Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/2677b00c-dc2c-419c-a100-50b2fc7b1bc1/0/3130332e3136342e31372e302f32342d3234203d3e203137393935.roa
File:                     3130332e3136342e31372e302f32342d3234203d3e203137393935.roa (raw, json)
Hash identifier:          P29nyVRqMomiZ6dB6VWVkB4ydoNUSNTp5nt+iDG/MVk=
Subject key identifier:   E9:B6:99:E7:58:CF:03:39:15:ED:BA:83:D9:A6:CC:FA:49:E1:45:A9
Certificate issuer:       /CN=A51BB787CE84E18D5A972818D11BBD38618D7D30
Certificate serial:       0D76E5B037691BF69FF04481A9AF8783F7CBE738
Authority key identifier: A5:1B:B7:87:CE:84:E1:8D:5A:97:28:18:D1:1B:BD:38:61:8D:7D:30
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A51BB787CE84E18D5A972818D11BBD38618D7D30.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2677b00c-dc2c-419c-a100-50b2fc7b1bc1/0/3130332e3136342e31372e302f32342d3234203d3e203137393935.roa
Signing time:             Tue 24 Feb 2026 05:00:01 +0000
ROA not before:           Tue 24 Feb 2026 04:55:01 +0000
ROA not after:            Tue 23 Feb 2027 05:00:01 +0000
asID:                     17995
IP address blocks:        103.164.17.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/2677b00c-dc2c-419c-a100-50b2fc7b1bc1/0/A51BB787CE84E18D5A972818D11BBD38618D7D30.crl
                          rsync://repo-rpki.idnic.net/repo/2677b00c-dc2c-419c-a100-50b2fc7b1bc1/0/A51BB787CE84E18D5A972818D11BBD38618D7D30.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A51BB787CE84E18D5A972818D11BBD38618D7D30.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Mar 2026 07:56:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:76:e5:b0:37:69:1b:f6:9f:f0:44:81:a9:af:87:83:f7:cb:e7:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A51BB787CE84E18D5A972818D11BBD38618D7D30
        Validity
            Not Before: Feb 24 04:55:01 2026 GMT
            Not After : Feb 23 05:00:01 2027 GMT
        Subject: CN=E9B699E758CF033915EDBA83D9A6CCFA49E145A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:72:ad:87:b6:25:43:0b:58:dc:d5:0b:d0:f4:
                    07:8c:e6:31:d9:14:df:04:a8:51:28:0f:07:13:9c:
                    23:7c:2a:a9:64:07:f6:e8:51:6c:7b:98:ac:6e:02:
                    f4:c6:77:15:cf:c8:77:35:4c:f3:e8:41:33:74:02:
                    87:3a:e8:e6:c3:2c:8f:74:5b:63:df:6b:0c:78:20:
                    45:d8:3b:3f:5f:2b:16:02:a8:57:87:0c:4c:39:41:
                    a4:ac:2c:72:54:67:41:ae:02:53:f6:ac:89:e1:e4:
                    1b:39:bd:df:2e:80:50:45:1f:5c:31:10:71:b3:92:
                    ae:51:e4:67:c6:3d:56:43:7d:a8:13:0c:f0:8a:f2:
                    79:4e:42:a5:cd:4e:2e:39:31:33:7d:d3:6e:98:a5:
                    d4:0f:96:88:59:4e:69:9c:35:52:c0:c7:b1:0e:80:
                    24:3b:ca:1e:7a:81:b9:f9:b4:4d:6e:e4:b8:1c:1c:
                    12:86:b4:7c:c8:59:09:8b:da:fd:cf:52:f8:b9:8e:
                    79:77:c8:c8:02:55:83:94:eb:f1:65:8a:e7:86:71:
                    74:88:3f:f9:f2:a8:d9:f2:44:78:f7:a3:9f:1a:85:
                    63:a0:5c:53:ad:4d:b0:ca:e3:4f:6d:46:87:67:e6:
                    f2:b9:f1:8e:fd:6b:7e:b8:86:df:40:92:8f:f5:38:
                    77:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:B6:99:E7:58:CF:03:39:15:ED:BA:83:D9:A6:CC:FA:49:E1:45:A9
            X509v3 Authority Key Identifier:
