5e:dd:86:66:64:50:25:ba:6a:71:a8:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE7F813F3C6CA289A9CDAC5630975B7627458103
        Validity
            Not Before: Mar  8 15:55:01 2026 GMT
            Not After : Mar  7 16:00:01 2027 GMT
        Subject: CN=77C87944F67920F482ECC81C3A7F3AD0DAE4561E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:40:6b:b0:ae:d6:2b:bc:3d:0e:aa:d8:ba:19:
                    d3:82:de:49:41:11:48:21:cd:37:c2:70:fe:f9:73:
                    db:de:26:0f:bd:1e:d3:4f:3a:43:94:8c:45:85:81:
                    cf:85:07:fa:75:27:ca:04:2a:96:48:a0:ce:e0:4d:
                    8e:fb:48:f8:fd:06:b6:3b:57:93:05:82:db:33:0b:
                    04:26:9c:fb:c2:57:15:69:ae:49:76:72:78:4c:0b:
                    38:e0:88:83:1e:d0:0c:5e:e0:cc:8c:69:97:2d:8a:
                    b1:02:92:3d:79:13:34:ac:02:ce:84:4e:72:28:b9:
                    3d:83:28:b8:05:ce:f6:9d:ed:ec:e0:9b:3b:eb:62:
                    86:c2:25:71:62:49:c2:eb:79:c3:22:18:8c:20:2f:
                    fa:83:20:33:f5:95:45:9f:20:09:d0:06:75:48:ff:
                    89:30:77:bb:1c:b5:da:12:d9:20:78:9d:30:fd:0f:
                    7f:d0:b2:29:f5:62:26:44:08:4f:b9:14:55:8c:74:
                    a0:de:0f:4c:f8:10:31:f6:fa:26:ce:85:d4:93:af:
                    8c:fb:d2:aa:b5:fb:a2:34:7c:6b:94:ed:2f:6e:94:
                    19:24:7e:ef:ea:c5:a5:a3:8d:88:fa:d6:c5:9f:01:
                    87:17:0e:5d:ce:6a:e7:de:f9:c2:99:63:7c:c1:29:
                    85:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:C8:79:44:F6:79:20:F4:82:EC:C8:1C:3A:7F:3A:D0:DA:E4:56:1E
            X509v3 Authority Key Identifier:
                keyid:BE:7F:81:3F:3C:6C:A2:89:A9:CD:AC:56:30:97:5B:76:27:45:81:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/BE7F813F3C6CA289A9CDAC5630975B7627458103.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE7F813F3C6CA289A9CDAC5630975B7627458103.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/3138302e3231312e39342e302f32332d3233203d3e203435373235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.211.94.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4a:52:42:35:78:e0:3a:b6:50:11:63:11:a8:ed:2d:89:8e:2a:
         51:07:8a:4c:03:73:68:76:c3:84:86:9a:85:5c:4d:92:54:0b:
         82:12:f9:36:6f:80:f8:f8:37:f4:fe:56:db:16:b7:a3:54:f4:
         96:de:5b:09:b6:d2:eb:74:af:05:93:24:e6:f6:ce:0c:ee:a2:
         8c:a8:9b:17:e8:aa:62:a2:2e:3f:7d:ef:93:56:61:f8:84:d7:
         31:68:4f:43:2f:13:8b:93:3d:fb:75:a6:be:08:39:68:90:f5:
         bf:6c:1b:f8:05:c1:88:f3:24:cd:1b:f3:6e:22:9c:17:e5:89:
         7b:e1:2e:e9:ed:9d:6a:09:27:87:90:0f:ba:c7:49:b7:d0:f3:
         cf:fe:c1:63:7e:d8:64:68:2f:52:c1:32:88:d1:ae:27:67:25:
         54:d2:1b:53:80:76:54:fe:ed:e6:4f:5a:9e:d3:84:07:3c:89:
         00:38:ad:9c:c0:84:3b:f6:19:1e:49:96:68:98:3e:b4:91:11:
         f8:0a:6a:ca:b1:67:d1:a8:ec:01:dc:a9:35:f1:05:a6:67:3f:
         7d:8c:ec:de:d3:09:5e:1a:f2:ad:33:2a:7c:bb:31:89:4e:44:
         3f:1d:1b:33:d9:c3:f1:bf:9a:45:87:79:77:ea:7b:39:ce:f2:
         47:25:e2:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:31:58 2026 by rpki-client