Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/3131352e3136362e39362e302f31392d3234203d3e203234353335.roa
File:                     3131352e3136362e39362e302f31392d3234203d3e203234353335.roa (raw, json)
Hash identifier:          uK0tYoFKWzW2y8KltD3aqDC26oZ9pYtmSp1Jv/BCAoY=
Subject key identifier:   38:D3:CA:E4:C4:65:D6:81:3F:83:F9:23:E4:CB:2F:CD:35:68:DC:BF
Certificate issuer:       /CN=47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097
Certificate serial:       5431D7AA62F2C6973345AFF8185658F1E5B183A6
Authority key identifier: 47:B3:FB:F3:9D:8D:FE:5B:C5:CF:D2:BE:D3:9F:0F:A1:52:61:90:97
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/3131352e3136362e39362e302f31392d3234203d3e203234353335.roa
Signing time:             Tue 03 Feb 2026 09:00:02 +0000
ROA not before:           Tue 03 Feb 2026 08:55:02 +0000
ROA not after:            Tue 02 Feb 2027 09:00:02 +0000
asID:                     24535
IP address blocks:        115.166.96.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097.crl
                          rsync://repo-rpki.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Mar 2026 06:31:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:31:d7:aa:62:f2:c6:97:33:45:af:f8:18:56:58:f1:e5:b1:83:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097
        Validity
            Not Before: Feb  3 08:55:02 2026 GMT
            Not After : Feb  2 09:00:02 2027 GMT
        Subject: CN=38D3CAE4C465D6813F83F923E4CB2FCD3568DCBF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:79:83:2a:a5:a2:0a:43:49:99:23:cc:8b:f3:
                    f8:04:d0:1c:b7:d4:b5:f6:bb:04:4d:c3:ba:5b:81:
                    6b:24:0b:ee:bb:8f:81:40:16:c7:9c:9d:3b:71:e9:
                    59:02:ff:6d:ac:f4:a7:5a:fb:4e:51:99:d2:91:76:
                    76:08:a0:53:82:ce:82:62:bc:91:e6:f5:7d:08:90:
                    13:03:4e:d5:94:3d:53:84:ad:ae:f6:7b:6a:75:89:
                    18:5c:fb:7c:5f:e0:84:96:f3:d7:f1:47:c3:1e:5e:
                    91:c4:8a:49:f3:3f:4c:ae:ce:39:e4:2d:62:04:e1:
                    73:6d:4c:66:e4:8e:77:17:c1:bc:3f:a0:9e:06:9d:
                    59:95:df:05:5f:6c:04:d2:93:92:f5:f2:a5:ca:13:
                    af:99:de:4b:89:9a:5d:c6:f2:0e:28:1c:f0:21:9f:
                    62:6d:14:06:3b:2d:e8:df:08:9e:c7:61:95:12:f6:
                    3e:1b:0a:25:f8:77:75:16:81:31:71:3a:aa:a0:59:
                    c1:d1:63:d9:4d:10:e2:25:0e:83:54:49:c8:d0:57:
                    03:b7:68:86:63:ed:63:0e:fb:f5:52:c6:a9:6c:2c:
                    66:d5:35:6a:c3:d5:cc:d8:a9:85:29:38:6a:d6:09:
                    e2:a3:ec:57:43:c0:d2:76:ff:f4:44:92:f6:e2:93:
                    d8:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:D3:CA:E4:C4:65:D6:81:3F:83:F9:23:E4:CB:2F:CD:35:68:DC:BF
            X509v3 Authority Key Identifier:
