Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a05f768b-4218-4c5d-893a-0ff696526639/0/3130332e342e3137352e302f32342d3234203d3e203536323531.roa
File:                     3130332e342e3137352e302f32342d3234203d3e203536323531.roa (raw, json)
Hash identifier:          ugs0c0VPcoyXvgnQe8BNqVxdTK1dLc3Sk2MjVANs5YE=
Subject key identifier:   67:36:3C:87:73:78:3D:C9:5F:CA:B0:6B:D8:0F:F7:6B:DC:FB:AE:0B
Certificate issuer:       /CN=CC0E0C41CCA9566894D1D35FDE2D6425849503B5
Certificate serial:       28F8D5189BB0F0723C4BEFDCFE8EB0797EF9883E
Authority key identifier: CC:0E:0C:41:CC:A9:56:68:94:D1:D3:5F:DE:2D:64:25:84:95:03:B5
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC0E0C41CCA9566894D1D35FDE2D6425849503B5.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a05f768b-4218-4c5d-893a-0ff696526639/0/3130332e342e3137352e302f32342d3234203d3e203536323531.roa
Signing time:             Tue 24 Mar 2026 10:00:00 +0000
ROA not before:           Tue 24 Mar 2026 09:55:00 +0000
ROA not after:            Tue 23 Mar 2027 10:00:00 +0000
asID:                     56251
IP address blocks:        103.4.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a05f768b-4218-4c5d-893a-0ff696526639/0/CC0E0C41CCA9566894D1D35FDE2D6425849503B5.crl
                          rsync://repo-rpki.idnic.net/repo/a05f768b-4218-4c5d-893a-0ff696526639/0/CC0E0C41CCA9566894D1D35FDE2D6425849503B5.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC0E0C41CCA9566894D1D35FDE2D6425849503B5.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 29 Mar 2026 18:54:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:f8:d5:18:9b:b0:f0:72:3c:4b:ef:dc:fe:8e:b0:79:7e:f9:88:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC0E0C41CCA9566894D1D35FDE2D6425849503B5
        Validity
            Not Before: Mar 24 09:55:00 2026 GMT
            Not After : Mar 23 10:00:00 2027 GMT
        Subject: CN=67363C8773783DC95FCAB06BD80FF76BDCFBAE0B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:81:45:2a:04:c0:9f:53:a4:cf:3c:94:05:5f:
                    f0:1d:e9:16:e2:53:7a:7d:b8:f2:07:3c:58:14:84:
                    40:72:f4:c3:ad:42:6b:7e:66:de:99:23:26:a8:72:
                    33:2a:b6:c8:e8:f7:d9:05:d5:9c:c9:16:38:37:d9:
                    7a:eb:68:4b:71:0c:9e:0a:34:85:22:27:9a:24:24:
                    63:c6:93:11:bb:0c:1a:34:02:d0:b3:18:38:27:ab:
                    c2:da:4c:4e:6a:36:b7:b4:29:cf:3c:3d:d6:00:6e:
                    e7:21:43:e0:68:d2:93:26:86:7f:c9:5f:90:26:8c:
                    6c:b5:2c:25:cc:64:98:7a:66:1f:b8:5b:d7:93:03:
                    10:c6:87:1a:56:fa:d5:84:bb:7a:3c:d7:7b:d3:81:
                    80:74:52:78:1c:f2:c3:fb:75:e2:4c:f5:b2:6d:77:
                    86:75:a2:d7:1d:98:23:cc:57:e7:c5:d3:cb:1b:96:
                    2a:8e:fd:61:c1:bd:6f:50:06:32:c2:17:94:3a:bc:
                    5e:da:c6:81:f0:7a:1f:3f:55:2d:75:fe:0d:ed:29:
                    ae:29:17:20:21:8b:2d:53:11:f4:a5:79:ef:75:9f:
                    23:b3:f6:69:1f:22:9f:86:8d:2e:72:23:ed:b4:37:
                    1e:e1:e3:40:ee:9c:5a:cf:4c:c5:d9:dd:a8:60:51:
                    dc:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:36:3C:87:73:78:3D:C9:5F:CA:B0:6B:D8:0F:F7:6B:DC:FB:AE:0B
            X509v3 Authority Key Identifier:
                keyid:CC:0E:0C:41:CC:A9:56:68:94:D1:D3:5F:DE:2D:64:25:84:95:03:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a05f768b-4218-4c5d-893a-0ff696526639/0/CC0E0C41CCA9566894D1D35FDE2D6425849503B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC0E0C41CCA9566894D1D35FDE2D6425849503B5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a05f768b-4218-4c5d-893a-0ff696526639/0/3130332e342e3137352e302f32342d3234203d3e203536323531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.4.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:18:3f:a4:c3:03:a5:84:06:53:97:9e:49:57:64:f3:bd:50:
         b8:8b:b1:20:e1:af:21:83:54:5c:05:06:81:30:11:04:fd:9d:
         84:7b:cd:c9:5a:6a:f4:82:ab:8e:2a:1b:ba:7d:b8:b4:a8:6c:
         e7:78:fc:34:39:0f:9f:26:56:9e:9d:5c:b5:d4:fb:57:da:66:
         0f:b8:4a:0e:44:d4:a5:ee:2b:33:5e:92:61:71:30:8a:f0:cb:
         3c:7f:0c:b4:01:2d:d1:7c:f2:0c:e7:a0:59:36:55:88:8c:f2:
         c5:99:33:23:27:a6:2c:e2:d7:34:15:cf:ba:bb:cb:c3:5f:d5:
         73:ba:fd:b0:e9:a6:35:a8:d2:c4:82:52:0e:6e:8c:40:cc:fc:
         32:d2:a8:86:c7:9b:ba:67:4e:e6:b1:59:01:98:e7:c0:23:fe:
         a4:44:28:32:b7:ce:4e:e8:fc:13:5f:b0:4c:8a:1c:89:b7:27:
         22:fd:7d:e0:92:e7:b8:aa:82:64:8d:15:92:97:2d:25:4e:05:
         ac:b8:ea:7a:dc:05:09:09:11:80:73:aa:d6:2a:9a:94:57:72:
         8c:98:c8:c0:39:cb:54:09:1f:f8:f1:ca:f8:e2:bb:30:da:8d:
         9f:43:bb:85:52:2f:b2:a4:49:01:27:c9:34:67:f3:e4:d1:9f:
         c7:3e:ee:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:04:07 2026 by rpki-client