Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c13739e1-b5db-4734-838a-b0b580beb9f3/0/3130332e3137382e39302e302f32332d3233203d3e20313430343034.roa
File:                     3130332e3137382e39302e302f32332d3233203d3e20313430343034.roa (raw, json)
Hash identifier:          4gVR+HphlmtE41e0SrxL8XZ7EiD5Ze3LripJAIf6d64=
Subject key identifier:   FB:2C:FA:C2:71:67:14:44:CF:89:B6:0B:84:DE:2B:74:D7:C8:4F:CC
Certificate issuer:       /CN=411479424B4016269EB9E266CD48905F63DC9F0B
Certificate serial:       32D4B0D83112DDF5925A5EA972E21EB2AE5252
Authority key identifier: 41:14:79:42:4B:40:16:26:9E:B9:E2:66:CD:48:90:5F:63:DC:9F:0B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/411479424B4016269EB9E266CD48905F63DC9F0B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c13739e1-b5db-4734-838a-b0b580beb9f3/0/3130332e3137382e39302e302f32332d3233203d3e20313430343034.roa
Signing time:             Mon 09 Mar 2026 18:00:00 +0000
ROA not before:           Mon 09 Mar 2026 17:55:00 +0000
ROA not after:            Mon 08 Mar 2027 18:00:00 +0000
asID:                     140404
IP address blocks:        103.178.90.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c13739e1-b5db-4734-838a-b0b580beb9f3/0/411479424B4016269EB9E266CD48905F63DC9F0B.crl
                          rsync://repo-rpki.idnic.net/repo/c13739e1-b5db-4734-838a-b0b580beb9f3/0/411479424B4016269EB9E266CD48905F63DC9F0B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/411479424B4016269EB9E266CD48905F63DC9F0B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 28 Mar 2026 16:52:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:d4:b0:d8:31:12:dd:f5:92:5a:5e:a9:72:e2:1e:b2:ae:52:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=411479424B4016269EB9E266CD48905F63DC9F0B
        Validity
            Not Before: Mar  9 17:55:00 2026 GMT
            Not After : Mar  8 18:00:00 2027 GMT
        Subject: CN=FB2CFAC271671444CF89B60B84DE2B74D7C84FCC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:d5:60:7d:64:d7:3c:35:cf:8d:9d:af:66:c1:
                    bb:6d:c6:0b:e2:0f:3b:70:bc:3f:3d:53:f6:0e:35:
                    38:38:94:64:e8:db:0c:5c:1e:30:8e:b4:e2:5e:fa:
                    fd:df:38:dc:9d:16:8f:7e:f5:72:92:ac:86:1d:c0:
                    7d:64:19:61:39:1e:df:d8:0e:c3:2d:2e:27:23:c7:
                    10:3a:c7:54:21:e1:d6:13:b8:e5:56:ff:f5:fe:10:
                    d2:99:52:b6:82:47:85:ef:14:97:bd:f9:80:dd:63:
                    2a:32:ee:ff:d0:01:3f:22:10:1a:b3:50:91:60:75:
                    1f:73:86:6b:ed:31:95:0a:1b:37:15:fc:fa:22:56:
                    3a:fc:da:ac:84:ac:c4:8e:e7:a7:fd:f5:ec:af:86:
                    56:ca:9c:48:90:b6:11:49:7a:d5:11:42:6c:e6:d1:
                    b5:0f:15:15:3f:e7:17:7b:47:98:e4:42:67:b4:5b:
                    0f:c0:aa:d0:0b:96:cf:97:f9:b0:42:88:5a:21:d5:
                    80:67:57:5c:32:ed:2f:57:4d:7c:05:35:1e:5e:fb:
                    fc:25:49:a6:d4:a1:47:a2:c4:34:67:30:d8:dc:7a:
                    63:dc:39:52:d6:3b:10:ee:a0:b4:90:da:02:7c:8d:
                    91:7b:35:c5:ca:64:99:3c:33:05:5c:fe:24:8b:a0:
                    f7:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:2C:FA:C2:71:67:14:44:CF:89:B6:0B:84:DE:2B:74:D7:C8:4F:CC
            X509v3 Authority Key Identifier:
                keyid:41:14:79:42:4B:40:16:26:9E:B9:E2:66:CD:48:90:5F:63:DC:9F:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c13739e1-b5db-4734-838a-b0b580beb9f3/0/411479424B4016269EB9E266CD48905F63DC9F0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/411479424B4016269EB9E266CD48905F63DC9F0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c13739e1-b5db-4734-838a-b0b580beb9f3/0/3130332e3137382e39302e302f32332d3233203d3e20313430343034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.178.90.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b8:84:39:3d:7c:a9:82:c3:18:8e:10:17:21:ea:6f:1c:c1:90:
         d4:f3:a5:67:d0:f8:54:f7:f3:6e:da:9a:2b:d5:f3:c5:91:ff:
         7d:b1:3c:f3:e9:71:8b:8b:21:69:08:51:b0:b8:a2:91:b8:82:
         c2:6c:dd:9d:68:d0:6a:ee:bd:72:40:f8:93:8a:57:99:e5:bc:
         8c:d4:be:cf:83:15:83:64:80:6f:d3:23:cc:61:d1:7b:04:39:
         fa:73:48:b9:9b:3b:5a:4e:26:df:80:05:1c:b8:7a:42:bb:4e:
         05:d3:59:a4:5d:30:26:e9:5e:79:9d:e3:23:75:a3:00:62:c9:
         ae:16:b7:aa:07:b0:bb:6b:8f:bd:71:f6:79:0d:76:17:4b:37:
         6a:d8:31:03:e3:ee:29:af:b5:9c:51:5c:66:c7:6c:e6:f9:5a:
         34:61:be:3c:55:0d:4b:aa:86:cc:87:f1:62:7d:b3:a4:af:bc:
         7e:60:f1:5e:e1:cd:3b:27:85:06:c7:69:ad:b4:03:32:51:30:
         eb:28:fd:48:16:21:ed:e2:dc:ab:a7:db:79:86:37:ed:d8:17:
         f4:9a:ed:2c:b0:97:69:0d:b8:24:f3:2d:41:47:4e:6b:94:41:
         71:ac:b8:db:9d:56:4e:5e:ed:52:a3:4f:63:f6:fc:0d:07:eb:
         b5:85:11:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:38:18 2026 by rpki-client