                keyid:47:B3:FB:F3:9D:8D:FE:5B:C5:CF:D2:BE:D3:9F:0F:A1:52:61:90:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/3131352e3136362e39362e302f31392d3234203d3e203234353335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.166.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         5b:a7:74:5b:94:59:c7:4c:ee:96:22:ad:bf:d8:61:ab:50:47:
         d8:74:91:de:cf:fe:26:f0:78:cb:09:71:19:0d:09:fc:6f:79:
         90:8a:de:3b:18:16:ec:5c:81:3c:73:71:19:dd:95:3d:cd:cd:
         25:d1:fa:09:0a:e1:73:39:97:ab:c2:11:13:11:44:5a:0b:df:
         a5:7c:76:44:71:2e:c0:5e:c4:51:92:01:52:91:30:c0:bc:6d:
         c6:52:9b:0c:64:bb:dd:ac:ca:35:c3:5f:ff:ae:07:f6:ad:dc:
         23:44:8d:5e:d2:ae:b5:b7:46:77:ca:f0:5b:f5:34:5e:dc:36:
         5f:ed:b2:56:65:3c:9f:d3:82:04:3b:ee:e4:56:83:35:aa:ff:
         39:86:b9:d5:9b:5b:90:92:2d:b3:fa:4e:0f:58:6f:3a:c8:b1:
         d5:28:18:90:ae:55:f8:f3:9b:d6:d1:81:cb:73:44:c8:91:04:
         2c:72:ed:fb:a8:48:5f:dc:a6:6b:57:dd:32:b4:66:47:06:3d:
         b3:8c:f4:31:c9:47:b1:ce:f4:e8:20:93:96:fb:1f:ba:f7:22:
         a7:b8:e0:68:41:07:dc:f4:86:0d:9d:1b:ab:8f:19:76:bd:85:
         7a:94:d0:0e:1e:af:56:28:84:76:87:61:73:93:92:80:08:35:
         a8:c1:90:d8
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUVDHXqmLyxpczRa/4GFZY8eWxg6YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDdCM0ZCRjM5RDhERkU1QkM1Q0ZEMkJFRDM5RjBGQTE1
MjYxOTA5NzAeFw0yNjAyMDMwODU1MDJaFw0yNzAyMDIwOTAwMDJaMDMxMTAvBgNV
BAMTKDM4RDNDQUU0QzQ2NUQ2ODEzRjgzRjkyM0U0Q0IyRkNEMzU2OERDQkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyeYMqpaIKQ0mZI8yL8/gE0By3
1LX2uwRNw7pbgWskC+67j4FAFsecnTtx6VkC/22s9Kda+05RmdKRdnYIoFOCzoJi
vJHm9X0IkBMDTtWUPVOEra72e2p1iRhc+3xf4ISW89fxR8MeXpHEiknzP0yuzjnk
LWIE4XNtTGbkjncXwbw/oJ4GnVmV3wVfbATSk5L18qXKE6+Z3kuJml3G8g4oHPAh
n2JtFAY7LejfCJ7HYZUS9j4bCiX4d3UWgTFxOqqgWcHRY9lNEOIlDoNUScjQVwO3
aIZj7WMO+/VSxqlsLGbVNWrD1czYqYUpOGrWCeKj7FdDwNJ2//REkvbik9gTAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUONPK5MRl1oE/g/kj5MsvzTVo3L8wHwYDVR0j
BBgwFoAUR7P7852N/lvFz9K+058PoVJhkJcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y
ZGQ0N2Y1Ni1lYzUzLTQyZWItOWI4Yi1mYTA4Zjg3NGQzMTkvMC80N0IzRkJGMzlE
OERGRTVCQzVDRkQyQkVEMzlGMEZBMTUyNjE5MDk3LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNDdCM0ZCRjM5RDhERkU1QkM1Q0ZEMkJFRDM5RjBGQTE1MjYx
OTA5Ny5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzJkZDQ3ZjU2LWVjNTMtNDJlYi05
YjhiLWZhMDhmODc0ZDMxOS8wLzMxMzEzNTJlMzEzNjM2MmUzOTM2MmUzMDJmMzEz
OTJkMzIzNDIwM2QzZTIwMzIzNDM1MzMzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBXOmYDANBgkqhkiG
9w0BAQsFAAOCAQEAW6d0W5RZx0zuliKtv9hhq1BH2HSR3s/+JvB4ywlxGQ0J/G95
kIreOxgW7FyBPHNxGd2VPc3NJdH6CQrhczmXq8IRExFEWgvfpXx2RHEuwF7EUZIB
UpEwwLxtxlKbDGS73azKNcNf/64H9q3cI0SNXtKutbdGd8rwW/U0Xtw2X+2yVmU8
n9OCBDvu5FaDNar/OYa51ZtbkJIts/pOD1hvOsix1SgYkK5V+POb1tGBy3NEyJEE
LHLt+6hIX9yma1fdMrRmRwY9s4z0MclHsc706CCTlvsfuvcip7jgaEEH3PSGDZ0b
q48Zdr2FepTQDh6vViiEdodhc5OSgAg1qMGQ2A==
-----END CERTIFICATE-----
Generated at Mon Mar 2 13:25:35 2026 by rpki-client