Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/cc976ec5-b05a-480f-86da-d557f84a2364/0/3130332e3230362e3138362e302f32342d3234203d3e20313336313036.roa
File:                     3130332e3230362e3138362e302f32342d3234203d3e20313336313036.roa (raw, json)
Hash identifier:          YYQPXwmq5dk0XkYfxlpOmdJkHE9y6S+GmGv6JQwjcY8=
Subject key identifier:   11:66:18:D3:7D:04:FF:AA:DD:1D:CE:B8:54:35:FE:B1:F1:77:DB:7F
Certificate issuer:       /CN=55FE929F3DF18E4B5BC4309769AA6C72AFF634CC
Certificate serial:       38C98160B9067E26920DBDAB2CB97D658806B66A
Authority key identifier: 55:FE:92:9F:3D:F1:8E:4B:5B:C4:30:97:69:AA:6C:72:AF:F6:34:CC
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/55FE929F3DF18E4B5BC4309769AA6C72AFF634CC.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/cc976ec5-b05a-480f-86da-d557f84a2364/0/3130332e3230362e3138362e302f32342d3234203d3e20313336313036.roa
Signing time:             Wed 18 Mar 2026 09:02:50 +0000
ROA not before:           Wed 18 Mar 2026 08:57:50 +0000
ROA not after:            Wed 17 Mar 2027 09:02:50 +0000
asID:                     136106
IP address blocks:        103.206.186.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/cc976ec5-b05a-480f-86da-d557f84a2364/0/55FE929F3DF18E4B5BC4309769AA6C72AFF634CC.crl
                          rsync://repo-rpki.idnic.net/repo/cc976ec5-b05a-480f-86da-d557f84a2364/0/55FE929F3DF18E4B5BC4309769AA6C72AFF634CC.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/55FE929F3DF18E4B5BC4309769AA6C72AFF634CC.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 28 Mar 2026 20:09:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:c9:81:60:b9:06:7e:26:92:0d:bd:ab:2c:b9:7d:65:88:06:b6:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55FE929F3DF18E4B5BC4309769AA6C72AFF634CC
        Validity
            Not Before: Mar 18 08:57:50 2026 GMT
            Not After : Mar 17 09:02:50 2027 GMT
        Subject: CN=116618D37D04FFAADD1DCEB85435FEB1F177DB7F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:0f:c5:88:d7:68:6a:16:d2:46:c6:97:34:dd:
                    ad:98:d2:b4:60:cb:39:6c:3d:5c:46:3b:8a:88:a7:
                    c5:b9:28:c9:e7:de:b0:ab:e9:32:fc:07:7e:f3:ef:
                    7c:f5:5d:95:44:62:b1:7b:92:64:c2:ed:43:a0:a0:
                    9d:45:74:7c:69:74:f7:be:33:06:45:e6:2c:d6:ca:
                    24:ca:d1:76:07:ef:94:19:63:b5:05:05:bf:0c:a1:
                    f7:37:bc:f0:1d:93:dd:36:5c:68:d5:47:fb:fe:0a:
                    dd:af:9b:27:e1:66:88:04:9e:0b:b5:ff:15:dc:76:
                    79:6c:ec:fe:c7:ac:a6:52:35:d9:73:29:a1:29:b1:
                    a3:6a:1e:d7:c0:79:ec:c5:87:69:da:6b:e2:2b:90:
                    e6:19:50:40:6a:28:08:3a:d4:96:12:5d:6c:51:46:
                    40:93:9c:ef:06:c8:51:4a:72:d3:40:c3:7d:11:d5:
                    8f:63:c0:db:9d:32:d5:50:2a:e7:03:e4:dc:35:99:
                    39:2d:83:15:ce:45:47:34:8b:ee:f4:45:0b:87:78:
                    b1:7d:df:5b:df:7a:e8:55:22:05:31:c9:aa:e9:1c:
                    6c:ab:57:13:e9:4a:93:f8:95:c2:59:1a:73:f0:ff:
                    0b:03:1b:bc:af:f6:4d:3a:f6:b6:71:e5:26:9b:b4:
                    bb:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:66:18:D3:7D:04:FF:AA:DD:1D:CE:B8:54:35:FE:B1:F1:77:DB:7F
            X509v3 Authority Key Identifier:
                keyid:55:FE:92:9F:3D:F1:8E:4B:5B:C4:30:97:69:AA:6C:72:AF:F6:34:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/cc976ec5-b05a-480f-86da-d557f84a2364/0/55FE929F3DF18E4B5BC4309769AA6C72AFF634CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/55FE929F3DF18E4B5BC4309769AA6C72AFF634CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cc976ec5-b05a-480f-86da-d557f84a2364/0/3130332e3230362e3138362e302f32342d3234203d3e20313336313036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.206.186.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:3a:02:78:c4:bc:82:84:af:8b:25:98:dc:83:a0:66:8a:d2:
         4f:3e:f0:b1:95:3d:33:b2:8a:1f:fe:b0:3d:ff:45:56:19:a0:
         be:8f:ee:99:14:f8:60:59:df:a8:4f:cf:36:e3:2c:51:41:cd:
         02:f4:46:f4:45:0b:0d:9c:64:7c:b4:ca:b2:11:0e:81:96:23:
         32:85:59:66:2b:83:b1:1c:28:92:3b:f5:68:96:66:60:04:21:
         e2:bc:ef:bc:fb:39:07:7e:1d:6b:49:ae:13:1c:d7:06:9b:a4:
         a7:ba:97:c0:f6:eb:8a:ed:11:2c:5d:20:8e:8d:d2:95:e1:f0:
         e6:5e:17:45:91:21:e8:c8:fa:5f:00:23:09:74:38:b9:94:33:
         cc:f1:7e:2c:76:e4:82:84:f6:bb:9a:09:61:18:00:bf:47:e4:
         30:cf:98:b5:01:62:c3:4d:e4:45:49:d4:68:3a:f8:a9:b5:9c:
         8c:c0:7b:e5:54:94:c2:47:2c:ff:85:48:a3:5a:3e:d5:59:48:
         85:4e:6e:d7:94:69:10:63:80:f4:5d:12:a8:d8:40:9c:3e:70:
         71:7f:fa:8b:fe:22:a1:25:7c:ef:be:4a:03:47:44:4e:f6:9a:
         4c:da:e3:84:eb:f7:db:7e:9b:42:2d:fc:f9:c8:3f:f2:b7:7b:
         a4:bf:a0:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:08:46 2026 by rpki-client