Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3c88442b-c48e-4ba0-8ad7-58e1263c6dc7/0/3130332e3136342e3135302e302f32332d3233203d3e20313431393039.roa
File:                     3130332e3136342e3135302e302f32332d3233203d3e20313431393039.roa (raw, json)
Hash identifier:          hMbf9jb+uOpmKgTWNZ78lbBHNdoxZJUhsCBWsTukCp0=
Subject key identifier:   C6:C1:BE:A7:5A:A3:1B:E7:57:82:31:EE:DB:1E:A2:BE:9F:16:D3:32
Certificate issuer:       /CN=5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F
Certificate serial:       064DEE49FDA5465EFFD6482D9EBEA486D27CC8A8
Authority key identifier: 5C:1D:C7:E8:74:57:A9:1F:35:91:5A:F1:DE:3F:BB:CC:2E:6B:3D:8F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3c88442b-c48e-4ba0-8ad7-58e1263c6dc7/0/3130332e3136342e3135302e302f32332d3233203d3e20313431393039.roa
Signing time:             Wed 15 Apr 2026 08:00:54 +0000
ROA not before:           Wed 15 Apr 2026 07:55:54 +0000
ROA not after:            Wed 14 Apr 2027 08:00:54 +0000
asID:                     141909
IP address blocks:        103.164.150.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/3c88442b-c48e-4ba0-8ad7-58e1263c6dc7/0/5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.crl
                          rsync://repo-rpki.idnic.net/repo/3c88442b-c48e-4ba0-8ad7-58e1263c6dc7/0/5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 20 Apr 2026 20:55:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:4d:ee:49:fd:a5:46:5e:ff:d6:48:2d:9e:be:a4:86:d2:7c:c8:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F
        Validity
            Not Before: Apr 15 07:55:54 2026 GMT
            Not After : Apr 14 08:00:54 2027 GMT
        Subject: CN=C6C1BEA75AA31BE7578231EEDB1EA2BE9F16D332
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:49:3d:a2:02:05:7e:45:25:c2:df:20:ab:f7:
                    ec:5a:c9:ca:c5:d3:8a:9a:11:6c:26:de:43:29:70:
                    e0:f6:a0:8f:47:a8:c0:db:b2:f0:1b:1a:f4:d4:14:
                    db:21:3d:97:ab:ff:fb:ea:44:59:3f:0e:3e:7f:9b:
                    f5:4d:2e:50:f1:14:cc:24:97:e0:12:bf:2f:58:77:
                    16:f9:45:2d:39:dd:b8:fe:5e:f1:43:99:75:44:79:
                    8d:29:09:c3:71:f0:c9:8a:1b:ae:5b:93:dd:41:ab:
                    e6:56:b9:00:bf:9d:47:a5:41:f1:7e:c9:d8:2e:df:
                    44:0f:24:3d:24:80:c2:a1:a8:00:f6:22:8d:29:be:
                    2e:38:66:ff:02:3b:27:df:47:1c:8d:e1:01:96:ad:
                    4b:90:bd:26:5a:ef:b6:d0:1a:a0:10:99:48:ee:d7:
                    ce:35:d7:3d:ab:4c:b5:3c:b5:9e:c0:b7:52:d6:66:
                    86:35:c8:e5:1e:0f:06:c1:7a:5a:03:3f:c2:28:d1:
                    ce:7a:50:9a:45:ff:83:ff:5d:83:79:20:fc:5a:e0:
                    26:fe:f3:22:dc:28:82:6e:f7:ad:fe:bf:a1:7f:58:
                    20:39:7a:75:79:52:05:d6:92:d4:c9:bd:99:fc:96:
                    d7:37:19:2d:dc:23:bd:30:f8:bb:40:e1:18:e2:9c:
                    f5:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:C1:BE:A7:5A:A3:1B:E7:57:82:31:EE:DB:1E:A2:BE:9F:16:D3:32
            X509v3 Authority Key Identifier:
