Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c350f078-c535-4f8e-960f-32c1623aa4b1/0/3130332e3137342e39302e302f32332d3234203d3e203338333230.roa
File:                     3130332e3137342e39302e302f32332d3234203d3e203338333230.roa (raw, json)
Hash identifier:          16REvE5kemlxlXUkBlf2MUSEFyN5rENLT9cPzHwRYNA=
Subject key identifier:   EF:6B:A1:C9:00:46:92:12:BE:D7:95:7B:C4:87:43:4D:B4:62:38:05
Certificate issuer:       /CN=9B77D523EDC2218C65DAB55B4538140243B7E862
Certificate serial:       60F2A62366CA3140E8D33F693DB58BC8E04FE326
Authority key identifier: 9B:77:D5:23:ED:C2:21:8C:65:DA:B5:5B:45:38:14:02:43:B7:E8:62
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B77D523EDC2218C65DAB55B4538140243B7E862.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c350f078-c535-4f8e-960f-32c1623aa4b1/0/3130332e3137342e39302e302f32332d3234203d3e203338333230.roa
Signing time:             Thu 19 Mar 2026 05:02:46 +0000
ROA not before:           Thu 19 Mar 2026 04:57:46 +0000
ROA not after:            Thu 18 Mar 2027 05:02:46 +0000
asID:                     38320
IP address blocks:        103.174.90.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c350f078-c535-4f8e-960f-32c1623aa4b1/0/9B77D523EDC2218C65DAB55B4538140243B7E862.crl
                          rsync://repo-rpki.idnic.net/repo/c350f078-c535-4f8e-960f-32c1623aa4b1/0/9B77D523EDC2218C65DAB55B4538140243B7E862.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B77D523EDC2218C65DAB55B4538140243B7E862.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 28 Mar 2026 22:03:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:f2:a6:23:66:ca:31:40:e8:d3:3f:69:3d:b5:8b:c8:e0:4f:e3:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B77D523EDC2218C65DAB55B4538140243B7E862
        Validity
            Not Before: Mar 19 04:57:46 2026 GMT
            Not After : Mar 18 05:02:46 2027 GMT
        Subject: CN=EF6BA1C900469212BED7957BC487434DB4623805
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:c7:f7:51:2d:f6:cf:8b:52:0e:d0:59:94:5a:
                    31:69:da:9b:94:6d:e7:97:85:d2:98:11:cf:fd:55:
                    4d:10:82:fb:5c:7a:55:48:9f:b3:5f:4a:41:71:4d:
                    9e:7a:61:42:20:9c:2a:58:b2:78:d7:ad:38:16:43:
                    ef:e2:a8:7e:b8:89:60:7b:51:be:c0:67:16:1b:d1:
                    89:00:b4:17:a7:ea:14:73:e4:e8:5d:5c:5f:e6:8b:
                    ff:c6:0d:aa:5e:17:a1:ea:72:3d:a0:85:98:73:aa:
                    eb:28:fb:b9:b6:b6:09:08:3e:02:d2:71:0e:4f:25:
                    d1:50:5f:23:67:0f:16:d8:a9:a1:21:a0:72:5c:83:
                    43:3e:4f:c5:f4:3d:23:8f:7c:74:70:78:e3:f1:50:
                    34:57:c1:16:e8:d1:1c:ce:8f:2d:99:61:74:06:3e:
                    39:7b:c3:b9:cd:54:aa:86:1e:ab:31:80:f8:d1:25:
                    df:ca:81:34:86:a2:43:92:5e:7c:09:5f:45:19:d2:
                    6c:7d:13:95:13:54:d5:16:a8:50:cc:cd:69:34:51:
                    33:e4:f1:d3:ed:99:eb:23:3b:d5:c2:b7:03:74:3c:
                    27:74:92:3d:26:a9:21:1e:b5:7d:4f:1e:01:1f:5a:
                    28:7b:df:bd:2d:8a:21:dd:13:cd:a6:8d:af:1f:07:
                    dd:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:6B:A1:C9:00:46:92:12:BE:D7:95:7B:C4:87:43:4D:B4:62:38:05
            X509v3 Authority Key Identifier:
                keyid:9B:77:D5:23:ED:C2:21:8C:65:DA:B5:5B:45:38:14:02:43:B7:E8:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c350f078-c535-4f8e-960f-32c1623aa4b1/0/9B77D523EDC2218C65DAB55B4538140243B7E862.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B77D523EDC2218C65DAB55B4538140243B7E862.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c350f078-c535-4f8e-960f-32c1623aa4b1/0/3130332e3137342e39302e302f32332d3234203d3e203338333230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.174.90.0/23

    Signature Algorithm: sha256WithRSAEncryption
         43:c2:4a:d1:b2:9a:bc:6d:3d:cd:b9:b0:e4:f3:b6:5a:4f:30:
         1d:d9:76:23:f7:e3:38:6a:1d:62:be:8c:21:6a:75:7f:17:8a:
         d6:c0:93:d3:4f:e8:9b:1a:c0:c2:24:78:db:51:fb:53:31:f0:
         07:fd:44:99:df:bb:ac:cb:aa:38:15:ef:ff:4f:cc:0d:2b:1c:
         c7:7f:c4:67:a4:6a:00:89:b5:d6:14:be:c9:98:7d:4d:a5:4b:
         4a:42:b7:43:10:69:5a:ea:ac:56:4d:09:28:88:64:5e:98:e7:
         e8:97:13:19:ff:b9:4e:50:c2:be:0a:04:16:d0:e4:27:f5:dd:
         65:c0:dc:17:6a:5b:f1:cc:ef:c1:07:22:c1:3e:d0:69:62:6b:
         b5:7a:17:b9:4f:98:6f:e8:7f:ae:1e:d2:cd:cd:d8:88:8d:75:
         b6:1b:bd:dc:05:2a:05:d5:a6:5d:f8:b2:95:df:42:e2:a9:ec:
         fa:cc:18:5b:15:66:dc:05:c2:2b:7d:f4:30:b3:11:30:3f:bc:
         43:c2:40:59:d7:9e:61:14:a7:de:d9:69:13:22:90:2d:ad:aa:
         03:f2:20:34:79:52:49:8b:8e:bc:93:36:7d:8e:ae:9c:27:a3:
         6a:f6:fd:49:63:3f:25:44:7f:e0:60:1a:2b:eb:f5:fd:06:3d:
         42:cb:9f:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:38:31 2026 by rpki-client