Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/6e97dbc6-9374-42e2-a3d0-879ed6a19196/0/3130332e36382e302e302f32332d3233203d3e20313335343539.roa
File:                     3130332e36382e302e302f32332d3233203d3e20313335343539.roa (raw, json)
Hash identifier:          mfkF/CfptjwTd3zVsksTApHx2vhZ+oTUs1ysqMG3o4E=
Subject key identifier:   52:F4:F1:E7:51:80:66:ED:CC:17:BD:01:52:1E:1E:54:D6:65:9E:D8
Certificate issuer:       /CN=73BD266EEF13136ED4F4E96AB4984B5A0E310448
Certificate serial:       26E7182026BE7CB4F9A9BD6FE2FB7B2A715B5545
Authority key identifier: 73:BD:26:6E:EF:13:13:6E:D4:F4:E9:6A:B4:98:4B:5A:0E:31:04:48
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/73BD266EEF13136ED4F4E96AB4984B5A0E310448.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6e97dbc6-9374-42e2-a3d0-879ed6a19196/0/3130332e36382e302e302f32332d3233203d3e20313335343539.roa
Signing time:             Wed 18 Mar 2026 09:02:49 +0000
ROA not before:           Wed 18 Mar 2026 08:57:49 +0000
ROA not after:            Wed 17 Mar 2027 09:02:49 +0000
asID:                     135459
IP address blocks:        103.68.0.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/6e97dbc6-9374-42e2-a3d0-879ed6a19196/0/73BD266EEF13136ED4F4E96AB4984B5A0E310448.crl
                          rsync://repo-rpki.idnic.net/repo/6e97dbc6-9374-42e2-a3d0-879ed6a19196/0/73BD266EEF13136ED4F4E96AB4984B5A0E310448.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/73BD266EEF13136ED4F4E96AB4984B5A0E310448.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 27 Mar 2026 19:44:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:e7:18:20:26:be:7c:b4:f9:a9:bd:6f:e2:fb:7b:2a:71:5b:55:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73BD266EEF13136ED4F4E96AB4984B5A0E310448
        Validity
            Not Before: Mar 18 08:57:49 2026 GMT
            Not After : Mar 17 09:02:49 2027 GMT
        Subject: CN=52F4F1E7518066EDCC17BD01521E1E54D6659ED8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:9c:1f:4c:e4:f6:bf:58:fa:eb:e1:c5:ea:fc:
                    c8:96:da:71:1b:e3:09:cb:b7:7e:86:6b:c4:51:88:
                    5b:1b:55:66:72:66:b9:96:6d:c6:85:0e:75:43:5d:
                    98:da:46:cd:4c:d3:78:f3:14:b7:35:85:1c:13:ac:
                    d6:51:63:72:a8:2c:b2:40:ad:1d:35:a8:81:69:b2:
                    19:bc:c3:61:17:15:b9:e2:77:a7:9a:c1:b8:2e:80:
                    78:5f:2e:90:ba:5c:98:dd:30:57:1f:b8:06:c8:95:
                    5b:f6:37:d5:3c:3f:a3:b6:b2:3e:ee:2d:3e:e1:bb:
                    d5:ed:0b:d0:c6:92:04:fc:b9:08:e3:ef:11:ab:f2:
                    b1:98:e0:6e:09:cd:58:89:6f:17:ab:f0:09:d3:fc:
                    ff:40:de:22:bd:82:6e:da:a8:1c:6a:2c:cc:dc:2e:
                    2e:43:22:17:e0:6b:2d:af:a8:bc:64:64:a3:af:27:
                    39:6a:1f:cf:45:dd:e1:70:b0:c8:79:0e:7e:9e:da:
                    46:c2:53:83:98:3f:5f:b5:a2:e4:0b:32:51:54:46:
                    65:5e:9d:d5:e1:6a:6c:16:1e:3b:d4:7d:f2:3a:f3:
                    90:13:37:b8:2e:c6:d9:78:18:c4:fd:a5:ce:f4:7f:
                    9b:74:7b:ff:56:06:ac:64:82:c3:86:d3:98:95:6a:
                    d6:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:F4:F1:E7:51:80:66:ED:CC:17:BD:01:52:1E:1E:54:D6:65:9E:D8
            X509v3 Authority Key Identifier:
                keyid:73:BD:26:6E:EF:13:13:6E:D4:F4:E9:6A:B4:98:4B:5A:0E:31:04:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6e97dbc6-9374-42e2-a3d0-879ed6a19196/0/73BD266EEF13136ED4F4E96AB4984B5A0E310448.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/73BD266EEF13136ED4F4E96AB4984B5A0E310448.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6e97dbc6-9374-42e2-a3d0-879ed6a19196/0/3130332e36382e302e302f32332d3233203d3e20313335343539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.68.0.0/23

    Signature Algorithm: sha256WithRSAEncryption
         55:4e:da:ab:d1:0f:6a:35:8a:df:fb:0c:ba:14:e3:47:19:62:
         11:01:e3:44:d0:6d:ee:9c:fe:39:18:15:0f:40:6e:c3:09:4a:
         a4:88:f4:12:86:19:12:e4:b4:5f:13:d6:5a:25:71:fd:b2:42:
         a0:87:d9:45:d4:95:25:79:4f:61:d1:95:03:4f:b5:fd:ae:ef:
         0a:e9:79:b5:14:e9:ed:95:d2:a9:8e:a5:59:a1:49:72:d7:92:
         57:46:d8:4c:bd:d4:1c:91:2b:0d:44:82:75:d3:e2:fa:81:22:
         9b:28:6f:c5:d0:21:e1:3b:b3:d2:55:9c:53:61:2f:52:88:56:
         21:21:5c:07:5f:4b:32:86:a5:2e:8f:c4:54:52:75:a0:0d:e0:
         b5:90:d9:7b:5e:bc:e7:2e:3f:48:7b:ee:a1:7a:eb:d4:b0:70:
         39:2d:e3:3b:43:67:96:f0:05:60:4e:16:d7:3a:68:ae:55:1e:
         1e:15:e2:92:f5:25:da:c2:43:f7:e9:08:8b:ae:9e:f7:02:e1:
         d0:09:8f:07:82:d4:46:bf:5b:cf:4e:c6:87:a0:20:36:b1:3d:
         20:07:9a:21:07:cc:32:77:c8:89:3d:a1:68:62:a6:13:3c:2b:
         3f:6a:a2:c7:a1:6b:e3:f7:72:ad:35:f4:98:8f:03:e9:3f:b9:
         30:20:25:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:05:00 2026 by rpki-client