                keyid:5C:1D:C7:E8:74:57:A9:1F:35:91:5A:F1:DE:3F:BB:CC:2E:6B:3D:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3c88442b-c48e-4ba0-8ad7-58e1263c6dc7/0/5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3c88442b-c48e-4ba0-8ad7-58e1263c6dc7/0/3130332e3136342e3135302e302f32332d3233203d3e20313431393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.164.150.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0e:68:a5:fb:c6:7e:00:f8:17:e0:70:c0:30:ce:24:b4:ef:d7:
         55:d4:d0:d0:f5:27:6b:b2:2a:3c:31:51:22:31:3e:b2:ff:5a:
         6c:16:17:fe:33:56:15:da:9c:df:23:d7:98:8d:79:44:e3:fe:
         6f:65:80:e1:cd:73:74:9a:8a:4b:5b:c7:51:73:92:50:42:31:
         78:7b:57:71:82:2f:42:4f:16:4a:9b:7a:c3:2e:cf:65:dc:92:
         36:4e:ed:ae:76:97:3c:ae:bf:77:aa:d6:3e:e8:f8:15:a8:0d:
         79:08:8a:cd:de:8b:69:ea:39:1c:27:ac:a7:4d:b4:0f:34:d0:
         96:b5:25:69:42:32:17:c8:26:1a:25:4c:2b:88:fa:09:d2:cb:
         59:e9:52:8e:d0:08:c9:bc:1d:f7:e6:e0:84:91:06:6e:1b:a5:
         55:5b:50:ce:be:72:24:4a:46:74:60:2c:77:20:48:e0:41:26:
         e0:b6:f5:a5:af:07:61:93:fd:3d:12:49:bf:27:45:64:0e:c8:
         05:86:95:25:44:5e:b9:18:a6:80:04:9f:94:e9:b1:20:51:1d:
         dc:d8:66:b2:05:02:6a:e2:90:87:2a:e4:57:d7:95:a2:63:57:
         2c:38:44:3e:26:70:5b:38:02:b7:c7:52:34:18:77:01:a8:9e:
         95:3c:07:dc
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUBk3uSf2lRl7/1kgtnr6khtJ8yKgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUMxREM3RTg3NDU3QTkxRjM1OTE1QUYxREUzRkJCQ0My
RTZCM0Q4RjAeFw0yNjA0MTUwNzU1NTRaFw0yNzA0MTQwODAwNTRaMDMxMTAvBgNV
BAMTKEM2QzFCRUE3NUFBMzFCRTc1NzgyMzFFRURCMUVBMkJFOUYxNkQzMzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfST2iAgV+RSXC3yCr9+xaycrF
04qaEWwm3kMpcOD2oI9HqMDbsvAbGvTUFNshPZer//vqRFk/Dj5/m/VNLlDxFMwk
l+ASvy9Ydxb5RS053bj+XvFDmXVEeY0pCcNx8MmKG65bk91Bq+ZWuQC/nUelQfF+
ydgu30QPJD0kgMKhqAD2Io0pvi44Zv8COyffRxyN4QGWrUuQvSZa77bQGqAQmUju
18411z2rTLU8tZ7At1LWZoY1yOUeDwbBeloDP8Io0c56UJpF/4P/XYN5IPxa4Cb+
8yLcKIJu963+v6F/WCA5enV5UgXWktTJvZn8ltc3GS3cI70w+LtA4RjinPVLAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUxsG+p1qjG+dXgjHu2x6ivp8W0zIwHwYDVR0j
BBgwFoAUXB3H6HRXqR81kVrx3j+7zC5rPY8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z
Yzg4NDQyYi1jNDhlLTRiYTAtOGFkNy01OGUxMjYzYzZkYzcvMC81QzFEQzdFODc0
NTdBOTFGMzU5MTVBRjFERTNGQkJDQzJFNkIzRDhGLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNUMxREM3RTg3NDU3QTkxRjM1OTE1QUYxREUzRkJCQ0MyRTZC
M0Q4Ri5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzNjODg0NDJiLWM0OGUtNGJhMC04
YWQ3LTU4ZTEyNjNjNmRjNy8wLzMxMzAzMzJlMzEzNjM0MmUzMTM1MzAyZTMwMmYz
MjMzMmQzMjMzMjAzZDNlMjAzMTM0MzEzOTMwMzkucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnpJYwDQYJ
KoZIhvcNAQELBQADggEBAA5opfvGfgD4F+BwwDDOJLTv11XU0ND1J2uyKjwxUSIx
PrL/WmwWF/4zVhXanN8j15iNeUTj/m9lgOHNc3Saiktbx1FzklBCMXh7V3GCL0JP
FkqbesMuz2XckjZO7a52lzyuv3eq1j7o+BWoDXkIis3ei2nqORwnrKdNtA800Ja1
JWlCMhfIJholTCuI+gnSy1npUo7QCMm8Hffm4ISRBm4bpVVbUM6+ciRKRnRgLHcg
SOBBJuC29aWvB2GT/T0SSb8nRWQOyAWGlSVEXrkYpoAEn5TpsSBRHdzYZrIFAmri
kIcq5FfXlaJjVyw4RD4mcFs4ArfHUjQYdwGonpU8B9w=
-----END CERTIFICATE-----
Generated at Fri Apr 17 22:33:31 2026 by rpki-client