Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/7f3404e6-bb2a-44b0-bede-a8b35014612d/0/3130332e3130382e3139302e302f32342d3234203d3e20313336313031.roa
File:                     3130332e3130382e3139302e302f32342d3234203d3e20313336313031.roa (raw, json)
Hash identifier:          rzzsxZkGKsivQYJmvFaRwBy4kZLbKSDDcGxNt8FFqZc=
Subject key identifier:   EC:39:E7:EE:2D:F0:77:DC:F0:CB:98:72:6C:1E:E4:C6:EF:2E:F1:65
Certificate issuer:       /CN=0104E70C07F39CF9F3B1D592DF9043B5EABBD171
Certificate serial:       6126C29DE40CC731E14B4683A416724126DC809A
Authority key identifier: 01:04:E7:0C:07:F3:9C:F9:F3:B1:D5:92:DF:90:43:B5:EA:BB:D1:71
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0104E70C07F39CF9F3B1D592DF9043B5EABBD171.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/7f3404e6-bb2a-44b0-bede-a8b35014612d/0/3130332e3130382e3139302e302f32342d3234203d3e20313336313031.roa
Signing time:             Thu 19 Mar 2026 03:02:45 +0000
ROA not before:           Thu 19 Mar 2026 02:57:45 +0000
ROA not after:            Thu 18 Mar 2027 03:02:45 +0000
asID:                     136101
IP address blocks:        103.108.190.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/7f3404e6-bb2a-44b0-bede-a8b35014612d/0/0104E70C07F39CF9F3B1D592DF9043B5EABBD171.crl
                          rsync://repo-rpki.idnic.net/repo/7f3404e6-bb2a-44b0-bede-a8b35014612d/0/0104E70C07F39CF9F3B1D592DF9043B5EABBD171.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0104E70C07F39CF9F3B1D592DF9043B5EABBD171.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 28 Mar 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:26:c2:9d:e4:0c:c7:31:e1:4b:46:83:a4:16:72:41:26:dc:80:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0104E70C07F39CF9F3B1D592DF9043B5EABBD171
        Validity
            Not Before: Mar 19 02:57:45 2026 GMT
            Not After : Mar 18 03:02:45 2027 GMT
        Subject: CN=EC39E7EE2DF077DCF0CB98726C1EE4C6EF2EF165
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:37:39:1d:f3:f0:4f:26:db:70:83:20:8d:c1:
                    3f:0f:8c:af:6a:63:6c:77:e5:27:d4:e3:ce:42:8f:
                    ed:39:94:48:e0:c7:0d:86:4b:1c:87:08:9e:b9:48:
                    50:f6:2e:cf:64:44:33:47:ec:8c:ae:2d:d0:5a:c1:
                    2c:4a:4a:59:9a:3e:cb:ed:bb:bb:8c:68:60:c2:06:
                    07:47:cb:d1:07:66:cf:1e:3d:25:d6:32:b8:b2:af:
                    ef:5f:a8:66:19:cc:94:73:d4:2a:f9:58:68:c5:c9:
                    6c:97:29:40:be:e1:58:e6:15:5e:08:08:37:3e:46:
                    1c:3f:df:bd:84:3b:0e:23:2d:0d:fc:7d:aa:10:d5:
                    65:89:ed:74:44:d2:95:41:67:27:44:df:9b:ba:f3:
                    44:20:02:38:72:af:3a:73:1f:b7:16:31:ff:d5:64:
                    39:38:09:cf:ad:0b:31:ab:ad:e2:51:c1:32:07:53:
                    4c:fc:0e:9b:90:ff:88:9e:d2:33:07:48:fe:90:11:
                    41:01:13:c2:37:19:a6:0c:4a:4a:37:82:6e:47:a1:
                    42:0b:d9:4a:0b:d7:cb:e8:36:3e:64:d3:02:b2:6b:
                    68:1e:98:23:c5:4c:4d:9d:39:4f:65:fd:82:de:f0:
                    e0:e3:92:3f:49:c2:7f:a3:c7:db:ed:8f:f7:6b:41:
                    cb:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:39:E7:EE:2D:F0:77:DC:F0:CB:98:72:6C:1E:E4:C6:EF:2E:F1:65
            X509v3 Authority Key Identifier:
                keyid:01:04:E7:0C:07:F3:9C:F9:F3:B1:D5:92:DF:90:43:B5:EA:BB:D1:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/7f3404e6-bb2a-44b0-bede-a8b35014612d/0/0104E70C07F39CF9F3B1D592DF9043B5EABBD171.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0104E70C07F39CF9F3B1D592DF9043B5EABBD171.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7f3404e6-bb2a-44b0-bede-a8b35014612d/0/3130332e3130382e3139302e302f32342d3234203d3e20313336313031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.108.190.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:ec:a4:c7:bc:58:2b:8f:cb:3d:c3:6c:67:73:3e:86:f8:ef:
         00:18:72:96:2f:53:5d:0c:0d:cb:f0:45:b1:3e:70:30:66:d4:
         f9:5b:2d:d1:ec:30:80:bb:69:52:98:85:6a:4b:28:f4:0e:a2:
         44:f2:11:db:fb:71:d8:f4:e7:7d:44:93:90:59:c1:f4:56:15:
         f9:d8:21:e5:ba:58:16:59:bf:d2:15:1a:bf:48:82:85:54:ca:
         3b:e9:f9:13:bb:0a:f2:4d:ed:5c:3d:9d:0e:5f:3e:4c:41:c0:
         73:0f:a0:38:91:18:a4:5c:d5:af:e7:ec:4b:b6:b0:f5:8e:d3:
         0c:94:61:f3:cb:87:3d:d8:ed:ae:d0:2e:56:c9:7d:75:49:8e:
         d1:bd:f7:e7:e0:1a:cf:e6:43:1b:fb:0a:82:6b:64:b5:d6:4c:
         70:84:3d:1f:94:30:1c:7c:26:81:46:2a:f0:18:ae:00:93:c6:
         93:06:14:24:40:ac:0b:f1:83:91:44:79:0f:90:bb:34:f8:0a:
         da:23:0b:30:90:37:b2:29:a9:9b:76:24:5b:b0:4e:65:ce:9e:
         22:34:45:d8:22:3d:c9:8f:90:1f:c5:5d:72:08:f0:c1:37:52:
         2f:2f:05:93:36:ee:3d:5d:6d:b9:ab:06:27:32:be:c9:da:2e:
         6b:47:48:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:31:15 2026 by rpki-client