                keyid:A5:1B:B7:87:CE:84:E1:8D:5A:97:28:18:D1:1B:BD:38:61:8D:7D:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2677b00c-dc2c-419c-a100-50b2fc7b1bc1/0/A51BB787CE84E18D5A972818D11BBD38618D7D30.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A51BB787CE84E18D5A972818D11BBD38618D7D30.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2677b00c-dc2c-419c-a100-50b2fc7b1bc1/0/3130332e3136342e31372e302f32342d3234203d3e203137393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.164.17.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:bc:ed:be:b3:9a:d8:b0:d0:86:f1:5a:66:dc:0a:9c:25:98:
         4e:f3:5e:ed:35:f0:64:74:0e:5d:15:61:43:93:89:65:01:cc:
         4e:8f:00:59:3e:85:81:18:ab:43:bf:d9:d0:6d:17:69:f8:12:
         4e:72:f1:a0:98:18:2e:4c:6d:a3:81:82:b5:29:b6:50:91:79:
         d4:fd:60:53:e7:cc:67:5a:99:54:a0:50:8e:be:02:9e:7c:d7:
         26:72:cf:cf:dc:cb:56:e2:72:b6:1c:9f:19:7e:14:44:30:4a:
         81:87:9d:c4:f8:19:0b:54:5c:3c:89:b5:b9:3f:59:ff:77:07:
         02:1a:1d:d1:3c:d2:23:62:45:7a:bd:5f:40:60:1b:72:a0:f4:
         c1:3e:13:fe:61:23:de:64:57:dc:48:c4:a7:80:bf:be:bb:ac:
         4c:06:38:b9:4e:1d:7d:b5:3c:b6:d3:f8:9f:78:68:55:96:f9:
         c3:8e:0c:38:0f:42:49:eb:cc:66:f9:a0:4d:cb:af:1c:e4:d9:
         96:fd:6b:33:0e:73:ca:34:35:bd:64:bc:cc:55:c6:75:96:9c:
         51:fe:80:e2:47:e4:d6:32:88:d1:11:19:7c:a7:4d:02:39:49:
         ee:a6:9f:08:59:42:9e:bd:70:69:55:b4:6d:a4:50:c0:45:6b:
         ea:c5:5e:91
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUDXblsDdpG/af8ESBqa+Hg/fL5zgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTUxQkI3ODdDRTg0RTE4RDVBOTcyODE4RDExQkJEMzg2
MThEN0QzMDAeFw0yNjAyMjQwNDU1MDFaFw0yNzAyMjMwNTAwMDFaMDMxMTAvBgNV
BAMTKEU5QjY5OUU3NThDRjAzMzkxNUVEQkE4M0Q5QTZDQ0ZBNDlFMTQ1QTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfcq2HtiVDC1jc1QvQ9AeM5jHZ
FN8EqFEoDwcTnCN8KqlkB/boUWx7mKxuAvTGdxXPyHc1TPPoQTN0Aoc66ObDLI90
W2Pfawx4IEXYOz9fKxYCqFeHDEw5QaSsLHJUZ0GuAlP2rInh5Bs5vd8ugFBFH1wx
EHGzkq5R5GfGPVZDfagTDPCK8nlOQqXNTi45MTN9026YpdQPlohZTmmcNVLAx7EO
gCQ7yh56gbn5tE1u5LgcHBKGtHzIWQmL2v3PUvi5jnl3yMgCVYOU6/FliueGcXSI
P/nyqNnyRHj3o58ahWOgXFOtTbDK409tRodn5vK58Y79a364ht9Ako/1OHdtAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQU6baZ51jPAzkV7bqD2abM+knhRakwHwYDVR0j
BBgwFoAUpRu3h86E4Y1alygY0Ru9OGGNfTAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y
Njc3YjAwYy1kYzJjLTQxOWMtYTEwMC01MGIyZmM3YjFiYzEvMC9BNTFCQjc4N0NF
ODRFMThENUE5NzI4MThEMTFCQkQzODYxOEQ3RDMwLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQTUxQkI3ODdDRTg0RTE4RDVBOTcyODE4RDExQkJEMzg2MThE
N0QzMC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzI2NzdiMDBjLWRjMmMtNDE5Yy1h
MTAwLTUwYjJmYzdiMWJjMS8wLzMxMzAzMzJlMzEzNjM0MmUzMTM3MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzNzM5MzkzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGekETANBgkqhkiG
9w0BAQsFAAOCAQEAiLztvrOa2LDQhvFaZtwKnCWYTvNe7TXwZHQOXRVhQ5OJZQHM
To8AWT6FgRirQ7/Z0G0XafgSTnLxoJgYLkxto4GCtSm2UJF51P1gU+fMZ1qZVKBQ
jr4CnnzXJnLPz9zLVuJythyfGX4URDBKgYedxPgZC1RcPIm1uT9Z/3cHAhod0TzS
I2JFer1fQGAbcqD0wT4T/mEj3mRX3EjEp4C/vrusTAY4uU4dfbU8ttP4n3hoVZb5
w44MOA9CSevMZvmgTcuvHOTZlv1rMw5zyjQ1vWS8zFXGdZacUf6A4kfk1jKI0REZ
fKdNAjlJ7qafCFlCnr1waVW0baRQwEVr6sVekQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 20:16:20 2026 by rpki-client